wireguard only if primary ip is public

roles/server/tasks/main.yml

@@ -16,6 +16,8 @@
     when:
       - wireguard is defined
       - wireguard == true
+      - ansible_default_ipv4.address | ipaddr('public')
+    ignore_errors: True
   - include_tasks: system_setup/cron.yml
   - include_role:
       name: base