Include floating ip

defaults/main.yml

@@ -36,6 +36,12 @@ swap_block_size: 1024
 swap_block_count: 2097152
 # Default is 2GB of swapfile
 
+## NETWORKING
+floating_ips: []
+#  - ipv4: 10.11.12.13
+#    ipv6: 2001:0db8:85a3:08d3::1/64
+#  - ipv4: 192.168.0.2
+#    ipv6: 2001:0db8:bca2:98d6::1/64
 
 ## USER + GROUPS
 root_user_cred: MyVeryStrongPassword

handlers/main.yml

@@ -16,4 +16,10 @@
     name: wg-quick@{{ cloud_name }}
     state: restarted
     enabled: yes
-  when: wireguard_installed is defined and not wireguard_installed.changed
+  when: wireguard_installed is defined and not wireguard_installed.changed
+
+- name: restart networking service
+  service:
+    name: networking
+    state: restarted
+    enabled: yes

tasks/main.yml

@@ -28,6 +28,9 @@
   import_tasks: swap.yml
   when: swap_on
 
+- name: Setup networking
+  import_tasks: networking.yml
+
 - name: Setup basic cloud folders for apps and storage
   file:
     state: directory

tasks/networking.yml

@@ -0,0 +1,9 @@
+---
+- name: setup floating ips
+  template:
+    src: "./etc/networking/interfaces.d/60-floating-ip.cfg.j2"
+    dest: "/etc/networking/interfaces.d/60-floating-ip.cfg"
+    owner: root
+    group: root
+    mode: 0644
+  notify: restart networking service

tasks/wireguard.yml

@@ -1,5 +1,5 @@
 ---
-- name: install fail2ban service
+- name: install wireguard service
   apt:
     update_cache: yes
     state: "{% if cloud_update | bool %}latest{% else %}present{% endif %}"

templates/etc/networking/interfaces.d/60-floating-ip.cfg.j2

@@ -0,0 +1,14 @@
+{% for config in floating_ips %}
+{%if 'ipv4' in config % }
+auto eth0:{{ loop.index }}
+iface eth0:{{ loop.index }} inet static
+    address {{ config.ipv4 }}
+    netmask 32
+{% endif %}
+{%if 'ipv6' in config % }
+auto eth0:{{ loop.index }}
+iface eth0:{{ loop.index }} inet6 static
+    address {{ config.ipv6 }}
+    netmask 64
+{% endif %}
+{% endfor %}