fallback to wg-quick because of the clusterfuck of configuration types between the OSs
parent
82bd1cfb32
commit
199932a2fa
@ -1,4 +1,4 @@
|
||||
---
|
||||
- name: Reload network interfaces
|
||||
- name: Reload network interfaces debian
|
||||
become: true
|
||||
command: /sbin/ifreload -a
|
||||
|
@ -1,30 +0,0 @@
|
||||
{{ ansible_managed | comment }}
|
||||
|
||||
auto {{ item.key }}
|
||||
{% if item.value.type == 'wireguard' %}
|
||||
iface {{ item.key }} inet static
|
||||
{% elif item.value.type == 'dhcp' %}
|
||||
iface {{ item.key }} inet dhcp
|
||||
{% elif item.value.type == 'static' %}
|
||||
iface {{ item.key }} inet static
|
||||
{% endif %}
|
||||
{% if item.value.type == 'wireguard' %}
|
||||
pre-up ip link add $IFACE type wireguard
|
||||
pre-up wg setconf $IFACE /etc/wireguard/$IFACE.conf
|
||||
{% endif %}
|
||||
{% if 'routes' in item.value %}
|
||||
{% for route in item.value.routes %}
|
||||
post-up ip route add {{ route.subnet }}/{{ route.netmask }} via {{ route.gateway }}
|
||||
{% endfor %}
|
||||
{% endif %}
|
||||
{% if 'ipv4' in item.value %}
|
||||
address {{ item.value.ipv4 }}/{{ item.value.netmaskv4 }}
|
||||
{% endif %}
|
||||
{% if 'routes' in item.value %}
|
||||
{% for route in item.value.routes %}
|
||||
post-down ip route del {{ route.subnet }}/{{ route.netmask }} via {{ route.gateway }}
|
||||
{% endfor %}
|
||||
{% endif %}
|
||||
{% if item.value.type == 'wireguard' %}
|
||||
post-down ip link del $IFACE
|
||||
{% endif %}
|
@ -1,7 +1,30 @@
|
||||
{{ ansible_managed | comment }}
|
||||
|
||||
source /etc/network/interfaces.d/*
|
||||
|
||||
# The loopback network interface
|
||||
auto lo
|
||||
iface lo inet loopback
|
||||
|
||||
{% for item in lookup('dict', interfaces) %}
|
||||
{% if item.value.type not in ['wireguard', ] %}
|
||||
auto {{ item.key }}
|
||||
{% if item.value.type == 'dhcp' %}
|
||||
iface {{ item.key }} inet dhcp
|
||||
{% elif item.value.type == 'static' %}
|
||||
iface {{ item.key }} inet static
|
||||
{% endif %}
|
||||
{% if 'routes' in item.value %}{# route up #}
|
||||
{% for route in item.value.routes %}
|
||||
post-up ip route add {{ route.subnet }}/{{ route.netmask }} via {{ route.gateway }}
|
||||
{% endfor %}
|
||||
{% endif %}{# end route up #}
|
||||
{% if 'ipv4' in item.value %}
|
||||
address {{ item.value.ipv4 }}/{{ item.value.netmaskv4 }}
|
||||
{% endif %}
|
||||
{% if 'routes' in item.value %}{# route dw #}
|
||||
{% for route in item.value.routes %}
|
||||
post-down ip route del {{ route.subnet }}/{{ route.netmask }} via {{ route.gateway }}
|
||||
{% endfor %}
|
||||
{% endif %}{# end route dw #}
|
||||
|
||||
{% endif %}{# end (not in [wireguard, ]) #}
|
||||
{% endfor %}
|
||||
|
@ -1,4 +1,8 @@
|
||||
---
|
||||
- name: Reload network interfaces
|
||||
become: true
|
||||
command: /sbin/ifreload -a
|
||||
- name: Restart wireguard for interface
|
||||
systemd:
|
||||
name: "wg-quick@{{ item.key }}"
|
||||
state: restarted
|
||||
loop:
|
||||
- "{{ lookup('dict', vpn_interfaces) }}"
|
||||
no_log: true
|
||||
|
Loading…
Reference in New Issue