Svc-net-wireguard-core Role¶
Description: No description available
Variables¶
author: Kevin Veen-Birkenbach
description: Manages Wireguard VPN configuration on the host. Installs necessary tools, deploys sysctl settings for IP forwarding, and copies the Wireguard configuration file to enable secure VPN connectivity.
license: Infinito.Nexus NonCommercial License
license_url: https://s.infinito.nexus/license
company: Kevin Veen-Birkenbach
Consulting & Coaching Solutions https://www.veen.world
min_ansible_version: 2.9
platforms: [{‘name’: ‘Archlinux’, ‘versions’: [‘rolling’]}, {‘name’: ‘Ubuntu’, ‘versions’: [‘all’]}]
galaxy_tags: [‘wireguard’, ‘vpn’, ‘networking’, ‘systemd’, ‘configuration’]
repository: https://s.infinito.nexus/code
issue_tracker_url: https://s.infinito.nexus/issues
documentation: https://docs.infinito.nexus
README¶
Wireguard¶
Description¶
This role manages Wireguard on the host. It installs the necessary Wireguard packages, configures sysctl settings for IPv4/IPv6 forwarding, and deploys the Wireguard configuration file to enable the VPN service using wg-quick.
Overview¶
Optimized for both Arch
Linux and
Ubuntu/Debian, this role performs
the following tasks: - Installs Wireguard tools using the appropriate
package manager. - Copies a sysctl configuration file to enable IP
forwarding and proper IPv6 settings. - Deploys a host-specific Wireguard
configuration file to /etc/wireguard/wg0.infinito.conf. - Uses
systemd handlers to restart the Wireguard service and reload sysctl
settings.
Purpose¶
The primary purpose of this role is to set up and manage a Wireguard VPN configuration on the host. By automating package installation and configuration file deployment, it ensures that the VPN service is enabled with optimal network settings for secure connectivity.
Features¶
Multi-Platform Support: Installs Wireguard tools using pacman on Arch Linux and apt on Ubuntu/Debian.
Sysctl Configuration: Deploys a sysctl configuration file to manage IPv4/IPv6 forwarding and related network parameters.
Wireguard Configuration: Copies a host-specific Wireguard configuration file to
/etc/wireguard/wg0.infinito.conf.Service Management: Provides handlers to restart the Wireguard service and reload sysctl settings.
Administration¶
For detailed client setup instructions, please see the Administration file.