Skip to content

Wire guard #401

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tisteagle-dreamhack merged 7 commits into from
Nov 18, 2024
Merged

Wire guard #401

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
e84f63e
New puppet module for wireguard
AlexanderMalmstrom Oct 29, 2024
c378061
Update wg0.conf.erb
AlexanderMalmstrom Oct 29, 2024
2031859
Update wg0.conf.erb
AlexanderMalmstrom Oct 29, 2024
c467a0b
Merge branch 'production' into WireGuard
AlexanderMalmstrom Nov 18, 2024
193f96c
lint fix
AlexanderMalmstrom Nov 18, 2024
b9c7214
lint fix
AlexanderMalmstrom Nov 18, 2024
46d84b4
Update init.pp
AlexanderMalmstrom Nov 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions modules/wireguard.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
# Copyright 2024 dhtech
#
# Use of this source code is governed by a BSD-style
# license that can be found in the LICENSE file


def generate(host, *args):
return {'wireguard': None}

# vim: ts=4: sts=4: sw=4: expandtab
48 changes: 48 additions & 0 deletions modules/wireguard/manifests/init.pp
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,48 @@
class wireguard {
# Execute 'apt-get update'
exec { 'apt-update': # exec resource named 'apt-update'
command => '/usr/bin/apt-get update' # command this resource will run
}

# Install wireguard package
package { 'wireguard':
ensure => installed,
require => Exec['apt-update'], # require 'apt-update' before installing
}

# Create wireguard interface
exec { 'create':
require => Package['wireguard'],
command => '/usr/bin/ip link add dev wg0 type wireguard',
unless => '/usr/bin/ip link show wg0'
}


# Set wireguard interface IP
exec { 'set wg interface IP':
require => Package['wireguard'],
command => '/usr/bin/ip address add dev wg0 77.80.200.129/25',
unless => '/usr/bin/ip addr show wg0 | grep 77.80.200.129/25'
}

# Specify all clients usable IPs 77.80.200.130 - 77.80.200.254
$clients = [
{ nick => 'felix', ip => '77.80.200.130', key => '5Dk2crqm8A51OQ1blVK701YMZj33U+GONpmLrr0LWkM=' },
{ nick => 'washington', ip => '77.80.200.131', key => 'Z8aCXv4ydIhUEtvH+NJv39mAMGiS8uF8oNgCoIByAFI=' },
]


# Build the wg0 config file will all clients from previous step
file { 'setConf':
ensure => file,
path => '/etc/wireguard/wg0.conf',
notify => Exec[syncConf],
content => template('wireguard/templates/wg0.conf.erb'),
}

# Sync changes towards the wg0 interface
exec { 'syncConf':
require => Package['wireguard'],
command => '/usr/bin/wg syncconf wg0 /etc/wireguard/wg0.conf',
}
}
13 changes: 13 additions & 0 deletions modules/wireguard/templates/wg0.conf.erb
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
[Interface]
#Just placeholder privkey will be pulled from vault
PrivateKey = UJywHJtV58X11nF6zmouBCmfKfKbH4iggugRA/Th/k8=
ListenPort = 51820


<% @clients.each do |client| -%>
#<%= client['nick'] %>
[Peer]
PublicKey = <%= client['key'] %>
AllowedIPs = <%= client['ip'] %>

<% end -%>