nik/homelab
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: route home LAN through mac WireGuard client, fix broken bool conditionals

Browse Source 
AllowedIPs for the mac road-warrior peer was missing 10.10.40.0/24, so
DNS (10.10.40.53) and other home-LAN hosts were unreachable over the
tunnel. Also fixes the same string-vs-bool `when:` failure already
patched in e757850 (recent ansible-core rejects a `-e ...=true` CLI
string in a boolean conditional) for the client-config display tasks.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Nik Afiq 2026-08-26 20:45:09 +09:00
parent 663337f818
commit b37a816b3e
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ansible/roles/wireguard/tasks/main.yaml
View File

@ -163,27 +163,27 @@
[Peer] [Peer]
PublicKey = {{ server_public_key.stdout }} PublicKey = {{ server_public_key.stdout }}
Endpoint = {{ wireguard_endpoint }}:51820 Endpoint = {{ wireguard_endpoint }}:51820
AllowedIPs = 192.168.7.0/24, 10.10.0.0/24 AllowedIPs = 192.168.7.0/24, 10.10.40.0/24, 10.10.0.0/24
PersistentKeepalive = 25 PersistentKeepalive = 25
- name: Display mac client config - name: Display mac client config
ansible.builtin.shell: cat /etc/wireguard/mac-client.conf ansible.builtin.shell: cat /etc/wireguard/mac-client.conf
register: mac_conf register: mac_conf
changed_when: false changed_when: false
when: wireguard_show_client_configs | default(false) when: wireguard_show_client_configs | default(false) | bool
- name: Show mac client config - name: Show mac client config
ansible.builtin.debug: ansible.builtin.debug:
msg: "{{ mac_conf.stdout_lines }}" msg: "{{ mac_conf.stdout_lines }}"
when: wireguard_show_client_configs | default(false) when: wireguard_show_client_configs | default(false) | bool
- name: Generate QR code for phone - name: Generate QR code for phone
ansible.builtin.shell: qrencode -t ansiutf8 < /etc/wireguard/phone-client.conf ansible.builtin.shell: qrencode -t ansiutf8 < /etc/wireguard/phone-client.conf
register: phone_qr register: phone_qr
changed_when: false changed_when: false
when: wireguard_show_client_configs | default(false) when: wireguard_show_client_configs | default(false) | bool
- name: Display phone QR code - name: Display phone QR code
ansible.builtin.debug: ansible.builtin.debug:
msg: "{{ phone_qr.stdout_lines }}" msg: "{{ phone_qr.stdout_lines }}"
when: wireguard_show_client_configs | default(false) when: wireguard_show_client_configs | default(false) | bool