Add wireguard server config
This commit is contained in:
@ -40,7 +40,7 @@ defaults
|
||||
listen https
|
||||
bind *:443
|
||||
mode tcp
|
||||
server default {{ upstream }}:443 check send-proxy
|
||||
server default {{ wireguard.intersect_ip }}:443 check send-proxy
|
||||
|
||||
listen http
|
||||
bind *:80
|
||||
@ -48,15 +48,15 @@ listen http
|
||||
stats show-node
|
||||
stats uri /haproxy
|
||||
stats auth stats:{{ haproxy_stats_pass }}
|
||||
server default {{ upstream }}:80 check
|
||||
server default {{ wireguard.intersect_ip }}:80 check
|
||||
|
||||
|
||||
listen matrix
|
||||
bind *:8448
|
||||
mode tcp
|
||||
server default {{ upstream }}:8448 check
|
||||
server default {{ wireguard.intersect_ip }}:8448 check
|
||||
|
||||
listen gitea
|
||||
bind *:3022
|
||||
mode tcp
|
||||
server default {{ upstream }}:3022 check
|
||||
server default {{ wireguard.intersect_ip }}:3022 check
|
||||
|
9
ansible/roles/gateway/files/wireguard.conf
Normal file
9
ansible/roles/gateway/files/wireguard.conf
Normal file
@ -0,0 +1,9 @@
|
||||
[Interface]
|
||||
Address = {{ wireguard.server_ip }}
|
||||
PrivateKey = {{ wireguard.server_private_key }}
|
||||
ListenPort = {{ wireguard.server_port }}
|
||||
|
||||
[Peer]
|
||||
# intersect
|
||||
PublicKey = {{ wireguard.intersect_public_key }}
|
||||
AllowedIPs = {{ wireguard.intersect_ip }}/32
|
Reference in New Issue
Block a user