diff options
| author | Dmitry Ilvokhin <d@ilvokhin.com> | 2024-05-27 10:45:25 +0100 |
|---|---|---|
| committer | Dmitry Ilvokhin <d@ilvokhin.com> | 2024-05-27 10:45:25 +0100 |
| commit | da9620ed0709be25b4ced254ca0f131f637bcfe6 (patch) | |
| tree | b602e022d6df01539828be813907d7b39734c3d7 /roles/wgvpn/tasks | |
| parent | da82868f7aee3997994474fd3c5a72e3676070c2 (diff) | |
| download | infra-da9620ed0709be25b4ced254ca0f131f637bcfe6.tar.gz infra-da9620ed0709be25b4ced254ca0f131f637bcfe6.tar.bz2 infra-da9620ed0709be25b4ced254ca0f131f637bcfe6.zip | |
Add wgvpn role for WireGuard VPN
Diffstat (limited to 'roles/wgvpn/tasks')
| -rw-r--r-- | roles/wgvpn/tasks/main.yml | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/roles/wgvpn/tasks/main.yml b/roles/wgvpn/tasks/main.yml new file mode 100644 index 0000000..8dc0e3b --- /dev/null +++ b/roles/wgvpn/tasks/main.yml @@ -0,0 +1,23 @@ +- name: Configure WireGuard for wgvpn + ansible.builtin.template: + src: templates/wg1.conf.j2 + dest: /etc/wireguard/wg1.conf + owner: root + group: root + mode: u+rw,g-rw,o-rw + notify: Reload wgvpn + +- name: Configure systemd-resolved for wgvpn + ansible.builtin.copy: + src: files/wgvpn.conf + dest: /etc/systemd/resolved.conf.d/wgvpn.conf + owner: root + group: root + mode: u+rw,g+r,o+r + notify: Restart systemd-resolved + +- name: Enable WireGuard service for wgvpn + ansible.builtin.service: + name: wg-quick@wg1 + enabled: yes + state: started |