Go to file
2023-02-08 01:56:44 +03:00
defaults add wireguard install flag 2022-07-13 22:06:29 +03:00
handlers use separate naming for combined vars 2022-07-15 18:14:47 +03:00
meta update meta desc 2022-07-13 18:26:40 +03:00
tasks use separate naming for combined vars 2022-07-15 18:14:47 +03:00
templates force login and password change 2022-07-14 22:40:50 +03:00
vars first commit 2022-07-13 14:51:25 +03:00
.gitignore fix wireguard-ui 2022-07-13 15:20:18 +03:00
README.md update readme 2023-02-08 01:56:44 +03:00

Deploy WireGuard with UI

WireGuard UI configuration example:

wireguard_ui_env: 
  WGUI_USERNAME: admin
  WGUI_PASSWORD: admin
  WGUI_MTU: 1420
  BIND_ADDRESS: 127.0.0.1:5001
  SESSION_SECRET: 74f8155b3c91437db6e6c29c28e23ecc
  WGUI_CONFIG_FILE_PATH: /etc/wireguard/wg0.conf

HAProxy configuration example with HAProxy role:

haproxy_ssl: yes
haproxy_self_signed_cert: yes
haproxy_config:
  frontend:
    well-known:
      bind: ':80'
      mode: http
      acl:
        - letsencrypt-acl path_beg /.well-known/acme-challenge/
      http-request:
        - redirect scheme https if !{ path_beg /.well-known/acme-challenge/ } !{ ssl_fc }
      use_backend:
        - letsencrypt-backend if letsencrypt-acl
    https:
      bind: ':443 ssl crt {{ haproxy_ssl_path }}'
      mode: http
      acl:
        - letsencrypt-acl path_beg /.well-known/acme-challenge/
      use_backend:
        - letsencrypt-backend if letsencrypt-acl
      default_backend: localhost_5001
  backend:
    letsencrypt-backend:
      mode: http
      server:
        - letsencrypt 127.0.0.1:8080
    localhost_5001:
      mode: http
      server:
        - localhost 127.0.0.1:5001