aboutsummaryrefslogtreecommitdiffstatshomepage
diff options
context:
space:
mode:
authorEgor Tensin <Egor.Tensin@gmail.com>2023-08-08 22:54:28 +0200
committerEgor Tensin <Egor.Tensin@gmail.com>2023-08-08 22:55:04 +0200
commitf10a9fe80ce3b3a8eeb183c24cec1f34bd0f8177 (patch)
treefec9559100d94605688165c53dd58c8fc6b882ef
parentwireguard: optionally set iptables rules (diff)
downloadinfra-ansible-f10a9fe80ce3b3a8eeb183c24cec1f34bd0f8177.tar.gz
infra-ansible-f10a9fe80ce3b3a8eeb183c24cec1f34bd0f8177.zip
add router role
-rw-r--r--roles/router/tasks/main.yml11
1 files changed, 11 insertions, 0 deletions
diff --git a/roles/router/tasks/main.yml b/roles/router/tasks/main.yml
new file mode 100644
index 0000000..6aecdd4
--- /dev/null
+++ b/roles/router/tasks/main.yml
@@ -0,0 +1,11 @@
+- name: Set sysctl values
+ become: true
+ ansible.posix.sysctl:
+ name: '{{ item }}'
+ value: 1
+ reload: true
+ sysctl_file: /etc/sysctl.d/99-router.conf
+ loop:
+ - net.ipv4.ip_forward
+ - net.ipv4.conf.all.forwarding
+ - net.ipv6.conf.all.forwarding