Implement the gateway role (replacing old wireguard-gateway)

2 files changed, 39 insertions, 0 deletions

diff --git a/roles/gateway/meta/argument_specs.yml b/roles/gateway/meta/argument_specs.yml
new file mode 100644
index 00000000..0312bef2
--- /dev/null
+++ b/roles/gateway/meta/argument_specs.yml
@@ -0,0 +1,20 @@
+---
+argument_specs:
+  main:
+    author: "a14m"
+    description: "Configure system as intelligent network gateway with dynamic VPN routing"
+    options:
+      gateway_enabled:
+        description: "Enable gateway functionality"
+        type: "bool"
+        default: false
+        required: false
+      gateway_local_ipv4_subnet:
+        description: "Local subnet CIDR for NAT and routing rules (e.g., '192.168.178.0/24')"
+        type: "str"
+        required: true
+      gateway_router_interface:
+        description: "Default route interface for direct routing mode"
+        type: "str"
+        default: "{{ ansible_default_ipv4.interface }}"
+        required: false
diff --git a/roles/gateway/meta/main.yml b/roles/gateway/meta/main.yml
new file mode 100644
index 00000000..29482365
--- /dev/null
+++ b/roles/gateway/meta/main.yml
@@ -0,0 +1,19 @@
+---
+dependencies:
+  - role: "systemd"
+galaxy_info:
+  author: "a14m"
+  description: "Configure system as network gateway (with VPN forwarding capablilities)"
+  company: "kartoffeln.work GmbH."
+  license: "MIT"
+  min_ansible_version: "2.18"
+  platforms:
+    - name: "ArchLinux"
+      versions:
+        - "all"
+    - name: "Ubuntu"
+      versions:
+        - "noble"
+    - name: "Debian"
+      versions:
+        - "bookworm"