- name: server | utilities | wireguard install
  package:
    name: "{{ wireguard_package }}"
    state: latest

- name: server | utilities | wireguard generate private key
  shell:
    cmd: umask 077 && wg genkey | tee privatekey | wg pubkey > publickey
    chdir: /etc/wireguard
    creates: /etc/wireguard/publickey

- name: server | utilities | wireguard generate config
  template:
    dest: "/etc/wireguard/VPN.conf"
    src: client_VPN.conf.j2
    owner: root
    group: root
    mode: '0600'