qusal/salt/sys-wireguard/configure.sls
Ben Grande 6ec0768f13
fix: clean Wireguard rules
- Remove OpenVPN code comments;
- Reorganize rules for easier reading;
- Server can connect without having client attached;
- Systemd service for easier monitoring of wg-quick; and
- Firewall also restarts wg-quick and apply new endpoint rules.
2024-06-19 15:08:03 +02:00

30 lines
755 B
Plaintext

{#
SPDX-FileCopyrightText: 2022 unman <unman@thirdeyesecurity.org>
SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
SPDX-License-Identifier: AGPL-3.0-or-later
#}
include:
- dev.home-cleanup
"{{ slsdotpath }}-qubes-firewall":
file.recurse:
- name: /rw/config/qubes-firewall.d/
- source: salt://{{ slsdotpath }}/files/server/qubes-firewall.d/
- dir_mode: '0755'
- file_mode: '0755'
- user: root
- group: root
- makedirs: True
"{{ slsdotpath }}-network-hooks":
file.recurse:
- name: /rw/config/network-hooks.d/
- source: salt://{{ slsdotpath }}/files/server/network-hooks.d/
- file_mode: '0755'
- dir_mode: '0755'
- user: root
- group: root
- makedirs: True