ansible/host_vars/azerty/vpn.yml

---
vpn_interfaces:
  wg0:
    ip: "{{ interfaces.wg0.ipv4 }}"
    private_key: "{{ vpn_vault_azerty_key }}"
    public_key: "o9rdoSdnp4twbNbZAMl0wY4sFQh647qqRv6V8HJwMQY="
    keepalive: true
    peers:
    - endpoint: "{{ hostvars['hindley'].interfaces.enp2s0.ipv4 }}"
      public_key: "{{ hostvars['hindley'].vpn_interfaces.wg0.public_key }}"
      allowed_ips:
        - "{{ hostvars['hindley'].vpn_interfaces.wg0.ip }}/{{ interfaces.wg0.netmaskv4 }}"
      comment: "hindley"
add networking variable 2021-04-22 21:44:40 +02:00			`---`
			`vpn_interfaces:`
			`wg0:`
fallback to wg-quick because of the clusterfuck of configuration types between the OSs 2021-07-08 00:33:13 +02:00			`ip: "{{ interfaces.wg0.ipv4 }}"`
add networking variable 2021-04-22 21:44:40 +02:00			`private_key: "{{ vpn_vault_azerty_key }}"`
add keys 2021-04-22 22:12:57 +02:00			`public_key: "o9rdoSdnp4twbNbZAMl0wY4sFQh647qqRv6V8HJwMQY="`
add networking variable 2021-04-22 21:44:40 +02:00			`keepalive: true`
			`peers:`
add vms to test vm and user dorian 2021-04-27 20:57:23 +02:00			`- endpoint: "{{ hostvars['hindley'].interfaces.enp2s0.ipv4 }}"`
			`public_key: "{{ hostvars['hindley'].vpn_interfaces.wg0.public_key }}"`
tweak the vpn template to route multiples subnets 2021-07-12 02:09:39 +02:00			`allowed_ips:`
			`- "{{ hostvars['hindley'].vpn_interfaces.wg0.ip }}/{{ interfaces.wg0.netmaskv4 }}"`
add comment 2021-04-23 00:40:31 +02:00			`comment: "hindley"`