Add media vpn peer for htpc

This commit is contained in:
Sonny Bakker 2025-10-12 07:29:50 +02:00
parent f052126445
commit fe6437c2f8
4 changed files with 75 additions and 56 deletions

View file

@ -1,78 +1,78 @@
- name: Copy Wireguard configuration files
become: true
ansible.builtin.template:
src: '{{ item.src }}'
dest: '{{ item.dest }}'
src: "{{ item.src }}"
dest: "{{ item.dest }}"
owner: root
group: systemd-network
mode: '0640'
mode: "0640"
loop:
- src: 'templates/network/wireguard/default/wg0.netdev.j2'
dest: '/etc/systemd/network/wg0.netdev'
- src: 'templates/network/wireguard/default/wg0.network.j2'
dest: '/etc/systemd/network/wg0.network'
- src: "templates/network/wireguard/default/wg0.netdev.j2"
dest: "/etc/systemd/network/wg0.netdev"
- src: "templates/network/wireguard/default/wg0.network.j2"
dest: "/etc/systemd/network/wg0.network"
notify: restart systemd-networkd
- name: Create Wireguard directories
become: true
ansible.builtin.file:
path: '{{ item }}'
path: "{{ item }}"
owner: root
group: systemd-network
mode: '0750'
mode: "0750"
state: directory
recurse: true
loop:
- '{{ vpn_config_dir }}'
- '{{ vpn_server_public_key_path | dirname }}'
- '{{ vpn_server_key_path | dirname }}'
- "{{ vpn_config_dir }}"
- "{{ vpn_server_public_key_path | dirname }}"
- "{{ vpn_server_key_path | dirname }}"
- name: Copy Wireguard server credentials
become: true
ansible.builtin.copy:
src: '{{ item.src }}'
dest: '{{ item.dest }}'
src: "{{ item.src }}"
dest: "{{ item.dest }}"
owner: root
group: systemd-network
mode: '0640'
mode: "0640"
loop:
- src: 'files/wireguard/default/server.pub'
dest: '{{ vpn_server_public_key_path }}'
- src: 'files/wireguard/default/server.key'
dest: '{{ vpn_server_key_path }}'
- src: "files/wireguard/default/server.pub"
dest: "{{ vpn_server_public_key_path }}"
- src: "files/wireguard/default/server.key"
dest: "{{ vpn_server_key_path }}"
notify: restart systemd-networkd
- name: Copy Wireguard mobile credentials
become: true
ansible.builtin.copy:
src: '{{ item.src }}'
dest: '{{ item.dest }}'
src: "{{ item.src }}"
dest: "{{ item.dest }}"
owner: root
group: systemd-network
mode: '0640'
mode: "0640"
loop:
- src: 'files/wireguard/default/mobile.pub'
dest: '{{ vpn_config_dir }}/keys/public/mobile.pub'
- src: 'files/wireguard/default/mobile.key'
dest: '{{ vpn_config_dir }}/keys/private/mobile.key'
- src: "files/wireguard/default/mobile.pub"
dest: "{{ vpn_config_dir }}/keys/public/mobile.pub"
- src: "files/wireguard/default/mobile.key"
dest: "{{ vpn_config_dir }}/keys/private/mobile.key"
notify: restart systemd-networkd
- name: Copy Wireguard preshared keys
become: true
ansible.builtin.copy:
src: '{{ item.value.preshared_key_source_path }}'
dest: '{{ item.value.preshared_key_path }}'
src: "{{ item.value.preshared_key_source_path }}"
dest: "{{ item.value.preshared_key_path }}"
owner: root
group: systemd-network
mode: '0640'
with_dict: '{{ vpn_peers }}'
mode: "0640"
with_dict: "{{ vpn_peers }}"
notify: restart systemd-networkd
- name: Copy Wireguard mobile configuration
become: true
ansible.builtin.template:
src: 'templates/network/wireguard/default/mobile.wireguard.j2'
dest: '/tmp/mobile.conf'
mode: '0600'
owner: '{{ ansible_user_id }}'
src: "templates/network/wireguard/default/mobile.wireguard.j2"
dest: "/tmp/mobile.conf"
mode: "0600"
owner: "{{ ansible_user_id }}"
when: copy_vpn_configurations