aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--ansible/roles/wireguard/tasks/main.yml19
1 files changed, 19 insertions, 0 deletions
diff --git a/ansible/roles/wireguard/tasks/main.yml b/ansible/roles/wireguard/tasks/main.yml
index a670687..a261556 100644
--- a/ansible/roles/wireguard/tasks/main.yml
+++ b/ansible/roles/wireguard/tasks/main.yml
@@ -5,6 +5,25 @@
tags:
- role::wireguard
+- name: Create firewalld zone for Wireguard on Rocky hosts
+ ansible.posix.firewalld:
+ zone: wireguard
+ state: present
+ permanent: true
+ when: ansible_distribution == "Rocky"
+ tags:
+ - role::wireguard
+
+- name: Add wg0 interface to wireguard firewalld zone
+ ansible.posix.firewalld:
+ zone: wireguard
+ interface: wg0
+ state: enabled
+ permanent: true
+ when: ansible_distribution == "Rocky"
+ tags:
+ - role::wireguard
+
- name: Generate WireGuard private key
shell: set -o pipefail && wg genkey > /etc/wireguard/key.priv
args: