59045bc400
With newer versions of ifupdown2 it is necessary to enable IPv4/6 forwarding explicitly on required interfaces.
27 lines
803 B
Django/Jinja
27 lines
803 B
Django/Jinja
#
|
|
# {{ ansible_managed }}
|
|
#
|
|
{% for network in my_wireguard_networks %}
|
|
auto wg-{{ network.remote[:11] }}
|
|
iface wg-{{ network.remote[:11] }}
|
|
mtu 1420
|
|
{% if server_type == 'gateway' %}
|
|
ip-forward on
|
|
ip6-forward on
|
|
{% endif %}
|
|
ipv6-addrgen off
|
|
{% if magic < network.remote_magic %}
|
|
address {{ network.ipv4 | ipaddr('ip/prefix') }}
|
|
address {{ network.ipv6 | ipaddr('ip/prefix') }}
|
|
{% else %}
|
|
address {{ network.ipv4 | ipaddr('1') | ipaddr('ip/prefix') }}
|
|
address {{ network.ipv6 | ipaddr('1') | ipaddr('ip/prefix') }}
|
|
{% endif %}
|
|
address {{ 'fe80::/64' | ipaddr(magic) | ipaddr('ip/prefix') }}
|
|
pre-up ip link add dev $IFACE type wireguard
|
|
pre-up wg setconf $IFACE /etc/wireguard/$IFACE.conf
|
|
post-up ip link set up dev $IFACE
|
|
post-down ip link del $IFACE
|
|
|
|
{% endfor %}
|