CCCHH/ansible-infra
CCCHH/ansible-infra
3
2
Fork 1
Code Issues 18 Pull requests 9 Wiki Activity Actions
ansible-infra/docs/guides/wiregueard-admin-vpn.md
Stefan Bethke 9266123f42
Some checks failed
/ build (push) Successful in 28s
Details
/ Ansible Lint (push) Failing after 2m17s
Details
Explain that you can use a default route 
#133
2026-08-02 18:12:02 +02:00

1.4 KiB
Raw Blame History

title summary
Wiregard Admin VPN How to configure your Wireguard client to access the Z9 network

Onboarding

tbd. where to add your key

Local Client Configuration

Example Config

[Interface]
PrivateKey = YOUR_PRIVATE_KEY
Address = 172.31.202.YOUR_IP/32

[Peer]
PublicKey = fmlxjh3iOfpgrHQQpK3dyOD0BvDppGCUkFuMSroqQR4=
AllowedIPs = 10.89.208.0/20, 2a07:c481:1::/48, 212.12.48.126/32, 2a00:14b0:42:100::/56, 2a00:14b0:4200:3000::/64
Endpoint = rt-wan.ccchh.net:51820

AllowedIDs

The following prefixes should be tunneled to gain access to both CCCHH Z9 resources as well as Chaosknoten. It is also possible to run a default route through wireguard, but please do not abuse this as a general VPN for purposes other than admin tasks.

Prefix Description
10.89.208.0/20 prefix for CCCHH Z9 local networks
2a07:c481:1::/48 prefix for CCCHH Z9 local networks
212.12.48.126/32 public IP of chaosknoten
2a00:14b0:4200:3000::126:1/128 public IP of chaosknoten
2a00:14b0:42💯:/56/128 new IPv6 for VMs on chaosknoten
2a00:14b0:4200:3000::/64 old IPv6 for VMs on chaosknoten