Added amnezia WG

2026-06-16 02:27:29 +01:00
parent c850ad291a
commit 3881b5b3ba
7 changed files with 445 additions and 0 deletions
@@ -0,0 +1,50 @@
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: amneziawg-server
+spec:
+  target:
+    name: amneziawg-server
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        server-public-key: |-
+          {{ .server_public_key }}
+        awg0.conf: |-
+          [Interface]
+          PrivateKey = {{ .server_private_key }}
+          Address = 10.8.1.1/24
+          ListenPort = 5847
+          MTU = 1376
+          Jc = 4
+          Jmin = 64
+          Jmax = 128
+          S1 = 15
+          S2 = 18
+          S3 = 20
+          S4 = 23
+          H1 = 1020325451
+          H2 = 3288052141
+          H3 = 1766607858
+          H4 = 2528465083
+          PostUp = /scripts/firewall-up.sh 5847 10.8.1.0/24
+          PostDown = /scripts/firewall-down.sh 5847 10.8.1.0/24
+  data:
+    - secretKey: server_private_key
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 3092dc7c-41dd-461a-9f7a-377727f47e93
+        property: fields[0].value
+    - secretKey: server_public_key
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 3092dc7c-41dd-461a-9f7a-377727f47e93
+        property: fields[1].value