keyfile layout

roles/network/tasks/debian.yml

@@ -70,6 +70,10 @@
   when: has_NM and not wan_in_interfaces and iiab_lan_iface == "br0"
 
 # or provide keyfile layout like the XO's used way back.
+#- name: Copy the bridge script for has_NM
+#  template: dest=/etc/NetworkManager/system-connections/
+#            src=network/bridge-br0
+#  when: has_NM and not wan_in_interfaces and iiab_lan_iface == "br0"
 
 - name: Reload systemd
   shell: systemctl daemon-reload

roles/network/templates/network/bridge-br0

@@ -0,0 +1,16 @@
+[connection]
+id=bridge-br0
+uuid={{ gen_uuid }}
+type=bridge
+interface-name=br0
+permissions=
+
+[ipv4]
+address1={{ iiab_lan_ip }}/19
+dns-search={{ iiab_domain }}
+method=manual
+
+[ipv6]
+addr-gen-mode=stable-privacy
+dns-search=
+method=auto