2021-02-20 17:05:10 +01:00
|
|
|
---
|
|
|
|
|
wireguard_endpoints:
|
|
|
|
|
- name: ovh
|
|
|
|
|
addrs:
|
2021-02-20 23:41:10 +01:00
|
|
|
- 192.168.0.2/28
|
2021-02-20 17:05:10 +01:00
|
|
|
listen_port: 5412
|
2021-02-20 23:41:10 +01:00
|
|
|
private_key: "{{ vault_wireguard_secrets.gs.private }}"
|
2021-02-20 17:05:10 +01:00
|
|
|
peers:
|
2021-02-20 23:41:10 +01:00
|
|
|
- public_key: "{{ vault_wireguard_secrets.ovh.public }}"
|
2021-02-20 17:05:10 +01:00
|
|
|
allowed_addrs:
|
2021-02-20 23:41:10 +01:00
|
|
|
- 192.168.0.1/32
|
2021-02-20 17:05:10 +01:00
|
|
|
- 10.132.0.0/16
|
2021-02-20 23:41:10 +01:00
|
|
|
keepalive: 5
|
2021-02-20 21:03:35 +01:00
|
|
|
endpoint: 92.222.211.198:5412
|
2021-02-20 17:05:10 +01:00
|
|
|
|
|
|
|
|
nftables_basic_input_rules:
|
|
|
|
|
- proto: tcp
|
|
|
|
|
port: 22
|
|
|
|
|
verdict: accept
|
|
|
|
|
- proto: udp
|
|
|
|
|
port: 5412
|
|
|
|
|
verdict: accept
|
|
|
|
|
...
|
