Add media vpn setup

This commit is contained in:
Sonny Bakker 2024-08-03 21:03:07 +02:00
parent cf061d3779
commit 7c4dd0d3c2
25 changed files with 257 additions and 66 deletions

View file

@ -1,13 +1,15 @@
# {{ ansible_managed }}
[NetDev]
Name={{ vpn_interface }}
Name={{ vpn_default.interface }}
Kind=wireguard
Description=WireGuard tunnel {{ vpn_interface }}
Description=WireGuard tunnel {{ vpn_default.interface }}
[WireGuard]
# PrivateKeyFile option does not seem to work, perhaps a bug?
PrivateKey={{ vpn_private_key }}
PrivateKey={{ vpn_default.private_key }}
{% for peer in vpn_peers %}
{% for peer in vpn_default.peers %}
[WireGuardPeer]
PublicKey={{ peer.public_key }}
# PresharedKeyFile option does not seem to work, perhaps a bug?

View file

@ -1,5 +1,7 @@
# {{ ansible_managed }}
[Match]
Name={{ vpn_interface }}
Name={{ vpn_default.interface }}
[Network]
Address={{ vpn_ip }}/{{ vpn_subnet }}
Address={{ vpn_default.ip }}/{{ vpn_default.subnet }}

View file

@ -0,0 +1,24 @@
# {{ ansible_managed }}
[NetDev]
Name={{ vpn_media.interface }}
Kind=wireguard
Description=WireGuard tunnel {{ vpn_media.interface }}
[WireGuard]
# PrivateKeyFile option does not seem to work, perhaps a bug?
PrivateKey={{ vpn_media.private_key }}
{% for peer in vpn_media.peers %}
[WireGuardPeer]
PublicKey={{ peer.public_key }}
# PresharedKeyFile option does not seem to work, perhaps a bug?
PresharedKey={{ peer.preshared_key }}
AllowedIPs={{ peer.allowd_ips }}
{% if peer.endpoint %}
Endpoint={{ peer.endpoint }}
{% endif %}
{% if not loop.last %}
{% endif %}
{% endfor %}

View file

@ -0,0 +1,7 @@
# {{ ansible_managed }}
[Match]
Name={{ vpn_media.interface }}
[Network]
Address={{ vpn_media.ip }}/{{ vpn_media.subnet }}