mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-12-09 10:56:01 +00:00
Kevin Veen-Birkenbach
91d5ba35d1
- Introduce global IS_CONTAINER flag based on ansible_virtualization facts - Skip systemd-based handlers and tasks when running inside containers - Extend EXCLUDED_ROLES list in GitHub Actions test-deploy workflow - Ensure docker.sock is mounted for all CI deploy stages - Improve sys-svc-docker by suppressing service restarts inside containers - Add meta: flush_handlers to properly trigger delayed docker restarts - Update sys-service handlers with container guards - Update sys-timer tasks to avoid systemctl inside CI containers - Enhance drv-non-free role with Manjaro detection and mhwd fallback warning - Skip swapfile generation in containers - Minor service template fixes and cleanup in proxy.conf.j2 Details and discussion: https://chatgpt.com/share/6930a4ca-56f4-800f-9b3d-4791f040a03b
34 lines
764 B
Markdown
34 lines
764 B
Markdown
# Administration
|
|
|
|
## Client
|
|
|
|
### Setup wireguard
|
|
```bash
|
|
pacman -S wireguard-tools
|
|
```
|
|
|
|
### Create Client Keys
|
|
```bash
|
|
wg_private_key="$(wg genkey)"
|
|
wg_public_key="$(echo "$wg_private_key" | wg pubkey)"
|
|
echo "PrivateKey: $wg_private_key"
|
|
echo "PublicKey: $wg_public_key"
|
|
echo "PresharedKey: $(wg genpsk)"
|
|
```
|
|
|
|
### Activate Configuration
|
|
```bash
|
|
cp /path/to/wg0.conf /etc/wireguard/wg0.conf
|
|
systemctl enable wg-quick@wg0.service --now
|
|
```
|
|
|
|
### Check status
|
|
```bash
|
|
systemctl status wg-quick@wg0.service
|
|
```
|
|
|
|
## Other Resources
|
|
- https://golb.hplar.ch/2019/01/expose-srv-vpn.html
|
|
- https://wiki.archlinux.org/index.php/WireGuard
|
|
- https://wireguard.how/server/raspbian/
|
|
- https://www.scaleuptech.com/de/blog/was-ist-und-wie-funktioniert-subnetting/ |