slawek
3c665c2b6c
- Introduced debian templates for cloud-router configuration parameters. - Added simple-ca.sh script for managing a minimal Certificate Authority (CA) for IKEv2 PKI. - Created sysctl configuration to enable IP forwarding and adjust rp_filter settings. - Implemented configure script to render configuration files using Jinja2 templates. - Added simple-ca script for generating CA and certificates. - Created Jinja2 templates for various configuration files including netplan, strongSwan, and WireGuard. - Implemented UFW rules setup for IPsec and WireGuard. - Added support for road-warrior and site-to-site VPN configurations.
29 lines
1.2 KiB
Smarty
29 lines
1.2 KiB
Smarty
#cloud-config
|
|
|
|
apt:
|
|
sources:
|
|
cloud-router:
|
|
source: "deb [signed-by=/etc/apt/keyrings/cloud-router.gpg] ${repo_url} ${ubuntu_codename} main"
|
|
key: |
|
|
${indent(8, trimspace(repo_gpg_key))}
|
|
|
|
debconf_selections: |
|
|
cloud-router cloud-router/local_addrs string ${local_addrs}
|
|
cloud-router cloud-router/local_fqdn string ${fqdn}
|
|
cloud-router cloud-router/local_id_mode select ${local_id_mode}
|
|
cloud-router cloud-router/local_cidrs string ${local_cidrs}
|
|
cloud-router cloud-router/remote_addrs string ${remote_addrs}
|
|
cloud-router cloud-router/remote_id string ${remote_id}
|
|
cloud-router cloud-router/psk password ${psk}
|
|
cloud-router cloud-router/remote_cidrs string ${remote_cidrs}
|
|
cloud-router cloud-router/router_int_gateway_ip string ${router_int_gateway_ip}
|
|
cloud-router cloud-router/p2s_address_pool string ${p2s_address_pool}
|
|
cloud-router cloud-router/wg_enabled boolean ${wg_enabled}
|
|
cloud-router cloud-router/wg_address string ${wg_address}
|
|
cloud-router cloud-router/wg_listen_port string ${wg_listen_port}
|
|
|
|
package_update: true
|
|
|
|
packages:
|
|
- cloud-router
|