infrastructure/ansible/group_vars/all/network.yml

private_ip: "{{ nebula.clients[ansible_fqdn].ip }}"
protected_ip: "{{ private_ip }}"