aboutsummaryrefslogtreecommitdiff
path: root/ansible/wg0
diff options
context:
space:
mode:
Diffstat (limited to 'ansible/wg0')
-rw-r--r--ansible/wg0/files/akili/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/android-trygvis/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/arius/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/astyanax/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/birgitte/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/conflatorio/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/hash/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/knot/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/kv24ix/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/lhn2ix/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/lhn2pi/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/malabaricus/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/sweetzpot-macos/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/files/sweetzpot-mobile/etc/wireguard/public-wg0.key1
-rw-r--r--ansible/wg0/group_vars/all/wireguard_wg0.yml65
-rw-r--r--ansible/wg0/wireguard-wg0-terraform.yml17
-rw-r--r--ansible/wg0/wireguard-wg0.yml5
17 files changed, 101 insertions, 0 deletions
diff --git a/ansible/wg0/files/akili/etc/wireguard/public-wg0.key b/ansible/wg0/files/akili/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..a257ddf
--- /dev/null
+++ b/ansible/wg0/files/akili/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+VljF7el9SuYTe4RN9ZOSHPHyqWnUM/DSk4kuh29hJR4=
diff --git a/ansible/wg0/files/android-trygvis/etc/wireguard/public-wg0.key b/ansible/wg0/files/android-trygvis/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..4ab6833
--- /dev/null
+++ b/ansible/wg0/files/android-trygvis/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+9SgKebI72gmwuglEQfSOp3CKrYprUXam6+9BbEPnEkU=
diff --git a/ansible/wg0/files/arius/etc/wireguard/public-wg0.key b/ansible/wg0/files/arius/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..a722138
--- /dev/null
+++ b/ansible/wg0/files/arius/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+8OOM3+qqdyh3uoI6/1pA+9/ksYwNB7jUk9HZx13zsS0=
diff --git a/ansible/wg0/files/astyanax/etc/wireguard/public-wg0.key b/ansible/wg0/files/astyanax/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..62eb9b6
--- /dev/null
+++ b/ansible/wg0/files/astyanax/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+CnfTr3NGymPlOKzWeaUXutxaIFKRDpREx3XI40rUr2U=
diff --git a/ansible/wg0/files/birgitte/etc/wireguard/public-wg0.key b/ansible/wg0/files/birgitte/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..d595dff
--- /dev/null
+++ b/ansible/wg0/files/birgitte/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+r/eymAwM7HDSJkkWSY2Ec7A+F8AQ7tuL0drD/OI1LyM=
diff --git a/ansible/wg0/files/conflatorio/etc/wireguard/public-wg0.key b/ansible/wg0/files/conflatorio/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..f4cc915
--- /dev/null
+++ b/ansible/wg0/files/conflatorio/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+170TWFqJLCfkw48ddLLnx7zWAo1qpx/AQf8Dar8mSXY=
diff --git a/ansible/wg0/files/hash/etc/wireguard/public-wg0.key b/ansible/wg0/files/hash/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..b7736d6
--- /dev/null
+++ b/ansible/wg0/files/hash/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+mqWUWuINT47LoIxYHNrtdvE91nBZeqGaRfwAK1rTPHw=
diff --git a/ansible/wg0/files/knot/etc/wireguard/public-wg0.key b/ansible/wg0/files/knot/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..8caf3db
--- /dev/null
+++ b/ansible/wg0/files/knot/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+cuUgTdFH1UEXpUH6V1nashdH7K/L+pl6dmJCpBWN+Xw=
diff --git a/ansible/wg0/files/kv24ix/etc/wireguard/public-wg0.key b/ansible/wg0/files/kv24ix/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..99eceda
--- /dev/null
+++ b/ansible/wg0/files/kv24ix/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+2J8R/Yg5HWyG/aGOmoCXnbuoPUHzhDxAOeckfnBarW0=
diff --git a/ansible/wg0/files/lhn2ix/etc/wireguard/public-wg0.key b/ansible/wg0/files/lhn2ix/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..588621e
--- /dev/null
+++ b/ansible/wg0/files/lhn2ix/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+qGGsJvvaZWjyjATnPKq/4rpCseuuqiWnS3qSpTntl04=
diff --git a/ansible/wg0/files/lhn2pi/etc/wireguard/public-wg0.key b/ansible/wg0/files/lhn2pi/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..df1ce0a
--- /dev/null
+++ b/ansible/wg0/files/lhn2pi/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+Flf2BKoYAvE4oZc/+l0sn4GldkI/lKXObrJXdBpvakI=
diff --git a/ansible/wg0/files/malabaricus/etc/wireguard/public-wg0.key b/ansible/wg0/files/malabaricus/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..6104a9a
--- /dev/null
+++ b/ansible/wg0/files/malabaricus/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+LjvdPrpPeXyj8qIYgiKkrt7A6C+VmwKgjxYmpr5Jtg0=
diff --git a/ansible/wg0/files/sweetzpot-macos/etc/wireguard/public-wg0.key b/ansible/wg0/files/sweetzpot-macos/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..ea56ab1
--- /dev/null
+++ b/ansible/wg0/files/sweetzpot-macos/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+815EbcmtSqL9Fr6SdvfeL6/BLjDBAJDPsV/lnxeWmG0=
diff --git a/ansible/wg0/files/sweetzpot-mobile/etc/wireguard/public-wg0.key b/ansible/wg0/files/sweetzpot-mobile/etc/wireguard/public-wg0.key
new file mode 100644
index 0000000..73c8ae8
--- /dev/null
+++ b/ansible/wg0/files/sweetzpot-mobile/etc/wireguard/public-wg0.key
@@ -0,0 +1 @@
+EQhaAO3krXKwugH0gdWEd/VjtsxXVWg0osNi5Ia6KDs=
diff --git a/ansible/wg0/group_vars/all/wireguard_wg0.yml b/ansible/wg0/group_vars/all/wireguard_wg0.yml
new file mode 100644
index 0000000..931b0ae
--- /dev/null
+++ b/ansible/wg0/group_vars/all/wireguard_wg0.yml
@@ -0,0 +1,65 @@
+wireguard_wg0:
+ if: wg0
+ ipv4_prefix: 24
+ ipv6_prefix: 64
+ hosts:
+ knot:
+ endpoint: trygvis.io
+ listen_port: 51821
+ peers: all
+ # Generated by https://www.ultratools.com/tools/rangeGenerator
+ ipv6: fdf3:aad9:a885:0b3a::1
+ allowed_ips:
+ - ::/0
+ birgitte:
+ state: absent
+ ipv4: 192.168.60.2
+ ipv6: fdf3:aad9:a885:0b3a::2
+ conflatorio:
+ state: absent
+ ipv6: fdf3:aad9:a885:0b3a::3
+ arius:
+ state: present
+ ipv6: fdf3:aad9:a885:0b3a::6
+ akili:
+ state: present
+ ipv6: fdf3:aad9:a885:0b3a::7
+ allowed_ips:
+ - fdf3:aad9:a885:ba64::/64
+ malabaricus:
+ state: absent
+ ipv6: fdf3:aad9:a885:0b3a::8
+ sweetzpot-mobile:
+ state: present
+ ipv6: fdf3:aad9:a885:0b3a::9
+ astyanax:
+ state: present
+ ipv6: fdf3:aad9:a885:0b3a::10
+ allowed_ips:
+ - fdf3:aad9:a885:ba65::/64
+ sweetzpot-macos:
+ state: present
+ ipv6: fdf3:aad9:a885:0b3a::11
+ android-trygvis:
+ state: absent
+ ipv6: fdf3:aad9:a885:0b3a::12
+ hash:
+ endpoint: hash.trygvis.io
+ listen_port: 51821
+ peers: all
+ ipv6: fdf3:aad9:a885:0b3a::13
+ allowed_ips:
+ - fdf3:aad9:a885:ab76::/64
+ lhn2pi:
+ state: present
+ ipv6: fdf3:aad9:a885:0b3a::14
+ lhn2ix:
+ state: present
+ ipv6: fdf3:aad9:a885:0b3a::15
+ allowed_ips:
+ - fdf3:aad9:a885:77dd::/64
+ kv24ix:
+ state: present
+ ipv6: fdf3:aad9:a885:0b3a::16
+ allowed_ips:
+ - fdf3:aad9:a885:b22d::/64
diff --git a/ansible/wg0/wireguard-wg0-terraform.yml b/ansible/wg0/wireguard-wg0-terraform.yml
new file mode 100644
index 0000000..33b4b47
--- /dev/null
+++ b/ansible/wg0/wireguard-wg0-terraform.yml
@@ -0,0 +1,17 @@
+- hosts: localhost
+ connection: local
+ tasks:
+ - tags: terraform
+ copy:
+ dest: ../../terraform/dns/vpn.tf
+ content: |
+ # Generated from ansible data
+ {% for host, data in wireguard_wg0.hosts.items() %}
+ resource "linode_domain_record" "vpn-{{ host }}" {
+ domain_id = linode_domain.root.id
+ name = "{{ host }}.vpn"
+ record_type = "AAAA"
+ target = "{{ data.ipv6 }}"
+ }
+ {% endfor %}
+
diff --git a/ansible/wg0/wireguard-wg0.yml b/ansible/wg0/wireguard-wg0.yml
new file mode 100644
index 0000000..a6f6653
--- /dev/null
+++ b/ansible/wg0/wireguard-wg0.yml
@@ -0,0 +1,5 @@
+- hosts:
+ - wireguard_wg0
+ roles:
+ - role: wireguard
+ wireguard__name: wireguard_wg0