blob: 04814ba751a577f574aeaa7654e536fe1e8c7ddd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
|
# https://dev.to/tangramvision/exploring-ansible-via-setting-up-a-wireguard-vpn-3389
---
- name: 'Enable Debian 10 buster backports repo'
shell:
cmd: 'echo "deb http://deb.debian.org/debian buster-backports main contrib non-free" > /etc/apt/sources.list.d/buster-backports.list'
creates: '/etc/apt/sources.list.d/buster-backports.list'
- name: 'Install Wireguard'
apt:
name: 'wireguard'
state: 'present'
update_cache: true
- name: 'enable and persist ip forwarding'
sysctl:
name: 'net.ipv4.ip_forward'
value: "1"
state: 'present'
sysctl_set: true
reload: true
- name: 'generate private key'
shell:
cmd: 'umask 077 && wg genkey | tee privatekey | wg pubkey > publickey'
chdir: '/etc/wireguard'
creates: '/etc/wireguard/publickey'
- name: 'create client wireguard config'
template:
dest: '/etc/wireguard/wg0.conf'
src: 'wg0.conf.j2'
owner: 'root'
group: 'root'
mode: '600'
notify: 'restart wireguard'
|
