don't retrieve wireguard privkeys in ansible

This commit is contained in:
Alex 2020-05-23 17:16:25 +02:00
parent 207d1fa278
commit 3bf830713f
3 changed files with 3 additions and 6 deletions

View file

@ -43,10 +43,6 @@
- name: "Secure wireguard private key"
file: path=/etc/wireguard/privkey mode=0600
- name: "Retrieve wireguard private key"
shell: cat /etc/wireguard/privkey
register: wireguard_privkey
- name: "Retrieve wireguard public key"
shell: wg pubkey < /etc/wireguard/privkey
register: wireguard_pubkey

View file

@ -1,6 +1,6 @@
[Interface]
Address = {{ vpn_ip }}
PrivateKey = {{ wireguard_privkey.stdout }}
PostUp = wg set %i private-key <(cat /etc/wireguard/privkey)
ListenPort = 51820
{% for selected_host in groups['cluster_nodes']|difference([inventory_hostname]) %}

View file

@ -1,9 +1,10 @@
# Template configuration file for VPN nodes that are non in the cluster
# The private key should be stored as /etc/wireguard/privkey
# External nodes should be registered in network/vars/main.yml
[Interface]
Address = <INSERT YOUR IP HERE, IT SHOULD MATCH THE ONE IN vars/main.yml>
PrivateKey = <INSERT YOUR PRIVKEY HERE, IT SHOULD MATCH THE PUBKEY IN vars/main.yml>
PostUp = wg set %i private-key <(cat /etc/wireguard/privkey)
ListenPort = 51820
# Cluster nodes