blob: e3264efc98361286b9062337eb2b1d11fc1e237c (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
# wireguard ~~ tasks/generate.yml
- stat:
path: "{{ wg_host_keys }}"
register: stat_host_keys
delegate_to: localhost
- name: Generate domain keys
shell: |
umask 077
wg genkey | tee "{{ wg_host_keys }}" | wg pubkey >> "{{ wg_host_keys }}"
args:
chdir: "{{ wg_dir }}"
when: not stat_host_keys.stat.exists or force is defined and force
delegate_to: localhost
- name: Create wireguard dir on remote host
file:
path: /etc/wireguard
owner: root
state: directory
mode: "0700"
ignore_unreachable: true
- name: Generate client configuration
template:
src: templates/host.conf.j2
dest: "{{ item.path }}"
mode: "0600"
when: ansible_host != _i.dcontroller
delegate_to: "{{ item.name }}"
loop:
- { name: "{{ ansible_host }}", path: /etc/wireguard/dcontroller.conf }
- { name: localhost, path: "{{ wg_dir }}/{{ ansible_host}}.conf" }
ignore_unreachable: true
failed_when: 1 == 2
- name: Generate server configuration
template:
src: templates/dcontroller.conf.j2
dest: "{{ item.path }}"
mode: "0600"
when: ansible_host == _i.dcontroller
delegate_to: "{{ item.name }}"
loop:
- { name: "{{ ansible_host }}", path: /etc/wireguard/dcontroller.conf }
- { name: localhost, path: "{{ wg_dir }}/{{ ansible_host}}.conf" }
- name: Generate server interface
template:
src: templates/hostname.tun0.j2
dest: /etc/hostname.tun0
when: ansible_host == _i.dcontroller
|
