summaryrefslogtreecommitdiff
path: root/roles/wgvpn/templates/wgvpn0.conf.j2
diff options
context:
space:
mode:
authorDmitry Ilvokhin <d@ilvokhin.com>2024-06-15 19:15:19 +0100
committerDmitry Ilvokhin <d@ilvokhin.com>2024-06-15 19:15:43 +0100
commitee9616ff128fe3938dc3490cbdb42298a5630742 (patch)
treed4cd829cc66d41f09c6c8b9f8dbefa4e2eca38b1 /roles/wgvpn/templates/wgvpn0.conf.j2
parenta35d8e570b8bc0d1da4d9a2db17ca3aeaeaf5374 (diff)
downloadinfra-ee9616ff128fe3938dc3490cbdb42298a5630742.tar.gz
infra-ee9616ff128fe3938dc3490cbdb42298a5630742.tar.bz2
infra-ee9616ff128fe3938dc3490cbdb42298a5630742.zip
Rename wg1 interface to wgvpn0
Diffstat (limited to 'roles/wgvpn/templates/wgvpn0.conf.j2')
-rw-r--r--roles/wgvpn/templates/wgvpn0.conf.j217
1 files changed, 17 insertions, 0 deletions
diff --git a/roles/wgvpn/templates/wgvpn0.conf.j2 b/roles/wgvpn/templates/wgvpn0.conf.j2
new file mode 100644
index 0000000..bb95632
--- /dev/null
+++ b/roles/wgvpn/templates/wgvpn0.conf.j2
@@ -0,0 +1,17 @@
+[Interface]
+PrivateKey = {{ wireguard_private_key }}
+Address = 10.0.1.1/24
+ListenPort = 51821
+
+PostUp = iptables -A FORWARD -i %i -j ACCEPT
+PostUp = iptables -A FORWARD -o %i -j ACCEPT
+PostUp = iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
+
+PostDown = iptables -D FORWARD -i %i -j ACCEPT
+PostDown = iptables -D FORWARD -o %i -j ACCEPT
+PostDown = iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
+
+# earth
+[Peer]
+PublicKey = HhBhDQmGzltIGQOn+clbRIkQt7ocPAuqsUS+ytinIwU=
+AllowedIPs = 10.0.1.2/32