homeserver-iac/roles/firewall/defaults/main.yml
dogeystamp 0c8d18dcce
wireguard: use vpn for bastion-fleet comms
supposedly fleet will be more secure this way
2024-06-16 21:32:52 -04:00

12 lines
256 B
YAML

---
# set these in host/group vars
# these are defaults
# LAN static IP address
local_subnet: 192.168.0.0/24
sshd_port: 2500
bastion_ip: "{{ hostvars[groups['bastion'][0]]['local_ip'] }}"
bastion_vpn_ip: "{{ hostvars[groups['bastion'][0]]['vpn_ip'] }}"