This playbook is all but done I made this for my own home situation, feel free to make additions , improvements etc
This playbook has been made with Routeros version 6.44.3

set this in your ansible cfg :

[paramiko_connection]
pty=False

Set this in your hostvars:

ansible_network_os: routeros

And then copy the vars (easiest way) :
Just copy the defaults file (defaults/main.yml) to your hostvars dir and rename original main.yml (in defaults/) to something that will not be processed

Example playbook :

- hosts: hosts
  remote_user: admin
  connection: network_cli
  gather_facts: false
  roles:
   - ansible-mikrotik

some basic hardening stuff that mikrotik advises to do

add policies , not removing

create a 802.3ad bond or a balance-xor bond
disable interfaces
make interface lists

create vlans based on bridge filtering
assign interfaces to the vlan (tagged / untagged )
assign networks / dhcp servers to the vlan

ceate a security profile (kind of basic)
create a virtual wlan interface
set the master vlan interface (and set channels and such)

add a backup script and a upgrade script (not tested if the scripts actually work)
set ntp client

still a todo

just take a look at the default file , this maybe explain some stuff i forgot

rework bond creation , to static, will need a solution like the adding of firewall policies

MIT