Renew to wireguard

defaults/main.yml

@@ -4,26 +4,28 @@ cloud_storage: /opt/storage
 cloud_stage: prod
 cloud_update: false
 
-sysctl_configs:
-  - net.ipv4.ip_forward=1
+vpn_internal_dns: 1.1.1.1
 
-vpn_host: "vpn.{{ domain_external | default('my-domain.tld') }}"
-vpn_protocol: "udp"
-vpn_server: "cloud-openvpn"
-vpn_cidr: 10.10.10.0
-vpn_mask: 255.255.255.0
-vpn_port: 1194
-vpn_log: /var/log/openvpn/openvpn.log
-vpn_dns:
-  - 208.67.222.222
-  - 208.67.220.220
+vpn_allow_adjacent_client_traffic: True
+vpn_keepalive: 25
 
-vpn_clients:
-  - name: username
-    state: present
+vpn_gateway_clientfolder: /etc/wireguard/clients
+vpn_gateway_interface: eth0
+vpn_gateway_host: my-wireguard-server.tld
+vpn_gateway_port: 51820
+vpn_gateway_net_prefix: 10.10.123
+vpn_gateway_net_cidr: 28
+vpn_gateway_public_key: your-public-key
+vpn_gateway_private_key: your-privat-key
 
-easy_rsa_home: "/usr/share/easy-rsa"
+vpn_gateway_forward: []
+#  - server_port: 22
+#    client_port: "{{ ssh_port }}"
+#    client_index: 0
 
-easy_rsa_clients:
-  - name: easyrsa_username
-    state: present
+
+vpn_clients: []
+#  - name:
+#    index: 1
+#    private_key:
+#    public_key: