Michael Schiemer
edcf509a4f
- Add PHP ini management classes (Access, IniDirective, IniKey, PhpIni) - Update deployment configurations (Wireguard, Traefik, Monitoring) - Add DNS stack and Ansible role - Add deployment debugging playbooks - Update framework components (FilePath, RedisConnectionPool) - Update .gitignore and documentation
28 lines
749 B
Django/Jinja
28 lines
749 B
Django/Jinja
# WireGuard Client Configuration for {{ client_name }}
|
|
# Generated by Ansible - DO NOT EDIT MANUALLY
|
|
|
|
[Interface]
|
|
# Client private key
|
|
PrivateKey = {{ client_private_key.stdout }}
|
|
|
|
# Client IP address in VPN network
|
|
Address = {{ client_ip }}/24
|
|
|
|
# DNS server (VPN internal resolver)
|
|
DNS = {{ wireguard_dns_servers | join(', ') }}
|
|
|
|
[Peer]
|
|
# Server public key
|
|
PublicKey = {{ server_public_key_cmd.stdout }}
|
|
|
|
# Server endpoint
|
|
Endpoint = {{ server_external_ip_content }}:{{ wireguard_port }}
|
|
|
|
# Allowed IPs (routes through VPN)
|
|
# IMPORTANT: Only VPN network is routed through VPN by default
|
|
# SSH access via normal IP ({{ server_external_ip_content }}) remains available
|
|
AllowedIPs = {{ allowed_ips }}
|
|
|
|
# Keep connection alive
|
|
PersistentKeepalive = 25
|