r-vp1.yml

@@ -15,7 +15,6 @@
 #   - firewall-vpn-r
    - wireguard-r
 #   - x509-r
-   - fw-ferm
    - ssh-cli
    - syslog-cli
    - post

r-vp2.yml

@@ -18,7 +18,6 @@
 #   - firewall-vpn-l
    - wireguard-l
 #   - x509-l
-   - fw-ferm
    - ssh-cli
    - syslog-cli
    - post

roles/fw-ferm-2/README.md

@@ -0,0 +1,19 @@
+[Ferm]:http://ferm.foo-projects.org/ 
+
+Modifier l'execution d'iptables [plus d'info ici]:https://wiki.debian.org/iptables
+```bash
+update-alternatives --set iptables /usr/sbin/iptables-legacy
+```
+
+Pour tester utiliser [Nmap]:https://nmap.org/man/fr/man-briefoptions.html
+```bash
+sudo nmap -p51820  192.168.0.51
+```(r-vp1)
+```bash
+sudo nmap -p51820  192.168.0.52
+```(r-vp2)
+
+Sortie :
+`PORT      STATE    SERVICE
+51820/tcp filtered unknown`
+Faire des ping!

roles/fw-ferm/tasks/main.yml

@@ -1,15 +0,0 @@
----
-- name: installation de ferm
-  apt:
-    name: ferm
-    state: present
-
-- name: copie du ferm.conf
-  copy:
-    src: ferm.conf.{{ ansible_hostname }}
-    dest: /etc/ferm/ferm.conf
-
-- name: redemarage service ferm
-  ansible.builtin.service:
-    name: ferm.service
-    state: restarted

roles/wireguard-l/tasks/main.yml

@@ -4,16 +4,16 @@
     name: wireguard
     state: present
 
-- name: installation de ferm
-  apt:
-    name: ferm
-    state: present
-
 - name: installation de wireguard-tools
   apt:
     name: wireguard-tools
     state: present
 
+#- name: installation de sshpass
+#  apt:
+#    name: sshpass
+#    state: present
+
 #- name: copie du fichier de configuration depuis r-vp1
 #  command: "sshpass -p 'root' scp -r root@192.168.99.112:/root/confwg/wg0-b.conf /etc/wireguard/"
 

roles/wireguard-r/tasks/main.yml

@@ -4,11 +4,6 @@
     name: wireguard
     state: present
 
-- name: installation de ferm
-  apt:
-    name: ferm
-    state: present
-
 - name: installation de wireguard-tools
   apt:
     name: wireguard-tools
@@ -32,10 +27,12 @@
 - name: copie du fichier de configuration
   copy:
     src: /root/confwg/wg0-a.conf
-    dest: /etc/wireguard/wg0.conf
+    dest: /etc/wireguard
 
-- name: Restart service httpd, in all cases
+- name: renommage fichier de configuration
-  ansible.builtin.service:
+  command: "mv /etc/wireguard/wg0-a.conf /etc/wireguard/wg0.conf"
-    name: wg-quick@wg0
+
-    enabled: yes
+- name: demarrage du service wireguard
-    state: restarted
+  tags: aaaa
+  command: "systemctl enable wg-quick@wg0"
+  command: "systemctl restart wg-quick@wg0"