diff options
| -rw-r--r-- | tnet/host_vars/knot/wg.yml | 7 | ||||
| -rw-r--r-- | tnet/keys/wg-kioubit_de2-knot.pub | 1 | ||||
| -rw-r--r-- | tnet/keys/wg-knot-kioubit_de2.pub | 1 | ||||
| -rw-r--r-- | tnet/keys/wg-knot-kioubit_de2.sops.key | 28 | ||||
| -rw-r--r-- | tnet/wg-links.yml | 1 |
5 files changed, 37 insertions, 1 deletions
diff --git a/tnet/host_vars/knot/wg.yml b/tnet/host_vars/knot/wg.yml index 9ad867e..64595ed 100644 --- a/tnet/host_vars/knot/wg.yml +++ b/tnet/host_vars/knot/wg.yml @@ -9,7 +9,7 @@ tnet_wg: address: fdb1:4242:3538:ffff:18b7:d3ec:5608:db9a kv24ix: port: 51003 - address: fe80:fef1:078a:5b64:efd3:ae7b:d286:d7ce + address: fdb1:4242:3538:2f01::a akili: port: 51004 address: fdb1:4242:3538:ffff:59d7:cf77:8b5d:761a @@ -37,3 +37,8 @@ tnet_wg: if_name: coregonus port: 51011 address: fe80:ba82:77f0:f96d:7a85:a7fa:ef6f:37d2 + kioubit_de2: + if_name: kioubit_d2 + endpoint: de2.g-load.eu:23538 + port: 51012 + address: fe80::ade1 diff --git a/tnet/keys/wg-kioubit_de2-knot.pub b/tnet/keys/wg-kioubit_de2-knot.pub new file mode 100644 index 0000000..aed317e --- /dev/null +++ b/tnet/keys/wg-kioubit_de2-knot.pub @@ -0,0 +1 @@ +B1xSG/XTJRLd+GrWDsB06BqnIq8Xud93YVh/LYYYtUY= diff --git a/tnet/keys/wg-knot-kioubit_de2.pub b/tnet/keys/wg-knot-kioubit_de2.pub new file mode 100644 index 0000000..a8d0922 --- /dev/null +++ b/tnet/keys/wg-knot-kioubit_de2.pub @@ -0,0 +1 @@ +7QJdCBlpvYWHyg33ifsifWmV/bV6RgUct4lh0ykCK1g= diff --git a/tnet/keys/wg-knot-kioubit_de2.sops.key b/tnet/keys/wg-knot-kioubit_de2.sops.key new file mode 100644 index 0000000..6f699b0 --- /dev/null +++ b/tnet/keys/wg-knot-kioubit_de2.sops.key @@ -0,0 +1,28 @@ +{ + "data": "ENC[AES256_GCM,data:pj1LPjdqo+M/GlgWA63LNH/lM7F5rOYeMF1a0qNuBm6/luo5PvRYBj2jyLxa,iv:qlIvXCBXd9dyC6tj9WH0mq3jomzSUc4maPg9zPIvDbM=,tag:cSHZFa18BISZ9owjkHVkVw==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age13wv3rp0varlg4nvt3tca48fq8u9q3mc6yfdekjeapcmc7kaq4dysrzcmv3", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2MTdPUUFNU0FXcTZWckZJ\nSXV2a3ZQVmE0T3BNTVByMGp0L3ZvZERyNEFjCmFjcmRpeXU5S2tlTnp3NXBPKzl4\nZ1doRVZ0TTYwZkkvSU5RNitySUJoTWsKLS0tIGlsNzJHL0FydVRXT3puT0RuR0R2\nZGZSaXFOWFB2YkoyMi8rZ0tBL2xxbjAKDPy+8yB95EZZq542FtuI3vo4NmcDrVO5\njOvYGmatpxqSZJ9Oy4HpMzKSWvSuKVkZwTcG7Zzrhi6qrhm/TKIRvQ==\n-----END AGE ENCRYPTED FILE-----\n" + }, + { + "recipient": "age1mvh832crygenu5tu5njtraraet656rzwnawuasjggvs999dc9ueqj9qclw", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0dGlteEludXNpampzd0lD\nTGtQYjIwV3dEbVlEYUJOTlRXZDJYTGNpM1dzCncxMWg4R0J4aVQxQWlvQXY2ZmFH\nWjlxckFWZ2IzMnNENDZHeGFPUlJtVXMKLS0tIHJET2RLL1dBVURwdHhMZGpiMHlW\nblFaQTlDRDE4TmN6SDBnbTVpa3d1eEkKReWQml+gnXRCFbQtF5tFm8vUrALnY+QB\n/dki/g35K2I4tzyPg7qPgKEdGGUYcPTfg1Fyf2m7Q7xXJ7Xg7T1flA==\n-----END AGE ENCRYPTED FILE-----\n" + }, + { + "recipient": "age1teasctdpkatekpsa47q58d3ugwyyqcuj5v9udtusk7ca9sfv694sw057a5", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrNTltblFtRGVLM2xSTGp1\nVjFNMzBaNHJ2WmZTeUlON25GZE5hSUF5QVdFCmFQb28xK2dDVFdzcS9hSTZGRnRv\nSDBDNWNGb3lWVFVmNk9VR1N5TTRkd1kKLS0tIHBhZVp3d3U4UzlDK0ZkaWRxdTA5\nelBrVFVId1IydVpOcXl2R2x3SDZlNlkKNB7tdDL9QdglbbN/za18BBbWDEEvgZcr\nIHEiz1UJZZYdKEsfk1w0LRE9IKhh7LdL11hCtfO/2uTVY/4ghDFHcA==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-06-30T17:13:23Z", + "mac": "ENC[AES256_GCM,data:zY63cqqaceaSuyIBi06jQcwuUaR/bD8h1EL0B+2M8SLTdPQAQ88cDzWze8NjpN2WqPYsxGNo2RYZe0YPXg3ymEJ9YeOvOBzALUZvf7geF7KOoNAqzzieWmIjt7K6Xmq8w1LmsEN3oM8oUU/vNiNoXLHpcD+/Yamu2d0CGr32TZU=,iv:Aj7Hop2etAvJrfsFrvoag0bvKlaMrJySdea3t4cK9c8=,tag:kN4Tn6kiKEwFy0RW6i/HDA==,type:str]", + "pgp": null, + "unencrypted_suffix": "_unencrypted", + "version": "3.9.1" + } +}
\ No newline at end of file diff --git a/tnet/wg-links.yml b/tnet/wg-links.yml index a050547..6613614 100644 --- a/tnet/wg-links.yml +++ b/tnet/wg-links.yml @@ -6,6 +6,7 @@ handlers: # Has to be restart for now, hash doesn't support reloading networkd - name: systemctl restart systemd-networkd + #when: false become: yes systemd: name: systemd-networkd |