From de3e72b3da1b07c43e16d3f6f72d0b842f201177 Mon Sep 17 00:00:00 2001 From: gemini Date: Mon, 8 Jun 2026 09:51:33 +0200 Subject: [PATCH] Parameterize WireGuard network interface name in template and define in cerberus playbook --- playbooks/services/wireguard-cerberus.yml | 2 ++ roles/wireguard_server/templates/wireguardserver.conf | 4 ++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/playbooks/services/wireguard-cerberus.yml b/playbooks/services/wireguard-cerberus.yml index 19b6320..a85c852 100644 --- a/playbooks/services/wireguard-cerberus.yml +++ b/playbooks/services/wireguard-cerberus.yml @@ -1,6 +1,8 @@ - name: cerberos init hosts: wireguard-cerberus become: true + vars: + wireguard_interface: eth0 tasks: - name: wireguard-server ansible.builtin.include_role: diff --git a/roles/wireguard_server/templates/wireguardserver.conf b/roles/wireguard_server/templates/wireguardserver.conf index e9c486e..bf9ec6e 100644 --- a/roles/wireguard_server/templates/wireguardserver.conf +++ b/roles/wireguard_server/templates/wireguardserver.conf @@ -1,8 +1,8 @@ [Interface] PrivateKey = {{ vars['wireguard-server-vault']['key'] }} Address=10.0.0.1/24 -PostUp=iptables -A FORWARD -i wireguardserver -o ens18 -j ACCEPT; iptables -A FORWARD -i ens18 -o wireguardserver -j ACCEPT; iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE; -PostDown=iptables -D FORWARD -i wireguardserver -o ens18 -j ACCEPT; iptables -D FORWARD -i ens18 -o wireguardserver -j ACCEPT; iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE; +PostUp=iptables -A FORWARD -i wireguardserver -o {{ wireguard_interface }} -j ACCEPT; iptables -A FORWARD -i {{ wireguard_interface }} -o wireguardserver -j ACCEPT; iptables -t nat -A POSTROUTING -o {{ wireguard_interface }} -j MASQUERADE; +PostDown=iptables -D FORWARD -i wireguardserver -o {{ wireguard_interface }} -j ACCEPT; iptables -D FORWARD -i {{ wireguard_interface }} -o wireguardserver -j ACCEPT; iptables -t nat -D POSTROUTING -o {{ wireguard_interface }} -j MASQUERADE; ListenPort={{ vars['wireguard-server']['internal-port'] }} {% for client_name, client_data in vars['wireguard-client'].items() %}