master.yaml

config:
  system:
    hostname: 'master'
    domain: 'localdomain'
    dnsserver:
      '0': '8.8.8.8'
      '1': '8.8.4.4'
    group:
      '1':
        member:
          '1': '2000'
          '2': '2001'
    user:
      '1':
        descr: 'Rudi Broekhuizen'
        name: rudi.broekhuizen
        scope: user
        password: changeme
        authorizedkeys: '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'
        priv: 
          '0': user-shell-access
        uid: '2000'
      '2':
        descr: 'Paul Gomersbach'
        name: paul.gomersbach
        scope: user
        password: changeme
        authorizedkeys: 'c3NoLXJzYSBBQUFBQjNOemFDMXljMkVBQUFBQkpRQUFBSUJ1ZCtINXZSNGZLODRsb2xrYmJ3bCtaWTgraWMwTWYzanh6RHJZSnBKZCtoOUVJakEvcjFOcWRqRXRiSDVHZlA4eFpxWElHVkZHMXBxUHI5cE51cGY3WUF6NHRmN0krR0sxdjVuOEZUQS9QS3VmU0hySFJ6aEllU3VkM09sVjdBMkFrL21DdlltZndVUG50dzNwcTMyeVl4OUFJZXF6VjY0bm55NVR2SmM4UXc9PQ=='
        priv: 
          '0': user-shell-access
        uid: '2001'
  
  interfaces:
    'wan':
      enable: 'true'
      if: 'em0'
      descr: 'WAN'
      ipaddr: 'dhcp'
    'lan':
      enable: 'true'
      if: 'em1'
      descr: 'LAN'
      ipaddr: '172.16.0.2'
      subnet: '24'
    'pfsync':
      enable: 'true'
      if: 'em2'
      descr: 'PFSYNC'
      ipaddr: '192.168.254.1'
      subnet: '29'
    'management':
      enable: 'true'
      if: 'em3'
      descr: 'MANAGEMENT'
      ipaddr: '192.168.253.1'
      subnet: '29'
    'opt1':
      enable: 'true'
      if: 'em1_vlan1'
      descr: 'VLAN_0001'
      ipaddr: '172.16.1.2'
      subnet: '24'
    'opt2':
      enable: 'true'
      if: 'em1_vlan2'
      descr: 'VLAN_0002'
      ipaddr: '172.16.2.2'
      subnet: '24'
  
  dhcpd: 
    lan: 
      enable: ''
      range: 
        from: '172.16.0.10'
        to: '172.16.0.254'
      failover_peerip: '172.16.0.3'
      gateway: '172.16.0.1'
    management:
      enable: ''
      range:
        from: '192.168.253.3'
        to: '192.168.253.6'
  
  hasync:
    pfsyncenabled: 'on'
    pfsyncpeerip: '192.168.254.2'
    pfsyncinterface: 'pfsync'
    synchronizetoip: '192.168.254.2'
    username: 'admin'
    password: 'pfsense'
    synchronizeusers: 'on'
    synchronizeauthservers: 'on'
    synchronizecerts: 'on'
    synchronizerules: 'on'
    synchronizeschedules: 'on'
    synchronizealiases: 'on'
    synchronizenat: 'on'
    synchronizeipsec: 'on'
    synchronizeopenvpn: 'on'
    synchronizedhcpd: 'on'
    synchronizewol: 'on'
    synchronizestaticroutes: 'on'
    synchronizelb: 'on'
    synchronizevirtualip: 'on'
    synchronizetrafficshaper: 'on'
    synchronizetrafficshaperlimiter: 'on'
    synchronizetrafficshaperlayer7: 'on'
    synchronizednsforwarder: 'on'
    synchronizecaptiveportal: 'on'
  
  filter:
    rule:
      '100':
        type: pass
        interface: pfsync
        ipprotocol: inet
        source:
          any: ''
        destination: 
          any: ''
        descr: 'Allow PFSYNC'
  
  vlans:
    vlan:
      '0':
        if: 'em1'
        tag: '1'
        descr: 'vlan-0001'
        vlanif: 'em1_vlan1'
      '1':
        if: 'em1'
        tag: '2'
        descr: 'vlan-0002'
        vlanif: 'em1_vlan2'
        
  virtualip:
    vip:
      '0':
        mode: 'carp'
        interface: 'lan'
        vhid: '255'
        advskew: '0'
        advbase: '1'
        password: 'password'
        descr: ''
        type: 'single'
        subnet_bits: '24'
        subnet: '172.16.0.1'
      '1':
        mode: 'carp'
        interface: 'opt1'
        vhid: '1'
        advskew: '0'
        advbase: '1'
        password: 'password'
        descr: ''
        type: 'single'
        subnet_bits: '24'
        subnet: '172.16.1.1'
      '2':
        mode: 'carp'
        interface: 'opt2'
        vhid: '2'
        advskew: '0'
        advbase: '1'
        password: 'password'
        descr: ''
        type: 'single'
        subnet_bits: '24'
        subnet: '172.16.2.1'

unset:
  system:
    ipv6allow: ''