remove firewall rule and fix hosts file config
This commit is contained in:
parent
b6c4c33fa0
commit
bf7ede48c4
1 changed files with 9 additions and 44 deletions
|
@ -47,54 +47,19 @@
|
||||||
msg: "Remember to add this host '{{ inventory_hostname }}'' public key to the inventory '{{ public_key }}'"
|
msg: "Remember to add this host '{{ inventory_hostname }}'' public key to the inventory '{{ public_key }}'"
|
||||||
when: key_generation.changed
|
when: key_generation.changed
|
||||||
|
|
||||||
# - name: Ensure cron to ping VPN server exists
|
|
||||||
# cron:
|
|
||||||
# name: Ping Hiljainen
|
|
||||||
# state: absent
|
|
||||||
# job: ping -c 3 192.168.2.4 &> /dev/null
|
|
||||||
# hour: '1'
|
|
||||||
# user: gestor
|
|
||||||
|
|
||||||
# - name: Ensure service unit to ping server exists
|
|
||||||
# template:
|
|
||||||
# src: templates/ping_wg_server.service.j2
|
|
||||||
# dest: '/etc/systemd/system/ping_wg_server.service'
|
|
||||||
# backup: yes
|
|
||||||
|
|
||||||
# - name: Ensure timer unit to ping server exists
|
|
||||||
# template:
|
|
||||||
# src: templates/ping_wg_server.timer.j2
|
|
||||||
# dest: '/etc/systemd/system/ping_wg_server.timer'
|
|
||||||
# backup: yes
|
|
||||||
|
|
||||||
# - name: Ensure ping systemd service unit is enabled
|
|
||||||
# systemd:
|
|
||||||
# name: ping_wg_server.service
|
|
||||||
# enabled: false
|
|
||||||
# daemon_reload: true
|
|
||||||
# masked: false
|
|
||||||
|
|
||||||
# - name: Ensure ping systemd timer unit is enabled
|
|
||||||
# systemd:
|
|
||||||
# name: ping_wg_server.timer
|
|
||||||
# state: started
|
|
||||||
# enabled: false
|
|
||||||
# daemon_reload: true
|
|
||||||
# masked: false
|
|
||||||
|
|
||||||
- name: Get host public IP
|
- name: Get host public IP
|
||||||
uri:
|
uri:
|
||||||
url: https://api.ipify.org?format=json
|
url: https://api.ipify.org?format=json
|
||||||
register: pub_ip
|
register: pub_ip
|
||||||
|
|
||||||
- name: Allow traffic to server
|
# - name: Allow traffic to server
|
||||||
ufw:
|
# ufw:
|
||||||
rule: allow
|
# rule: allow
|
||||||
from: "{{ pub_ip.json.ip }}"
|
# from: "{{ pub_ip.json.ip }}"
|
||||||
delegate_to: "{{ groups['wireguard_server'][0] }}"
|
# delegate_to: "{{ groups['wireguard_server'][0] }}"
|
||||||
notify:
|
# notify:
|
||||||
- Restart Wireguard service
|
# - Restart Wireguard service
|
||||||
- Ping Wireguard server
|
# - Ping Wireguard server
|
||||||
|
|
||||||
- name: Configure peers hosts file entry
|
- name: Configure peers hosts file entry
|
||||||
lineinfile:
|
lineinfile:
|
||||||
|
@ -103,4 +68,4 @@
|
||||||
line: "{{ item['AllowedIPs'] | regex_replace('/.*$', '')}} {{ item['name'] }}.{{ vpn_domain }}"
|
line: "{{ item['AllowedIPs'] | regex_replace('/.*$', '')}} {{ item['name'] }}.{{ vpn_domain }}"
|
||||||
backup: true
|
backup: true
|
||||||
create: true
|
create: true
|
||||||
loop: "{{ wireguard_peers }}"
|
loop: "{{ groups['wireguard_clients'] }}"
|
||||||
|
|
Loading…
Reference in a new issue