diff options
author | Christian Pointner <equinox@spreadspace.org> | 2022-01-30 22:57:35 +0100 |
---|---|---|
committer | Christian Pointner <equinox@spreadspace.org> | 2022-01-30 22:57:35 +0100 |
commit | d08c2d3ce0f5a291ddcc0f2e1569b87a373d5cf0 (patch) | |
tree | 6b89406948c44782ef5d4fe6cd63d6a2998464ce /roles/network/wireguard/gateway/tasks/main.yml | |
parent | wireguard/gateway: switch to nftables (diff) |
ansible_default_ipv4 is very weird
Diffstat (limited to 'roles/network/wireguard/gateway/tasks/main.yml')
-rw-r--r-- | roles/network/wireguard/gateway/tasks/main.yml | 15 |
1 files changed, 11 insertions, 4 deletions
diff --git a/roles/network/wireguard/gateway/tasks/main.yml b/roles/network/wireguard/gateway/tasks/main.yml index 0234fc6c..9386dfd2 100644 --- a/roles/network/wireguard/gateway/tasks/main.yml +++ b/roles/network/wireguard/gateway/tasks/main.yml @@ -37,20 +37,27 @@ notify: reload nftables +- name: get original default route + check_mode: no + command: "ip route show exact 0.0.0.0/0" + register: wireguard_gateway_original_defaultgw + changed_when: no + +- set_fact: + wireguard_gateway_original_defaultgw: "{{ wireguard_gateway_original_defaultgw.stdout | regex_replace('.* via ([^ ]*).*$', '\\1') }}" + - name: install workaround for default-gateway handling - loop: "{{ wireguard_gateway_tunnels | dict2items }}" + loop: "{{ wireguard_gateway_tunnels | dict2items | selectattr('value.default_gateway', 'defined') }}" loop_control: label: "{{ item.key }}" - when: "'default_gateway' in item.value" template: src: systemd-fix-default-gw.service.j2 dest: "/etc/systemd/system/wireguard-gateway-{{ item.key }}-fix-default-gw.service" - name: enable/start workaround for default-gateway handling - loop: "{{ wireguard_gateway_tunnels | dict2items }}" + loop: "{{ wireguard_gateway_tunnels | dict2items | selectattr('value.default_gateway', 'defined') }}" loop_control: label: "{{ item.key }}" - when: "'default_gateway' in item.value" systemd: daemon_reload: yes name: "wireguard-gateway-{{ item.key }}-fix-default-gw.service" |