homelab/pia-gateway.yaml at 26894d16ce9022908dbde7cf85dc9c6bc6642e50 - homelab - Gitea: Git with a cup of tea

nik/homelab

Nik Afiq 325d3bc5c7 feat: add pia-gateway role for minisforum PIA WireGuard egress

Registers minisforum as a PIA WireGuard peer for VPN VLAN 50, with a
boot-ordered kill switch (dedicated PIA-VLAN50 iptables chain + a
terminal unreachable route in a dedicated routing table), multi-region
addKey fallback (Hong Kong -> Taiwan -> JP Tokyo, each region's full
server list, in order), and an observability-only health check.

Verified live against minisforum: registration succeeds, wg-quick@pia-wg
is up.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-24 17:54:16 +09:00

7 lines

119 B

YAML

Raw Blame History

 ---
 - name: PIA WireGuard egress gateway for VPN VLAN 50
   hosts: minisforum
   become: true
   roles:
     - pia-gateway