From c1c3c26aab2393e3dbc0ad32752f11cf9b9fc4e5 Mon Sep 17 00:00:00 2001 From: githubixx Date: Thu, 27 Sep 2018 23:27:32 +0200 Subject: [PATCH] update README --- README.md | 22 +++++++++++++--------- 1 file changed, 13 insertions(+), 9 deletions(-) diff --git a/README.md b/README.md index 87a0f2b..12b26d4 100644 --- a/README.md +++ b/README.md @@ -22,6 +22,10 @@ By default port `51820` (protocol UDP) should be accessable from the outside. Bu Changelog --------- +**v1.0.2** + +- update README + **v1.0.1** - update README @@ -62,10 +66,10 @@ wireguard_interface: "wg0" The following variable is mandatory and needs to be configured for every host in `host_vars/`: ``` -wireguard_address: "10.3.0.101" +wireguard_address: "10.3.0.101/24" ``` -If `wireguard_allowed_ips` is not set the the default value is the value from `wireguard_address` without the CIDR but instead with `/32` which is basically a host route (have a look `templates/wg.conf.j2`). Let's see this example and let's assume you don't set `wireguard_allowed_ips` explicitly: +Of course all IP's should be in the same subnet like `/24` we see in the example above. If `wireguard_allowed_ips` is not set then the default value is the value from `wireguard_address` without the CIDR but instead with `/32` which is basically a host route (have a look `templates/wg.conf.j2`). Let's see this example and let's assume you don't set `wireguard_allowed_ips` explicitly: ``` [Interface] @@ -210,40 +214,40 @@ As you can see `wireguard_endpoint: ""` is a empty string here. That means the A ``` [Interface] -Address = 10.8.0.2 +Address = 10.8.0.2/24 PrivateKey = .... ListenPort = 51820 [Peer] PrivateKey = .... -AllowedIPs = 10.8.0.101/24 +AllowedIPs = 10.8.0.101/32 Endpoint = controller01.p.domain.tld:51820 [Peer] PrivateKey = .... -AllowedIPs = 10.8.0.102/24 +AllowedIPs = 10.8.0.102/32 Endpoint = controller02.p.domain.tld:51820 [Peer] PrivateKey = .... -AllowedIPs = 10.8.0.103/24 +AllowedIPs = 10.8.0.103/32 Endpoint = controller03.p.domain.tld:51820 [Peer] PrivateKey = .... -AllowedIPs = 10.8.0.111/24 +AllowedIPs = 10.8.0.111/32 PersistentKeepalive = 30 Endpoint = worker01.p.domain.tld:51820 [Peer] PrivateKey = .... -AllowedIPs = 10.8.0.112/24 +AllowedIPs = 10.8.0.112/32 PersistentKeepalive = 30 Endpoint = worker02.p.domain.tld:51820 [Peer] PrivateKey = .... -AllowedIPs = 10.8.0.1/24 +AllowedIPs = 10.8.0.1/32 PersistentKeepalive = 30 Endpoint = server.at.home.p.domain.tld:51820 ```