README.md

@@ -1,6 +1,3 @@
-
-:no_entry: [DEPRECATED] Developing continues here: https://github.com/kevinveenbirkenbach/computer-playbook
-
 # Client Playbook
 [![License: AGPL v3](https://img.shields.io/badge/License-AGPL%20v3-blue.svg)](https://www.gnu.org/licenses/agpl-3.0)
 

playbook.yml

@@ -4,6 +4,7 @@
   roles:
     - system-pacman
     - collection-administrator-base
+    - application-caffeine
     - driver-non-free
 
 - name: application-wireguard

roles/application-caffeine/meta/main.yml

@@ -1,2 +1,3 @@
 dependencies:
 - system-aur-helper
+- system-gnome

roles/application-wireguard/README.md

@@ -10,6 +10,35 @@ Manages wireguard on a client.
   echo "PresharedKey: $(wg genpsk)"
 ```
 
+## Debug 
+
+### RTNETLINK answers: Permission denied
+When ```systemctl restart wg-quick@wg0.service``` returns __RTNETLINK answers: Permission denied__, modify _/etc/sysctl.conf_:
+
+```bash
+net.ipv6.conf.all.disable_ipv6 = 0
+net.ipv6.conf.default.disable_ipv6 = 0
+net.ipv6.conf.lo.disable_ipv6 = 0
+```
+
+Afterwards reload: 
+```bash
+sysctl -p
+systemctl restart wg-quick@wg0.service
+```
+
+
+### SSH
+
+When the SSH connection over wireguard is buggy try: 
+
+```bash
+ip li set mtu 1400 dev eth0
+ip li set mtu 1400 dev wlo1
+```
+
+This can be connected to the [MTU](https://www.imperva.com/learn/application-security/what-is-mtu-mss/)
+
 ## Other
 - https://golb.hplar.ch/2019/01/expose-server-vpn.html
 - https://wiki.archlinux.org/index.php/WireGuard
@@ -22,7 +51,3 @@ Manages wireguard on a client.
 - https://serverfault.com/questions/1086297/wireguard-connection-dies-on-ubuntu-peer
 - https://unix.stackexchange.com/questions/624987/ssh-fails-to-start-when-listenaddress-is-set-to-wireguard-vpn-ip
 - https://serverfault.com/questions/210408/cannot-ssh-debug1-expecting-ssh2-msg-kex-dh-gex-reply
-- https://www.thomas-krenn.com/de/wiki/Linux_ip_Kommando
-- https://wiki.archlinux.org/title/dhcpcd
-- https://wiki.ubuntuusers.de/NetworkManager/Dispatcher/
-- https://askubuntu.com/questions/1024916/how-can-i-launch-a-systemd-service-at-startup-before-another-systemd-service-sta

roles/application-wireguard/files/set-mtu.service

@@ -1,10 +0,0 @@
-[Unit]
-Description=set MTU 
-Before=wg-quick@wg0.service
-
-[Service]
-Type=oneshot
-ExecStart=set-mtu.sh
-
-[Install]
-RequiredBy=wg-quick@wg0.service

roles/application-wireguard/files/wireguard-ip.conf

@@ -1,8 +0,0 @@
-# This file is created by 
-# https://github.com/kevinveenbirkenbach/client-playbook/tree/main/roles/application-wireguard
-
-net.ipv6.conf.all.disable_ipv6      = 0
-net.ipv6.conf.default.disable_ipv6  = 0
-net.ipv6.conf.lo.disable_ipv6       = 0
-net.ipv6.conf.all.forwarding        = 1
-net.ipv4.ip_forward                 = 1

roles/application-wireguard/handlers/main.yml

@@ -1,16 +1,6 @@
-- name: "restart set-mtu.service"
-  systemd:
-    name: set-mtu.service
-    state: restarted
-    enabled: yes
-    daemon_reload: yes
-
 - name: "restart wireguard"
   systemd:
     name: wg-quick@wg0.service
     state: restarted
     enabled: yes
     daemon_reload: yes
-
-- name: "reload sysctl configuration"
-  shell: "sysctl -p"

roles/application-wireguard/tasks/main.yml

@@ -3,25 +3,11 @@
     name: wireguard-tools
     state: present
 
-- name: create set-mtu.service
+- name: enable ipv4-forwarding
-  copy: 
+  shell: sysctl net.ipv4.ip_forward=1
-    src:  set-mtu.service
-    dest: /etc/systemd/system/set-mtu.service
-  notify: restart set-mtu.service
 
-- name: create set-mtu.sh
+- name: enable ipv6-forwarding
-  template: 
+  shell: sysctl net.ipv6.conf.all.forwarding=1
-    src:  set-mtu.sh.j2
-    dest: /usr/local/bin/set-mtu.sh
-  notify: restart set-mtu.service
-
-- name: create wireguard-ip.conf
-  copy:
-    src: "wireguard-ip.conf"
-    dest: /etc/sysctl.d/wireguard-ip.conf
-    owner: root
-    group: root
-  notify: reload sysctl configuration
 
 - name: create /etc/wireguard/wg0.conf
   copy:

roles/application-wireguard/templates/set-mtu.sh.j2

@@ -1,4 +0,0 @@
-#!/bin/bash
-{% for internet_interface in internet_interfaces %}
-ip li set mtu 1400 dev {{internet_interface}}
-{% endfor %}

roles/system-gnome/meta/main.yml

@@ -1,3 +1,2 @@
 dependencies:
 - application-git
-- application-caffeine