mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 11:02:47 +00:00
160d63c02d
* Add Atlas media and storage services * Document Atlas backend phase one and WireGuard deployment * Enable Atlas NAS management and document bootstrap workflow * Harden Atlas network, SSH, firewall, and sharing * Rotate Ansible Vault secrets * Allow configurable Aegis SSH users and authorized keys * Manage Aegis SSH authorized key fragments * Manage SSH authorized key fragments for infrastructure hosts * Harden Rocky storage and sharing configuration * Verify WireGuard handshakes and restore Podman networking
19 lines
645 B
YAML
19 lines
645 B
YAML
---
|
|
wireguard_overlay_enabled: false
|
|
wireguard_interface: wg0
|
|
wireguard_config_dir: /etc/wireguard
|
|
wireguard_private_key_path: "{{ wireguard_config_dir }}/{{ wireguard_interface }}.key"
|
|
wireguard_config_path: "{{ wireguard_config_dir }}/{{ wireguard_interface }}.conf"
|
|
wireguard_address: CHANGEME_WIREGUARD_ADDRESS
|
|
wireguard_listen_port: 0
|
|
wireguard_mtu: 1420
|
|
wireguard_firewalld_zone: wireguard
|
|
wireguard_public_firewalld_zone: public
|
|
wireguard_enable_ipv4_forwarding: false
|
|
wireguard_reload_rootful_podman_networks: false
|
|
wireguard_handshake_retries: 12
|
|
wireguard_handshake_delay: 5
|
|
wireguard_peers: []
|
|
wireguard_packages:
|
|
- wireguard-tools
|