- Reorganized Ansible project structure to follow best practices. - Created dedicated directories: , , , , and . - Categorized playbooks into (host-specific) and (service-specific). - Moved all roles into the directory and standardized their naming conventions. - Relocated to for better variable management. - Renamed to to reflect its global variable scope. - Created to correctly set the to the new directory. - Moved and into the directory. - Added to providing explanations for common commands. - Cleaned up directories from all individual roles to centralize version control.
27 lines
876 B
Plaintext
27 lines
876 B
Plaintext
[Interface]
|
|
PrivateKey = {{ wireguard_server_key }}
|
|
Address=10.0.0.1/24
|
|
PostUp=iptables -A FORWARD -i wireguardserver -o ens18 -j ACCEPT; iptables -A FORWARD -i ens18 -o wireguardserver -j ACCEPT; iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE;
|
|
PostDown=iptables -D FORWARD -i wireguardserver -o ens18 -j ACCEPT; iptables -D FORWARD -i ens18 -o wireguardserver -j ACCEPT; iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE;
|
|
ListenPort=51822
|
|
|
|
[Peer]
|
|
PublicKey = {{ wireguard_ntb_pub }}
|
|
AllowedIPs = {{ wireguard_ntb_ip }}/32
|
|
|
|
[Peer]
|
|
PublicKey = {{ wireguard_kate_pub }}
|
|
AllowedIPs = {{ wireguard_kate_ip }}/32
|
|
|
|
[Peer]
|
|
PublicKey = {{ wireguard_tata_pub }}
|
|
AllowedIPs = {{ wireguard_tata_ip }}/32
|
|
|
|
[Peer]
|
|
PublicKey = {{ wireguard_pi_pub }}
|
|
AllowedIPs = {{ wireguard_pi_ip }}/32
|
|
|
|
[Peer]
|
|
PublicKey = {{ wireguard_desktop_pub }}
|
|
AllowedIPs = {{ wireguard_desktop_ip }}/32
|