# Auspex inventory — fill this in for your own network.
# Copy it to ./inventory.yaml or ~/.config/auspex/inventory.yaml
#
# SECURITY: passwords are NEVER written in this file. It carries only the NAME
# of an environment variable; the value is read from the environment at runtime:
#   export AUSPEX_EOS_USER=readonly
#   export AUSPEX_EOS_PASS=********
#
# Read-only principle: only "show"/"ping" commands can run on a device (a
# three-gate, fail-closed allowlist). Even so, the best practice is to also
# define a privilege-1 (read-only) user on the devices themselves.

devices:
  leaf1:
    platform: arista_eos        # supported: arista_eos, linux
    host: 10.0.0.11             # mgmt IP (SSH)
    username_env: AUSPEX_EOS_USER
    password_env: AUSPEX_EOS_PASS

  leaf2:
    platform: arista_eos
    host: 10.0.0.12
    username_env: AUSPEX_EOS_USER
    password_env: AUSPEX_EOS_PASS

  spine1:
    platform: arista_eos
    host: 10.0.0.10
    username_env: AUSPEX_EOS_USER
    password_env: AUSPEX_EOS_PASS

  # A Linux user machine — over SSH (key-based auth, never prompts for a
  # password). Alternative: for a container running on this same machine, give
  # "container: <name>" instead and docker exec is used.
  pc-user1:
    platform: linux
    host: 10.0.10.21
    username_env: AUSPEX_HOST_USER