akadmin/Funk-lab
1
0
Fork 0
mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-16 00:04:42 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(wireguard): accès distant au lab via VPN (Freebox 51820/udp → s01)

Browse source 
- rôle wireguard : serveur wg0 (10.99.0.0/24) sur storage-01, profils
  clients générés dans /etc/wireguard/clients/ (fichier .conf / QR code)
- gateway : filtrage nftables par pair — full (tout le lab) / portal
  (uniquement Traefik :80 = portail Guacamole), masquerade VPN→cluster
- dnsmasq : bind-dynamic + écoute wg0 → *.lab.local résolu dans le tunnel
- pairs initiaux : alkatrazz (full), invite-01 (portal)
- vault : clés WireGuard + reprise de l'archive Authentik (remplace #78)
- doc : admin/infra/wireguard.md (onboarding pair, pièges, exploitation)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
alkatrazz 2026-07-06 23:16:38 +02:00
parent 5ecaadd100
commit 78ab7ae311
13 changed files with 388 additions and 109 deletions
Download patch file Download diff file Expand all files Collapse all files

1
ansible/playbooks/storage-01.yml
View file

@ -19,3 +19,4 @@
- { role: hermes_auto_improve, tags: [hermes_auto_improve] }
- { role: hermes_exec, tags: [hermes_exec] }
- { role: console_user, tags: [console_user] }
- { role: wireguard, tags: [wireguard] }