Disable ip_forward
I don't need P2P comms for this, so disable this for extra security. I should add a proper firewall at some point...
This commit is contained in:
@ -44,13 +44,3 @@
|
|||||||
loop: "{{ wireguard.clients | dict2items }}"
|
loop: "{{ wireguard.clients | dict2items }}"
|
||||||
loop_control:
|
loop_control:
|
||||||
label: "{{ item.key }}"
|
label: "{{ item.key }}"
|
||||||
|
|
||||||
- name: Enable p2p communication
|
|
||||||
sysctl:
|
|
||||||
name: net.ipv4.ip_forward
|
|
||||||
value: "1"
|
|
||||||
sysctl_set: true
|
|
||||||
state: present
|
|
||||||
reload: true
|
|
||||||
sysctl_file: /etc/sysctl.d/99-sysctl.conf
|
|
||||||
become: true
|
|
||||||
|
Reference in New Issue
Block a user