ansible

ansible/inventory/host_vars/asxpio-ops.yaml

@@ -0,0 +1,47 @@
+---
+# WireGuard VPN Configuration for asxpio-ops
+wireguard_port: 60101
+wireguard_interface: wg0
+wireguard_ipv4: 10.20.0.10
+wireguard_ipv6: fd69:69:69::1
+wireguard_ipv4_network: 10.20.0.0/24
+wireguard_ipv6_network: fd69:69:69::/64
+
+# Enable UFW firewall rules (set to false to use iptables PostUp/PostDown)
+wireguard_enable_ufw: false
+
+# WireGuard clients
+wireguard_clients:
+  - name: asxpio-services
+    ipv4: 10.20.0.20
+    ipv6: fd69:69:69::20
+    preshared_key: true
+    persistent_keepalive: 25
+  - name: laptop
+    ipv4: 10.20.0.2
+    ipv6: fd69:69:69::2
+    preshared_key: true
+    persistent_keepalive: 25
+  - name: phone
+    ipv4: 10.20.0.3
+    ipv6: fd69:69:69::3
+    preshared_key: true
+    persistent_keepalive: 25
+  - name: pixel9
+    ipv4: 10.20.0.4
+    ipv6: fd69:69:69::4
+    preshared_key: true
+    persistent_keepalive: 25
+
+# Optional: DNS servers for clients
+wireguard_dns_servers:
+   - 1.1.1.1
+   - 1.0.0.1
+
+# Optional: Additional routes for split tunneling
+# wireguard_additional_routes:
+#   - 192.168.1.0/24
+
+# SSH Hardening Configuration
+# Allow public SSH access for Forgejo git operations
+ssh_allow_public_git: true