Adrien Reslinger
4aa4c2f9be
All checks were successful
continuous-integration/drone Build is passing
83 lines
2.3 KiB
YAML
83 lines
2.3 KiB
YAML
---
|
|
- name: WireGuard setup
|
|
block:
|
|
- name: Include vars for {{ ansible_os_family }}
|
|
include_vars: "{{ item }}"
|
|
with_first_found:
|
|
- "{{ ansible_os_family }}_{{ ansible_distribution_major_version }}.yml"
|
|
- "{{ ansible_os_family }}.yml"
|
|
|
|
- name: Pre-installation
|
|
include_tasks: "install_{{ ansible_os_family }}.yml"
|
|
|
|
- name: Install packages for WireGuard
|
|
package:
|
|
name: "{{ wireguard_packages }}"
|
|
state: present
|
|
update_cache: yes
|
|
|
|
- name: Configure wireguard
|
|
block:
|
|
- name: Retreive private key
|
|
block:
|
|
- name: Retreive private key
|
|
shell: >
|
|
cat /etc/wireguard/privatekey
|
|
register: wireguard_private_key
|
|
rescue:
|
|
- name: Generate private key
|
|
shell: >
|
|
set -o pipefail && wg genkey | tee /etc/wireguard/privatekey
|
|
register: wireguard_private_key
|
|
always:
|
|
- name: Fix permission on /etc/wireguard/privatekey
|
|
file:
|
|
path: "/etc/wireguard/privatekey"
|
|
owner: root
|
|
group: root
|
|
mode: 0600
|
|
|
|
- name: Retreive public key
|
|
block:
|
|
- name: Retreive public key
|
|
shell: >
|
|
cat /etc/wireguard/publickey
|
|
register: wireguard_public_key
|
|
rescue:
|
|
- name: Generate public key
|
|
shell: >
|
|
set -o pipefail && cat /etc/wireguard/privatekey | wg pubkey | tee /etc/wireguard/publickey
|
|
register: wireguard_public_key
|
|
always:
|
|
- name: Fix permission on /etc/wireguard/publickey
|
|
file:
|
|
path: "/etc/wireguard/publickey"
|
|
owner: root
|
|
group: root
|
|
mode: 0600
|
|
|
|
# - name: Set keys pair variable
|
|
# set_facts:
|
|
# wireguard_public_key: '{{ wireguard_public_key.stdout }}'
|
|
# wireguard_private_key: '{{ wireguard_private_key.stdout }}'
|
|
#
|
|
# - name: Install WireGuard configuration files
|
|
# template:
|
|
# src: "etc/wireguard/wireguard.conf.j2"
|
|
# dest: "/etc/wireguard/{{ wireguard_interface }}.conf"
|
|
# owner: root
|
|
# group: root
|
|
# mode: 0644
|
|
#
|
|
# - name: Enable Wireguard service
|
|
# service:
|
|
# name: "wg-quick@{{ wireguard_interface }}"
|
|
# enabled: yes
|
|
# state: restarted
|
|
# when:
|
|
# - skip_conf|false
|
|
# tags:
|
|
# - wireguard-conf
|
|
#
|
|
tags:
|
|
- wireguard
|