38 lines
923 B
YAML
38 lines
923 B
YAML
---
|
|
# WireGuard VPN configuration
|
|
# Centralized configuration for all WireGuard settings
|
|
|
|
# WireGuard network interface and port
|
|
wireguard_port: 60101
|
|
wireguard_interface: "wg0"
|
|
|
|
# WireGuard server configuration (asxpio-ops)
|
|
wireguard_ipv4: 10.20.0.10
|
|
wireguard_ipv6: fd69:69:69::1
|
|
wireguard_ipv4_network: 10.20.0.0/24
|
|
wireguard_ipv6_network: fd69:69:69::/64
|
|
|
|
# Enable UFW firewall rules (set to false to use iptables PostUp/PostDown)
|
|
wireguard_enable_ufw: false
|
|
|
|
# WireGuard clients
|
|
wireguard_clients:
|
|
- name: asxpio-services
|
|
ipv4: 10.20.0.20
|
|
ipv6: fd69:69:69::20
|
|
preshared_key: true
|
|
persistent_keepalive: 25
|
|
- name: laptop
|
|
ipv4: 10.20.0.2
|
|
ipv6: fd69:69:69::2
|
|
preshared_key: true
|
|
persistent_keepalive: 25
|
|
|
|
# DNS servers for VPN clients
|
|
wireguard_dns_servers:
|
|
- 1.1.1.1
|
|
- 1.0.0.1
|
|
|
|
# Optional: Additional routes for split tunneling
|
|
# wireguard_additional_routes:
|
|
# - 192.168.1.0/24
|