Add host_vars and group_vars

group_vars/jump_servers/main.yaml

@@ -0,0 +1,353 @@
+---
+firewall_allowed_tcp_ports:
+  - 443
+  - 80
+
+firewall_allowed_udp_ports:
+  - 1194
+
+firewall_ipset_syslog:
+  - 10.255.0.0/24
+
+autossh_authorized_keys:
+  - key: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOvKqDI6VUYFgMUC54pVr5U8CX+Xl2ewV7PIYkTiQ70o
+  - key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrte7/aVUhovxsFTF9olsO6V3TiHStlF5XFN1u8uKmYmJ9jfvosOLPAv4KHvVDuOww79JPUXrsSkemC/AM9tlHycBf4+4R8q9o7aL0MNzB1ZaiBCvgx+Wn54QgktM/V7e4yl4LCtjxbscspYCJFtqjWuC85c4d8p7Gwq3t7+wbO3TGZAx1ETdqKjhecTCJpjlvUIYDZlCkXMtmhB52ntTu9/GBXD5mAdTCqyq5aTAxGbt56LCmM0Z2qjAxVWRdJK93C2dQ4OPzWnvc2IWR2EazOLDep8jSz4XOzUlfQCeKfFsEvUJZJi7BtcgVKBvL+e8SmwZNG+SdCmFFJxoXVmat
+
+autossh_config: []
+
+rsyslog_inputs:
+  - name: imtcp
+    params:
+      port: 514
+  - name: imudp
+    params:
+      port: 514
+  - name: imrelp
+    params:
+      port: 2514
+
+rsyslog_outputs: []
+
+telegraf_config_d:
+  - name: ping
+    config:
+      inputs.ping:
+        - urls:
+            - ping-home.kill0.net
+          interface: eth0
+          count: 10
+          ipv6: false
+          binary: ping4
+        - urls:
+            - ping6-home.kill0.net
+          interface: eth0
+          count: 10
+          ipv6: true
+          name_override: ping6
+          binary: ping6
+        - urls:
+            - 10.255.0.1
+          count: 10
+          ipv6: false
+          binary: ping4
+
+openvpn_ip_forward: 1
+
+openvpn_config:
+  server:
+    port: 1194
+    proto: udp
+    dev: tun
+    server: 10.8.0.0 255.255.255.0
+    ifconfig-pool-persist: /var/log/openvpn/ipp.txt
+    keepalive: 10 120
+    cipher: AES-256-CBC
+    persist-key:
+    persist-tun:
+    tun-ipv6:
+    status: /var/log/openvpn/openvpn-status.log
+    verb: 3
+    explicit-exit-notify: 1
+    ca: "{{ openvpn_etc_path }}/server/ca.pem"
+    cert: "{{ openvpn_etc_path }}/server/cert.pem"
+    key: "{{ openvpn_etc_path }}/server/key.pem"
+    dh: "{{ openvpn_etc_path }}/server/dh.pem"
+    tls-auth: "{{ openvpn_etc_path }}/server/ta.key 0"
+    client-config-dir: "{{ openvpn_etc_path }}/server/ccd"
+    route:
+      - 172.16.0.0 255.255.0.0
+      - 192.168.255.0 255.255.255.0
+      - 10.8.0.0 255.255.255.0
+    push:
+      - route 10.8.0.0 255.255.255.0
+
+openvpn_dh_params:
+  server:
+    dh.pem: |
+      -----BEGIN DH PARAMETERS-----
+      MIIBCAKCAQEAwmTargQ4ki0rYdoPifubzjBWklJXYzsQUU2TbGvuP0ug2weMOA4D
+      XSmlyJFUmSsSEUxDCG5PXcIdvNHISTX2PiUqf3OhCGghxIbAQwbCdqqs/VnZYt0C
+      P/M5DJD4hsF8OTrdDG9b5mK3XmB40o9K3xkptfQvoN1ecjhRQ+zgNZcnkOfd0XFB
+      myPPSBy/9fK6e6N1SnGN7Ao7AJ3VFLpT77hHaW6wZ+hOxWlmjroIlT5FRyvtEATE
+      2N697E6kWV+1jfyfd8ocu+QfnFbccshJY88OhZ4xddHquFhKMT68TCg43nefQCk7
+      tnJAVcpUfS6AqhwZRysWNRJfG/NiPsMxIwIBAg==
+      -----END DH PARAMETERS-----
+
+openvpn_certificates:
+  server:
+    cert.pem: |
+      subject=C = US, CN = jump0.kill0.net
+      issuer=C = US, O = chill9, CN = chill9 Sub CA
+      notBefore=May 18 01:58:38 2020 GMT
+      notAfter=May 18 01:58:38 2021 GMT
+      X509v3 Subject Alternative Name: 
+          DNS:jump0.kill0.net, DNS:vpn-jump0.kill0.net
+      -----BEGIN CERTIFICATE-----
+      MIIGPzCCBCegAwIBAgIQc/QIYhesJteIltoVW79aOzANBgkqhkiG9w0BAQsFADA2
+      MQswCQYDVQQGEwJVUzEPMA0GA1UECgwGY2hpbGw5MRYwFAYDVQQDDA1jaGlsbDkg
+      U3ViIENBMB4XDTIwMDUxODAxNTgzOFoXDTIxMDUxODAxNTgzOFowJzELMAkGA1UE
+      BhMCVVMxGDAWBgNVBAMMD2p1bXAwLmtpbGwwLm5ldDCCAiIwDQYJKoZIhvcNAQEB
+      BQADggIPADCCAgoCggIBAOsnQorA2CsepW3m/Sv+7H4ngosGHw/t9LfxAdx+og7t
+      LNAZ/CIvO4bSjfkRQtCF3+FX7dXPAgkzL0RgDDRD3e3tt54Vo/solxBfHHhkHaWf
+      JifN8icpkMWukc0pzY+H3XW28rWDYdrBmCkHGoebnf51BcoIJ5mVBMgOE3E86Kih
+      615NhXg5pF58+Myz5xFdaTOmoj4J0F1ccZGwJWJrkh2YdMGUHH3YSRASP5N2P5Pb
+      mJ0pLo7C3MH3tZ6Nl8K+RUvtwXCBouthkbs0e02HsQFuLEv2f32NMZU7OUB9Vi8N
+      wxUQ0I/2t3T3BaNxFLlEAzjqAzZr5pwOpSasBTbxsglWaYou8DhIwLEUOUzIh/xN
+      kd+9EVymZ2yqYOlWaPvCmgmhZPeqipd3WAPdtHiYxWfgG0obtVh3qH+JI4P0u7Tu
+      Mb8+TcL3tAfyJDkmY7qepdd3zVj0ldcIQ9k9DRu76WE11aXjSl9YYSBvTuHPN6sd
+      3c+oJ5Ew74hI3AtDf5M6FsqTTdTgkNiqV+f7IRr2+4yip5o4Ez6YZCSSjeUHN9AJ
+      DqVhO3Ar7/vVcq0eFVvUTWVuQD+52sNvCeWh9Skayar2Yw51+gAlh4UGJTR+21jp
+      cnOk4+FT6VOCN/4nmJ9NkwZCCEmj76ygnJ1Ldovc9S8ijf/K103axwweXK9jU3FT
+      AgMBAAGjggFWMIIBUjBtBggrBgEFBQcBAQRhMF8wLgYIKwYBBQUHMAKGImh0dHA6
+      Ly9zdWItY2Eua2lsbDAubmV0L3N1Yi1jYS5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6
+      Ly9vY3NwLnN1Yi1jYS5raWxsMC5uZXQ6OTA4MTAfBgNVHSMEGDAWgBSThtPAfR0F
+      GyRrzaVVpnRPYVvpJTAMBgNVHRMBAf8EAjAAMDMGA1UdHwQsMCowKKAmoCSGImh0
+      dHA6Ly9zdWItY2Eua2lsbDAubmV0L3N1Yi1jYS5jcmwwHQYDVR0lBBYwFAYIKwYB
+      BQUHAwIGCCsGAQUFBwMBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQUvXkDkHzz
+      QVyDDrfckIPVGVmKjGgwLwYDVR0RBCgwJoIPanVtcDAua2lsbDAubmV0ghN2cG4t
+      anVtcDAua2lsbDAubmV0MA0GCSqGSIb3DQEBCwUAA4ICAQBNhV+pSeuYyo7bL4KU
+      4u4Q5tqfnqAz67skUhL+T3D5unA3WLg/SlUYUM1qfPolej4J+sFf6HWJrsXeayhR
+      kcork3NlHTjxB9G3aVvG63FJHr0zB9t5whnyepGsmF8lxwK47pXz9CCYEKcsSByD
+      eSBiibCqBaxj4N72yFIuIq5QN4AkXUM+WzIVlC98OqKB/IDtzcTRTBmWmIJIWHuC
+      hr3Emz8s1RNhpsLBlfP2CqsI+RXxGYNS+6VEGnNLRdm+oqa/jTdTyuPQ6TMmNOfx
+      b9JYr41j7Ps0451NzSyWoyxYc8sg58X/t3cPmsx4mgW4qlo9q72kkkKAkiO600C6
+      pKKcyFVj4i8VakrUOGRf/jWB76X08ub67pShXYW3ItqPP39zZJ6KvFYCOldVyltJ
+      /yP18KtFOnkPJ2VxZD+O3MlHA1RILhach3gCICS/VSaJHuPs4dFaiQrc9MxTkzt0
+      QikPvNgkprOIj1BU+VtBIM5eInyfFDVM+hRvp7zOoPQRUqwCn6iBkcgYhTD/cgPh
+      45BsmsOC5Z9NfNlpEzE0u6ObZFcwAp9fg9mPeU/wbW1M8JgcWXjGN37D6gT6cVGk
+      oKUidap16UL6NLgFlIcMSZcfMM0oI2JZyaOCLGvdKmZibpx237SrAnFLYXBJx9Ny
+      cjkBmYeslLjtUPqu9OrqjuiiLw==
+      -----END CERTIFICATE-----
+      subject=C = US, O = chill9, CN = chill9 Sub CA
+      issuer=C = US, O = chill9, CN = chill9 Root CA
+      notBefore=May 17 01:19:29 2020 GMT
+      notAfter=May 15 01:19:29 2030 GMT
+      -----BEGIN CERTIFICATE-----
+      MIIGnjCCBIagAwIBAgIQdRhWyOcUQ+uIEypQfJLvqjANBgkqhkiG9w0BAQsFADA3
+      MQswCQYDVQQGEwJVUzEPMA0GA1UECgwGY2hpbGw5MRcwFQYDVQQDDA5jaGlsbDkg
+      Um9vdCBDQTAeFw0yMDA1MTcwMTE5MjlaFw0zMDA1MTUwMTE5MjlaMDYxCzAJBgNV
+      BAYTAlVTMQ8wDQYDVQQKDAZjaGlsbDkxFjAUBgNVBAMMDWNoaWxsOSBTdWIgQ0Ew
+      ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCsP549Xs/Dzfw3HHGhDlIT
+      dFun9cqsCmyaXJSMOFZqZSyGJg4WASJRW797lnQlsOfLk7x8fR7I1CkWF9x3KDVi
+      A9MvJTlFgdYGF27LNGP7zo3ZNB99oA+NtHhoIhclprzT4qmHSk6tz31uJV42jNBH
+      km3m4wqH3NlqOqWbkw8nC9yF0/qCz1UyG/wSIQr3UpN5c96WWE3Bt6rKW7vEZ//i
+      t4nDzRV+pttv5O/L5DQdhG01NKD0XxH0q8SocdTPIsDO0ZUQwVFYcxJYB0pPab8V
+      Uk4+bzb8hN+mO2vyO5DK01efiNVfMZ7NDxQXvU6cMs4c+S/BtC9PWO0hR0hJm/hw
+      vg1RdhyfOVATVfviiEG8YQdl8sIHk3qYGdGJyrZHIOlssgnKdeGlLHbYXtHPFAk/
+      gvZMtR2t0VKXVQR03Yz5llF9okKCAbmHmntLFcM5hHJxEl0phqbLLcBh+130Qb7q
+      K/CRSHnPfzL04KW9cw5b0cNOn728M5Fj2Q8IQvY5m0NYDbaZf0qF34OyixtGIE8n
+      dJupLDSp6KkHlrIfedpgNwi16y5cy4Uw/aTCGcIO/WZZO6Q59R+xlobw8VQc4V/i
+      pqSiQK0wEuDtq9uw7r+GV9BDoxfmbHygeKFV+Ee9UXQ/FMPhItSQTMlFhrci6U75
+      e+iOnmh3AkldPZ3Z6TpfsQIDAQABo4IBpTCCAaEwcAYIKwYBBQUHAQEEZDBiMDAG
+      CCsGAQUFBzAChiRodHRwOi8vcm9vdC1jYS5raWxsMC5uZXQvcm9vdC1jYS5jcnQw
+      LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLnJvb3QtY2Eua2lsbDAubmV0OjkwODAw
+      HwYDVR0jBBgwFoAUcUb1TFf68x7gTS4RnYurKV2YeRswEgYDVR0TAQH/BAgwBgEB
+      /wIBADA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vcm9vdC1jYS5raWxsMC5uZXQv
+      cm9vdC1jYS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA4GA1Ud
+      DwEB/wQEAwIBBjBzBgNVHR4EbDBqoDYwC4IJa2lsbDAubmV0MAuCCWtpbGwwLmNv
+      bTAMggpjaGlsbDkubmV0MAyCCmNoaWxsOS5jb22hMDAKhwgAAAAAAAAAADAihyAA
+      AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAdBgNVHQ4EFgQUk4bTwH0d
+      BRska82lVaZ0T2Fb6SUwDQYJKoZIhvcNAQELBQADggIBAENgGWgn3geR6Ciz9YsE
+      x4594ew+JJ9uiiPoHSUxw95NuVa2WpB1/UZoL93lm3sEqqzR6FYEeP5JWuvlrw4Q
+      TJpzXBo/0Ik5BX2eTcW1HlhXxHV0HnzjKd8eldxDsY78ve46d9DfHLYk4zdn7OVj
+      TLVokJvbL9jEIOfH2OJu8Ow+5jNmKQzmv4aNmG9RHoqDkgBmRgbrWJkhZ9xVqSb4
+      jKBDsNovLkkW2Xm0RxJVc9B3sE15aDq06UeT1BfCXL7xH1ABjX5tV4LegJUsaTlU
+      EMOyXYdxoEnqKw/f7Qns/lsq6Gzbx+RDXnShBPsrJX/TTcqc/KETu1z6zwxnb4PO
+      uwK1VHUcOB27hA6STfe9HqiJwdSSQG1aFmk+nCN0IqeC7oXS8z27Lbjzx182osAZ
+      F7oLtdctWav9sAo03M3MLapdgzM66weNzdfw7z6vsxE6qxB+4U95IplVAaWCqFfr
+      USrr4BmYi6yD9xbGT8f0diQ7DsA0ki8QPpZD6bzlUoO5pZ+qv49wFh+1wb4gjEYi
+      ReBLvIHjVYL1GPSR1vrCzP+/i0Rhc+8sHgC2lpuUj4E2swBBuHhUsgSpaCcvV5ID
+      qCBR4ak3EYuWzKYJCakhauIW8G7QDhO1XuPKqOk93qRpwZveUFMQjDa2xDEElxZJ
+      utoYQ7uVeeWbAD+clJpc2kky
+      -----END CERTIFICATE-----
+    ca.pem: |
+      subject=C = US, O = chill9, CN = chill9 Sub CA
+      issuer=C = US, O = chill9, CN = chill9 Root CA
+      notBefore=May 17 01:19:29 2020 GMT
+      notAfter=May 15 01:19:29 2030 GMT
+      -----BEGIN CERTIFICATE-----
+      MIIGnjCCBIagAwIBAgIQdRhWyOcUQ+uIEypQfJLvqjANBgkqhkiG9w0BAQsFADA3
+      MQswCQYDVQQGEwJVUzEPMA0GA1UECgwGY2hpbGw5MRcwFQYDVQQDDA5jaGlsbDkg
+      Um9vdCBDQTAeFw0yMDA1MTcwMTE5MjlaFw0zMDA1MTUwMTE5MjlaMDYxCzAJBgNV
+      BAYTAlVTMQ8wDQYDVQQKDAZjaGlsbDkxFjAUBgNVBAMMDWNoaWxsOSBTdWIgQ0Ew
+      ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCsP549Xs/Dzfw3HHGhDlIT
+      dFun9cqsCmyaXJSMOFZqZSyGJg4WASJRW797lnQlsOfLk7x8fR7I1CkWF9x3KDVi
+      A9MvJTlFgdYGF27LNGP7zo3ZNB99oA+NtHhoIhclprzT4qmHSk6tz31uJV42jNBH
+      km3m4wqH3NlqOqWbkw8nC9yF0/qCz1UyG/wSIQr3UpN5c96WWE3Bt6rKW7vEZ//i
+      t4nDzRV+pttv5O/L5DQdhG01NKD0XxH0q8SocdTPIsDO0ZUQwVFYcxJYB0pPab8V
+      Uk4+bzb8hN+mO2vyO5DK01efiNVfMZ7NDxQXvU6cMs4c+S/BtC9PWO0hR0hJm/hw
+      vg1RdhyfOVATVfviiEG8YQdl8sIHk3qYGdGJyrZHIOlssgnKdeGlLHbYXtHPFAk/
+      gvZMtR2t0VKXVQR03Yz5llF9okKCAbmHmntLFcM5hHJxEl0phqbLLcBh+130Qb7q
+      K/CRSHnPfzL04KW9cw5b0cNOn728M5Fj2Q8IQvY5m0NYDbaZf0qF34OyixtGIE8n
+      dJupLDSp6KkHlrIfedpgNwi16y5cy4Uw/aTCGcIO/WZZO6Q59R+xlobw8VQc4V/i
+      pqSiQK0wEuDtq9uw7r+GV9BDoxfmbHygeKFV+Ee9UXQ/FMPhItSQTMlFhrci6U75
+      e+iOnmh3AkldPZ3Z6TpfsQIDAQABo4IBpTCCAaEwcAYIKwYBBQUHAQEEZDBiMDAG
+      CCsGAQUFBzAChiRodHRwOi8vcm9vdC1jYS5raWxsMC5uZXQvcm9vdC1jYS5jcnQw
+      LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLnJvb3QtY2Eua2lsbDAubmV0OjkwODAw
+      HwYDVR0jBBgwFoAUcUb1TFf68x7gTS4RnYurKV2YeRswEgYDVR0TAQH/BAgwBgEB
+      /wIBADA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vcm9vdC1jYS5raWxsMC5uZXQv
+      cm9vdC1jYS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA4GA1Ud
+      DwEB/wQEAwIBBjBzBgNVHR4EbDBqoDYwC4IJa2lsbDAubmV0MAuCCWtpbGwwLmNv
+      bTAMggpjaGlsbDkubmV0MAyCCmNoaWxsOS5jb22hMDAKhwgAAAAAAAAAADAihyAA
+      AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAdBgNVHQ4EFgQUk4bTwH0d
+      BRska82lVaZ0T2Fb6SUwDQYJKoZIhvcNAQELBQADggIBAENgGWgn3geR6Ciz9YsE
+      x4594ew+JJ9uiiPoHSUxw95NuVa2WpB1/UZoL93lm3sEqqzR6FYEeP5JWuvlrw4Q
+      TJpzXBo/0Ik5BX2eTcW1HlhXxHV0HnzjKd8eldxDsY78ve46d9DfHLYk4zdn7OVj
+      TLVokJvbL9jEIOfH2OJu8Ow+5jNmKQzmv4aNmG9RHoqDkgBmRgbrWJkhZ9xVqSb4
+      jKBDsNovLkkW2Xm0RxJVc9B3sE15aDq06UeT1BfCXL7xH1ABjX5tV4LegJUsaTlU
+      EMOyXYdxoEnqKw/f7Qns/lsq6Gzbx+RDXnShBPsrJX/TTcqc/KETu1z6zwxnb4PO
+      uwK1VHUcOB27hA6STfe9HqiJwdSSQG1aFmk+nCN0IqeC7oXS8z27Lbjzx182osAZ
+      F7oLtdctWav9sAo03M3MLapdgzM66weNzdfw7z6vsxE6qxB+4U95IplVAaWCqFfr
+      USrr4BmYi6yD9xbGT8f0diQ7DsA0ki8QPpZD6bzlUoO5pZ+qv49wFh+1wb4gjEYi
+      ReBLvIHjVYL1GPSR1vrCzP+/i0Rhc+8sHgC2lpuUj4E2swBBuHhUsgSpaCcvV5ID
+      qCBR4ak3EYuWzKYJCakhauIW8G7QDhO1XuPKqOk93qRpwZveUFMQjDa2xDEElxZJ
+      utoYQ7uVeeWbAD+clJpc2kky
+      -----END CERTIFICATE-----
+      subject=C = US, O = chill9, CN = chill9 Root CA
+      issuer=C = US, O = chill9, CN = chill9 Root CA
+      notBefore=May 16 17:36:20 2020 GMT
+      notAfter=May 14 17:36:20 2030 GMT
+      -----BEGIN CERTIFICATE-----
+      MIIFOjCCAyKgAwIBAgIQdRhWyOcUQ+uIEypQfJLvqTANBgkqhkiG9w0BAQsFADA3
+      MQswCQYDVQQGEwJVUzEPMA0GA1UECgwGY2hpbGw5MRcwFQYDVQQDDA5jaGlsbDkg
+      Um9vdCBDQTAeFw0yMDA1MTYxNzM2MjBaFw0zMDA1MTQxNzM2MjBaMDcxCzAJBgNV
+      BAYTAlVTMQ8wDQYDVQQKDAZjaGlsbDkxFzAVBgNVBAMMDmNoaWxsOSBSb290IENB
+      MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAswTensn+vA45WGRp3o/5
+      LX+wh6PTHAGNluLaZRyUNOg+EunnXAvMBF912D587wLAiC1G9FGOn+8JVws2QITX
+      +U8Y8L2vhnfGQNCQYvqBfJc5PJt3ZZ35to5tdTRJTeVhNWzIA7qOZh8ualFbCDYd
+      m6K74SlfEbvKzS02pYWN6wCVXtGOPl7VoOtjg8cOUX6u1pZpBKQfzq3lgLS2oMp0
+      VuBJeUMiki/O8nCC10VCXcZ9q4bsUvWH9lJB/IqlKt+bG9TjO+vigb9eOSfaILkM
+      d7NMziP5OQXMjv6NwmJQY7N5TiKWdh9h4G3KS41dr2Oeo+A1FcMEP9nkZb1lX3Ft
+      9Xzw8jJ99SD36mCEiqndvKA66/pcgMCvPAkkDwoSS+Er4LPcNmY2TVN+mIaF1OaS
+      Dc1EAXUfjnX8mZlclS/AfCg8TIPCc8o6Neg3DECT2j+IC9bgeoLqZLIuzzLNFrG5
+      aPNhG+24phHqdZvAkdhHWeEh1GS5uMutvV02hF5MrZLz8ou+56feFpUmeuPzQAfR
+      0Xbz0ot2JdETmcCTcmZBQ+9oP5DIszJt85wCHJ5S5FewUzsXJs1MQue3NLSM5FBS
+      hhOq+w6Pp64aaGKKyPi1GeZ1m31sM6w1yFVTQsqqy28GSjd/fQu55ESQ1sM0UhIo
+      DCUBbNPxycJGh9Ivxii1RqMCAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
+      HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFHFG9UxX+vMe4E0uEZ2LqyldmHkbMA0GCSqG
+      SIb3DQEBCwUAA4ICAQCC1jksFZp38JTGFIrNJJ6PgI6xXigtD2Z3KstS1cAIJi/P
+      /3NPu8iTgoyhNiq7a20tojPJGPlumezy3R5twA16UCq8guGFVEEEkJX+wOM0T4p0
+      jwtcMOeA6GchzS3+u74kk8oIvvw41K5gU2VU/W2axxnejt/HQMAYaMsD/zcNPXrP
+      oHAgEP5i7G7fX0FXqERnLU9lgbtTTTuszBnZHIdaUKSoK0Oji46y15pEdhxkVB6t
+      /BiNPAYM1Pc/Hi366eb6yuY8eJCK94QMQBvYpIjNwThAKclFh8n62KF6gXqj7Hcu
+      UQr1Z55KOuAlAM7fIBsqL4G2Ihs8yBeJe4YZrkdBqBzpJwOYNj7IsUnxgXYQpkVQ
+      u5coTbrB8w4Mw8ak+L2McMAYhG5FIndy9GAFEEanrmyiHJW96MHqTD1xY9TyvdN/
+      Kt/lsYt0W/y6jknv7hU9uP4X/xkZk8z1D+m4jZHRQpnUPL1eSOUPSJ0t+68GQUVJ
+      NJFmTx/qv1/9lXNy40jecX6sO4ZPLoQydMjwRmSerxki7MP4gxGNuBEpOvoj+ABM
+      MBlD7BhUn5++BZQOLUU+JYr5kNi0WmFFN1v2SpoMyDydTgA+cJsS/TiOeMrY9Szs
+      ZEFa3PSiA1fP03SRKC9tqjc7d6vQU0fE93wzcUCgyyf5mln6NV7cxOfDJNO8gA==
+      -----END CERTIFICATE-----
+
+openvpn_ccd:
+  server:
+    fw0:
+      ifconfig-push: 10.8.0.16 10.8.0.1
+      iroute:
+        - 172.16.0.0 255.255.0.0
+        - 192.168.255.0 255.255.255.0
+    mine0:
+      ifconfig-push: 10.8.0.17 10.8.0.1
+      push:
+        - route 172.16.0.0 255.255.0.0
+    "Ryan Cavicchioni":
+      ifconfig-push: 10.8.0.200 10.8.0.1
+
+firewall_teleport_node_enabled: false
+firewall_teleport_proxy_enabled: false
+firewall_teleport_auth_enabled: false
+
+teleport_service_state: stopped
+teleport_service_enabled: true
+
+teleport_roles: [ auth, node, proxy ]
+teleport_config:
+  auth_service:
+    cluster_name: main
+    enabled: true
+    tokens:
+      - "node:{{ vault_teleport_static_token }}"
+      - "trusted_cluster:{{ vault_teleport_trusted_cluster_static_token }}"
+  teleport:
+    auth_token: "{{ vault_teleport_static_token }}"
+    ca_pin: sha256:4ef484a5949aadedf983bc1f1d43f6f31356ca37f9608267424ddc0d9b68e010
+    auth_servers:
+      - "jump0.kill0.net:3025"
+  proxy_service:
+    enabled: "yes"
+    https_key_file: /etc/letsencrypt/live/jump0.kill0.net/privkey.pem
+    https_cert_file: /etc/letsencrypt/live/jump0.kill0.net/fullchain.pem
+
+wireguard_iptables:
+  wg0:
+    input: true
+  wg1:
+    forward: true
+    nat:
+      source: 192.168.255.0/24
+      out_iface: eth0
+    dns: true
+
+wireguard_peers:
+  wg0:
+    - comment: mine0.kill0.net
+      public_key: Cm9yZNczjghAh4hV4fSvy3rsmuLsQFZk+ET5CoWxVnI=
+      #endpoint: "{{ lookup('dig', 'mine0.kill0.net./A') }}:{{ wireguard_port }}"
+      endpoint: "mine0.kill0.net:{{ wireguard_port }}"
+      allowed_ips: "{{ hostvars['mine0.kill0.net'].wireguard_interfaces.wg0.address }}"
+    - comment: vpn-home.kill0.net
+      public_key: j5AgKWcXx8we7QVkt6//oQWsGfXj+5IJKt9mx0EpTW0=
+      endpoint: "vpn-home.kill0.net:{{ wireguard_port }}"
+      allowed_ips: 172.16.0.0/16, 10.255.0.2/32
+  wg1:
+    - comment: pixel-2
+      public_key: GzQOU0x1POvkY4+6smBGkE/B1XytoVxIJa6zGX8j6Bc=
+      allowed_ips:
+        - 192.168.255.16/32
+        - 2600:3c00:e000:343::10/128
+    - comment: work laptop
+      public_key: TRT1SRQd3mFJDJK9tdglqsydXJmkzyrNdUOm4nr7M3k=
+      allowed_ips:
+        - 192.168.255.17/32
+        - 2600:3c00:e000:343::11/128
+    - comment: home workstation
+      public_key: ISvgu8zZWjmKyKrJi2mbqoJg2mrvIjPbQRs0Sp+dLzc=
+      allowed_ips:
+        - 192.168.255.18/32
+        - 2600:3c00:e000:343::12/128
+    - comment: rick
+      public_key: oFJcRhs7tQ4vPHTjbKwwWirpjx9T9ng7PFj3+iAVYWo=
+      allowed_ips:
+        - 192.168.255.32/32
+        - 2600:3c00:e000:343::20/128
+
+unbound_interfaces:
+  - 127.0.0.1
+  - 192.168.255.1
+  - ::1
+  - 2600:3c00:e000:343::1
+
+unbound_access_control:
+  - 127.0.0.1 allow
+  - 192.168.255.0/24 allow
+  - ::1 allow
+  - 2600:3c00:e000:343::/64 allow

group_vars/jump_servers/vault.yaml

@@ -0,0 +1,223 @@
+$ANSIBLE_VAULT;1.1;AES256
+36396137393836323465386631643461656431316666376562623633383965393863383866663764
+3664343734343065343236303365373962333162306564620a623362326163393766343735653061
+64393932383066323264636530613036353637343231666439346234663430326366396532663765
+3536663666643838360a316462376363613562373965653536333763386635343362393938386331
+39663266616365383166393232646530656135373234646166393365343233666635393430313136
+66616361636638323430343334643230623331623334343162333335353265333436326239626664
+30623039333737383531663738616337396136353836383537343337316565623562393235303566
+63656234663765313062666435313431633861646137313330386633383062656335336639633631
+31386561376365623634666231643134663230643736376662356361313464666638363961366437
+61323033386661356561653961623333353637613439666437333164643532343863333434613061
+63646432396333303965663730623061333065653432326136333337633862393339363130373138
+36366163316635383336316537393761633962336138643139386638373134313635336666303765
+62316531336165323965343232636339313462633536623139303865663862376364363261363865
+31353064646338646662386639343462386639393162363334363937363337613963313135663365
+66343365363232623564613035303139663937356430336537346564643134313763393462323638
+30616462363661623466663162333834323937623335316261646533316137613564316532653165
+33343133376538643961656364656666346533316336626464663939313137643461303232666162
+32353131353864373738396335613763366639633837653636386139393862616364613265313935
+62353134303733393836666337393530643465343333373230346133396163623332336131323730
+39383264303935343763343033303864316433613334633137333031626563393233663932376434
+66303638643232376633636331613234316339666630393534333136306639616662613361663031
+31316630323338383061346333633063393261353463623039633063633132623730303161663531
+65353030303763336639636265663333333639306432306662386232303439626235663433376437
+37336461376662663035373336663937333132383964396561626337626632303064656365313633
+61663630316163323163383436636636313333353437646330346532656236626562663332323636
+65303430663133363464323262313531376531303739613364336262393965376533343136323034
+65376461326362313732323730353137663036393835333939353962643338326162306163626536
+37316262623265633363356435316632653466636137303131303664636433376236613237376339
+36616639643232356330393134333364303137633736633764346233636330386232316566366435
+30613261613936343738303763623966653936323661383164613933333633653339363535306138
+32326466306634633965666466393435656432336163663130666266363230653730396665623531
+36643364306537306663303537333063363565386337663061623661343838303638393965373165
+38613939613061376161626163336164656237356164303562376137633135613738386331323262
+30373539633630646339323930373737346136633465616535643439643134306430653062383664
+61313138376138373961376561303162616438663263653561363339396132393834373566663436
+62356331323465616134656237356434633830666231646434363664623139373737393830616338
+36353066613464353739336462623966356330653534366332663735663937306462393233383939
+36363066633563393463303363653631646464323937613234333835306139373462366661643961
+30316462636638353531336266633061663933316266303335623837376239633835663265336338
+39313334396565653262613736616536646461656438373839316337363963663135353261353133
+32373366366236353663393065306338373961636432353533386436666532313637306433373236
+38383037663037643763383465313862336334326637346338383235663061316232613365656266
+31616136373135323039313633373538353761663439323839313365313462663063373339623530
+61313731303861333631613464343232303763316462643935626366346130366531313631626630
+39636630663866336161623835666261366337376239653139613230616231353636616266663238
+31653466363530346262326630353661366635616162313733323032633736653362306665363565
+31653731343465373736646338383830393735643736646266323965356336393939366537386566
+35613561333834653834626233396133323337303439643432373931616237613439343665343061
+39666661353532326435373332393739356636636433623163383337663165613834393864303533
+32356336366336353261653235663666633335626331663964636263656136366232373838613962
+37393464376137663630333334363234393464313062353366656435646633653265616265383535
+61333061303633623065666366643037333139356465343932376664333163623532626331336139
+33373732613264636331623964393336383665613264343131613138386362386362343539346234
+30336237356436623262393139363538306530356530353237666339386565613931303131666262
+30363866393061663437633532356238383530363066623862393531366530613731393137343434
+33386434613632383066636638356161323837653630363830336233653830343261303933616565
+65313334633838663264623032656131646331613539666436343334663061313837353030626161
+63303362666662356235343065373231646334656565316564626234363431346664373036303333
+39343363346365323237356365323062313630323736323737643432353262366534653131313033
+63383638333334333361383461626361333766343861653538343562326366623332626131613136
+62643537636233383263656564306430386333346432353434623433373638366536393438333434
+37656539303736633938316462366230613131633936363034386639623330653535326264333861
+35616537623461316662636166613530373963316236393938363932616566333430613366626363
+66383139323565353830303466356233353066316663653732303534383765346636653132363130
+32303563353232616537613966663836623832383335646331616364353336313363313234323362
+66616136636533346339363563623734623239626230636565623338363861393338613337623530
+64626363343533303333626234326666623136333332323532383662663635633538313433303835
+34623134386631376639623639313164393033616664346338633033656630623436633130373665
+38356635396238613633333738326233663933666562356630613063303230353462653264393531
+31303736633030663761376134366631646130363139623465653661366335363830633566333237
+33376631343334376435386135653330343832353339313931323434303265343361336231643638
+66623539313162643337353432393865626538633265633363353830306663393233333962313636
+33333565356536376464653131376633353363316663336563323230326537613165353134366365
+61363030326334656139353938613531643864316434383266353633373735326562306239323961
+37336638663837333738313230316236346262326135346536343331356234313130353661383464
+35376236346366373363326138383430323132626663303138353938383263643665393839363162
+31366166613037383166313264373035663066336138623535313035303533613132613436313136
+66393764333732356333363462333366346363613262316130636235353361313731383839653563
+63383134643262636262666237356233393430336163613135623264633336396139646231363562
+34393031663961643562396234666437356665356331633834396637336264653265353065306233
+30393461313663313564373236663362353435393535306465353136613730333866636639633161
+30666566393266616134636264366666356438616632336661393639366635356262653832353633
+32623466303835633065613936373063626432326463336163303838613836646332643035653933
+63363630663161373039653330633631643638313036633537323364373739363736656231636535
+35396466373666353361366535366334313538313639663131336662386166316162326331373838
+34386232653930383133613164393435346661643466343762343463376537633036393366656164
+34366465613839623533363235343737333565326165633634386230323938646166643737333261
+64333139663463666432346461613033616539643463323263343563303361373539303834353434
+61306635323463383238633738303830646263663036396566336534623237636234303566643533
+39663462663063386137326630353164633561653936343665326665306665326238303230346436
+31633138303236666362306162663036386334623339656565353730643630396263363738306139
+64323230616164303638643263396432646438356534313433633536656432333738303038323266
+31643965383036326134653030333932323231313363336263656534303839346631636230323032
+61303033383932626238353466353631326633633565343065306561396636393835373966383032
+61363061653662373731313862326461373133343930393963343062623663633033323865323565
+62633736623365613631326464373662393861663737623836666532353339363232363630333662
+65333265386561336337353838353238316466336162393738623034376339653864393733643837
+38313763656431323261366634386331366262653838613036646633326464383565353136356566
+32313131313466613266643435663933646132646339353239343535363333393535346565383331
+32326566383337323662663438316639366139386433316639633463333661396337393837646435
+66313637653939626536326332306139393438333137323532316130636439313066383633396335
+38373062353930623661306339653234336135396233383965303861363535616633366666656562
+37336331316534656465613536313364346633393066323839393833393864363234356330663264
+65336263613861383837373533646430666539316638323966623761373633666437306432386235
+66353531303533323662613565363065356236383939623237363835616262326536373962343538
+30316631656465313264393932626232346637356531336536613561383434663934643432613164
+33313833613532613365393637323262346437343933353138623765626665656663306263393862
+39303865316537643063363665626465356631653534393462353830653931636563653333323733
+31343864333630366566613731366333323631313337636236653662613832626464626333363537
+33303762363332306266323538323366383863383033616563376231303937316163396638663162
+64386664313863636535366331646238626437353664313731346633353738343733626263666230
+30616161333061393061366430656330613737333133656637656664316265616365313436373939
+65653564326165303761326236343436326363383538613734303539363363316135653630666138
+38663333323863363163353838653765353937313166316230323961376136326438653866346665
+34306561356536663363666162643362316139313438323632366136366461663230613563613434
+37333838663239356236343731313430363232623633626364336664613839393036393566656366
+61616332666262336231363262333832613937313330373231383830343130323966333261353661
+34633661363731613430393262373839333863393730613730323866623837363936333039383535
+36353763313565633037393032386135376537343430363535376238376131653935366434346431
+33353338323935613638306234353963653438323031643735613035613335393834343961373037
+37653131333336353230636136633431333463316137333636363338333230656131346633326162
+33303635613033333730663162623965343230303533393065306539666439656361306634646662
+38616234326637393364303731303566363661633462393836633237353139616634373933356462
+66303864333133643238313061386538313430636231653265336463633437396134626238386365
+38646135363764373837376534386132616139396238373765316633336135396462646230396233
+38393432373736343236646364313037633032666631313462356164656465333837383037353038
+39343962646236363633323465636638656266323966393635373163323330613937656266326636
+64633666323061623266643939366630396237643731343531623031663363663963376336316334
+31323836366665386336313139613836353764343066633231306433363538393438366162376537
+38306436346662336262623832323964663138383262393262396366656465343731373135663562
+63316230366236376238346639613034656662623166306536303031313930343938363363626333
+35353837326134646535626164663762306431306464323230663763616465636435643064393830
+65663439343166376163346137666431653731313738623630623263643133353439363730623230
+34303265383164623530366334343066316361313533323831343833623634326661366532313265
+64333034636663383437666238346434313761366262626231666163373433343230623662653762
+37363234623932636536356565313062633131313334623364333262336561616334643534316666
+38623032376432616339343939646638303630326235316163363530326238306335656630336462
+36313234643064333737613661393164306263353438666334646164346430333665396665386436
+32643136323431303063306135363131373966343666616163326466656233386532383930343764
+34313536643663623031326236663866396165656539313461313933343035306336643631363261
+65333934333231373435376134643237343237636230386465663832363665333334316663303761
+32616133386637303437376639316261643938383563636433633035353138343137623838313466
+65643835643562303234373137323037643165393738366262633638323939653233666163646630
+31613863393832336663326266306430663864323031383161663762636535636238363663343066
+38306533663931623537363964323733666563663765656331306236353436646566343766313039
+37646334643839326531326132633433653030376437373734643038653732346335653161323932
+36616533346437373665636166313337353136616466383237396266373131353136313535323666
+63373034613961643531643936633566383231336166323762316539373334323134636332383232
+36383336656538386631393665336661393432373339323432636565613963656232623034656635
+63376161306631326632636232653831643636396365303762323661366166353539343939313561
+39616233643564656538303764366365326338303436303261656433313766373766383638333634
+66346464623565366530663163666339333636363463336564393034373564633565623535646136
+37613133346565363230653666356631343037636638343832663866613461333061313464373736
+37323563663634373931396232626436626533323566323463346535353362333262633764366664
+30373337666366313866656362613562656239653565613035323936383861663931616266313637
+31636631326630393834346237613965396534323366313039643566343133363537393632663264
+66366265623962353164336463373031323262323936383163613834643433616333306661613430
+62366464353464326636656234336433656633376636366139343338373161303965333637626661
+30336337343936356131303237393264363232653033363163363036376163336639353961343563
+35346336666335636266373861626465633733613032393438616434313735316132313665663635
+34326438316632346666636265633035383336336462656331353737623066313765373366396636
+37383366303764386566316261316232663163616234663966396665313138303839646262306338
+63363365333735626165373735333631363761663735356635386139393739313764623531326561
+61663936363437376261613266633163326366333730323063633436643037663631303537656363
+66633334623064643239336439613735333431363631333435373532316230623065316332336438
+37346336366466366335653562646265613033656466306632646566626666323337353336366366
+62346163383439363933633763376639386132313333616261346234343439653533333462663436
+65353165313865313635383538633432613565343136383665303064636434313135383236636436
+30626538303437623837343663396464666232393139656335613739356165616136316263323337
+38386537326132386264363066333730653863353430643633656533663262613963633231383533
+65623032356131313936623931333234303532626533316636633763393631313139326562616530
+37343965373835393564613630373632666437393738666633636536366135316336333565336538
+61636635633861353561353063666433343837313733653837653239393061313732373930323339
+33653965346230616336323766363434643030633166313562366561363963396663626239343834
+34663933373832666635643961613461643331346564323431343365343439626135613638343866
+65333732653366343032373833623566613865323539666463623163623937343338386632646330
+34393865333864343666376265353062383966653839316263376434636531366561316433373835
+63343264383465336439356565313130373736376532376538336533323134666565346261353435
+62343534313866343331346439303164633539336537613130353364353430323361383938323137
+38353862663730343234333566643936356562383632313238303166646438646435623765373362
+66323339656466653235346661353266383339616364613562656233653935653739323262353661
+35356338363035373066323238323364336438643839313435313163383935316163396335303231
+36303133636539316661396664376639653265376266366432326633323734313165356537656337
+61633835303735366332336134613733336534646531393265633437373862316262663066393262
+61646663363239633430363165346534386639383562316161363532396266613837346230323663
+33623539633637666362346332323833316165643436353332363038343436666536336461636130
+37383839393866386139343565373164626639326530666662323230373030333938393531326435
+61306436623362373363623135336139343162393236326463666664323465646436366561323331
+30396663643765396234346265353831623634343963393234306532613336353732373630363830
+31613561353464306363316136383463396361353933313239643732353335656232636230323539
+64316163316461666564353637626532363966313332353362383936643661363066353734666631
+62363562613362333436313534326135393665663930376535646562646635326236363163626632
+31376334336265323737326138373532323363393937303635373663653862393730646532616637
+34643235636165343063633836623936666564313566303861356332636130393635353438613637
+64303430653061356533373235336661363139643537633337386164303236613934313566643431
+65393664333233326565653634656566393738366566613137383436366638656561376135626364
+38303633343737633464356134616331366266613164386439346338373036666337386632376638
+62316566646539633961353865636165313966663339336436316165323966326561363166613134
+32373764333839313338353162326363373430393031333038646631333836323237643537376462
+33623836396536343335333665366561363737333864363963383836353234633739626466316561
+63346638316365363364316530656563343537326534353137396433646333626666313735366331
+31373465303032306636373437393366316639393065336336306130346234313038316539353037
+36333164306566313539633464373132643234306335633361386637393231306566333832386566
+35356661633535306531623961346635613730653566663536393234373839613961626632313837
+62363062346534623961373266363561326666316161643366386133323163636532363437623266
+38646464366463353162376635313764353338616439633566633862636238643265663465396161
+65333238623833346631653264336430656539623561353135353363326139323234376333346436
+31633365613730663133656532653937373334386335643138663666626230343339663232656336
+36613931623233303164646630363966353730643531356130643265363332386333313132343433
+37653233336337373533313839393365623532376439656537326439663864326639636462613830
+38323832333865613139336632363534616639313566303131326339353934396534336261333839
+63303730363732613037386265663132326264613435666138633639303761623361623836616163
+62663263376231383036663062376333656362303666383962333762653066396339393231636533
+37386538636635366463663434653564656664316230653836646639333736316434356339393435
+39656564333330393436336135656262363862353263613664643063633365336161366664353765
+36356232613234386265396436346130353763636538346636663234633237663133323066316563
+31636237643538376632663462626363386234306334303062343530306161306265633031366161
+63393830656333633864376335623231653230396635616331666236666661643330356135343931
+35356335323332346361666538343065643565333133393137323536363438326563313531336336
+39613330653331356436326437653936386531663037336539643165316131663435363766326435
+37316466666166303262383265653833633437313732363632636235363037326561353032623134
+6239663434363939386230356530333036656637303161626465