PiFrame/ansible-role-wireguard
Archived
1
0
Fork 0
Code Pull requests Releases Activity

update README

Browse source
This commit is contained in:
githubixx 2018-09-27 23:27:32 +02:00
parent 2d46a74b4e
commit c1c3c26aab
1 changed files with 13 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
README.md
View file

@ -22,6 +22,10 @@ By default port `51820` (protocol UDP) should be accessable from the outside. Bu
Changelog Changelog
--------- ---------
**v1.0.2**
- update README
**v1.0.1** **v1.0.1**
- update README - update README
@ -62,10 +66,10 @@ wireguard_interface: "wg0"
The following variable is mandatory and needs to be configured for every host in `host_vars/`: The following variable is mandatory and needs to be configured for every host in `host_vars/`:
``` ```
wireguard_address: "10.3.0.101" wireguard_address: "10.3.0.101/24"
``` ```
If `wireguard_allowed_ips` is not set the the default value is the value from `wireguard_address` without the CIDR but instead with `/32` which is basically a host route (have a look `templates/wg.conf.j2`). Let's see this example and let's assume you don't set `wireguard_allowed_ips` explicitly: Of course all IP's should be in the same subnet like `/24` we see in the example above. If `wireguard_allowed_ips` is not set then the default value is the value from `wireguard_address` without the CIDR but instead with `/32` which is basically a host route (have a look `templates/wg.conf.j2`). Let's see this example and let's assume you don't set `wireguard_allowed_ips` explicitly:
``` ```
[Interface] [Interface]
@ -210,40 +214,40 @@ As you can see `wireguard_endpoint: ""` is a empty string here. That means the A
``` ```
[Interface] [Interface]
Address = 10.8.0.2 Address = 10.8.0.2/24
PrivateKey = .... PrivateKey = ....
ListenPort = 51820 ListenPort = 51820
[Peer] [Peer]
PrivateKey = .... PrivateKey = ....
AllowedIPs = 10.8.0.101/24 AllowedIPs = 10.8.0.101/32
Endpoint = controller01.p.domain.tld:51820 Endpoint = controller01.p.domain.tld:51820
[Peer] [Peer]
PrivateKey = .... PrivateKey = ....
AllowedIPs = 10.8.0.102/24 AllowedIPs = 10.8.0.102/32
Endpoint = controller02.p.domain.tld:51820 Endpoint = controller02.p.domain.tld:51820
[Peer] [Peer]
PrivateKey = .... PrivateKey = ....
AllowedIPs = 10.8.0.103/24 AllowedIPs = 10.8.0.103/32
Endpoint = controller03.p.domain.tld:51820 Endpoint = controller03.p.domain.tld:51820
[Peer] [Peer]
PrivateKey = .... PrivateKey = ....
AllowedIPs = 10.8.0.111/24 AllowedIPs = 10.8.0.111/32
PersistentKeepalive = 30 PersistentKeepalive = 30
Endpoint = worker01.p.domain.tld:51820 Endpoint = worker01.p.domain.tld:51820
[Peer] [Peer]
PrivateKey = .... PrivateKey = ....
AllowedIPs = 10.8.0.112/24 AllowedIPs = 10.8.0.112/32
PersistentKeepalive = 30 PersistentKeepalive = 30
Endpoint = worker02.p.domain.tld:51820 Endpoint = worker02.p.domain.tld:51820
[Peer] [Peer]
PrivateKey = .... PrivateKey = ....
AllowedIPs = 10.8.0.1/24 AllowedIPs = 10.8.0.1/32
PersistentKeepalive = 30 PersistentKeepalive = 30
Endpoint = server.at.home.p.domain.tld:51820 Endpoint = server.at.home.p.domain.tld:51820
``` ```