aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity

Configure endpoints + "point-to-point" network
Some checks failed
continuous-integration/drone/push Build is failing
Details

Browse source
This commit is contained in:
jeltz 2021-02-20 21:03:35 +01:00
parent d1822b3b21
commit f1605415fe
2 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
host_vars/vpn-ng.adm.auro.re.yml
View file

@ -2,13 +2,17 @@
wireguard_endpoints: wireguard_endpoints:
- name: ovh - name: ovh
addrs: addrs:
- 10.132.0.252/16 - 192.168.0.1/24
listen_port: 5412 listen_port: 5412
private_key: "{{ vault_wireguard_secrets.gs_ovh.private }}" private_key: "{{ vault_wireguard_secrets.gs_ovh.private }}"
peers: peers:
- public_key: "{{ vault_wireguard_secrets.ovh_gs.public }}" - public_key: "{{ vault_wireguard_secrets.ovh_gs.public }}"
allowed_addrs: allowed_addrs:
- 192.168.0.0/24
- 10.128.0.0/16
- 10.132.0.0/16 - 10.132.0.0/16
keepalive: 30
endpoint: 92.222.211.198:5412
nftables_basic_input_rules: nftables_basic_input_rules:
- proto: tcp - proto: tcp

5
host_vars/vpn-ovh-ng.auro.re.yml
View file

@ -2,13 +2,16 @@
wireguard_endpoints: wireguard_endpoints:
- name: gs - name: gs
addrs: addrs:
- 10.128.0.225/16 - 192.168.0.2/24
listen_port: 5412 listen_port: 5412
private_key: "{{ vault_wireguard_secrets.ovh_gs.private }}" private_key: "{{ vault_wireguard_secrets.ovh_gs.private }}"
peers: peers:
- public_key: "{{ vault_wireguard_secrets.gs_ovh.public }}" - public_key: "{{ vault_wireguard_secrets.gs_ovh.public }}"
allowed_addrs: allowed_addrs:
- 192.168.0.0/24
- 10.128.0.0/16 - 10.128.0.0/16
- 10.132.0.0/16
keepalive: 30
nftables_basic_input_rules: nftables_basic_input_rules:
- proto: tcp - proto: tcp