You've already forked ansible-role-wireguard
22 lines
881 B
Django/Jinja
22 lines
881 B
Django/Jinja
[Interface]
|
|
Address = {{ wireguard_listen_addr }}
|
|
ListenPort = {{ wireguard_listen_port }}
|
|
PrivateKey = {{ wireguard_private_key }}
|
|
{% if wireguard_forwarding is defined %}
|
|
|
|
PreUp = sysctl -w net.ipv4.ip_forward=1
|
|
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o {{ wireguard_forwarding }} -j MASQUERADE
|
|
PostUp = iptables -I DOCKER-USER -i %i -o {{ wireguard_forwarding }} -j ACCEPT; iptables -I DOCKER-USER -i {{ wireguard_forwarding }} -o %i -j ACCEPT
|
|
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o {{ wireguard_forwarding }} -j MASQUERADE
|
|
{% endif %}
|
|
{% for user in wireguard_users %}
|
|
|
|
# {{ user.name }}
|
|
[Peer]
|
|
PublicKey = {{ user.public_key }}
|
|
AllowedIPs = {{ user.address }}
|
|
{% if wireguard_persistent_keepalive is defined %}
|
|
PersistentKeepAlive = {{ wireguard_persistent_keepalive }}
|
|
{% endif %}
|
|
{% endfor %}
|