Nik Afiq
325d3bc5c7
Registers minisforum as a PIA WireGuard peer for VPN VLAN 50, with a boot-ordered kill switch (dedicated PIA-VLAN50 iptables chain + a terminal unreachable route in a dedicated routing table), multi-region addKey fallback (Hong Kong -> Taiwan -> JP Tokyo, each region's full server list, in order), and an observability-only health check. Verified live against minisforum: registration succeeds, wg-quick@pia-wg is up. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
12 lines
311 B
Django/Jinja
12 lines
311 B
Django/Jinja
# Managed by Ansible (role: pia-gateway). Do not edit by hand.
|
|
[Unit]
|
|
Description=Run the PIA gateway health check every {{ pia_healthcheck_interval_sec }}s
|
|
|
|
[Timer]
|
|
OnBootSec={{ pia_healthcheck_interval_sec }}
|
|
OnUnitActiveSec={{ pia_healthcheck_interval_sec }}
|
|
AccuracySec=5s
|
|
|
|
[Install]
|
|
WantedBy=timers.target
|