Add wireguard server config

ansible/roles/gateway/tasks/haproxy.yml

@@ -6,11 +6,7 @@
 
 - name: Import vault
   include_vars:
-    file: vault.yml
-
-- name: Define context
-  set_fact:
-    upstream: 10.23.0.2
+    file: vars/gateway.yml
 
 - name: Haproxy config
   template:

ansible/roles/gateway/tasks/main.yml

@@ -1,3 +1,7 @@
+- name: Import wireguard variables
+  include_vars:
+    file: vars/wireguard.yml
+
 - name: Configure HAproxy
   include: haproxy.yml
 

ansible/roles/gateway/tasks/wireguard.yml

@@ -29,3 +29,21 @@
       - wireguard-tools
   become: true
   become_user: root
+
+- name: Wireguard server config
+  template:
+    src: files/wireguard.conf
+    dest: /etc/wireguard/wg0.conf
+    backup: yes
+  become: true
+  become_user: root
+  register: wireguard_conf
+
+- name: Enable wireguard
+  service:
+    name: wg-quick@wg0
+    state: reloaded
+    enabled: true
+  when: wireguard_conf.changed
+  become: true
+  become_user: root