26 lines
631 B
YAML
26 lines
631 B
YAML
---
|
|
ansible_user: ansible
|
|
ansible_host: 204.110.191.247
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
ansible_ssh_private_key_file: /Users/graham/.ssh/ansible
|
|
ansible_ssh_common_args: '-o StrictHostKeyChecking=accept-new'
|
|
|
|
firewall_trusted_subnets:
|
|
- subnet: 100.64.0.0/10
|
|
comment: Tailscale
|
|
- subnet: 204.110.188.0/22
|
|
comment: VNTX
|
|
- subnet: 10.0.0.0/8
|
|
comment: Internal
|
|
|
|
firewall_allow_rules:
|
|
- port: 51820
|
|
proto: udp
|
|
comment: WireGuard
|
|
|
|
firewall_default_routed: allow
|
|
firewall_ip_forward: true
|
|
firewall_masquerade_rules:
|
|
- source: 10.6.0.0/24
|
|
out_interface: eth0
|
|
comment: wireguard-nat-rule
|