blob: 51b97c0189aaee565c821369ed0d67d3b2310302 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
# wireguard ~~ roles/wireguard/tasks/main.yml
# create keys and configuration for wireguard hosts
---
- name: generate dynamic facts
include: set_facts.yml
- name: check keys on local disk
stat:
path: "{{ wg_host_keys }}"
register: stat_host_keys
delegate_to: localhost
- name: generate host keys
shell: |
umask 077
wg genkey | tee "{{ wg_host_keys }}" | wg pubkey >> "{{ wg_host_keys }}"
args:
chdir: "{{ wg_dir }}"
when: not stat_host_keys.stat.exists or force is defined and force
delegate_to: localhost
- name: create wireguard dir on remote host
file:
path: /etc/wireguard
owner: "{{ user_root }}"
group: "{{ group_root }}"
mode: 0700
state: directory
ignore_unreachable: true
- name: generate client configuration
template:
src: host.conf.j2
dest: "{{ item.path }}"
mode: 0600
when: ansible_host != global.dcontroller
delegate_to: "{{ item.name }}"
loop:
- { name: "{{ ansible_host }}", path: /etc/wireguard/dcontroller.conf }
- { name: localhost, path: "{{ wg_dir }}/{{ ansible_host }}.conf" }
ignore_unreachable: true
- name: generate server configuration
template:
src: dcontroller.conf.j2
dest: "{{ item.path }}"
mode: "0600"
when: ansible_host == global.dcontroller
delegate_to: "{{ item.name }}"
loop:
- { name: "{{ ansible_host }}", path: /etc/wireguard/dcontroller.conf }
- { name: localhost, path: "{{ wg_dir }}/{{ ansible_host }}.conf" }
- name: generate server interface
template:
src: templates/hostname.j2
dest: /etc/hostname.tun0
when: ansible_host == global.dcontroller
|
