Role service-yanic: use wireguard interfaces for respondd on servers
This commit is contained in:
parent
e17f378f0b
commit
3c010e2c5f
3 changed files with 20 additions and 4 deletions
|
@ -1,3 +1,4 @@
|
||||||
---
|
---
|
||||||
dependencies:
|
dependencies:
|
||||||
# - { role: golang }
|
- { role: golang }
|
||||||
|
- { role: wireguard }
|
||||||
|
|
|
@ -2,10 +2,17 @@ data_interval = "1m"
|
||||||
|
|
||||||
batman = [ {% for mesh in meshes %}"{{mesh.id}}bat"{% if not loop.last %}, {% endif %}{% endfor %} ]
|
batman = [ {% for mesh in meshes %}"{{mesh.id}}bat"{% if not loop.last %}, {% endif %}{% endfor %} ]
|
||||||
|
|
||||||
|
{% if server_type == 'monitoring' %}
|
||||||
[[listen]]
|
[[listen]]
|
||||||
address = "ff05::2:1001"
|
address = "ff02::2:1001"
|
||||||
interface = "dom0br"
|
interface = "loopback"
|
||||||
port = 1001
|
port = 1001
|
||||||
|
{% else %}
|
||||||
|
[[listen]]
|
||||||
|
address = "ff02::2:1001"
|
||||||
|
interface = "wg-suesskartof"
|
||||||
|
port = 1001
|
||||||
|
{% endif%}
|
||||||
{% for mesh in meshes %}
|
{% for mesh in meshes %}
|
||||||
{% if server_type == 'gateway' %}
|
{% if server_type == 'gateway' %}
|
||||||
{% for instance in mesh.fastd.nodes.instances %}
|
{% for instance in mesh.fastd.nodes.instances %}
|
||||||
|
|
|
@ -22,6 +22,14 @@ domains = [
|
||||||
{% endfor %}
|
{% endfor %}
|
||||||
]
|
]
|
||||||
|
|
||||||
|
[[respondd.interfaces]]
|
||||||
|
ifname = "loopback"
|
||||||
|
multicast_address = "ff02::2:1001"
|
||||||
|
{% for network in my_wireguard_networks %}
|
||||||
|
[[respondd.interfaces]]
|
||||||
|
ifname = "wg-{{ network.remote[:11] }}"
|
||||||
|
multicast_address = "ff02::2:1001"
|
||||||
|
{% endfor %}
|
||||||
{% for mesh in meshes %}
|
{% for mesh in meshes %}
|
||||||
[[respondd.interfaces]]
|
[[respondd.interfaces]]
|
||||||
ifname = "{{mesh.id}}br"
|
ifname = "{{mesh.id}}br"
|
||||||
|
|
Loading…
Reference in a new issue