diff --git a/roles/wireguard/templates/wireguard.j2 b/roles/wireguard/templates/wireguard.j2 index 519f802..b978d66 100644 --- a/roles/wireguard/templates/wireguard.j2 +++ b/roles/wireguard/templates/wireguard.j2 @@ -4,6 +4,7 @@ {% for network in my_wireguard_networks %} auto wg-{{ network.remote[:11] }} iface wg-{{ network.remote[:11] }} + mtu 1420 ipv6-addrgen off {% if magic < network.remote_magic %} address {{ network.ipv4 | ipaddr('ip/prefix') }} @@ -12,6 +13,7 @@ iface wg-{{ network.remote[:11] }} address {{ network.ipv4 | ipaddr('1') | ipaddr('ip/prefix') }} address {{ network.ipv6 | ipaddr('1') | ipaddr('ip/prefix') }} {% endif %} + address {{ 'fe80::/64' | ipaddr(magic) | ipaddr('ip/prefix') }} pre-up ip link add dev $IFACE type wireguard pre-up wg setconf $IFACE /etc/wireguard/$IFACE.conf post-up ip link set up dev $IFACE