summaryrefslogtreecommitdiff
path: root/roles/wgnet/tasks
diff options
context:
space:
mode:
Diffstat (limited to 'roles/wgnet/tasks')
-rw-r--r--roles/wgnet/tasks/main.yml23
1 files changed, 14 insertions, 9 deletions
diff --git a/roles/wgnet/tasks/main.yml b/roles/wgnet/tasks/main.yml
index 8e5a632..c776a84 100644
--- a/roles/wgnet/tasks/main.yml
+++ b/roles/wgnet/tasks/main.yml
@@ -10,12 +10,17 @@
- name: Configure WireGuard for wgnet
ansible.builtin.template:
- src: "{{ item.src }}"
- dest: "/etc/systemd/network/{{ item.dest }}"
- owner: systemd-network
- group: systemd-network
- mode: u+rw,g+r,o+r
- loop:
- - { src: templates/wg0.netdev.j2, dest: wg0.netdev }
- - { src: templates/wg0.network.j2, dest: wg0.network }
- notify: Reload network
+ src: templates/wg0.conf.j2
+ dest: /etc/wireguard/wg0.conf
+ owner: root
+ group: root
+ # Config containes private key for this host, so permissions are
+ # restricted.
+ mode: u+rw,g-rw,o-rw
+ notify: Reload wgnet
+
+- name: Enable WireGuard service for wgnet
+ ansible.builtin.service:
+ name: wg-quick@wg0
+ enabled: yes
+ state: started