---
- name: WireGuard und resolvconf installieren
  apt:
    name:
      - wireguard
      - resolvconf
    state: present
    update_cache: yes

- name: WireGuard Config deployen
  copy:
    dest: /etc/wireguard/wg0.conf
    content: |
      [Interface]
      PrivateKey = {{ wireguard_private_key }}
      Address = {{ wireguard_address }}
      DNS = 8.8.8.8
      MTU = {{ wireguard_mtu }}

      [Peer]
      PublicKey = {{ wireguard_vps_pubkey }}
      Endpoint = {{ wireguard_endpoint }}
      AllowedIPs = {{ wireguard_allowed_ips }}
      PersistentKeepalive = {{ wireguard_persistent_keepalive }}
    mode: "0600"
  notify: restart wireguard

- name: WireGuard aktivieren und starten
  systemd:
    name: wg-quick@wg0
    enabled: true
    state: started