|
|
|
|
|
|
|
|
wireguard: |
|
|
wireguard: |
|
|
wg0: |
|
|
wg0: |
|
|
# default False |
|
|
|
|
|
delete: False |
|
|
|
|
|
# default True |
|
|
|
|
|
enable: True |
|
|
|
|
|
|
|
|
# The two following keys are non-wireguard options. |
|
|
|
|
|
# Delete the config file. The interface will also be stopped and disables. |
|
|
|
|
|
# Defaults to False. |
|
|
|
|
|
#delete: False |
|
|
|
|
|
# Start and enable the service. Setting this to false causes the interface |
|
|
|
|
|
# to be stopped and disabled. Defaults to True. |
|
|
|
|
|
#enable: True |
|
|
|
|
|
|
|
|
# see wg(8) and wg-quick(8) for supported keys. We use all lowercase letters. |
|
|
|
|
|
|
|
|
# see wg(8) and wg-quick(8) for supported keys. We use all lowercase |
|
|
|
|
|
# letters. |
|
|
|
|
|
|
|
|
|
|
|
# address must be a list |
|
|
address: |
|
|
address: |
|
|
- fe80::1/64 |
|
|
- fe80::1/64 |
|
|
- 10.0.0.1/24 |
|
|
- 10.0.0.1/24 |
|
|
listenport: 51820 |
|
|
listenport: 51820 |
|
|
|
|
|
# very important to quote off. Jinja expands off without quotes to False |
|
|
|
|
|
# which will result in 'table' not being set in the config file, resulting |
|
|
|
|
|
# in defaulting to auto. |
|
|
|
|
|
table: 'off' |
|
|
peers: |
|
|
peers: |
|
|
- publickey: foobar |
|
|
- publickey: foobar |
|
|
|
|
|
# address must be a list |
|
|
allowedips: |
|
|
allowedips: |
|
|
- fe80::2 |
|
|
- fe80::2 |
|
|
- 10.0.0.2/32 |
|
|
- 10.0.0.2/32 |
|
|
|
|
|
|
|
|
- 10.0.0.3/32 |
|
|
- 10.0.0.3/32 |
|
|
presharedkey: secret2 |
|
|
presharedkey: secret2 |
|
|
|
|
|
|
|
|
# the config key can be used to pass a whole wireguard config in. Make sure |
|
|
|
|
|
# to have the correct indentation of 4 spaces more than the config key and |
|
|
|
|
|
# to start with config: | |
|
|
|
|
|
|
|
|
# the config key can be used to pass a whole wireguard config in. The config |
|
|
|
|
|
# key takes precendce. Every other wireguard option in will then be ignored. |
|
|
|
|
|
# Make sure to have the correct indentation of 4 spaces more than the config |
|
|
|
|
|
# key and to start with config: | |
|
|
config: | |
|
|
config: | |
|
|
[Interface] |
|
|
[Interface] |
|
|
Address = fe80::1/64 |
|
|
Address = fe80::1/64 |