roles/wireguard/tasks/main.yml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

- name: Set up traffic routing
  ansible.builtin.include_role:
    name: router
  when: wg_router

- name: Set up Wireguard
  become: true
  block:
    - name: Install wireguard-tools
      ansible.builtin.apt:
        install_recommends: false
        name: wireguard-tools
        state: present

    - name: Write wg-quick config file
      ansible.builtin.template:
        src: wg0.conf.j2
        dest: '/etc/wireguard/{{ wg_name }}.conf'
        owner: root
        group: root
        mode: '600'
      register: config

    - name: Restart wg-quick service
      ansible.builtin.systemd_service:
        name: 'wg-quick@{{ wg_name }}'
        enabled: true
        state: restarted
      when: config.changed