Added the "install_wireguard" role

2024-05-12 13:16:42 +02:00
parent cdd7baf40e
commit 1edaaff9c9
18 changed files with 429 additions and 39 deletions
--- a/roles/install_wireguard/templates/wg0.conf.j2
+++ b/roles/install_wireguard/templates/wg0.conf.j2
@@ -0,0 +1,13 @@
+{{ ansible_managed | comment('plain') }}
+
+[Interface]
+PrivateKey = {{ keys["server_private"] }}
+ListenPort = {{ install_wireguard__server_port }}
+Address = {{ install_wireguard__server_ip }}
+PostUp = /etc/wireguard/iptables.sh %i -A
+PostDown = /etc/wireguard/iptables.sh %i -D
+
+[Peer]
+PublicKey = {{ keys["peer_public"] }}
+PresharedKey = {{ keys["preshared"] }}
+AllowedIPs = {{ install_wireguard__peer_ip }}