Sonny Bakker
c5c7c8ce88
Resolution sometimes fails as HTTPS requests are not possible yet to some domains. This causes HTTP requests to fail later on. Can be reproduced by doing a HTTPS request first (for a domain configured without HTTPS) and retrying with a HTTP request afterwards.
51 lines
1.7 KiB
YAML
51 lines
1.7 KiB
YAML
# TODO: scope variables to their destination file
|
|
vpn_default:
|
|
ip: 10.0.0.3
|
|
prefix: 24
|
|
interface: wg0
|
|
dns: 10.0.0.1
|
|
domains:
|
|
- '~vpn.{{ server_domain }}'
|
|
- '~transmission.{{ server_domain }}'
|
|
- '~syncthing.{{ server_domain }}'
|
|
- '~radicale.{{ server_domain }}'
|
|
- '~mpd.{{ server_domain }}'
|
|
|
|
public_key_path: '{{ vpn_config_dir }}/keys/public/default/desktop.pub'
|
|
private_key_path: '{{ vpn_config_dir }}/keys/private/default/desktop.key'
|
|
|
|
peers:
|
|
- name: fudiggity
|
|
allowed_ips:
|
|
- 10.0.0.0/24
|
|
- 172.16.238.0/24
|
|
- 172.32.238.0/24
|
|
- 172.64.238.0/24
|
|
- 172.128.238.0/24
|
|
endpoint: '{{ server_domain }}:51902'
|
|
public_key: CeybSMpJiicXmndIuhe89Bay3z3PEdYNyAwIFsacBEo=
|
|
preshared_key_path: '{{ vpn_config_dir }}/keys/private/default/preshared-zeus.psk'
|
|
preshared_key_source_path: files/personal/desktop/wireguard/default/preshared.psk
|
|
|
|
vpn_media:
|
|
ip: 10.0.1.3
|
|
prefix: 24
|
|
interface: wg1
|
|
dns: 10.0.1.1
|
|
domains:
|
|
- '~media-vpn.{{ server_domain }}'
|
|
- '~jellyfin.{{ server_domain }}'
|
|
|
|
public_key_path: '{{ vpn_config_dir }}/keys/public/media/desktop.pub'
|
|
private_key_path: '{{ vpn_config_dir }}/keys/private/media/desktop.key'
|
|
private_key_source_path: files/personal/desktop/wireguard/media/desktop.key
|
|
|
|
peers:
|
|
- name: zeus-media
|
|
allowed_ips:
|
|
- 10.0.1.0/24
|
|
- 172.8.238.0/24
|
|
endpoint: '{{ server_domain }}:51903'
|
|
public_key: EugKeo63C5N5kz9ShMHtYswO9Qh6mE00MtfLSFmqqjg=
|
|
preshared_key_path: '{{ vpn_config_dir }}/keys/private/media/preshared-zeus.psk'
|
|
preshared_key_source_path: files/personal/desktop/wireguard/media/preshared.psk
|