X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/ab47927c016597f8602b81dcdc168ad5c335389d..f7628dac50cd43cd44bb4f7e5c343fe990b5af3f:/cookbooks/networking/templates/default/wireguard.netdev.erb diff --git a/cookbooks/networking/templates/default/wireguard.netdev.erb b/cookbooks/networking/templates/default/wireguard.netdev.erb index 7866f97a4..979e68eee 100644 --- a/cookbooks/networking/templates/default/wireguard.netdev.erb +++ b/cookbooks/networking/templates/default/wireguard.netdev.erb @@ -3,21 +3,13 @@ Name=wg0 Kind=wireguard [WireGuard] -<% if node[:lsb][:release].to_f < 20.04 -%> -PrivateKey=<%= IO.read("/var/lib/systemd/wireguard/private.key").chomp %> -<% else -%> PrivateKeyFile=/var/lib/systemd/wireguard/private.key -<% end -%> ListenPort=51820 -<% node[:networking][:wireguard][:peers].each do |peer| -%> +<% node[:networking][:wireguard][:peers].sort_by { |p| p[:public_key] }.each do |peer| -%> [WireGuardPeer] PublicKey=<%= peer[:public_key] %> -<% if node[:lsb][:release].to_f < 20.04 -%> -PresharedKey=<%= IO.read("/var/lib/systemd/wireguard/preshared.key").chomp %> -<% else -%> PresharedKeyFile=/var/lib/systemd/wireguard/preshared.key -<% end -%> AllowedIPs=<%= Array(peer[:allowed_ips]).sort.join(",") %> <% if peer[:endpoint] -%> Endpoint=<%= peer[:endpoint] %>