Skip to content

Conversation

@chrisjsimpson
Copy link
Contributor

@chrisjsimpson chrisjsimpson commented Aug 30, 2023

#9

Example run:

 ansible-playbook --ask-vault-pass --ask-become-pass -i inventory.ini playbooks/deploy-vpn-client.yml 
BECOME password: 
Vault password: 

Where BECOME is local admin password (to place client wiregard config file), and Vault password is password to unlock vault.

see also (step 2)
https://ubuntu.com/server/docs/wireguard-vpn-peer2site-router

Server example config

[Interface]
PrivateKey = changeme
ListenPort = 51000
Address = 10.10.11.1/24
PostUp = iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
PostDown = iptables -t nat -D POSTROUTING -o ppp0 -j MASQUERADE


[Peer]
PublicKey = changeme
AllowedIPs = 10.10.11.2

gui method As a user:

https://www.xmodulo.com/wireguard-vpn-network-manager-gui.html#:~:text=NetworkManager%27s%20Connection%20Editor-,GUI,-Next%2C%20run%20nm

see also: https://askubuntu.com/questions/1457052/cant-add-wireguard-vpn-connection-to-ubuntu-network-manager#:~:text=s%20GUI%20as-,described,-here.

@chrisjsimpson chrisjsimpson merged commit be0be6d into main Aug 31, 2023
chrisjsimpson pushed a commit that referenced this pull request May 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants