remove firewall rule and fix hosts file config

This commit is contained in:
Antonio J. Delgado 2023-10-05 11:05:32 +03:00
parent b6c4c33fa0
commit bf7ede48c4

View file

@ -47,54 +47,19 @@
msg: "Remember to add this host '{{ inventory_hostname }}'' public key to the inventory '{{ public_key }}'" msg: "Remember to add this host '{{ inventory_hostname }}'' public key to the inventory '{{ public_key }}'"
when: key_generation.changed when: key_generation.changed
# - name: Ensure cron to ping VPN server exists
# cron:
# name: Ping Hiljainen
# state: absent
# job: ping -c 3 192.168.2.4 &> /dev/null
# hour: '1'
# user: gestor
# - name: Ensure service unit to ping server exists
# template:
# src: templates/ping_wg_server.service.j2
# dest: '/etc/systemd/system/ping_wg_server.service'
# backup: yes
# - name: Ensure timer unit to ping server exists
# template:
# src: templates/ping_wg_server.timer.j2
# dest: '/etc/systemd/system/ping_wg_server.timer'
# backup: yes
# - name: Ensure ping systemd service unit is enabled
# systemd:
# name: ping_wg_server.service
# enabled: false
# daemon_reload: true
# masked: false
# - name: Ensure ping systemd timer unit is enabled
# systemd:
# name: ping_wg_server.timer
# state: started
# enabled: false
# daemon_reload: true
# masked: false
- name: Get host public IP - name: Get host public IP
uri: uri:
url: https://api.ipify.org?format=json url: https://api.ipify.org?format=json
register: pub_ip register: pub_ip
- name: Allow traffic to server # - name: Allow traffic to server
ufw: # ufw:
rule: allow # rule: allow
from: "{{ pub_ip.json.ip }}" # from: "{{ pub_ip.json.ip }}"
delegate_to: "{{ groups['wireguard_server'][0] }}" # delegate_to: "{{ groups['wireguard_server'][0] }}"
notify: # notify:
- Restart Wireguard service # - Restart Wireguard service
- Ping Wireguard server # - Ping Wireguard server
- name: Configure peers hosts file entry - name: Configure peers hosts file entry
lineinfile: lineinfile:
@ -103,4 +68,4 @@
line: "{{ item['AllowedIPs'] | regex_replace('/.*$', '')}} {{ item['name'] }}.{{ vpn_domain }}" line: "{{ item['AllowedIPs'] | regex_replace('/.*$', '')}} {{ item['name'] }}.{{ vpn_domain }}"
backup: true backup: true
create: true create: true
loop: "{{ wireguard_peers }}" loop: "{{ groups['wireguard_clients'] }}"