From c556c8d6ed5659f0d9b5b1574270108ba5baffbd Mon Sep 17 00:00:00 2001
From: Gregor Michels <hirnpfirsich@brainpeach.de>
Date: Wed, 2 Nov 2022 23:49:00 +0100
Subject: [PATCH] wip

---
 playbook_provision_eap-adp-jump01.yml               | 6 ++++++
 templates/{ => eae-adp-jump01/etc}/hostname.wg0     | 0
 {files => templates/eae-adp-jump01/etc}/ospfd.conf  | 0
 {files => templates/eae-adp-jump01/etc}/pf.conf     | 0
 templates/eae-adp-jump01/etc/pf.include.conf        | 1 +
 {files => templates/eae-adp-jump01/etc}/pf.wg0.conf | 0
 templates/eae-adp-jump01/etc/sysctl.conf            | 2 ++
 7 files changed, 9 insertions(+)
 rename templates/{ => eae-adp-jump01/etc}/hostname.wg0 (100%)
 rename {files => templates/eae-adp-jump01/etc}/ospfd.conf (100%)
 rename {files => templates/eae-adp-jump01/etc}/pf.conf (100%)
 create mode 100644 templates/eae-adp-jump01/etc/pf.include.conf
 rename {files => templates/eae-adp-jump01/etc}/pf.wg0.conf (100%)
 create mode 100644 templates/eae-adp-jump01/etc/sysctl.conf

diff --git a/playbook_provision_eap-adp-jump01.yml b/playbook_provision_eap-adp-jump01.yml
index 177e372..efd5c1f 100644
--- a/playbook_provision_eap-adp-jump01.yml
+++ b/playbook_provision_eap-adp-jump01.yml
@@ -2,6 +2,12 @@
 - name: provision eap-adp-jump01
   hosts: eae-adp-jump01
   tasks:
+    - name: configure sysctl
+      template:
+        src: "templates/eae-adp-jump01/etc/sysctl.conf"
+        dest: "/etc/sysctl.conf"
+        mode: 0600
+
     - name: create /etc/pf.include.conf
       file:
         path: /etc/pf.include.conf
diff --git a/templates/hostname.wg0 b/templates/eae-adp-jump01/etc/hostname.wg0
similarity index 100%
rename from templates/hostname.wg0
rename to templates/eae-adp-jump01/etc/hostname.wg0
diff --git a/files/ospfd.conf b/templates/eae-adp-jump01/etc/ospfd.conf
similarity index 100%
rename from files/ospfd.conf
rename to templates/eae-adp-jump01/etc/ospfd.conf
diff --git a/files/pf.conf b/templates/eae-adp-jump01/etc/pf.conf
similarity index 100%
rename from files/pf.conf
rename to templates/eae-adp-jump01/etc/pf.conf
diff --git a/templates/eae-adp-jump01/etc/pf.include.conf b/templates/eae-adp-jump01/etc/pf.include.conf
new file mode 100644
index 0000000..9007580
--- /dev/null
+++ b/templates/eae-adp-jump01/etc/pf.include.conf
@@ -0,0 +1 @@
+include "/etc/pf.wg0.conf"
diff --git a/files/pf.wg0.conf b/templates/eae-adp-jump01/etc/pf.wg0.conf
similarity index 100%
rename from files/pf.wg0.conf
rename to templates/eae-adp-jump01/etc/pf.wg0.conf
diff --git a/templates/eae-adp-jump01/etc/sysctl.conf b/templates/eae-adp-jump01/etc/sysctl.conf
new file mode 100644
index 0000000..a3ff03e
--- /dev/null
+++ b/templates/eae-adp-jump01/etc/sysctl.conf
@@ -0,0 +1,2 @@
+net.inet.ip.forwarding=0
+net.inet6.ip6.forwarding=0