e4e8c0998f
* add jinja2 extension 'jinja2.ext.do' to ansible.cfg * add host kichererbse.freifunk-mwu.de * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services' * use new loopback and anycast networks * add role wireguard * add role wireguard as dependency for roles network-routing + service-bird * add playbook 'mesh-services'
20 lines
623 B
Django/Jinja
20 lines
623 B
Django/Jinja
#
|
|
# {{ ansible_managed }}
|
|
#
|
|
{% for network in my_wireguard_networks %}
|
|
auto wg-{{ network.remote[:11] }}
|
|
iface wg-{{ network.remote[:11] }}
|
|
{% if magic < network.remote_magic %}
|
|
address {{ network.ipv4 | ipaddr('ip/prefix') }}
|
|
address {{ network.ipv6 | ipaddr('ip/prefix') }}
|
|
{% else %}
|
|
address {{ network.ipv4 | ipaddr('1') | ipaddr('ip/prefix') }}
|
|
address {{ network.ipv6 | ipaddr('1') | ipaddr('ip/prefix') }}
|
|
{% endif %}
|
|
pre-up ip link add dev $IFACE type wireguard
|
|
pre-up wg setconf $IFACE /etc/wireguard/$IFACE.conf
|
|
post-up ip link set up dev $IFACE
|
|
post-down ip link del $IFACE
|
|
|
|
{% endfor %}
|