Added role native-wireguard-behind-firewall

roles/native-wireguard/README.md

@@ -6,5 +6,5 @@ Manages wireguard natively on host. More information are available in the [Arch
 wg genkey | tee peer_A.key | wg pubkey > peer_A.pub
 ``
 
-# chown root:systemd-network /etc/systemd/network/99-*.netdev
-# chmod 0640 /etc/systemd/network/99-*.netdev
+chown root:systemd-network /etc/systemd/network/99-*.netdev
+chmod 0640 /etc/systemd/network/99-*.netdev

roles/native-wireguard/tasks/main.yml

@@ -8,3 +8,9 @@
     owner: root
     group: root
   notify: restart wireguard
+
+- name: enable ipv4-forwarding
+  shell: sysctl net.ipv4.ip_forward=1
+
+- name: enable ipv6-forwarding
+  shell: sysctl net.ipv6.conf.all.forwarding=1