Initial commit

roles/wireguard/defaults/main.yml

@@ -0,0 +1,23 @@
+#SPDX-License-Identifier: MIT-0
+---
+wireguard_port: 51820
+wireguard_interface: wg0
+
+# Server private key — store in Ansible Vault in host_vars
+# wireguard_private_key: "YOUR_PRIVATE_KEY"
+
+# Server address in the WireGuard subnet, e.g. "10.0.0.1/24"
+# wireguard_address: "10.0.0.1/24"
+
+# Optional: DNS server pushed to clients
+# wireguard_dns: "1.1.1.1"
+
+# Peers — defined per host in host_vars
+# wireguard_peers:
+#   - name: client1
+#     public_key: "CLIENT_PUBLIC_KEY"
+#     allowed_ips: "10.0.0.2/32"
+#   - name: client2
+#     public_key: "CLIENT_PUBLIC_KEY"
+#     allowed_ips: "10.0.0.3/32"
+wireguard_peers: []