#cloud-config
hostname: ${hostname}
fqdn: ${fqdn}
prefer_fqdn_over_hostname: true

write_files:
  - path: /etc/wireguard/wg0.conf
    permissions: "0600"
    content: |
      [Interface]
      Address = ${wg_address}/24
      ListenPort = ${wg_port}
      PrivateKey = ${wg_private_key}

      [Peer]
      PublicKey = ${hub_public_key}
      Endpoint = ${hub_endpoint}
      AllowedIPs = ${allowed_ips}
      PersistentKeepalive = 25
  - path: /etc/NetworkManager/conf.d/90-dns-none.conf
    content: |
      [main]
      dns=none

runcmd:
  - dnf install -y wireguard-tools
  - systemctl enable --now wg-quick@wg0
  - systemctl reload NetworkManager
  - printf 'search main.unkin.net\nnameserver 198.18.200.7\n' > /etc/resolv.conf
  - rpm -q puppet-agent || dnf install -y https://yum.puppet.com/puppet8-release-el-9.noarch.rpm
  - dnf install -y puppet-agent
  - /opt/puppetlabs/bin/puppet config set --section main certname ${fqdn}
  - /opt/puppetlabs/bin/puppet config set --section main server puppet.k8s.syd1.au.unkin.net
  - /opt/puppetlabs/bin/puppet config set --section main ca_server puppetca.k8s.syd1.au.unkin.net
  - /opt/puppetlabs/bin/puppet config set --section main report_server puppet.k8s.syd1.au.unkin.net
  - /opt/puppetlabs/bin/puppet config set --section main environment production
  - systemctl enable --now puppet