Refactor nftables, vpn and transmission configuration

vars/vpn.yml

@@ -1,12 +1,3 @@
-vpn_listen_address: '10.0.0.1'
-vpn_domain: 'vpn.{{ domain_name }}'
-vpn_subnet: '24'
-vpn_port: '51902'
-vpn_interface: 'wg0'
-
-vpn_source_range: '10.0.0.0/24'
-vpn_destination_range: '10.0.0.1/32'
-
 vpn_server_public_key_path: '{{ vpn_config_dir }}/keys/public/server.pub'
 vpn_server_public_key_source_path: 'files/wireguard/default/server.pub'
 vpn_server_key_path: '{{ vpn_config_dir }}/keys/private/server.key'
@@ -19,13 +10,19 @@ vpn_peers:
     public_key: 'EbWLf2+7x/RymeeiVuX72nZOBqPvdhu2V9pYhszpQEw='
     preshared_key_path: '{{ vpn_config_dir }}/keys/private/preshared-laptop.psk'
     preshared_key_source_path: 'files/wireguard/default/preshared-laptop.psk'
+
   desktop:
     ip: '10.0.0.3'
     public_key: 'izHzmRwh2yzICps6pFI2Bg3TnmTD66/8uH4loJpkuD4='
     preshared_key_path: '{{ vpn_config_dir }}/keys/private/preshared-desktop.psk'
     preshared_key_source_path: 'files/wireguard/default/preshared-desktop.psk'
+
+  # has extra key to generate mobile configuration file
   mobile:
     ip: '10.0.0.4'
+    allowed_ips:
+      - '{{ vpn_subnet }}'
+      - '{{ transmission_subnet }}'
     public_key: '4aBHRiglCOE7qEDLqeFgQ5PMMsKczpPoL4bx4jyAEDY='
     preshared_key_path: '{{ vpn_config_dir }}/keys/private/preshared-mobile.psk'
     preshared_key_source_path: 'files/wireguard/default/preshared-mobile.psk'