#SPDX-License-Identifier: MIT-0
---
wireguard_port: 51820
wireguard_interface: wg0

# Server private key — store in Ansible Vault in host_vars
# wireguard_private_key: "YOUR_PRIVATE_KEY"

# Server address in the WireGuard subnet, e.g. "10.0.0.1/24"
# wireguard_address: "10.0.0.1/24"

# Optional: DNS server pushed to clients
# wireguard_dns: "1.1.1.1"

# Peers — defined per host in host_vars
# wireguard_peers:
#   - name: client1
#     public_key: "CLIENT_PUBLIC_KEY"
#     allowed_ips: "10.0.0.2/32"
#   - name: client2
#     public_key: "CLIENT_PUBLIC_KEY"
#     allowed_ips: "10.0.0.3/32"
wireguard_peers: []