55 lines
1.4 KiB
YAML
55 lines
1.4 KiB
YAML
---
|
|
# WireGuard VPN Configuration for asxpio-ops
|
|
wireguard_port: 60101
|
|
wireguard_interface: wg0
|
|
wireguard_ipv4: 10.20.0.10
|
|
wireguard_ipv6: fd69:69:69::1
|
|
wireguard_ipv4_network: 10.20.0.0/24
|
|
wireguard_ipv6_network: fd69:69:69::/64
|
|
|
|
# Enable UFW firewall rules (set to false to use iptables PostUp/PostDown)
|
|
wireguard_enable_ufw: false
|
|
|
|
# WireGuard clients
|
|
wireguard_clients:
|
|
- name: asxpio-services
|
|
ipv4: 10.20.0.20
|
|
ipv6: fd69:69:69::20
|
|
preshared_key: true
|
|
persistent_keepalive: 25
|
|
- name: laptop
|
|
ipv4: 10.20.0.2
|
|
ipv6: fd69:69:69::2
|
|
preshared_key: true
|
|
persistent_keepalive: 25
|
|
- name: phone
|
|
ipv4: 10.20.0.3
|
|
ipv6: fd69:69:69::3
|
|
preshared_key: true
|
|
persistent_keepalive: 25
|
|
- name: pixel9
|
|
ipv4: 10.20.0.4
|
|
ipv6: fd69:69:69::4
|
|
preshared_key: true
|
|
persistent_keepalive: 25
|
|
|
|
# Optional: DNS servers for clients
|
|
wireguard_dns_servers:
|
|
- 1.1.1.1
|
|
- 1.0.0.1
|
|
|
|
# Optional: Additional routes for split tunneling
|
|
# wireguard_additional_routes:
|
|
# - 192.168.1.0/24
|
|
|
|
# SSH Hardening Configuration
|
|
# Allow public SSH access for Forgejo git operations
|
|
ssh_allow_public_git: true
|
|
ssh_git_user: git
|
|
|
|
# Forgejo secrets (from old server)
|
|
forgejo_secret_key: "***REDACTED***"
|
|
forgejo_internal_token: "***REDACTED***"
|
|
forgejo_jwt_secret: "***REDACTED***"
|
|
forgejo_lfs_jwt_secret: "***REDACTED***"
|
|
letsencrypt_email: "me@asxp.io"
|