nik/homelab
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: nik:8629a36278885126a9b85653f85a2ccc7402419c
Branches Tags
nik:main
nik:restore-public-ingress
..
compare: nik:663337f818741f34628b316213a1af16e071d36d
Branches Tags
nik:main
nik:restore-public-ingress

No commits in common. "8629a36278885126a9b85653f85a2ccc7402419c" and "663337f818741f34628b316213a1af16e071d36d" have entirely different histories.
8629a36278 ... 663337f818

2 changed files with 5 additions and 7 deletions
Show Stats Expand all files Collapse all files

2
ansible/roles/common/defaults/main.yaml
View File

@ -25,8 +25,6 @@ ufw_allowed_ports:
- { port: 6443, proto: tcp, comment: K3s API server } - { port: 6443, proto: tcp, comment: K3s API server }
- { port: 10250, proto: tcp, comment: Kubelet, src: 10.10.40.0/24 } - { port: 10250, proto: tcp, comment: Kubelet, src: 10.10.40.0/24 }
- { port: 8472, proto: udp, comment: Flannel VXLAN, src: 10.10.40.0/24 } - { port: 8472, proto: udp, comment: Flannel VXLAN, src: 10.10.40.0/24 }
- { port: 53, proto: udp, comment: WireGuard road-warrior DNS, src: 10.10.0.0/24 }
- { port: 53, proto: tcp, comment: WireGuard road-warrior DNS, src: 10.10.0.0/24 }
data_dirs: data_dirs:
- /data/gitea - /data/gitea

10
ansible/roles/wireguard/tasks/main.yaml
View File

@ -163,27 +163,27 @@
[Peer] [Peer]
PublicKey = {{ server_public_key.stdout }} PublicKey = {{ server_public_key.stdout }}
Endpoint = {{ wireguard_endpoint }}:51820 Endpoint = {{ wireguard_endpoint }}:51820
AllowedIPs = 192.168.7.0/24, 10.10.40.0/24, 10.10.0.0/24 AllowedIPs = 192.168.7.0/24, 10.10.0.0/24
PersistentKeepalive = 25 PersistentKeepalive = 25
- name: Display mac client config - name: Display mac client config
ansible.builtin.shell: cat /etc/wireguard/mac-client.conf ansible.builtin.shell: cat /etc/wireguard/mac-client.conf
register: mac_conf register: mac_conf
changed_when: false changed_when: false
when: wireguard_show_client_configs | default(false) | bool when: wireguard_show_client_configs | default(false)
- name: Show mac client config - name: Show mac client config
ansible.builtin.debug: ansible.builtin.debug:
msg: "{{ mac_conf.stdout_lines }}" msg: "{{ mac_conf.stdout_lines }}"
when: wireguard_show_client_configs | default(false) | bool when: wireguard_show_client_configs | default(false)
- name: Generate QR code for phone - name: Generate QR code for phone
ansible.builtin.shell: qrencode -t ansiutf8 < /etc/wireguard/phone-client.conf ansible.builtin.shell: qrencode -t ansiutf8 < /etc/wireguard/phone-client.conf
register: phone_qr register: phone_qr
changed_when: false changed_when: false
when: wireguard_show_client_configs | default(false) | bool when: wireguard_show_client_configs | default(false)
- name: Display phone QR code - name: Display phone QR code
ansible.builtin.debug: ansible.builtin.debug:
msg: "{{ phone_qr.stdout_lines }}" msg: "{{ phone_qr.stdout_lines }}"
when: wireguard_show_client_configs | default(false) | bool when: wireguard_show_client_configs | default(false)