From 1c9de2a2a18dce38229ea14552e44c8ee777fc0b Mon Sep 17 00:00:00 2001
From: Egor Tensin <egor@tensin.name>
Date: Mon, 6 Apr 2026 21:39:36 +0200
Subject: workflows/infra: set up WireGuard

Since I now check for open ports on my hosts.
---
 .github/workflows/infra.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/infra.yml b/.github/workflows/infra.yml
index 4fd55a4..bbe1d4e 100644
--- a/.github/workflows/infra.yml
+++ b/.github/workflows/infra.yml
@@ -25,6 +25,15 @@ jobs:
       DIGITALOCEAN_TOKEN: '${{ secrets.DIGITALOCEAN_TOKEN }}'
       YC_SERVICE_ACCOUNT_KEY_FILE: '${{ secrets.YC_SERVICE_ACCOUNT_KEY_FILE }}'
     steps:
+      - name: Set up WireGuard
+        uses: egor-tensin/setup-wireguard@v1
+        with:
+          endpoint: '${{ secrets.WG_ENDPOINT }}'
+          endpoint_public_key: '${{ secrets.WG_ENDPOINT_PUBLIC }}'
+          ips: '${{ secrets.WG_IPS }}'
+          allowed_ips: '${{ secrets.WG_ALLOWED_IPS }}'
+          private_key: '${{ secrets.WG_PRIVATE }}'
+          preshared_key: '${{ secrets.WG_PRESHARED }}'
       - name: Set up Terraform
         uses: hashicorp/setup-terraform@v4
       - name: Configure SSH
-- 
cgit v1.3