akadmin/Funk-lab
1
0
Fork 0
mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-15 20:54:43 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(wireguard): accès distant au lab via VPN (Freebox 51820/udp → s01) (#80)

Browse source 
- rôle wireguard : serveur wg0 (10.99.0.0/24) sur storage-01, profils
  clients générés dans /etc/wireguard/clients/ (fichier .conf / QR code)
- gateway : filtrage nftables par pair — full (tout le lab) / portal
  (uniquement Traefik :80 = portail Guacamole), masquerade VPN→cluster
- dnsmasq : bind-dynamic + écoute wg0 → *.lab.local résolu dans le tunnel
- pairs initiaux : alkatrazz (full), invite-01 (portal)
- vault : clés WireGuard + reprise de l'archive Authentik (remplace #78)
- doc : admin/infra/wireguard.md (onboarding pair, pièges, exploitation)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
ALI YESILKAYA 2026-07-07 11:11:43 +02:00 • committed by GitHub
parent fbec998c21
commit bc0e1dd53e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
13 changed files with 388 additions and 123 deletions
Download patch file Download diff file Expand all files Collapse all files

5
ansible/roles/wireguard/handlers/main.yml Normal file
View file

@ -0,0 +1,5 @@
---
- name: Restart wireguard
ansible.builtin.systemd:
name: "wg-quick@{{ wireguard_interface }}"
state: restarted