diff options
| author | Elizabeth Hunt <elizabeth.hunt@simponic.xyz> | 2024-01-02 19:05:01 -0500 |
|---|---|---|
| committer | Elizabeth Hunt <elizabeth.hunt@simponic.xyz> | 2024-01-02 19:29:46 -0500 |
| commit | b0a563db34c7ac86f36c3f293ea8610de1c8a35c (patch) | |
| tree | b82cc3741cdb34d871eb17e68b7f894fbc0cbe3c /roles/vpn/tasks/main.yml | |
| parent | c6a770bd1a6cab43ec4282043bf4f5d6e175c19c (diff) | |
| download | oldinfra-b0a563db34c7ac86f36c3f293ea8610de1c8a35c.tar.gz oldinfra-b0a563db34c7ac86f36c3f293ea8610de1c8a35c.zip | |
finish headscale setup
Diffstat (limited to 'roles/vpn/tasks/main.yml')
| -rw-r--r-- | roles/vpn/tasks/main.yml | 25 |
1 files changed, 16 insertions, 9 deletions
diff --git a/roles/vpn/tasks/main.yml b/roles/vpn/tasks/main.yml index 1715886..22ca2f8 100644 --- a/roles/vpn/tasks/main.yml +++ b/roles/vpn/tasks/main.yml @@ -1,4 +1,11 @@ --- +## UFW +- name: allow headscale tcp on 8080 + ufw: + rule: allow + port: '8080' + proto: tcp + ## INSTALL - name: create headscale user group group: @@ -51,13 +58,6 @@ group: '{{ headscale_user_gid }}' mode: 0600 -- name: daemon-reload and enable headscale - ansible.builtin.systemd_service: - state: restarted - daemon_reload: true - enabled: true - name: headscale - ## CONFIG - name: copy configuration file template @@ -67,7 +67,6 @@ owner: "{{ headscale_user_uid }}" group: "{{ headscale_user_gid }}" mode: "0600" - notify: reload headscale - name: copy acl policies file copy: @@ -76,8 +75,16 @@ owner: '{{ headscale_user_uid }}' group: '{{ headscale_user_gid }}' mode: 0600 - notify: reload headscale +## ENABLE +- name: daemon-reload and enable headscale + ansible.builtin.systemd_service: + state: restarted + daemon_reload: true + enabled: true + name: headscale + +## CREATE USER - name: ensure predefined users exist command: cmd: 'headscale users create {{ item }}' |