From 231ba1d536d863478e0b390bdb25b4516179768d Mon Sep 17 00:00:00 2001 From: Joe Banks Date: Tue, 11 Jan 2022 14:34:33 +0000 Subject: Inject extra public keys for DevOps members --- roles/wireguard/defaults/main/vars.yml | 4 ++++ roles/wireguard/templates/wg0.conf.j2 | 8 ++++++++ 2 files changed, 12 insertions(+) create mode 100644 roles/wireguard/defaults/main/vars.yml diff --git a/roles/wireguard/defaults/main/vars.yml b/roles/wireguard/defaults/main/vars.yml new file mode 100644 index 0000000..10c80ae --- /dev/null +++ b/roles/wireguard/defaults/main/vars.yml @@ -0,0 +1,4 @@ +extra_keys: + - name: Joe + pubkey: /dJ+tKXzxv7nrUleNlF+CGyq7OIVlqL8/9Sn8j+cEAc= + subnet: 10.0.1.0/24 diff --git a/roles/wireguard/templates/wg0.conf.j2 b/roles/wireguard/templates/wg0.conf.j2 index b42b1fc..96f23c3 100644 --- a/roles/wireguard/templates/wg0.conf.j2 +++ b/roles/wireguard/templates/wg0.conf.j2 @@ -13,3 +13,11 @@ Endpoint = {{ host }}.box.pydis.wtf:46850 PersistentKeepalive = 30 {% endfor %} + +{% for key in extra_keys %} +# DevOps config for: {{ key.name }} +[Peer] +AllowedIPs = {{ key.subnet }} +PublicKey = {{ key.pubkey }} + +{% endfor %} -- cgit v1.2.3