locals {
  # Warm Spare (HA) — floating VIP between primary and spare MX
  mx_warm_spare = {
    enabled     = true
    spare_name  = "BCN01-F04-MX02"
    uplink_mode = "virtual"
    virtual_ip1 = "57.133.120.183"  # Floating VIP on WAN1
    virtual_ip2 = "57.133.120.182"  # Floating VIP on WAN2
  }

  # Static WAN2 configuration for each MX (WAN1 disabled)
  # Device serials are resolved automatically from the display name
  mx_wan_uplinks = [
    {
      name                    = "BCN01-F04-MX01"
      wan2_static_ip          = "57.133.120.181"
      wan2_static_subnet_mask = "255.255.255.240"  # /28
      wan2_static_gateway_ip  = "57.133.120.177"
      wan2_static_dns         = ["8.8.8.8", "1.1.1.1"]
    },
    {
      name                    = "BCN01-F04-MX02"
      wan2_static_ip          = "57.133.120.180"
      wan2_static_subnet_mask = "255.255.255.240"  # /28
      wan2_static_gateway_ip  = "57.133.120.177"
      wan2_static_dns         = ["8.8.8.8", "1.1.1.1"]
    },
  ]
}