wireguard-mesh-network-role/README.md

49 lines
1.4 KiB
Markdown

# Ansible role for creating a Wireguard-based mesh network
An Ansible role to automate the creation of a Wireguard-based mesh network, allowing servers to communicate between each other using a private, secure VPN without the need for a central node.
The role uses the `wg-quick` control which is also exposed via a Systemd service, such that the interface can be brought up automatically on boot. After the mesh network is created, connectivity is verified with a ping task. If you are behind NAT or a stateful firewall, you might need to set `PersistentKeepalive`.
## Example Playbook
```
---
- name: Wireguard
hosts: all
any_errors_fatal: true
gather_facts: yes
become: true
roles:
- create-wireguard-mesh-network
```
## Example inventory
```
all:
hosts:
host1:
ansible_host: 172.0.0.1
wireguard_ip: 10.1.0.1
host2:
ansible_host: 172.0.0.2
wireguard_ip: 10.2.0.1
host3:
ansible_host: 172.0.0.3
wireguard_ip: 10.3.0.1
vars:
ansible_ssh_port: 22
ansible_ssh_common_args: "-o StrictHostKeyChecking=no"
ansible_ssh_user: root
ansible_become_method: su
wireguard_mask_bits: 24
wireguard_port: 51871
```
## Credits
This role is based on [Tyler-OBrien/wireguard-mesh-network-ansible](https://github.com/Tyler-OBrien/wireguard-mesh-network-ansible), which is based on [jawher/automation-wireguard](https://github.com/jawher/automation-wireguard).