15 lines
397 B
Django/Jinja
15 lines
397 B
Django/Jinja
[Interface]
|
|
# device's address in the VPN
|
|
Address = {{ item.addr }}
|
|
# device privkey
|
|
PrivateKey = {{ item.priv_key }}
|
|
DNS = {{ hostvars[groups["bastion"][0]].vpn_ip }}
|
|
|
|
[Peer]
|
|
# server stuff
|
|
PublicKey = {{ wireguard_secret.servers[groups["bastion"][0]].pub }}
|
|
Endpoint = {{ wireguard.ip.server_public }}:{{ wireguard.ip.port }}
|
|
|
|
# allow traffic for all subnets into the VPN
|
|
AllowedIPs = 0.0.0.0/0
|