Role service-fastd-mesh: move peer limit to a separate file which isn't managed by ansible

This commit is contained in:
Tobias Hachmer 2017-10-06 10:33:38 +02:00
parent 900eacafb2
commit a2fa5ff223
3 changed files with 22 additions and 1 deletions

View file

@ -0,0 +1 @@
peer limit 200;

View file

@ -60,6 +60,26 @@
notify: restart fastd mesh instances notify: restart fastd mesh instances
with_dict: "{{ meshes }}" with_dict: "{{ meshes }}"
- name: copy peer_limit.conf if not exist
copy:
src: peer_limit.conf
dest: "/etc/fastd/{{ item.key }}VPN/peer_limit.conf"
owner: admin
group: admin
mode: 0640
force: no
notify: restart fastd mesh instances
with_dict: "{{ meshes }}"
- name: set file attributes for peer_limit.conf
file:
path: "/etc/fastd/{{ item.key }}VPN/peer_limit.conf"
mode: 0640
owner: admin
group: admin
notify: restart fastd mesh instances
with_dict: "{{ meshes }}"
- name: write systemd unit fastd-sync-meshkeys.service - name: write systemd unit fastd-sync-meshkeys.service
template: template:
src: fastd-sync-meshkeys.service.j2 src: fastd-sync-meshkeys.service.j2

View file

@ -18,7 +18,7 @@ include "secret.conf";
mtu 1406; mtu 1406;
peer group "vpn_nodes" { peer group "vpn_nodes" {
peer limit 150; include "peer_limit.conf";
include peers from "peers"; include peers from "peers";
{% if item.key == "mz" %} {% if item.key == "mz" %}
include peers from "peers_bingen"; include peers from "peers_bingen";