diff options
| author |  Joe Banks <[email protected]> | 2022-01-11 14:34:33 +0000 |
|---|---|---|
| committer | Joe Banks <[email protected]> | 2022-01-11 14:37:27 +0000 |
| commit | 231ba1d536d863478e0b390bdb25b4516179768d (patch) | |
| tree | 78443cb118831653dd17ee84b1e85b90e6566923 | |
| parent | Add handler for reloading WireGuard when config is modified (diff) | |
Inject extra public keys for DevOps members
| -rw-r--r-- | roles/wireguard/defaults/main/vars.yml | 4 | ||||
| -rw-r--r-- | roles/wireguard/templates/wg0.conf.j2 | 8 |
2 files changed, 12 insertions, 0 deletions
diff --git a/roles/wireguard/defaults/main/vars.yml b/roles/wireguard/defaults/main/vars.yml new file mode 100644 index 0000000..10c80ae --- /dev/null +++ b/roles/wireguard/defaults/main/vars.yml @@ -0,0 +1,4 @@ +extra_keys: + - name: Joe + pubkey: /dJ+tKXzxv7nrUleNlF+CGyq7OIVlqL8/9Sn8j+cEAc= + subnet: 10.0.1.0/24 diff --git a/roles/wireguard/templates/wg0.conf.j2 b/roles/wireguard/templates/wg0.conf.j2 index b42b1fc..96f23c3 100644 --- a/roles/wireguard/templates/wg0.conf.j2 +++ b/roles/wireguard/templates/wg0.conf.j2 @@ -13,3 +13,11 @@ Endpoint = {{ host }}.box.pydis.wtf:46850 PersistentKeepalive = 30 {% endfor %} + +{% for key in extra_keys %} +# DevOps config for: {{ key.name }} +[Peer] +AllowedIPs = {{ key.subnet }} +PublicKey = {{ key.pubkey }} + +{% endfor %} |