MEschenbacher's Wireguard Saltstack Formula

Nate Bohman 70c5f41ce9 Automatically Generate Private Key Allow Wireguard to automatically generate a private key if an interface doesn't have one and private_key is set to auto. This allows for auto key generation and distribution if using salt mines.		il y a 6 ans
_modules	modules: set: really remove persistent keepalive	il y a 6 ans
_states	Automatically Generate Private Key	il y a 6 ans
wireguard	preshared_key is a per-peer option	il y a 6 ans
README.md	update README	il y a 6 ans
pillar.example	preshared_key is a per-peer option	il y a 6 ans

README.md

wireguard-formula

This formula is supposed to install WireGuard (usually dkms and utils), and create interfaces including peers. Configuration is done via pillar (see below).

Attention: WireGuard is not yet included in the linux mainline kernel. Also, the installation is different on every distribution and sometimes you even have to include unstable/testing branches. For now, please install WireGuard yourself. You can use this formula afterwards.

Installation

See the full Salt Formulas installation and usage instructions.

Configuration

All configuration is done via pillar data. See pillar.example for examples. This means in particular, that you do not have to use any of the following states youself.

Available states

`wg.present`

Creates a wireguard interface and sets interface-wide parameters.

`wg.peer_present`

Adds a peer to an interface and sets peer-specific parameters.

`wg.absent`

Removes a wireguard interface.

`wg.peer_absent`

Removes a peer from an interface.