blob: d7e1e516f60d9a2306ce6940e78934621d7c1f8a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
# https://dev.to/tangramvision/exploring-ansible-via-setting-up-a-wireguard-vpn-3389
---
- name: 'install wireguard package'
apt:
name: 'wireguard'
state: 'present'
update_cache: true
- name: 'create server wireguard config'
template:
dest: '/etc/wireguard/wg0.conf'
src: 'wg0.conf.j2'
owner: 'root'
group: 'root'
mode: '600'
notify: 'restart wireguard'
- name: 'Enable IP Forwarding'
sysctl:
name: '{{ item.sysctl_key }}'
reload: true
state: 'present'
sysctl_set: true
value: '{{ item.sysctl_val }}'
loop:
- sysctl_key: 'net.ipv4.ip_forward'
sysctl_val: "1"
- sysctl_key: 'net.ipv6.conf.all.disable_ipv6'
sysctl_val: "0"
- sysctl_key: 'net.ipv6.conf.all.forwarding'
sysctl_val: "1"
- name: 'start wireguard and enable on boot'
systemd:
name: 'wg-quick@wg0'
state: 'started'
enabled: true
|
