egeneralov / peervpn

ansible-galaxy install egeneralov.peervpn

egeneralov.peervpn

Role Variables

See official config file for option descriprion.

• networks: list with dicts
  • network dict
    • networkname: string PEERVPN
    • psk: string mytopsecretpassword
    • net: Subnet for distribution between your hosts 192.168.1.0/30
    • state: define absent for delete network
    • port: int 7000
    • enabletunneling: boolean in string, use quotes, please "yes"
    • interface: string tap0
    • upcmd: string for /bin/sh echo virtual interface is up
    • local: bind to 0.0.0.0
    • sockmark: define more than 0 to mark packets 0
    • enableipv4: boolean in string, use quotes, please "yes"
    • enableipv6: : boolean in string, use quotes, please "no"
    • enablenat64clat: boolean in string, use quotes, please "no"
    • enablendpcache: : boolean in string, use quotes, please "no"
    • enablerelay: : boolean in string, use quotes, please "yes"
    • engine: string padlock
    • enableprivdrop: : boolean in string, use quotes, please "no"
    • user: nobody
    • group: nogroup
    • chroot: /var/empty

Example Playbook

WARNING: The use of the group name "peervpn" is mandatory.

- hosts: peervpn
  networks:
    - networkname: PEERVPN
      psk: mytopsecretpassword
      # state: absent
      port: 7000
      enabletunneling: "yes"
      interface: "tap0"
      net: "192.168.1.0/30"
  roles:
     - egeneralov.peervpn

Notes

• All:

  • in inventory specify addresses for ansible_default_ipv4

• Mac OS:

  • interface name must starts with "tap" for ipv4 configurations, and "tun" for ipv6 configurations
  • search logs in /usr/local/var/log/net.peervpn.*.std{out,err}.log

License

MIT

Author Information

Eduard Generalov [e-mail]