26 lines
1.0 KiB
Django/Jinja
26 lines
1.0 KiB
Django/Jinja
[Interface]
|
|
Address = {{ edge_vps_wireguard_address }}
|
|
ListenPort = {{ edge_vps_wireguard_port }}
|
|
PrivateKey = {{ vault_edge_vps.wireguard.private_key }}
|
|
|
|
PostUp = sysctl -w net.ipv4.ip_forward=1
|
|
PostUp = iptables -A FORWARD -i {{ edge_vps_wireguard_interface }} -j ACCEPT
|
|
PostUp = iptables -A FORWARD -o {{ edge_vps_wireguard_interface }} -j ACCEPT
|
|
{% for route in edge_vps_wireguard_routes | default([]) %}
|
|
PostUp = ip route add {{ route }} via {{ route.gateway }} dev {{ edge_vps_wireguard_interface }}
|
|
{% endfor %}
|
|
PostDown = iptables -D FORWARD -i {{ edge_vps_wireguard_interface }} -j ACCEPT
|
|
PostDown = iptables -D FORWARD -o {{ edge_vps_wireguard_interface }} -j ACCEPT
|
|
{% for route in edge_vps_wireguard_routes | default([]) %}
|
|
PostDown = ip route del {{ route }} via {{ route.gateway }} dev {{ edge_vps_wireguard_interface }}
|
|
{% endfor %}
|
|
|
|
{% for peer in vault_edge_vps.wireguard.peers %}
|
|
[Peer]
|
|
# {{ peer.name }}
|
|
PublicKey = {{ peer.public_key }}
|
|
PresharedKey = {{ peer.preshared_key }}
|
|
AllowedIPs = {{ peer.allowed_ips }}
|
|
|
|
{% endfor %}
|