add routing

books/vpn.yml

@@ -3,3 +3,4 @@
 - hosts: vpn
   roles:
     - vpn
+    - networking

host_vars/azerty.fil.sand.auro.re/networking.yml

@@ -6,3 +6,6 @@ interfaces:
   wg0:
     ipv4: "172.20.1.2"
     netmaskv4: 16
+
+ipv4_forwarding: false
+ipv6_forwarding: false

host_vars/hellman.fil.sand.auro.re/networking.yml

@@ -6,3 +6,6 @@ interfaces:
   wg0:
     ipv4: "172.20.1.3"
     netmaskv4: 16
+
+ipv4_forwarding: false
+ipv6_forwarding: false

host_vars/hindley.adh.auro.re/networking.yml

@@ -6,3 +6,6 @@ interfaces:
   wg0:
     ipv4: "172.20.1.1"
     netmaskv4: 16
+
+ipv4_forwarding: true
+ipv6_forwarding: false

roles/networking/tasks/main.yml

@@ -0,0 +1,14 @@
+---
+- name: Enable ipv4 forwarding
+  ansible.posix.sysctl:
+    name: net.ipv4.ip_forward
+    value: '1'
+    sysctl_set: true
+  when: "{{ ipv4_forwarding }}"
+
+- name: Enable ipv6 forwarding
+  ansible.posix.sysctl:
+    name: net.ipv6.conf.all.forwarding
+    value: '1'
+    sysctl_set: true
+  when: "{{ ipv6_forwarding }}"