wip

bundles/wireguard/metadata.py

@@ -9,12 +9,8 @@ repo.libs.wireguard.repo = repo
 defaults = {
     'apt': {
         'packages': {
-            # 'linux-headers-amd64': {},
             'wireguard': {
                 'backports': node.os_version < (11,),
-                # 'needs': [
-                #     'pkg_apt:linux-headers-amd64',
-                # ],
                 'triggers': [
                     'svc_systemd:systemd-networkd:restart',
                 ],
@@ -39,6 +35,9 @@ def s2s_peer_specific(metadata):
                     'id': repo.get_node(peer).metadata.get(f'id'),
                     'ip': repo.get_node(peer).metadata.get(f'wireguard/my_ip'),
                     'endpoint': f'{repo.get_node(peer).hostname}:51820',
+                    'route': [
+                        str(ip_interface(repo.get_node(peer).metadata.get(f'wireguard/my_ip')).network),
+                    ],
                 }
                     for peer in metadata.get('wireguard/peers')
             },
@@ -55,8 +54,11 @@ def client_peer_specific(metadata):
             'clients': {
                 client: {
                     'id': client,
+                    'route': [
+                        str(ip_interface(conf['ip']).network),
+                    ]
                 }
-                    for client in metadata.get('wireguard/clients')
+                    for client, conf in metadata.get('wireguard/clients').items()
             },
         },
     }
@@ -73,11 +75,6 @@ def systemd_networkd_networks(metadata):
         'Address': {
             'Address': metadata.get('wireguard/my_ip'),
         },
-        'Route': {
-            'Destination': str(ip_interface(metadata.get('wireguard/my_ip')).network),
-            'GatewayOnlink': 'yes',
-            'PreferredSource': str(ip_interface(metadata.get('network/internal/ipv4')).ip),
-        },
         'Network': {
             'DHCP': 'no',
             'IPForward': 'yes',
@@ -87,15 +84,12 @@ def systemd_networkd_networks(metadata):
 
     for peer, config in {
         **metadata.get('wireguard/peers'),
-        **metadata.get('wireguard/clients'),
     }.items():
         for route in config.get('route', []):
             network.update({
                 f'Route#{peer}_{route}': {
                     'Destination': route,
-                    'Gateway': str(ip_interface(config['ip']).ip),
+                    'Gateway': str(ip_interface(metadata.get('wireguard/my_ip')).ip),
-                    'GatewayOnlink': 'yes',
-                    'PreferredSource': str(ip_interface(metadata.get('network/internal/ipv4')).ip),
                 }
             })
 
@@ -133,7 +127,7 @@ def systemd_networkd_netdevs(metadata):
                 'PublicKey': repo.libs.wireguard.pubkey(config['id']),
                 'PresharedKey': repo.libs.wireguard.psk(config['id'], metadata.get('id')),
                 'AllowedIPs': ', '.join([
-                    str(ip_interface(config['ip']).ip),
+                    # '172.30.0.0/24', # FIXME
                     *config.get('route', []),
                 ]), # FIXME
                 'PersistentKeepalive': 30,

nodes/home.server.py

@@ -58,7 +58,7 @@
             'ram':  16192,
         },
         'wireguard': {
-            'my_ip': '172.30.0.2/24',
+            'my_ip': '172.30.0.2/32',
             'peers': {
                 'htz.mails': {
                     'route': [

nodes/htz.mails.py

@@ -162,13 +162,13 @@
             },
             'clients': {
                 'macbook': {
-                    'ip': '172.30.0.100/24',
+                    'ip': '172.30.0.100/32',
                 },
                 'phone': {
-                    'ip': '172.30.0.101/24',
+                    'ip': '172.30.0.101/32',
                 },
                 'ipad': {
-                    'ip': '172.30.0.102/24',
+                    'ip': '172.30.0.102/32',
                 },
             },
         },

nodes/netcup.secondary.py

@@ -31,7 +31,7 @@
         #     'hostname': 'mail2.sublimity.de',
         # },
         'wireguard': {
-            'my_ip': '172.30.0.3/24',
+            'my_ip': '172.30.0.3/32',
             'peers': {
                 'htz.mails': {
                     'route': [

nodes/wb.offsite-backups.py

@@ -22,7 +22,7 @@
             },
         },
         'wireguard': {
-            'my_ip': '172.30.0.4/24',
+            'my_ip': '172.30.0.4/32',
             'peers': {
                 'htz.mails': {
                     'route': [