Claude 1

sophos-xgs-ansible/inventory/hosts.ini

@@ -0,0 +1,52 @@
+# ============================================================================
+# Sophos XGS Firewall Inventory
+# ============================================================================
+# This inventory defines all Sophos XGS firewalls managed by Ansible.
+#
+# Groups:
+#   - sophos_firewalls: All production Sophos XGS devices
+#   - sophos_baseline: The baseline firewall used for config export
+#   - sophos_headquarters: Firewalls at HQ location
+#   - sophos_branches: Firewalls at branch locations
+#
+# Connection Method:
+#   All firewalls are managed via HTTPS API (no SSH required)
+#
+# Author: Network Automation Team
+# ============================================================================
+
+# ============================================================================
+# Baseline Firewall (for configuration import/export)
+# ============================================================================
+[sophos_baseline]
+fw-baseline ansible_host=192.168.1.10
+
+# ============================================================================
+# Headquarters Firewalls
+# ============================================================================
+[sophos_headquarters]
+fw-hq-primary ansible_host=192.168.1.20
+fw-hq-secondary ansible_host=192.168.1.21
+
+# ============================================================================
+# Branch Office Firewalls
+# ============================================================================
+[sophos_branches]
+fw-branch1 ansible_host=192.168.10.1
+fw-branch2 ansible_host=192.168.20.1
+fw-branch3 ansible_host=192.168.30.1
+
+# ============================================================================
+# All Sophos Firewalls (parent group)
+# ============================================================================
+[sophos_firewalls:children]
+sophos_baseline
+sophos_headquarters
+sophos_branches
+
+# ============================================================================
+# Connection Variables (applied to all Sophos firewalls)
+# ============================================================================
+[sophos_firewalls:vars]
+ansible_connection=local
+ansible_python_interpreter=/usr/bin/python3