CCCHH/ansible-infra
CCCHH/ansible-infra
2
2
Fork 1
Code Issues 7 Pull requests 9 Wiki Activity Actions

z9-router(host): fix some spelling and a wireguard peer address

Browse source
This commit is contained in:
bitwhisker 2026-05-25 19:50:01 +02:00
commit 0fef65b2c2
Signed by: bitwhisker
SSH key fingerprint: SHA256:KybIk/tusSKao6eLGY+ILlFa1rCrzwx66/acBAcKUqE
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
resources/z9/z9-router/nftables/nftables.conf
View file

@ -108,7 +108,7 @@ table inet forward {
meta nfproto ipv4 oifname $v4_exposed_ifs accept comment "allow v4 exposed network access" meta nfproto ipv4 oifname $v4_exposed_ifs accept comment "allow v4 exposed network access"
meta nfproto ipv6 oifname $v6_exposed_ifs accept comment "allow v6 exposed network access" meta nfproto ipv6 oifname $v6_exposed_ifs accept comment "allow v6 exposed network access"
# Allow clients and managment to most # Allow clients and management to most
iifname { $if_netlan_51_clients, $if_netlan_54_management, $if_wg55_management } oifname $lan_ifs accept comment "allow clients and managment to lan_ifs" iifname { $if_netlan_51_clients, $if_netlan_54_management, $if_wg55_management } oifname $lan_ifs accept comment "Allow clients and management to lan interfaces"
} }
} }

4
resources/z9/z9-router/systemd_networkd/10-wg55.netdev
View file

@ -5,7 +5,7 @@ Name=wg55
[WireGuard] [WireGuard]
ListenPort=51820 ListenPort=51820
PrivateKeyFile=/etc/ansible_secrets/wireguard_wg55_privat_key PrivateKeyFile=/etc/ansible_secrets/wireguard_wg55_private_key
# WireGuard Peers # WireGuard Peers
@ -75,7 +75,7 @@ PresharedKeyFile = /etc/ansible_secrets/wireguard_wg55_peer_langoor_home_psk
[WireGuardPeer] [WireGuardPeer]
# friendly_name = lilly-lillysLaptop # friendly_name = lilly-lillysLaptop
AllowedIPs = 10.89.214.16/32 #,2a07:c481:1:37::/128 AllowedIPs = 10.89.214.16/32,2a07:c481:1:37::16/128
PublicKey = IBsI+N8qUNpQnDc5HnqQ2Zo/1graFM0RMIecHmAF+Vk= PublicKey = IBsI+N8qUNpQnDc5HnqQ2Zo/1graFM0RMIecHmAF+Vk=
[WireGuardPeer] [WireGuardPeer]