mirror of
https://github.com/trailofbits/algo
synced 2024-11-18 09:25:38 +00:00
ffb5a1f737
- Disables SaveConfig. SaveConfig totally breaks the idea of configuration management and it breaks update-users - WireGuard update-users fix. Mentioned in https://github.com/trailofbits/algo/issues/980#issuecomment-393720561
18 lines
759 B
Django/Jinja
18 lines
759 B
Django/Jinja
[Interface]
|
|
Address = {{ wireguard_network_ipv4['subnet'] }}/{{ wireguard_network_ipv4['prefix'] }}{% if ipv6_support %},{{ wireguard_network_ipv6['gateway'] }}/{{ wireguard_network_ipv6['prefix'] }}
|
|
{% endif %}
|
|
|
|
ListenPort = {{ wireguard_port }}
|
|
PrivateKey = {{ lookup('file', wireguard_config_path + '/private/' + IP_subject_alt_name) }}
|
|
SaveConfig = false
|
|
Table = off
|
|
|
|
{% for u in users %}
|
|
|
|
[Peer]
|
|
# {{ u }}
|
|
PublicKey = {{ lookup('file', wireguard_config_path + '/public/' + u) }}
|
|
AllowedIPs = {{ wireguard_network_ipv4['clients_range'] }}.{{ wireguard_network_ipv4['clients_start'] + loop.index }}/32{% if ipv6_support %},{{ wireguard_network_ipv6['clients_range'] }}{{ wireguard_network_ipv6['clients_start'] + loop.index }}/128
|
|
{% endif %}
|
|
{% endfor %}
|