ansible-ffibk/roles/service-fastd-intragate/tasks/main.yml

---
- name: create fastd intragate directories
  file:
    path: "/etc/fastd/{{ item.0.id }}igvpn-{{ item.1.mtu }}"
    state: directory
    mode: 0755
  with_subelements:
    - "{{ meshes }}"
    - fastd.intragate.instances

- name: create fastd peer intragate directories
  file:
    path: "/etc/fastd/{{ item.0.id }}igvpn-{{ item.1.mtu }}/peers"
    state: directory
    mode: 0755
    owner: admin
    group: admin
  with_subelements:
    - "{{ meshes }}"
    - fastd.intragate.instances

- name: clone fastd peer intragate repos
  git:
    repo: "{{ item.1.peers.repo }}"
    dest: "/etc/fastd/{{ item.0.id }}igvpn-{{ item.1.mtu }}/peers"
    version: "{{ item.1.peers.version }}"
    update: no
  with_subelements:
    - "{{ meshes }}"
    - fastd.intragate.instances
  become: false

- name: template fastd mesh config
  template:
    src: fastd-intragate.conf.j2
    dest: "/etc/fastd/{{ item.0.id }}igvpn-{{ item.1.mtu }}/fastd.conf"
  notify: restart fastd intragate instances
  with_subelements:
    - "{{ meshes }}"
    - fastd.intragate.instances

- name: write fastd intragate secret
  template:
    src: fastd-secret.conf.j2
    dest: "/etc/fastd/{{ item.0.id }}igvpn-{{ item.1.mtu }}/secret.conf"
  notify: restart fastd intragate instances
  with_subelements:
    - "{{ meshes }}"
    - fastd.intragate.instances

- name: configure systemd unit fastd@
  systemd:
    name: "fastd@{{ item.0.id }}igvpn-{{ item.1.mtu }}"
    enabled: yes
    state: started
  with_subelements:
    - "{{ meshes }}"
    - fastd.intragate.instances
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables 2017-09-05 12:01:27 +02:00			`---`
			`- name: create fastd intragate directories`
			`file:`
Lowercase all network interface names 2017-11-06 21:24:56 +01:00			`path: "/etc/fastd/{{ item.0.id }}igvpn-{{ item.1.mtu }}"`
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables 2017-09-05 12:01:27 +02:00			`state: directory`
			`mode: 0755`
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes 2017-10-07 00:57:35 +02:00			`with_subelements:`
			`- "{{ meshes }}"`
			`- fastd.intragate.instances`
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables 2017-09-05 12:01:27 +02:00
Restructure service-fastd roles - migrate role git-fastd-peers - add role service-fastd - add repo clone for ffbin peers (currently hardcoded) - add role dependency to role service-fastd-mesh + service-fastd-intragate - add systemd handlers 2017-10-03 20:25:17 +02:00			`- name: create fastd peer intragate directories`
			`file:`
Lowercase all network interface names 2017-11-06 21:24:56 +01:00			`path: "/etc/fastd/{{ item.0.id }}igvpn-{{ item.1.mtu }}/peers"`
Restructure service-fastd roles - migrate role git-fastd-peers - add role service-fastd - add repo clone for ffbin peers (currently hardcoded) - add role dependency to role service-fastd-mesh + service-fastd-intragate - add systemd handlers 2017-10-03 20:25:17 +02:00			`state: directory`
			`mode: 0755`
			`owner: admin`
			`group: admin`
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes 2017-10-07 00:57:35 +02:00			`with_subelements:`
			`- "{{ meshes }}"`
			`- fastd.intragate.instances`
Restructure service-fastd roles - migrate role git-fastd-peers - add role service-fastd - add repo clone for ffbin peers (currently hardcoded) - add role dependency to role service-fastd-mesh + service-fastd-intragate - add systemd handlers 2017-10-03 20:25:17 +02:00
			`- name: clone fastd peer intragate repos`
			`git:`
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes 2017-10-07 00:57:35 +02:00			`repo: "{{ item.1.peers.repo }}"`
Lowercase all network interface names 2017-11-06 21:24:56 +01:00			`dest: "/etc/fastd/{{ item.0.id }}igvpn-{{ item.1.mtu }}/peers"`
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes 2017-10-07 00:57:35 +02:00			`version: "{{ item.1.peers.version }}"`
Restructure service-fastd roles - migrate role git-fastd-peers - add role service-fastd - add repo clone for ffbin peers (currently hardcoded) - add role dependency to role service-fastd-mesh + service-fastd-intragate - add systemd handlers 2017-10-03 20:25:17 +02:00			`update: no`
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes 2017-10-07 00:57:35 +02:00			`with_subelements:`
			`- "{{ meshes }}"`
			`- fastd.intragate.instances`
Restructure service-fastd roles - migrate role git-fastd-peers - add role service-fastd - add repo clone for ffbin peers (currently hardcoded) - add role dependency to role service-fastd-mesh + service-fastd-intragate - add systemd handlers 2017-10-03 20:25:17 +02:00			`become: false`

Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables 2017-09-05 12:01:27 +02:00			`- name: template fastd mesh config`
			`template:`
			`src: fastd-intragate.conf.j2`
Lowercase all network interface names 2017-11-06 21:24:56 +01:00			`dest: "/etc/fastd/{{ item.0.id }}igvpn-{{ item.1.mtu }}/fastd.conf"`
Restructure service-fastd roles - migrate role git-fastd-peers - add role service-fastd - add repo clone for ffbin peers (currently hardcoded) - add role dependency to role service-fastd-mesh + service-fastd-intragate - add systemd handlers 2017-10-03 20:25:17 +02:00			`notify: restart fastd intragate instances`
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes 2017-10-07 00:57:35 +02:00			`with_subelements:`
Fix some whitespaces 2017-10-26 22:29:15 +02:00			`- "{{ meshes }}"`
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes 2017-10-07 00:57:35 +02:00			`- fastd.intragate.instances`
Add a bunch of new roles - Update Readme - Update ansible.cfg - Add playbook to set up gateways - Add group variables 2017-09-05 12:01:27 +02:00
			`- name: write fastd intragate secret`
			`template:`
			`src: fastd-secret.conf.j2`
Lowercase all network interface names 2017-11-06 21:24:56 +01:00			`dest: "/etc/fastd/{{ item.0.id }}igvpn-{{ item.1.mtu }}/secret.conf"`
Restructure service-fastd roles - migrate role git-fastd-peers - add role service-fastd - add repo clone for ffbin peers (currently hardcoded) - add role dependency to role service-fastd-mesh + service-fastd-intragate - add systemd handlers 2017-10-03 20:25:17 +02:00			`notify: restart fastd intragate instances`
Restructure fastd configuration to define multiple instances easily - introduce mesh subdictionary `fastd` - change fastd instance naming - change fastd network interface naming (identical with fastd instance names) - change mac address prefixes 2017-10-07 00:57:35 +02:00			`with_subelements:`
			`- "{{ meshes }}"`
			`- fastd.intragate.instances`
Ensure systemd units are started 2017-10-26 22:35:55 +02:00
			`- name: configure systemd unit fastd@`
			`systemd:`
Lowercase all network interface names 2017-11-06 21:24:56 +01:00			`name: "fastd@{{ item.0.id }}igvpn-{{ item.1.mtu }}"`
Ensure systemd units are started 2017-10-26 22:35:55 +02:00			`enabled: yes`
			`state: started`
			`with_subelements:`
			`- "{{ meshes }}"`
			`- fastd.intragate.instances`