From cfad76106ad85e170c08a196e7e365a78293aa7c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Isma=C3=ABl=20Bouya?= Date: Fri, 17 Aug 2018 12:51:55 +0200 Subject: Add wireguard to host_ldap --- modules/profile/manifests/wireguard.pp | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'modules/profile/manifests') diff --git a/modules/profile/manifests/wireguard.pp b/modules/profile/manifests/wireguard.pp index ad1b081..829f82d 100644 --- a/modules/profile/manifests/wireguard.pp +++ b/modules/profile/manifests/wireguard.pp @@ -14,11 +14,22 @@ class profile::wireguard ( $private_key = generate_password(32, $password_seed, "wireguard", "curve25519", true) + if file("/usr/bin/wg", "/dev/null") != "" { + $puppet_notifies_path = lookup("base_installation::puppet_notifies_path") + $public_key = generate("/usr/bin/bash", "-c", "echo $private_key | /usr/bin/wg pubkey") + concat::fragment { "host_ldap add wireguard": + target => "$puppet_notifies_path/host_ldap.info", + content => "puppetVar: wireguard_public=$public_key", + order => "00-80" + } + } + file { "/etc/wireguard/network.conf": ensure => "file", mode => "0600", content => template("profile/wireguard/network.conf.erb"), require => [Package["wireguard-tools"], Package["wireguard-dkms"]], + notify => Service["wg-quick@network"], } -> service { "wg-quick@network": -- cgit v1.2.3