homelab/ansible/host_vars/merlin

51 lines
1.5 KiB
Plaintext
Raw Normal View History

2022-06-20 19:42:51 +00:00
---
2022-10-10 19:23:22 +00:00
ansible_host: 10.0.0.4
2024-01-30 19:54:08 +00:00
#ansible_host: 65.21.2.14
default_interface: "ens3"
2024-02-20 18:31:36 +00:00
nfs_iface: "wg0"
2022-06-20 19:42:51 +00:00
wireguard_address: "10.0.0.4/24"
2024-01-30 19:54:08 +00:00
wireguard_endpoint: "65.21.2.14"
wireguard_persistent_keepalive: "20"
wireguard_byhost_allowed_ips:
oscar: "0.0.0.0/0"
bleys: "0.0.0.0/0"
wireguard_allowed_ips: "10.0.0.4/32,10.0.0.3,10.0.0.5"
2022-06-20 19:42:51 +00:00
wireguard_postup:
- iptables -A FORWARD -o %i -j ACCEPT
- iptables -A FORWARD -i %i -j ACCEPT
2024-01-30 19:54:08 +00:00
- iptables -t nat -A POSTROUTING -o {{ default_interface }} -j MASQUERADE
- sysctl -w net.ipv4.ip_forward=1
- resolvectl dns %i 192.168.1.4 192.168.1.41; resolvectl domain %i '~ducamps.win' '~ducamps.eu' '~{{ consul_domain }}'
2022-06-20 19:42:51 +00:00
wireguard_postdown:
- iptables -D FORWARD -i %i -j ACCEPT
- iptables -D FORWARD -o %i -j ACCEPT
2024-01-30 19:54:08 +00:00
- iptables -t nat -D POSTROUTING -o {{ default_interface }} -j MASQUERADE
- sysctl -w net.ipv4.ip_forward=0
2022-06-20 19:42:51 +00:00
wireguard_unmanaged_peers:
phone:
2024-01-30 19:54:08 +00:00
public_key: IYKgrQ2VJUbOnupSqedOfIilsbmBBABZUTRF9ZoTrkc=
2022-06-20 19:42:51 +00:00
allowed_ips: 10.0.0.3/32
persistent_keepalive: 0
zen:
public_key: rYYljQw8InmM95pxCP9KyZ8R+kcicgnjr6E9qtkI1Ag=
2022-06-20 20:11:56 +00:00
allowed_ips: 10.0.0.5/32
2022-06-20 19:42:51 +00:00
persistent_keepalive: 0
2024-01-30 19:54:08 +00:00
wireguard_dns: "192.168.1.4,192.168.1.41"
2022-06-20 19:42:51 +00:00
consul_client_addr: "127.0.0.1 10.0.0.4"
consul_bind_address: "10.0.0.4"
consul_ui: True
consul_iface: "wg0"
nomad_bind_addr: "10.0.0.4"
nomad_host_networks:
- name: "private"
interface: wg0
- name: "public"
2024-01-30 19:54:08 +00:00
interface: ens3
2022-06-20 19:42:51 +00:00
- name: "default"
interface: wg0
vault_listener_address: 10.0.0.4
2024-01-30 19:54:08 +00:00
nomad_plugins_podman: True