47 lines
1.1 KiB
YAML
47 lines
1.1 KiB
YAML
---
|
|
# WireGuard VPN Configuration for asxpio-ops
|
|
wireguard_port: 60101
|
|
wireguard_interface: wg0
|
|
wireguard_ipv4: 10.20.0.10
|
|
wireguard_ipv6: fd69:69:69::1
|
|
wireguard_ipv4_network: 10.20.0.0/24
|
|
wireguard_ipv6_network: fd69:69:69::/64
|
|
|
|
# Enable UFW firewall rules (set to false to use iptables PostUp/PostDown)
|
|
wireguard_enable_ufw: false
|
|
|
|
# WireGuard clients
|
|
wireguard_clients:
|
|
- name: asxpio-services
|
|
ipv4: 10.20.0.20
|
|
ipv6: fd69:69:69::20
|
|
preshared_key: true
|
|
persistent_keepalive: 25
|
|
- name: laptop
|
|
ipv4: 10.20.0.2
|
|
ipv6: fd69:69:69::2
|
|
preshared_key: true
|
|
persistent_keepalive: 25
|
|
- name: phone
|
|
ipv4: 10.20.0.3
|
|
ipv6: fd69:69:69::3
|
|
preshared_key: true
|
|
persistent_keepalive: 25
|
|
- name: pixel9
|
|
ipv4: 10.20.0.4
|
|
ipv6: fd69:69:69::4
|
|
preshared_key: true
|
|
persistent_keepalive: 25
|
|
|
|
# Optional: DNS servers for clients
|
|
wireguard_dns_servers:
|
|
- 1.1.1.1
|
|
- 1.0.0.1
|
|
|
|
# Optional: Additional routes for split tunneling
|
|
# wireguard_additional_routes:
|
|
# - 192.168.1.0/24
|
|
|
|
# SSH Hardening Configuration
|
|
# Allow public SSH access for Forgejo git operations
|
|
ssh_allow_public_git: true
|