sonny/debian-setup
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refactor default wireguard setup

Browse source 
- Replaced set_fact based setup with lookup plugin
- Replaced inline definition of credentials with alternative
  systemd file directives
This commit is contained in:
sonny 2025-03-01 14:21:36 +01:00
parent 02ed21405f
commit a777228013
4 changed files with 19 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

11
vars/vpn.yml
View file

@ -6,8 +6,9 @@ vpn_interface: 'wg0'
vpn_source_range: '10.0.0.0/24'
vpn_destination_range: '10.0.0.1/32'
vpn_server_public_key_path: '/etc/wireguard/keys/public/server.pub'
vpn_server_key_path: '/etc/wireguard/keys/private/server.key'
vpn_key_directory: '/etc/wireguard/keys'
vpn_server_public_key_path: '{{ vpn_key_directory }}/public/server.pub'
vpn_server_key_path: '{{ vpn_key_directory }}/private/server.key'
copy_vpn_configurations: false
@ -15,16 +16,16 @@ vpn_peers:
laptop:
ip: '10.0.0.2'
public_key: 'EbWLf2+7x/RymeeiVuX72nZOBqPvdhu2V9pYhszpQEw='
preshared_key_path: '/etc/wireguard/keys/private/preshared-laptop.psk'
preshared_key_path: '{{ vpn_key_directory }}/private/preshared-laptop.psk'
preshared_key_source_path: 'files/wireguard/default/preshared-laptop.psk'
desktop:
ip: '10.0.0.3'
public_key: 'izHzmRwh2yzICps6pFI2Bg3TnmTD66/8uH4loJpkuD4='
preshared_key_path: '/etc/wireguard/keys/private/preshared-desktop.psk'
preshared_key_path: '{{ vpn_key_directory }}/private/preshared-desktop.psk'
preshared_key_source_path: 'files/wireguard/default/preshared-desktop.psk'
mobile:
ip: '10.0.0.4'
public_key: '4aBHRiglCOE7qEDLqeFgQ5PMMsKczpPoL4bx4jyAEDY='
preshared_key_path: '/etc/wireguard/keys/private/preshared-mobile.psk'
preshared_key_path: '{{ vpn_key_directory }}/private/preshared-mobile.psk'
preshared_key_source_path: 'files/wireguard/default/preshared-mobile.psk'
private_key_source_path: 'files/wireguard/default/mobile.key'