ansible cleanup

ansible/inventory/group_vars/all/wireguard.yaml

@@ -0,0 +1,38 @@
+---
+# WireGuard VPN configuration
+# Centralized configuration for all WireGuard settings
+
+# WireGuard network interface and port
+wireguard_port: 60101
+wireguard_interface: "wg0"
+
+# WireGuard server configuration (asxpio-ops)
+wireguard_ipv4: 10.20.0.10
+wireguard_ipv6: fd69:69:69::1
+wireguard_ipv4_network: 10.20.0.0/24
+wireguard_ipv6_network: fd69:69:69::/64
+
+# Enable UFW firewall rules (set to false to use iptables PostUp/PostDown)
+wireguard_enable_ufw: false
+
+# WireGuard clients
+wireguard_clients:
+  - name: asxpio-services
+    ipv4: 10.20.0.20
+    ipv6: fd69:69:69::20
+    preshared_key: true
+    persistent_keepalive: 25
+  - name: laptop
+    ipv4: 10.20.0.2
+    ipv6: fd69:69:69::2
+    preshared_key: true
+    persistent_keepalive: 25
+
+# DNS servers for VPN clients
+wireguard_dns_servers:
+  - 1.1.1.1
+  - 1.0.0.1
+
+# Optional: Additional routes for split tunneling
+# wireguard_additional_routes:
+#   - 192.168.1.0/24