# https://dev.to/tangramvision/exploring-ansible-via-setting-up-a-wireguard-vpn-3389
---

- name: 'install wireguard package'
  apt:
    name: 'wireguard'
    state: 'present'
    update_cache: true

- name: 'create server wireguard config'
  template:
    dest: '/etc/wireguard/wg0.conf'
    src: 'wg0.conf.j2'
    owner: 'root'
    group: 'root'
    mode: '600'
  notify: 'restart wireguard'

- name: 'Enable IP Forwarding'
  sysctl:
    name: '{{ item.sysctl_key }}'
    reload: true
    state: 'present'
    sysctl_set: true
    value: '{{ item.sysctl_val }}'
  loop:
    - sysctl_key: 'net.ipv4.ip_forward'
      sysctl_val: "1"
    - sysctl_key: 'net.ipv6.conf.all.disable_ipv6'
      sysctl_val: "0"
    - sysctl_key: 'net.ipv6.conf.all.forwarding'
      sysctl_val: "1"

- name: 'start wireguard and enable on boot'
  systemd:
    name: 'wg-quick@wg0'
    state: 'started'
    enabled: true