ansible-edda/inventory/host_vars/heimdall/vars.yml

---
# --------------------------------------------------------------------------------------------------
# system:mail
# --------------------------------------------------------------------------------------------------
system_mail_smtp_pass: "{{ vault_system_mail_smtp_pass }}"

# --------------------------------------------------------------------------------------------------
# system:base
# --------------------------------------------------------------------------------------------------
system_base_udp_ports:
  - 546                         # dhcpv6
  - "{{ vpn_wireguard_port }}"

# --------------------------------------------------------------------------------------------------
# vpn:wireguard
# --------------------------------------------------------------------------------------------------
vpn_wireguard_role: "server"
vpn_wireguard_inet_address: "{{ vpn_wireguard_inet_prefix }}.1"
vpn_wireguard_inet6_address: "{{ vpn_wireguard_inet6_prefix }}::1"
vpn_wireguard_interface_private_key: "{{ vault_vpn_wireguard_interface_private_key }}"
vpn_wireguard_routing_table: "{{ vpn_airvpn_routing_table }}"
vpn_wireguard_clients:
  - public_key: "{{ vault_vpn_wireguard_clients_0_public_key }}"
    preshared_key: "{{ vault_vpn_wireguard_clients_0_preshared_key }}"

# Must be 80 bytes smaller than airvpn since we're tunneling wireguard over wireguard.
vpn_wireguard_mtu: "{{ vpn_airvpn_mtu - 80 | int }}"

# --------------------------------------------------------------------------------------------------
# vpn:airvpn
# --------------------------------------------------------------------------------------------------
vpn_airvpn_role: "client"
vpn_airvpn_port: 1637
vpn_airvpn_inet_address: "{{ vault_vpn_airvpn_inet_address }}"
vpn_airvpn_inet_prefixlen: "{{ vault_vpn_airvpn_inet_prefixlen }}"
vpn_airvpn_inet6_address: "{{ vault_vpn_airvpn_inet6_address }}"
vpn_airvpn_inet6_prefixlen: "{{ vault_vpn_airvpn_inet6_prefixlen }}"
vpn_airvpn_mtu: 1420
vpn_airvpn_interface_private_key: "{{ vault_vpn_airvpn_interface_private_key }}"
vpn_airvpn_server_public_key: "{{ vault_vpn_airvpn_server_public_key }}"
vpn_airvpn_server_preshared_key: "{{ vault_vpn_airvpn_server_preshared_key }}"
vpn_airvpn_server_address: "{{ vault_vpn_airvpn_server_address }}"
vpn_airvpn_routing_table: 768