Pains-Perdus/ansible
3
1
Fork 0
Code Issues Pull requests 1 Releases Wiki Activity

added toggle to no_log

Browse source
This commit is contained in:
Virgile Retault 2022-07-21 18:51:45 +02:00
parent bab2e6d934
commit 8eedcebe0f
2 changed files with 9 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
host_vars/hindley/main.yml
View file

@ -31,22 +31,23 @@ vpn_interfaces:
public_key: "Ce48/ZdvpI2S82bIivhiWHQsyidzTAtxCnEYojY3xEA=" public_key: "Ce48/ZdvpI2S82bIivhiWHQsyidzTAtxCnEYojY3xEA="
keepalive: false keepalive: false
peers: peers:
- endpoint: "" - public_key: "jvjOCj5xVTLwyQ8o7QsYvF2ep1HbD/GKnmjpqJuztB8="
public_key: "jvjOCj5xVTLwyQ8o7QsYvF2ep1HbD/GKnmjpqJuztB8="
allowed_ips: allowed_ips:
- "{{ intranet.subnets.physical.subnets.router_hellman.ipv4 }}/{{ intranet.subnets.physical.subnets.router_hellman.netmaskv4 }}" - "{{ intranet.subnets.physical.subnets.router_hellman.ipv4 }}/{{ intranet.subnets.physical.subnets.router_hellman.netmaskv4 }}"
- "{{ intranet.subnets.guest_hellman.ipv4 }}/{{ intranet.subnets.guest_hellman.netmaskv4 }}" - "{{ intranet.subnets.guest_hellman.ipv4 }}/{{ intranet.subnets.guest_hellman.netmaskv4 }}"
comment: "Router hosted on Hellman" comment: "Router hosted on Hellman"
- endpoint: "" - public_key: "{{ vpn_guest_keys.knuth }}"
public_key: "{{ vpn_guest_keys.knuth }}"
allowed_ips: allowed_ips:
- "{{ intranet.subnets.guest.subnets.knuth.ipv4 }}/{{ intranet.subnets.guest.subnets.knuth.netmaskv4 }}" - "{{ intranet.subnets.guest.subnets.knuth.ipv4 }}/{{ intranet.subnets.guest.subnets.knuth.netmaskv4 }}"
comment: "Client laptop: knuth" comment: "Client laptop: knuth"
- endpoint: "" - public_key: "{{ hostvars['sulfur'].vpn_interfaces.wg0.public_key }}"
public_key: "{{ hostvars['matrix_server'].vpn_interfaces.wg0.public_key }}"
allowed_ips: allowed_ips:
- "{{ hostvars['matrix_server'].vpn_interfaces.wg0.ip }}/32" - "{{ hostvars['sulfur'].vpn_interfaces.wg0.ip }}/32"
comment: "matrix VM, hosted on g33kex's server" comment: "matrix VM, hosted on g33kex's server"
- public_key: "{{ hostvars['technetium'].vpn_interfaces.wg0.ip }}/32"
allowed_ips:
- "{{ hostvars['technetium'].vpn_interfaces.wg0.ip }}/32"
comment: "test VM"
# apt proxy # apt proxy
proxy_apt_interfaces: proxy_apt_interfaces:

2
roles/vpn/templates/wiregard.conf.j2
View file

@ -9,7 +9,7 @@ ListenPort = {{ vpn_port }}
[Peer] [Peer]
{{ peer.comment | comment }} {{ peer.comment | comment }}
Publickey = {{ peer.public_key }} Publickey = {{ peer.public_key }}
{% if peer.endpoint %} {% if peer.endpoint is defined %}
Endpoint = {{ peer.endpoint }}:{{ vpn_port }} Endpoint = {{ peer.endpoint }}:{{ vpn_port }}
{% endif %} {% endif %}
AllowedIPs = {{ peer.allowed_ips | join(", ") }} AllowedIPs = {{ peer.allowed_ips | join(", ") }}