60 lines
1.6 KiB
YAML
60 lines
1.6 KiB
YAML
- name: "wg0 : configure wireguard"
|
|
ansible.builtin.template:
|
|
src: "./wg0/wg0.conf.j2"
|
|
dest: "/etc/wireguard/wg0.conf"
|
|
mode: 0600
|
|
register: vpn_bridge_wg0_conf
|
|
|
|
- name: "wg0 : post-up nftables inet script"
|
|
ansible.builtin.template:
|
|
src: "./wg0/post-up-wg0-inet.nft.j2"
|
|
dest: "/usr/local/sbin/post-up-wg0-inet.nft"
|
|
mode: 0755
|
|
register: vpn_bridge_post_up_wg0_inet_nft
|
|
|
|
- name: "wg0 : post-up nftables ipv4 script"
|
|
ansible.builtin.template:
|
|
src: "./wg0/post-up-wg0-ipv4.nft.j2"
|
|
dest: "/usr/local/sbin/post-up-wg0-ipv4.nft"
|
|
mode: 0755
|
|
register: vpn_bridge_post_up_wg0_ipv4_nft
|
|
|
|
- name: "wg0 : configure interface"
|
|
ansible.builtin.template:
|
|
src: "./wg0/wg0.j2"
|
|
dest: "/etc/network/interfaces.d/wg0"
|
|
mode: 0644
|
|
validate: >
|
|
bash -c
|
|
'if ! diff %s /etc/network/interfaces.d/wg0 && ip link show dev wg0 ;
|
|
then
|
|
ifdown wg0 ;
|
|
fi'
|
|
register: vpn_bridge_wg0_intf
|
|
|
|
- name: "wg0 : restart interface"
|
|
ansible.builtin.shell: |
|
|
if ip link show dev wg0
|
|
then
|
|
ifdown wg0 && ifup wg0
|
|
else
|
|
ifup wg0
|
|
fi
|
|
when:
|
|
vpn_bridge_wg0_conf.changed or
|
|
vpn_bridge_post_up_wg0_inet_nft.changed or
|
|
vpn_bridge_post_up_wg0_ipv4_nft.changed or
|
|
vpn_bridge_wg0_intf.changed
|
|
|
|
- name: "wg0 : pre-down nftables inet script"
|
|
ansible.builtin.copy:
|
|
src: "./wg0/pre-down-wg0-inet.nft"
|
|
dest: "/usr/local/sbin/pre-down-wg0-inet.nft"
|
|
mode: 0755
|
|
|
|
- name: "wg0 : pre-down nftables ipv4 script"
|
|
ansible.builtin.copy:
|
|
src: "./wg0/pre-down-wg0-ipv4.nft"
|
|
dest: "/usr/local/sbin/pre-down-wg0-ipv4.nft"
|
|
mode: 0755
|