From 4cfcc906d6d3d1ee34b2781141f0b1fae8ae15b8 Mon Sep 17 00:00:00 2001
From: Rene Mewissen <rene@tantooine.myfirewall.org>
Date: Mon, 22 Jul 2024 15:41:56 +0200
Subject: [PATCH] move wireguard installation to base role

---
 roles/base/templates/client_VPN.conf.j2 | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 roles/base/templates/client_VPN.conf.j2

diff --git a/roles/base/templates/client_VPN.conf.j2 b/roles/base/templates/client_VPN.conf.j2
new file mode 100644
index 0000000..866df15
--- /dev/null
+++ b/roles/base/templates/client_VPN.conf.j2
@@ -0,0 +1,10 @@
+[Interface]
+Address = {{ wg_local_ip }}
+ListenPort = 41475
+PostUp = wg set %i private-key /etc/wireguard/privatekey
+
+[Peer]
+PublicKey = {{ wg_server_pubkey }}
+Endpoint = {{ wg_endpoint }}
+AllowedIPs = 192.168.3.0/24, 192.168.1.0/24
+PersistentKeepalive = 25
\ No newline at end of file