aboutsummaryrefslogblamecommitdiffstats
path: root/roles/wireguard/templates/host.conf.j2
blob: 2a5acc5f4dc9a3910f8bdad30fbaa2d5d9a5fb81 (plain) (tree)
1
2
3
4
5
6
7
8






                                                                             
                                                            






                                                   

# wireguard client configuration ~~ /etc/wireguard/*.conf
# managed by Ansible
{% set host_keys = lookup("file", wg_host_keys).splitlines() %}
{% set dcontroller_keys = lookup("file", wg_dcontroller_keys).splitlines() %}

[Interface]
Address = {{ ip.in }}, fd00:10:10::{{ ip.in.split(".")[3] }}
PrivateKey = {{ host_keys[0] }}

[Peer]
PublicKey = {{ dcontroller_keys[1] }}
Endpoint = {{ hostvars[_i.dcontroller].ip.out }}:53
AllowedIPs = 0.0.0.0/0, ::/0
PersistentKeepalive = 25
remember that computers suck.