sonny/debian-setup
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refactor default wireguard setup

Browse source 
- Replaced set_fact based setup with lookup plugin
- Replaced inline definition of credentials with alternative
  systemd file directives
This commit is contained in:
sonny 2025-03-01 14:21:36 +01:00
parent 02ed21405f
commit a777228013
4 changed files with 19 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

6
templates/network/wireguard/default/mobile.wireguard.j2
View file

@ -2,10 +2,10 @@
[Interface]
Address={{ vpn_peers.mobile.ip }}/24
PrivateKey={{ vpn_peers.mobile.private_key }}
PrivateKey={{ lookup("file", vpn_peers.mobile.private_key_source_path) }}
[Peer]
PublicKey={{ vpn_server_public_key }}
PresharedKey={{ vpn_peers.mobile.preshared_key }}
PublicKey={{ lookup("file", vpn_server_public_key_path) }}
PresharedKey={{ lookup("file", vpn_peers.mobile.preshared_key_path) }}
AllowedIPs={{ vpn_listen_address }}/32
Endpoint={{ domain_name }}:{{ vpn_port }}