Fix indentation
Some checks reported errors
continuous-integration/drone/push Build encountered an error
Some checks reported errors
continuous-integration/drone/push Build encountered an error
This commit is contained in:
parent
a43d21a34a
commit
91ad2ba961
1 changed files with 58 additions and 58 deletions
116
tasks/main.yml
116
tasks/main.yml
|
|
@ -18,68 +18,68 @@
|
||||||
|
|
||||||
- name: Configure wireguard
|
- name: Configure wireguard
|
||||||
block:
|
block:
|
||||||
- name: Retreive private key
|
- name: Retreive private key
|
||||||
block:
|
block:
|
||||||
- name: Retreive private key
|
- name: Retreive private key
|
||||||
ansible.builtin.shell: >
|
ansible.builtin.shell: >
|
||||||
cat /etc/wireguard/privatekey
|
cat /etc/wireguard/privatekey
|
||||||
register: wireguard_private_key
|
register: wireguard_private_key
|
||||||
changed_when: false
|
changed_when: false
|
||||||
check_mode: false
|
check_mode: false
|
||||||
rescue:
|
rescue:
|
||||||
- name: Generate private key
|
- name: Generate private key
|
||||||
ansible.builtin.shell: >
|
ansible.builtin.shell: >
|
||||||
set -o pipefail && wg genkey | tee /etc/wireguard/privatekey
|
set -o pipefail && wg genkey | tee /etc/wireguard/privatekey
|
||||||
register: wireguard_private_key
|
register: wireguard_private_key
|
||||||
always:
|
always:
|
||||||
- name: Fix permission on /etc/wireguard/privatekey
|
- name: Fix permission on /etc/wireguard/privatekey
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: "/etc/wireguard/privatekey"
|
path: "/etc/wireguard/privatekey"
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
mode: 0600
|
mode: 0600
|
||||||
|
|
||||||
- name: Retreive public key
|
- name: Retreive public key
|
||||||
block:
|
block:
|
||||||
- name: Retreive public key
|
- name: Retreive public key
|
||||||
ansible.builtin.shell: >
|
ansible.builtin.shell: >
|
||||||
cat /etc/wireguard/publickey
|
cat /etc/wireguard/publickey
|
||||||
register: wireguard_public_key
|
register: wireguard_public_key
|
||||||
changed_when: false
|
changed_when: false
|
||||||
check_mode: false
|
check_mode: false
|
||||||
rescue:
|
rescue:
|
||||||
- name: Generate public key
|
- name: Generate public key
|
||||||
ansible.builtin.shell: >
|
ansible.builtin.shell: >
|
||||||
set -o pipefail && cat /etc/wireguard/privatekey | wg pubkey | tee /etc/wireguard/publickey
|
set -o pipefail && cat /etc/wireguard/privatekey | wg pubkey | tee /etc/wireguard/publickey
|
||||||
register: wireguard_public_key
|
register: wireguard_public_key
|
||||||
always:
|
always:
|
||||||
- name: Fix permission on /etc/wireguard/publickey
|
- name: Fix permission on /etc/wireguard/publickey
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: "/etc/wireguard/publickey"
|
path: "/etc/wireguard/publickey"
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
mode: 0600
|
mode: 0600
|
||||||
|
|
||||||
- name: Set keys pair variable
|
- name: Set keys pair variable
|
||||||
ansible.builtin.set_fact:
|
ansible.builtin.set_fact:
|
||||||
wireguard_public_key: '{{ wireguard_public_key.stdout }}'
|
wireguard_public_key: '{{ wireguard_public_key.stdout }}'
|
||||||
wireguard_private_key: '{{ wireguard_private_key.stdout }}'
|
wireguard_private_key: '{{ wireguard_private_key.stdout }}'
|
||||||
check_mode: false
|
check_mode: false
|
||||||
|
|
||||||
- name: Install WireGuard configuration files
|
- name: Install WireGuard configuration files
|
||||||
ansible.builtin.template:
|
ansible.builtin.template:
|
||||||
src: "etc/wireguard/wireguard.conf.j2"
|
src: "etc/wireguard/wireguard.conf.j2"
|
||||||
dest: "/etc/wireguard/{{ wireguard_interface }}.conf"
|
dest: "/etc/wireguard/{{ wireguard_interface }}.conf"
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
mode: 0644
|
mode: 0644
|
||||||
notify: "reconfigure wireguard"
|
notify: "reconfigure wireguard"
|
||||||
|
|
||||||
- name: Enable Wireguard service
|
- name: Enable Wireguard service
|
||||||
ansible.builtin.service:
|
ansible.builtin.service:
|
||||||
name: "wg-quick@{{ wireguard_interface }}"
|
name: "wg-quick@{{ wireguard_interface }}"
|
||||||
enabled: true
|
enabled: true
|
||||||
state: restarted
|
state: restarted
|
||||||
when:
|
when:
|
||||||
- not skip_conf
|
- not skip_conf
|
||||||
tags:
|
tags:
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue