provisioning-catalog/components/wireguard/cluster/templates/configmap-env.yaml.j2

24 lines
1.1 KiB
Django/Jinja

apiVersion: v1
kind: ConfigMap
metadata:
name: {{ taskserv.name }}-env
namespace: {{ taskserv.namespace }}
labels:
app.kubernetes.io/name: {{ taskserv.name }}
app.kubernetes.io/managed-by: provisioning
data:
WG_HOST: "{{ taskserv.lb_ipam_ip }}"
WG_PORT: "{{ taskserv.listen_port }}"
WG_DEFAULT_ADDRESS: "{{ taskserv.wg_default_address }}"
WG_DEFAULT_DNS: "{{ taskserv.dns | join(sep=", ") }}"
WG_ALLOWED_IPS: "{{ taskserv.client_allowed_ips | join(sep=", ") }}"
WG_MTU: "{{ taskserv.mtu }}"
WG_PERSISTENT_KEEPALIVE: "{{ taskserv.keepalive }}"
{% if taskserv.wg_post_up_extra | length > 0 %}
WG_POST_UP: "iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE; {{ taskserv.wg_post_up_extra | join(sep='; ') }};"
{% endif %}
{% if taskserv.wg_post_down_extra | length > 0 %}
WG_POST_DOWN: "iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE; {{ taskserv.wg_post_down_extra | join(sep='; ') }};"
{% endif %}
UI_TRAFFIC_STATS: "true"
UI_CHART_TYPE: "1"