summaryrefslogtreecommitdiff
path: root/host_vars
diff options
context:
space:
mode:
authorDmitry Ilvokhin <d@ilvokhin.com>2024-05-19 17:02:45 +0100
committerDmitry Ilvokhin <d@ilvokhin.com>2024-05-19 17:02:45 +0100
commitb4a12dbbf4a4759bf24975ca9bfc5096c90ae8b6 (patch)
tree48bc7a65415aa039c22575cf3c3919b5a4cea0f5 /host_vars
parent588e86b33df631382027862ed06bfd11e989e01b (diff)
downloadinfra-b4a12dbbf4a4759bf24975ca9bfc5096c90ae8b6.tar.gz
infra-b4a12dbbf4a4759bf24975ca9bfc5096c90ae8b6.tar.bz2
infra-b4a12dbbf4a4759bf24975ca9bfc5096c90ae8b6.zip
Wireguard overlay network setup
Need to migrate away from networkd, because it can't add new wireguard peers now out of the box without hacks. [1]: https://github.com/systemd/systemd/issues/25547
Diffstat (limited to 'host_vars')
-rw-r--r--host_vars/gate2.ilvokhin.com/secrets.yml9
-rw-r--r--host_vars/gate2.ilvokhin.com/wireguard.yml8
2 files changed, 17 insertions, 0 deletions
diff --git a/host_vars/gate2.ilvokhin.com/secrets.yml b/host_vars/gate2.ilvokhin.com/secrets.yml
new file mode 100644
index 0000000..c0efb29
--- /dev/null
+++ b/host_vars/gate2.ilvokhin.com/secrets.yml
@@ -0,0 +1,9 @@
+$ANSIBLE_VAULT;1.1;AES256
+32303163313431383761636563313936326637363265396637333664306535336136316138623465
+3837613738346235373166386461353563326264356333360a666530316133613434303831343537
+38656136313130663535636531396131613435656134666537653335663632343466663630376332
+3336393838633166330a323234666136333737633434613036366434646666303033303031613266
+31343933313134383366663639333331323366343139353861376362653030333236633733343462
+38316232366432646463376332326239376662623866363238303464343864313937363230356661
+36613035633736663435373563313832383435336535633930643261333930623032333264343437
+65613663376364313063
diff --git a/host_vars/gate2.ilvokhin.com/wireguard.yml b/host_vars/gate2.ilvokhin.com/wireguard.yml
new file mode 100644
index 0000000..8ff01a9
--- /dev/null
+++ b/host_vars/gate2.ilvokhin.com/wireguard.yml
@@ -0,0 +1,8 @@
+wireguard_public_key: v+ChgF+9IMFK5aN/ngthtZ38Jp7Rr1WVeS2mhQnQ4UE=
+wgnet_ip: 10.0.0.1
+
+# Reserved for flame.
+# wgnet_ip: 10.0.0.2
+
+# Reserved for water.
+# wgnet_ip: 10.0.0.3