---

- hosts: vserver1.matzman.net
  roles:
    - role: ubuntu-docker-host
      vars:
        firewall_allowed_tcp_ports:
          - 80
          - 443
        firewall_allowed_udp_ports: []
        docker_user_allowed_tcp_ports:
          - 80
          - 443
        docker_user_allowed_udp_ports: []

        wg_nets:
          wg0:
            secrect:
                vserver1.matzman.net:
                    private_key: "oJOaTfNDU5dxj3aUpTOHE98FCg/Dx4agwV6pXg8OTWc="

            hosts:
                vserver1.matzman.net:
                    address: "10.0.0.1/24"
                    port: 51432
                    public_key: "IGo70n2CfouTLUSrzqRiCfU9iU++sJ1cJSuPO6tsoGw="
                    endpoint: "vserver.matzman.net"
                    peers:
                        client1:
                            allowed_ips: "10.0.0.2/32"

                client1:
                    address: "10.0.0.2/24"
                    public_key: "IGo70n2CfouTLUSrzqRiCfU9iU++sJ1cJSuPO6tsoGw="
                    peers:
                        vserver1.matzman.net:
                            allowed_ips: "0.0.0.0/0"

    - role: docker-host
    - role: docker-traefik-proxy
      vars:
        app_name: "traefik-vserver1"
    - role: docker-arcane
      vars:
        app_name: "arcane-vserver1"
    - role: docker-socket-proxy