moved installation of wireguard to role "base"
This commit is contained in:
@@ -1,66 +0,0 @@
|
||||
- name: server | utilities | wireguard install
|
||||
package:
|
||||
name: "{{ wireguard_package }}"
|
||||
state: latest
|
||||
|
||||
- name: server | utilities | wireguard generate private key
|
||||
shell:
|
||||
cmd: umask 077 && wg genkey | tee privatekey | wg pubkey > publickey
|
||||
chdir: /etc/wireguard
|
||||
creates: /etc/wireguard/publickey
|
||||
when:
|
||||
- wg_privkey is not defined
|
||||
- wg_pubkey is not defined
|
||||
|
||||
- name: server | utilities | wireguard cat pubkey
|
||||
command: "cat /etc/wireguard/publickey"
|
||||
register: wg_publickkey
|
||||
when:
|
||||
- wg_pubkey is not defined
|
||||
|
||||
- name: server | utilities | wireguard output pubkey
|
||||
debug:
|
||||
var: wg_publickkey.stdout_lines
|
||||
when:
|
||||
- wg_pubkey is not defined
|
||||
|
||||
- name: server | utilities | wireguard pause
|
||||
pause:
|
||||
prompt: please copy pubkey to your wireguard server
|
||||
when:
|
||||
- wg_pubkey is not defined
|
||||
|
||||
- name: server | utilities | wireguard copy keys
|
||||
copy:
|
||||
content: "{{ item.key }}"
|
||||
dest: "{{ item.keyfile }}"
|
||||
mode: '0600'
|
||||
loop:
|
||||
- { key: "{{ wg_pubkey }}", keyfile: "/etc/wireguard/publickey" }
|
||||
- { key: "{{ wg_privkey }}", keyfile: "/etc/wireguard/privatekey" }
|
||||
when:
|
||||
- wg_pubkey is defined
|
||||
- wg_privkey is defined
|
||||
|
||||
- name: server | utilities | wireguard generate config
|
||||
template:
|
||||
dest: "/etc/wireguard/VPN.conf"
|
||||
src: client_VPN.conf.j2
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0600'
|
||||
|
||||
- name: server | utilities | wireguard check if already running
|
||||
command: wg show
|
||||
register: wireguard
|
||||
|
||||
- block:
|
||||
- name: server | utilities | wireguard start vpn
|
||||
command: wg-quick up VPN
|
||||
|
||||
- name: server | utilities | wireguard enable service
|
||||
service:
|
||||
name: "wg-quick@VPN"
|
||||
enabled: true
|
||||
when: wireguard.stdout == ""
|
||||
ignore_errors: True
|
||||
Reference in New Issue
Block a user