jannik/ansible-role-tinc
1
1
Fork 0
Code Issues Pull requests Releases Activity

Use utun device on macOS (no tuntap kext needed)

Browse source
This commit is contained in:
Jannik Beyerstedt 2021-03-21 12:24:22 +01:00
parent c4e3a9e407
commit be3d627bdb
2 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
templates/tinc-up.j2
View file

@ -16,7 +16,7 @@ iptables -t nat -A POSTROUTING -o eth0 -s {{ tinc_vpn_net }} -j MASQUERADE
{% elif ansible_os_family == 'Darwin' %}
# only a single endpoint works, because tun interface is p2p
/sbin/ifconfig tun0 inet {{ tinc_client_ip | ipaddr('address') }} {{ tinc_remote_nets[0].gateway }} up netmask 255.255.255.0
/sbin/ifconfig $INTERFACE inet {{ tinc_client_ip | ipaddr('address') }} {{ tinc_remote_nets[0].gateway }} up netmask 255.255.255.0
/sbin/route -n add -net {{ tinc_remote_nets[0].net_cidr }} {{ tinc_remote_nets[0].gateway }}

2
templates/tinc.conf.j2
View file

@ -1,6 +1,8 @@
Name = {{ ansible_hostname | replace('-', '_') }}
{% if (override_os_family is defined) | ternary(override_os_family,ansible_os_family) != 'Darwin' %}
Device = /dev/net/tun
{% elif ternary(override_os_family,ansible_os_family) == 'Darwin' %}
DeviceType = utun
{% endif %}
{% if ansible_hostname | replace('-', '_') != tinc_central_host %}
ConnectTo = {{ tinc_central_host }}