diff options
Diffstat (limited to 'ansible/plays/wireguard-vs0.yml')
| -rw-r--r-- | ansible/plays/wireguard-vs0.yml | 74 |
1 files changed, 74 insertions, 0 deletions
diff --git a/ansible/plays/wireguard-vs0.yml b/ansible/plays/wireguard-vs0.yml new file mode 100644 index 0000000..04eee72 --- /dev/null +++ b/ansible/plays/wireguard-vs0.yml @@ -0,0 +1,74 @@ +- hosts: + - akili + - birgitte + roles: + - role: wireguard2 + wireguard_if: vs0 + wireguard_listen_port: 45364 + wireguard_address4: "{{ networks[ansible_hostname].address }}" + + networks: + vimscore-1: + address: 192.168.137.1/24 + network: 10.137.1.0 + prefix: 24 + vimscore-2: + address: 192.168.137.2/24 + network: 10.137.2.0 + prefix: 24 + vimscore-3: + address: 192.168.137.3/24 + network: 10.137.3.0 + prefix: 24 + akili: + address: 192.168.137.4/24 + network: 10.137.4.0 + prefix: 24 + birgitte: + address: 192.168.137.5/24 + network: 10.137.5.0 + prefix: 24 + + wireguard_routers: + - gateway: "{{ networks['vimscore-1'].address }}" + network: "{{ networks['vimscore-1'].network }}/{{ networks['vimscore-1'].prefix }}" + state: "{{ 'absent' if ansible_hostname == 'vimscore-1' else 'present' }}" + - gateway: "{{ networks['vimscore-2'].address }}" + network: "{{ networks['vimscore-2'].network }}/{{ networks['vimscore-2'].prefix }}" + state: "{{ 'absent' if ansible_hostname == 'vimscore-2' else 'present' }}" + - gateway: "{{ networks['vimscore-3'].address }}" + network: "{{ networks['vimscore-3'].network }}/{{ networks['vimscore-3'].prefix }}" + state: "{{ 'absent' if ansible_hostname == 'vimscore-3' else 'present' }}" + - gateway: "{{ networks['akili'].address }}" + network: "{{ networks['akili'].network }}/{{ networks['akili'].prefix }}" + state: "{{ 'absent' if ansible_hostname == 'akili' else 'present' }}" + - gateway: "{{ networks['birgitte'].address }}" + network: "{{ networks['birgitte'].network }}/{{ networks['birgitte'].prefix }}" + state: "{{ 'absent' if ansible_hostname == 'birgitte' else 'present' }}" + + wireguard_peers: + vimscore-1: + endpoint: vimscore-1.vimscore.com + allowed_ips: + - "{{ networks['vimscore-1'].address | ipaddr('address') }}/32" + - "{{ networks['vimscore-1'].network }}/{{ networks['vimscore-1'].prefix }}" + vimscore-2: + endpoint: vimscore-2.vimscore.com + allowed_ips: + - "{{ networks['vimscore-2'].address | ipaddr('address') }}/32" + - "{{ networks['vimscore-2'].network }}/{{ networks['vimscore-2'].prefix }}" + vimscore-3: + endpoint: vimscore-3.vimscore.com + allowed_ips: + - "{{ networks['vimscore-3'].address | ipaddr('address') }}/32" + - "{{ networks['vimscore-3'].network }}/{{ networks['vimscore-3'].prefix }}" + akili: + public_key: UZc6XKf9ULUbBc4CI01DdCdyuj+lHvc1NQRhGJH/TE4= + allowed_ips: + - "{{ networks['akili'].address | ipaddr('address') }}/32" + - "{{ networks['akili'].network }}/{{ networks['akili'].prefix }}" + birgitte: + public_key: NBTz38oefUN5Thj7kwcL91fV7HL+xf6iju5/AgR2bC0= + allowed_ips: + - "{{ networks['birgitte'].address | ipaddr('address') }}/32" + - "{{ networks['birgitte'].network }}/{{ networks['birgitte'].prefix }}" |