Introduce VPN role.

Commit
c2433e3c3a391704995e7c9ff46daa57d9af71b0
Author
Marius Peter <dev@marius-peter.com>
Author date
Committer
Marius Peter <dev@marius-peter.com>
Committer date
Changed files
roles/vpn/README.org
index 00000000..6f4ec8a8 000000..100644
@@ -0,0 +1,28 @@
1 Added: #+TITLE: VPN setup
2 Added: #+AUTHOR: Marius Peter
3 Added: #+DATE: <2026-07-06 Mon>
4 Added:
5 Added:
6 Added: * WireGuard
7 Added:
8 Added: 1. Install WireGuard on the VPS and on the DAQ hub.
9 Added: 2. Configure WireGuard on both hosts to establish a point-to-point
10 Added: connection. Use the =wg0.conf= files in this directory.
11 Added: 3. Start WireGuard service on both hosts.
12 Added:
13 Added:
14 Added: On VPS:
15 Added:
16 Added: : 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
17 Added: : link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
18 Added: : inet 127.0.0.1/8 scope host lo
19 Added: : valid_lft forever preferred_lft forever
20 Added: : inet6 ::1/128 scope host
21 Added: : valid_lft forever preferred_lft forever
22 Added: :
23 Added: : <...>
24 Added: :
25 Added: : 9: wg0: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state UNKNOWN group default qlen 1000
26 Added: : link/none
27 Added: : inet 10.xx.x.x/24 scope global wg0
28 Added: : valid_lft forever preferred_lft forever
roles/vpn/wg0.conf.daq-hub
index 00000000..afbf7125 000000..100644
@@ -0,0 +1,11 @@
1 Added: # Set Address, PrivateKey, PubliKey, Endpoint, and AllowedIPs.
2 Added:
3 Added: [Interface]
4 Added: Address = 10.xx.x.x/32
5 Added: PrivateKey = CHANGEME
6 Added:
7 Added: [Peer]
8 Added: PublicKey = CHANGEME
9 Added: Endpoint = 192.162.xx.xxx:51820
10 Added: AllowedIPs = 10.xx.x.x/32
11 Added: PersistentKeepalive = 25
roles/vpn/wg0.conf.vps
index 00000000..f3ecb8bd 000000..100644
@@ -0,0 +1,10 @@
1 Added: # Set Address, PrivateKey, PublicKey, and AllowedIPs.
2 Added:
3 Added: [Interface]
4 Added: Address = 10.xx.x.x/24
5 Added: ListenPort = 51820
6 Added: PrivateKey = CHANGEME
7 Added:
8 Added: [Peer]
9 Added: PublicKey = CHANGEME
10 Added: AllowedIPs = 10.xx.x.x/32