13 lines
803 B
Plaintext
13 lines
803 B
Plaintext
[Interface]
|
|
# This is the virtual IP address, with the subnet mask we will use for the VPN. Note that this must not be on our LAN subnet and should be an uncommon subnet to avoid address conflicts
|
|
Address = {{ wireguard.address }}
|
|
ListenPort = {{ wireguard.port }}
|
|
PostUp = iptables -w -t nat -A POSTROUTING -o {{ ansible_default_ipv4.interface }} -j MASQUERADE; ip6tables -w -t nat -A POSTROUTING -o {{ ansible_default_ipv4.interface }} -j MASQUERADE
|
|
PostDown = iptables -w -t nat -D POSTROUTING -o {{ ansible_default_ipv4.interface }} -j MASQUERADE; ip6tables -w -t nat -D POSTROUTING -o {{ ansible_default_ipv4.interface }} -j MASQUERADE
|
|
PrivateKey = {{ private_key.stdout }}
|
|
|
|
{% for peer in wireguard.peers %}
|
|
[Peer]
|
|
PublicKey = {{ peer.public_key }}
|
|
AllowedIps = {{ peer.allowed_ips }}
|
|
{% endfor %} |