moved installation of wireguard to role "base"

This commit is contained in:
2022-07-02 18:55:11 +02:00
parent 0220ace94a
commit b6bb11b014
3 changed files with 18 additions and 18 deletions

View File

@@ -15,12 +15,6 @@
when:
- glusterfs is defined
- glusterfs == true
- include_tasks: utilities/wireguard.yml
when:
- wireguard is defined
- wireguard == true
- ansible_default_ipv4.address | ipaddr('public')
ignore_errors: True
- include_tasks: system_setup/cron.yml
# - include_role:
# name: base

View File

@@ -1,66 +0,0 @@
- name: server | utilities | wireguard install
package:
name: "{{ wireguard_package }}"
state: latest
- name: server | utilities | wireguard generate private key
shell:
cmd: umask 077 && wg genkey | tee privatekey | wg pubkey > publickey
chdir: /etc/wireguard
creates: /etc/wireguard/publickey
when:
- wg_privkey is not defined
- wg_pubkey is not defined
- name: server | utilities | wireguard cat pubkey
command: "cat /etc/wireguard/publickey"
register: wg_publickkey
when:
- wg_pubkey is not defined
- name: server | utilities | wireguard output pubkey
debug:
var: wg_publickkey.stdout_lines
when:
- wg_pubkey is not defined
- name: server | utilities | wireguard pause
pause:
prompt: please copy pubkey to your wireguard server
when:
- wg_pubkey is not defined
- name: server | utilities | wireguard copy keys
copy:
content: "{{ item.key }}"
dest: "{{ item.keyfile }}"
mode: '0600'
loop:
- { key: "{{ wg_pubkey }}", keyfile: "/etc/wireguard/publickey" }
- { key: "{{ wg_privkey }}", keyfile: "/etc/wireguard/privatekey" }
when:
- wg_pubkey is defined
- wg_privkey is defined
- name: server | utilities | wireguard generate config
template:
dest: "/etc/wireguard/VPN.conf"
src: client_VPN.conf.j2
owner: root
group: root
mode: '0600'
- name: server | utilities | wireguard check if already running
command: wg show
register: wireguard
- block:
- name: server | utilities | wireguard start vpn
command: wg-quick up VPN
- name: server | utilities | wireguard enable service
service:
name: "wg-quick@VPN"
enabled: true
when: wireguard.stdout == ""
ignore_errors: True