crans
/
ansible
mirror of http://gitlab.adm.crans.org/nounous/ansible.git
19
0
Fork 0
Code Issues Projects Releases Wiki Activity

ansible_vault → ansible/: wireguard

linter
_shirenn 2022-05-24 19:02:04 +02:00
parent 399c988780
commit ac04b63c87
3 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
host_vars/boeing.adm.crans.org.yml
View File

@ -7,9 +7,9 @@ loc_wireguard:
tunnels: tunnels:
- name: "sputnik" - name: "sputnik"
listen_port: 51820 listen_port: 51820
private_key: "{{ vault.wireguard_boeing_private_key }}" private_key: "{{ vault.wireguard.boeing.privkey }}"
peers: peers:
- public_key: "{{ vault.wireguard_sputnik_public_key }}" - public_key: "{{ vault.wireguard.sputnik.pubkey }}"
allowed_ips: allowed_ips:
- "{{ query('ldap', 'ip', 'sputnik', 'adm') | ipv4 | first }}/32" - "{{ query('ldap', 'ip', 'sputnik', 'adm') | ipv4 | first }}/32"
- "{{ query('ldap', 'ip', 'sputnik', 'adm') | ipv6 | first }}/128" - "{{ query('ldap', 'ip', 'sputnik', 'adm') | ipv6 | first }}/128"

4
host_vars/sputnik.adm.crans.org.yml
View File

@ -15,9 +15,9 @@ loc_wireguard:
- "{{ query('ldap', 'ip', 'sputnik', 'adm') | ipv4 | first }}/24" - "{{ query('ldap', 'ip', 'sputnik', 'adm') | ipv4 | first }}/24"
- "{{ query('ldap', 'ip', 'sputnik', 'adm') | ipv6 | first }}/64" - "{{ query('ldap', 'ip', 'sputnik', 'adm') | ipv6 | first }}/64"
listen_port: 51820 listen_port: 51820
private_key: "{{ vault.wireguard_sputnik_private_key }}" private_key: "{{ vault.wireguard.sputnik.privkey }}"
peers: peers:
- public_key: "{{ vault.wireguard_boeing_public_key }}" - public_key: "{{ vault.wireguard.boeing.pubkey }}"
allowed_ips: allowed_ips:
- "{{ query('ldap', 'network', 'adm') }}" - "{{ query('ldap', 'network', 'adm') }}"
- "fd00:0:0:{{ query('ldap', 'vlanid', 'adm') }}::/64" - "fd00:0:0:{{ query('ldap', 'vlanid', 'adm') }}::/64"

4
host_vars/vol447.adm.crans.org.yml
View File

@ -7,9 +7,9 @@ loc_wireguard:
tunnels: tunnels:
- name: "gulp" - name: "gulp"
listen_port: 51820 listen_port: 51820
private_key: "{{ vault.wireguard_vol447_private_key }}" private_key: "{{ vault.wireguard.vol447.privkey }}"
peers: peers:
- public_key: "{{ vault.wireguard_charybde_public_key }}" - public_key: "{{ vault.wireguard.charybde.pubkey }}"
allowed_ips: allowed_ips:
- "{{ query('ldap', 'ip', 'charybde', 'adm') | ipv4 | first }}/32" - "{{ query('ldap', 'ip', 'charybde', 'adm') | ipv4 | first }}/32"
- "{{ query('ldap', 'ip', 'charybde', 'adm') | ipv6 | first }}/128" - "{{ query('ldap', 'ip', 'charybde', 'adm') | ipv6 | first }}/128"