diff options
Diffstat (limited to 'ansible/roles/network/templates')
| -rw-r--r-- | ansible/roles/network/templates/wireguard.conf.j2 | 2 | ||||
| -rw-r--r-- | ansible/roles/network/templates/wireguard_external.conf.j2 | 3 |
2 files changed, 3 insertions, 2 deletions
diff --git a/ansible/roles/network/templates/wireguard.conf.j2 b/ansible/roles/network/templates/wireguard.conf.j2 index 9f70eb9..b4a530c 100644 --- a/ansible/roles/network/templates/wireguard.conf.j2 +++ b/ansible/roles/network/templates/wireguard.conf.j2 @@ -1,6 +1,6 @@ [Interface] Address = {{ vpn_ip }} -PrivateKey = {{ wireguard_privkey.stdout }} +PostUp = wg set %i private-key <(cat /etc/wireguard/privkey) ListenPort = 51820 {% for selected_host in groups['cluster_nodes']|difference([inventory_hostname]) %} diff --git a/ansible/roles/network/templates/wireguard_external.conf.j2 b/ansible/roles/network/templates/wireguard_external.conf.j2 index f130ffd..f941446 100644 --- a/ansible/roles/network/templates/wireguard_external.conf.j2 +++ b/ansible/roles/network/templates/wireguard_external.conf.j2 @@ -1,9 +1,10 @@ # Template configuration file for VPN nodes that are non in the cluster +# The private key should be stored as /etc/wireguard/privkey # External nodes should be registered in network/vars/main.yml [Interface] Address = <INSERT YOUR IP HERE, IT SHOULD MATCH THE ONE IN vars/main.yml> -PrivateKey = <INSERT YOUR PRIVKEY HERE, IT SHOULD MATCH THE PUBKEY IN vars/main.yml> +PostUp = wg set %i private-key <(cat /etc/wireguard/privkey) ListenPort = 51820 # Cluster nodes |