Warezjoe/ansible_uni_deploy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Parameterize WireGuard network interface name in template and define in cerberus playbook

Browse Source
This commit is contained in:
gemini
2026-06-08 09:51:33 +02:00
parent 609f6ecbac
commit de3e72b3da
2 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
playbooks/services/wireguard-cerberus.yml
View File

@@ -1,6 +1,8 @@
- name: cerberos init - name: cerberos init
hosts: wireguard-cerberus hosts: wireguard-cerberus
become: true become: true
vars:
wireguard_interface: eth0
tasks: tasks:
- name: wireguard-server - name: wireguard-server
ansible.builtin.include_role: ansible.builtin.include_role:

4
roles/wireguard_server/templates/wireguardserver.conf
View File

@@ -1,8 +1,8 @@
[Interface] [Interface]
PrivateKey = {{ vars['wireguard-server-vault']['key'] }} PrivateKey = {{ vars['wireguard-server-vault']['key'] }}
Address=10.0.0.1/24 Address=10.0.0.1/24
PostUp=iptables -A FORWARD -i wireguardserver -o ens18 -j ACCEPT; iptables -A FORWARD -i ens18 -o wireguardserver -j ACCEPT; iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE; PostUp=iptables -A FORWARD -i wireguardserver -o {{ wireguard_interface }} -j ACCEPT; iptables -A FORWARD -i {{ wireguard_interface }} -o wireguardserver -j ACCEPT; iptables -t nat -A POSTROUTING -o {{ wireguard_interface }} -j MASQUERADE;
PostDown=iptables -D FORWARD -i wireguardserver -o ens18 -j ACCEPT; iptables -D FORWARD -i ens18 -o wireguardserver -j ACCEPT; iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE; PostDown=iptables -D FORWARD -i wireguardserver -o {{ wireguard_interface }} -j ACCEPT; iptables -D FORWARD -i {{ wireguard_interface }} -o wireguardserver -j ACCEPT; iptables -t nat -D POSTROUTING -o {{ wireguard_interface }} -j MASQUERADE;
ListenPort={{ vars['wireguard-server']['internal-port'] }} ListenPort={{ vars['wireguard-server']['internal-port'] }}
{% for client_name, client_data in vars['wireguard-client'].items() %} {% for client_name, client_data in vars['wireguard-client'].items() %}