diff options
| -rw-r--r-- | group_vars/all.yml.example | 2 | ||||
| -rw-r--r-- | roles/wireguard/tasks/main.yml | 6 |
2 files changed, 7 insertions, 1 deletions
diff --git a/group_vars/all.yml.example b/group_vars/all.yml.example index a4e90f14..16730008 100644 --- a/group_vars/all.yml.example +++ b/group_vars/all.yml.example @@ -56,7 +56,7 @@ vimrc_setup_script: | # NOTE: based on https://stackoverflow.com/a/33734425/1769515 vim -E -s -u ~/.vimrc +PlugInstall +qall -wireguard_autostart_connection: "wg-vpn0" +wireguard_autostart_connection: "vpn0" wireguard_connections: # All wireguard config files are prefixed with wg- # The following connection will be named wg-vpn0 diff --git a/roles/wireguard/tasks/main.yml b/roles/wireguard/tasks/main.yml index b781f114..72c37a6a 100644 --- a/roles/wireguard/tasks/main.yml +++ b/roles/wireguard/tasks/main.yml @@ -40,6 +40,12 @@ mode: "0600" loop: "{{ wireguard_connections.keys() }}" when: wireguard_connections | length > 0 + tags: + # The reason the test is ignored is the following: + # 1st run: wireguard role deploys all the configured VPN connections + # 1st run: wg_portal updates the (ACL) file permissions /etc/wireguard + # 2nd run: wireguard sees the file changed, deploys again (changed) + - molecule-idempotence-notest - name: "Ensure all wireguard interfaces are disabled on startup" become: true |