#SPDX-License-Identifier: MIT-0
---
- name: Install wireguard-tools
  ansible.builtin.package:
    name: wireguard-tools
    state: present
  become: true

- name: Ensure /etc/wireguard directory exists
  ansible.builtin.file:
    path: /etc/wireguard
    state: directory
    owner: root
    group: root
    mode: "0700"
  become: true

- name: Deploy wg0 config
  ansible.builtin.template:
    src: wg0.conf.j2
    dest: /etc/wireguard/wg0.conf
    owner: root
    group: root
    mode: "0600"
  become: true
  notify: Restart wg0

- name: Enable and start wg-quick@wg0
  ansible.builtin.systemd:
    name: wg-quick@wg0
    enabled: yes
    state: started
  become: true