blob: 6e7bcc1848bab8f6a38de411bd89304e68a51b25 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
# {{ ansible_managed }}
[Interface]
Address = {{ wireguard_server_ip }}
ListenPort = {{ wireguard_server_listen_port }}
PrivateKey = {{ wireguard_server_priv_key }}
PostUp = iptables -A FORWARD -i wg0 -o wg0 -j ACCEPT
PostUp = iptables -w -t nat -A POSTROUTING -o eth0 -j MASQUERADE; ip6tables -w -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -w -t nat -D POSTROUTING -o eth0 -j MASQUERADE; ip6tables -w -t nat -D POSTROUTING -o eth0 -j MASQUERADE
{% for peer in wireguard_peers %}
[Peer]
PublicKey = {{ peer.peer_key }}
AllowedIPs = {{ peer.peer_ip}}
{% endfor %}
|