apiVersion: v1
kind: ConfigMap
metadata:
  name: {{ taskserv.name }}-env
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
data:
  WG_HOST: "{{ taskserv.lb_ipam_ip }}"
  WG_PORT: "{{ taskserv.listen_port }}"
  WG_DEFAULT_ADDRESS: "{{ taskserv.wg_default_address }}"
  WG_DEFAULT_DNS: "{{ taskserv.dns | join(sep=", ") }}"
  WG_ALLOWED_IPS: "{{ taskserv.client_allowed_ips | join(sep=", ") }}"
  WG_MTU: "{{ taskserv.mtu }}"
  WG_PERSISTENT_KEEPALIVE: "{{ taskserv.keepalive }}"
{% if taskserv.wg_post_up_extra | length > 0 %}
  WG_POST_UP: "iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE; {{ taskserv.wg_post_up_extra | join(sep='; ') }};"
{% endif %}
{% if taskserv.wg_post_down_extra | length > 0 %}
  WG_POST_DOWN: "iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE; {{ taskserv.wg_post_down_extra | join(sep='; ') }};"
{% endif %}
  UI_TRAFFIC_STATS: "true"
  UI_CHART_TYPE: "1"