mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2024-11-22 04:31:13 +01:00
Removed docker-wireguard
This commit is contained in:
parent
df91d08578
commit
655b4e5c60
@ -1,7 +0,0 @@
|
||||
# Role Wireguard
|
||||
This role is not fully implemented yet. Instead use the role native-wireguard.
|
||||
## Preparation
|
||||
Execute
|
||||
``bash
|
||||
ansible-galaxy collection install community.general
|
||||
``
|
@ -1,2 +0,0 @@
|
||||
dependencies:
|
||||
- native-docker-reverse-proxy
|
@ -1,41 +0,0 @@
|
||||
---
|
||||
- name: configure {{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: recieve {{domain}} certificate
|
||||
command: certbot certonly --agree-tos --email {{administrator_email}} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{domain}}
|
||||
|
||||
- sysctl:
|
||||
name: net.ipv4.conf.all.src_valid_mark
|
||||
value: 1
|
||||
sysctl_set: yes
|
||||
|
||||
- name: "setup wireguard"
|
||||
docker_compose:
|
||||
project_name: wireguard
|
||||
definition:
|
||||
application:
|
||||
image: linuxserver/wireguard
|
||||
restart: always
|
||||
ports:
|
||||
- "127.0.0.1:{{http_port}}:80"
|
||||
cap_add:
|
||||
- NET_ADMIN
|
||||
- SYS_MODULE
|
||||
environment:
|
||||
- PUID=1000
|
||||
- PGID=1000
|
||||
- TZ=Europe/London
|
||||
- SERVERURL={{domain}}
|
||||
- SERVERPORT=51820 #optional
|
||||
- PEERS=1 #optional
|
||||
- PEERDNS=auto #optional
|
||||
- INTERNAL_SUBNET=10.13.13.0 #optional
|
||||
- ALLOWEDIPS=192.168.1.0/24,192.168.2.0/24 #optional
|
||||
volumes:
|
||||
- /path/to/appdata/config:/config
|
||||
- /lib/modules:/lib/modules
|
||||
ports:
|
||||
- 51820:51820/udp
|
||||
restart: unless-stopped
|
Loading…
Reference in New Issue
Block a user