Ansible Role: Wireguard

An Ansible Role that installs and configures Wireguard on Linux.

12/9/21: Version 0.9.1 temporarily removes support for CentOS and Fedora.

Requirements

N/A

Role Variables

Available variables are listed below, along with default values (see defaults/main.yml):

# Public ethernet adapter
public_ethernet_interface: eth0

# Port that must be accessible via public
wireguard_port: 51820

Private and public keys used to define initial server and client configurations.

server_private_key_encoded:  set to generated wireguard server private key, base64 encoded.
client_public_key_encoded:   set to generated wireguard client public key, base64 encoded.
server_private_key_decoded:  base64 decoded version of above key, used in wg0.conf.j2
client_public_key_decoded:   base64 decoded version of above key, used in wg0.conf.j2

Dependencies

None.

Example Playbook

- hosts: myserver
    roles:
      - { role: acavella.wireguard }

License

GNU General Public License v3.0

Author Information

This role was created in 2021 by Tony Cavella