# Usage:
# ansible-playbook -i hosts playbooks/vps.yaml --vault-id vaultid
#
# Install:
# ansible-galaxy install -r requirements.yml
# ansible-galaxy role install -r requirements.yml
#
---

- hosts: vps
  gather_facts: false
  become: true
  pre_tasks:
    - name: 'Set python3 as default python'   # noqa no-changed-when
      command: 'update-alternatives --install /bin/python python /bin/python3 3'
  roles:
    - role: wireguard_client
      vars:
        wireguard_client_server_pub_key: 'iwsriL3AUn4dgKfsSNgJtj/G808k4jXvSC+mM70YnAw='
        wireguard_client_server_endpoint: 'kdvpn.crabdance.com'
        wireguard_client_server_allowed_ips: '192.168.10.0/24'
        wireguard_client_peer_ip: '192.168.10.4/24'
        wireguard_client_server_listen_port: 51820
        wireguard_client_port_forwards:
          - 80      # webserver
          - 443     # webserver