37 lines
902 B
YAML
37 lines
902 B
YAML
- name: "Setup reverse-proxy tunnel"
|
|
hosts: berliet.medicenlutte.fr
|
|
vars_files:
|
|
- tunnel/vars.yml
|
|
tasks:
|
|
|
|
- name: Setup wireguard
|
|
ansible.builtin.apt:
|
|
name: wireguard
|
|
state: present
|
|
become: true
|
|
|
|
- name: Setup wireguard folder
|
|
ansible.builtin.file:
|
|
path: /etc/wireguard
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: u=rwx,g=-rwx,o=-rwx
|
|
become: true
|
|
|
|
- name: Setup wgkiwi wireguard
|
|
ansible.builtin.template:
|
|
src: tunnel/wgkiwi.conf
|
|
dest: /etc/wireguard/wgkiwi.conf
|
|
owner: root
|
|
group: root
|
|
mode: u=rwx,g=-rwx,o=-rwx
|
|
become: true
|
|
|
|
- name: Setup wireguard interface
|
|
ansible.builtin.copy:
|
|
src: tunnel/wgkiwi_berlier
|
|
dest: /etc/network/interfaces.d/wgkiwi.conf
|
|
owner: root
|
|
group: root
|
|
become: true |