olli/debian.ansible.wireguard.server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

„wireguard.yml“ ändern

Browse Source
This commit is contained in:
olli 2023-06-10 12:57:33 +02:00
parent 360815001e
commit 73d0621dca
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
wireguard.yml
View File

@ -150,8 +150,8 @@
- BIND_ADDRESS=192.168.41.1:5000 - BIND_ADDRESS=192.168.41.1:5000
- WGUI_ENDPOINT_ADDRESS=wireguard-tor.{{inventory_hostname}} - WGUI_ENDPOINT_ADDRESS=wireguard-tor.{{inventory_hostname}}
- WGUI_USERNAME=wgadmin - WGUI_USERNAME=wgadmin
- WGUI_MANAGE_START=true - WGUI_MANAGE_START=false
- WGUI_MANAGE_RESTART=true - WGUI_MANAGE_RESTART=false
- WGUI_DNS=2a02:2970:1002::18,46.182.19.48 - WGUI_DNS=2a02:2970:1002::18,46.182.19.48
- WGUI_MTU=1450 - WGUI_MTU=1450
- WGUI_CONFIG_FILE_PATH=/etc/wireguard/wg0.conf - WGUI_CONFIG_FILE_PATH=/etc/wireguard/wg0.conf
@ -162,8 +162,10 @@
- WGUI_SERVER_POST_DOWN_SCRIPT - WGUI_SERVER_POST_DOWN_SCRIPT
- WGUI_DEFAULT_CLIENT_USE_SERVER_DNS=true - WGUI_DEFAULT_CLIENT_USE_SERVER_DNS=true
- WGUI_DEFAULT_CLIENT_ENABLE_AFTER_CREATION=true - WGUI_DEFAULT_CLIENT_ENABLE_AFTER_CREATION=true
# route all but priate ipv4 networks (expect 192.168.44.0/24) through wireguard # route all incl. Internet traffic
- WGUI_DEFAULT_CLIENT_ALLOWED_IPS=::/0,0.0.0.0/5,8.0.0.0/7,11.0.0.0/8,12.0.0.0/6,16.0.0.0/4,32.0.0.0/3,64.0.0.0/2,128.0.0.0/3,160.0.0.0/5,168.0.0.0/8,169.0.0.0/9,169.128.0.0/10,169.192.0.0/11,169.224.0.0/12,169.240.0.0/13,169.248.0.0/14,169.252.0.0/15,169.255.0.0/16,170.0.0.0/7,172.0.0.0/12,172.32.0.0/11,172.64.0.0/10,172.128.0.0/9,173.0.0.0/8,174.0.0.0/7,176.0.0.0/4,192.0.0.0/9,192.128.0.0/11,192.160.0.0/13,192.168.44.0/24,192.169.0.0/16,192.170.0.0/15,192.172.0.0/14,192.176.0.0/12,192.192.0.0/10,193.0.0.0/8,194.0.0.0/7,196.0.0.0/6,200.0.0.0/5,208.0.0.0/4,224.0.0.0/3 - WGUI_DEFAULT_CLIENT_ALLOWED_IPS=::/0,0.0.0.0/0
# route all but priate ipv4 networks (expect 192.168.44.0/24) through wireguard - not working
#- WGUI_DEFAULT_CLIENT_ALLOWED_IPS=::/0,0.0.0.0/5,8.0.0.0/7,11.0.0.0/8,12.0.0.0/6,16.0.0.0/4,32.0.0.0/3,64.0.0.0/2,128.0.0.0/3,160.0.0.0/5,168.0.0.0/8,169.0.0.0/9,169.128.0.0/10,169.192.0.0/11,169.224.0.0/12,169.240.0.0/13,169.248.0.0/14,169.252.0.0/15,169.255.0.0/16,170.0.0.0/7,172.0.0.0/12,172.32.0.0/11,172.64.0.0/10,172.128.0.0/9,173.0.0.0/8,174.0.0.0/7,176.0.0.0/4,192.0.0.0/9,192.128.0.0/11,192.160.0.0/13,192.168.44.0/24,192.169.0.0/16,192.170.0.0/15,192.172.0.0/14,192.176.0.0/12,192.192.0.0/10,193.0.0.0/8,194.0.0.0/7,196.0.0.0/6,200.0.0.0/5,208.0.0.0/4,224.0.0.0/3
volumes: volumes:
- ./db:/app/db - ./db:/app/db
- /etc/wireguard:/etc/wireguard - /etc/wireguard:/etc/wireguard