This repository has been archived on 2020-08-22. You can view files and clone it, but cannot push or open issues or pull requests.
ansible/net.yml

26 lines
969 B
YAML

---
- hosts: net
vars:
file:
- { path: '/etc/tor', owner: 'root', group: 'root', mode: '600', state: directory }
- { path: '/etc/wireguard', owner: 'root', group: 'root', mode: '600', state: directory }
apt_packages:
- { package: "tor", state: present }
- { package: "wireguard-tools", state: present }
- { package: "wireguard", state: present }
systemd:
services:
- { name: "tor@default", enabled: true, action: restarted }
- { name: "wg-quick@wg0", enabled: true, action: restarted }
firewall:
- { port: "{{ services.wireguard.port }}", ipv: "v4", proto: "tcp" }
- { port: "{{ services.wireguard.port }}", ipv: "v6", proto: "tcp" }
roles:
- vault
- file
- apt
- wireguard
- tor
- systemd
- firewall