main.yml

---
openwisp2_wireguard_python: python3
openwisp2_wireguard_virtualenv_command: "virtualenv"

openwisp2_wireguard_path: "/opt/wireguard-openwisp"
openwisp2_wireguard_curl_insecure: false
openwisp2_wireguard_controller_url: "https://{{ inventory_hostname }}"
openwisp2_wireguard_vpn_uuid: false
openwisp2_wireguard_vpn_key: false
openwisp2_wireguard_flask_key: false
openwisp2_wireguard_flask_port: 8081
openwisp2_wireguard_flask_host: 0.0.0.0
openwisp2_wireguard_flask_endpoint: "/trigger-update"
# Set the log level for flask logging.
# Allowed values are "INFO", "WARNING" and "ERROR"
openwisp2_wireguard_logging_level: "WARNING"
openwisp2_wireguard_uwsgi_command: "{{ openwisp2_wireguard_path }}/env/bin/uwsgi uwsgi.ini"
openwisp2_wireguard_crontab:
  minute: "*/5"
  hour: "*"
  day_of_month: "*"
  month: "*"
  day_of_week: "*"

openwisp2_wireguard_vxlan_ipv4_method: link-local
openwisp2_wireguard_vxlan_ipv6_method: link-local

openwisp2_wireguard_uwsgi_processes: 2
openwisp2_wireguard_uwsgi_threads: 2
openwisp2_wireguard_uwsgi_extra_conf: |
  single-interpreter=True
  log-4xx=True
  log-5xx=True
  disable-logging=True
  auto-procname=True

openwisp2_wireguard_required_variables:
  - openwisp2_wireguard_controller_url
  - openwisp2_wireguard_vpn_uuid
  - openwisp2_wireguard_vpn_key
  - openwisp2_wireguard_flask_key

openwisp2_wireguard_ssl_cert: "{{ openwisp2_wireguard_path }}/ssl/server.crt"
openwisp2_wireguard_ssl_key: "{{ openwisp2_wireguard_path }}/ssl/server.key"
openwisp2_wireguard_ssl_country: "US"
openwisp2_wireguard_ssl_state: "California"
openwisp2_wireguard_ssl_locality: "San Francisco"
openwisp2_wireguard_ssl_organization: "IT dep."
openwisp2_wireguard_ssl_common_name: "{{ inventory_hostname }}"