wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-06-05 22:54:01 +02:00
Code Issues Projects Releases Wiki Activity

WireGuard: disable SaveConfig, update-users fix (#985)

Browse source 
- Disables SaveConfig. SaveConfig totally breaks the idea of configuration management and it breaks update-users
- WireGuard update-users fix. Mentioned in https://github.com/trailofbits/algo/issues/980#issuecomment-393720561
This commit is contained in:
Jack Ivanov 2018-06-01 17:06:03 +03:00 • committed by Dan Guido
parent d7bce68738
commit ffb5a1f737
2 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/wireguard/templates/server.conf.j2
View file

@ -4,7 +4,7 @@ Address = {{ wireguard_network_ipv4['subnet'] }}/{{ wireguard_network_ipv4['pref
ListenPort = {{ wireguard_port }}
PrivateKey = {{ lookup('file', wireguard_config_path + '/private/' + IP_subject_alt_name) }}
SaveConfig = true
SaveConfig = false
Table = off
{% for u in users %}

1
users.yml
View file

@ -55,6 +55,7 @@
roles:
- { role: ssh_tunneling, tags: always, when: ssh_tunneling_enabled is defined and ssh_tunneling_enabled == "y" }
- { role: wireguard, tags: [ 'vpn', 'wireguard' ], when: wireguard_enabled }
- { role: vpn }
post_tasks: