wireguard: finally working

common.yml

@@ -3,3 +3,5 @@
   remote_user: root
   roles:
     - common
+    - vpn-server-wireguard
+

roles/vpn-server-wireguard/tasks/main.yml

@@ -1,6 +1,11 @@
 ---
-- name: wireguard server keys
+
-  hosts: vpn_server
+- name: install wireguard
+  apt:
+    name: wireguard
+    state: present
+
+- name: create server wireguard config
   vars:
     server_privkey: !vault |
       $ANSIBLE_VAULT;1.1;AES256
@@ -11,13 +16,6 @@
       30353631363164346161343530313365663437663533366639636432353234376632333638313464
       6263333266666164343834636330626265326135303361636135
     server_pubkey: nbHkhDv4TLxjdGRqwW4dyFyNZsYBTi2ryVCZ7/K7aEs=
-  tasks:
-    - name: install wireguard
-      apt:
-        name: wireguard
-        state: present
-
-    - name: create server wireguard config
   template:
     dest: /etc/wireguard/wg0.conf
     src: server_wg0.conf.j2
@@ -25,7 +23,7 @@
     group: root
     mode: '0600'
 
-    - name: enable and persist ipv6 forwarding
+- name: enable and persist ipv6 forwarding
   sysctl:
     name: net.ipv6.conf.all.forwarding
     value: "1"
@@ -33,7 +31,7 @@
     sysctl_set: yes
     reload: yes
 
-    - name: enable and persist ipv4 forwarding
+- name: enable and persist ipv4 forwarding
   sysctl:
     name: net.ipv4.ip_forward
     value: "1"
@@ -41,7 +39,7 @@
     sysctl_set: yes
     reload: yes
 
-    - name: start and enable wireguard
+- name: start and enable wireguard
   systemd:
     name: wg-quick@wg0
     enabled: yes