Git initial commit

templates/etc/wireguard/private.key.j2

@@ -0,0 +1 @@
+{% if not wireguard_is_gateway %}{{ wireguard_clients[wireguard_client_host].private_key }}{% else %}{{ wireguard_gateway_private_key }}{% endif %}

templates/etc/wireguard/public.key.j2

@@ -0,0 +1 @@
+{% if not wireguard_is_gateway %}{{ wireguard_clients[wireguard_client_host].public_key }}{% else %}{{ wireguard_gateway_public_key }}{% endif %}

templates/etc/wireguard/wireguard-client.conf.j2

@@ -0,0 +1,11 @@
+[Interface]
+Address = {{ wireguard_gateway_net_prefix }}.{{ wireguard_clients[wireguard_client_host].index }}/32
+PrivateKey = {{ wireguard_clients[wireguard_client_host].private_key }}
+DNS = {{ cloud_internal_dns }}
+
+[Peer]
+PublicKey = {{ wireguard_gateway_public_key }}
+Endpoint = {{ wireguard_gateway_host }}:{{ wireguard_gateway_port }}
+AllowedIPs = {{ wireguard_gateway_net_prefix }}.1/{% if wireguard_allow_adjacent_client_traffic %}{{ wireguard_gateway_net_cidr }}{% else %}32{% endif %}
+
+PersistentKeepalive = {{ wireguard_keepalive }}

templates/etc/wireguard/wireguard-server.conf.j2

@@ -0,0 +1,25 @@
+[Interface]
+Address = {{ wireguard_gateway_net_prefix }}.1/{{ wireguard_gateway_net_cidr }}
+ListenPort = {{ wireguard_gateway_port }}
+PrivateKey = {{ wireguard_gateway_private_key }}
+
+{% if wireguard_gateway_forward is defined and wireguard_gateway_forward | length > 0 %}
+PreUp = sysctl -w net.ipv4.ip_forward=1
+PreUp = sysctl -w net.ipv6.conf.all.forwarding=1
+
+{% for config in wireguard_gateway_forward %}
+PreUp = iptables -t nat -A PREROUTING -i {{ wireguard_gateway_interface }} -p tcp --dport {{ config.server_port }} -j DNAT --to-destination {{ wireguard_gateway_net_prefix }}.{{ config.client_index }}:{{ config.client_port }}
+PostDown = iptables -t nat -D PREROUTING -i {{ wireguard_gateway_interface }} -p tcp --dport {{ config.server_port }} -j DNAT --to-destination {{ wireguard_gateway_net_prefix }}.{{ config.client_index }}:{{ config.client_port }}
+
+{% endfor %}
+PreUp = iptables -t nat -A POSTROUTING -o {{ cloud_name }} -j MASQUERADE
+PostDown = iptables -t nat -D POSTROUTING -o {{ cloud_name }} -j MASQUERADE
+{% endif %}
+
+{% for client in wireguard_clients %}
+## Wireguard {{ cloud_name }} - {{ client }} ##
+[Peer]
+PublicKey = {{ wireguard_clients[client].public_key }}
+AllowedIPs = {{ wireguard_gateway_net_prefix }}.{{ wireguard_clients[client].index }}/32
+
+{% endfor %}