mirror of
https://github.com/ben-grande/qusal.git
synced 2024-12-25 23:49:39 -05:00
6ec0768f13
- Remove OpenVPN code comments; - Reorganize rules for easier reading; - Server can connect without having client attached; - Systemd service for easier monitoring of wg-quick; and - Firewall also restarts wg-quick and apply new endpoint rules.
44 lines
1.0 KiB
Plaintext
44 lines
1.0 KiB
Plaintext
{#
|
|
SPDX-FileCopyrightText: 2022 unman <unman@thirdeyesecurity.org>
|
|
SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-or-later
|
|
#}
|
|
|
|
{% if grains['nodename'] != 'dom0' -%}
|
|
|
|
include:
|
|
- utils.tools.common.update
|
|
- sys-net.install-proxy
|
|
|
|
"{{ slsdotpath }}-installed":
|
|
pkg.installed:
|
|
- require:
|
|
- sls: utils.tools.common.update
|
|
- install_recommends: False
|
|
- skip_suggestions: True
|
|
- pkgs:
|
|
- qubes-core-agent-networking
|
|
- ca-certificates
|
|
- iproute2
|
|
- resolvconf
|
|
- wireguard
|
|
- unzip
|
|
- curl
|
|
- man-db
|
|
|
|
"{{ slsdotpath }}-systemd-service":
|
|
file.managed:
|
|
- name: /usr/lib/systemd/system/wg-quick@wireguard.service.d/50_qusal.conf
|
|
- source: salt://{{ slsdotpath }}/files/server/systemd/wg-quick@wireguard.service.d/50_qusal.conf
|
|
- user: root
|
|
- group: root
|
|
- mode: '0644'
|
|
- makedirs: True
|
|
|
|
"{{ slsdotpath }}-enable-wg-quick@wireguard":
|
|
service.enabled:
|
|
- name: wg-quick@wireguard
|
|
|
|
{% endif -%}
|