akadmin/Funk-lab
1
0
Fork 0
mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-13 10:34:42 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(wireguard): accès distant au lab via VPN (Freebox 51820/udp → s01) (#80)

Browse source 
- rôle wireguard : serveur wg0 (10.99.0.0/24) sur storage-01, profils
  clients générés dans /etc/wireguard/clients/ (fichier .conf / QR code)
- gateway : filtrage nftables par pair — full (tout le lab) / portal
  (uniquement Traefik :80 = portail Guacamole), masquerade VPN→cluster
- dnsmasq : bind-dynamic + écoute wg0 → *.lab.local résolu dans le tunnel
- pairs initiaux : alkatrazz (full), invite-01 (portal)
- vault : clés WireGuard + reprise de l'archive Authentik (remplace #78)
- doc : admin/infra/wireguard.md (onboarding pair, pièges, exploitation)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
ALI YESILKAYA 2026-07-07 11:11:43 +02:00 • committed by GitHub
parent fbec998c21
commit bc0e1dd53e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
13 changed files with 388 additions and 123 deletions
Download patch file Download diff file Expand all files Collapse all files

1
ansible/playbooks/storage-01.yml
View file

@ -19,3 +19,4 @@
- { role: hermes_auto_improve, tags: [hermes_auto_improve] }
- { role: hermes_exec, tags: [hermes_exec] }
- { role: console_user, tags: [console_user] }
- { role: wireguard, tags: [wireguard] }