Init

README.md

@@ -0,0 +1 @@
+# wireguard

defaults/main.yml

@@ -0,0 +1,4 @@
+path: /srv/{{ role_name }}
+
+wireguard_override: {}
+wireguard_defaults: {}

handlers/main.yml

@@ -0,0 +1,8 @@
+- name: restart container
+  community.docker.docker_compose_v2:
+    project_src: "{{ path }}"
+    project_name: "{{ role_name }}"
+    recreate: "always"
+    services: ["wireguard"]
+    state: "restarted"
+  when: not _wireguard_already_restarted

tasks/main.yml

@@ -0,0 +1,25 @@
+---
+- name: "set local variables from overrides and defaults"
+  set_fact:
+    wireguard: "{{ (wireguard_defaults | combine(wireguard_override, recursive=True)) if wireguard_override else wireguard_defaults }}"
+
+- name: ensure that path exists
+  file:
+    path: "{{ path }}/config"
+    state: directory
+
+- name: template docker-compose
+  template:
+    src: compose.yml.j2
+    dest: "{{ path }}/compose.yml"
+  notify: restart container
+
+- name: ensure container is running
+  community.docker.docker_compose_v2:
+    project_src: "{{ path }}"
+    project_name: "{{ role_name }}"
+    state: "present"
+    pull: "always"
+    wait: true
+    services: ["wireguard"]
+  register: _compose_result

templates/compose.yml.j2

@@ -0,0 +1,26 @@
+---
+services:
+  wireguard:
+    image: lscr.io/linuxserver/wireguard:latest
+    container_name: wireguard
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Berlin
+      - SERVERURL=be.urmel.de
+      - SERVERPORT=51820
+      - PEERDNS=auto
+      - INTERNAL_SUBNET=10.100.1.0
+      - ALLOWEDIPS=0.0.0.0/0
+      - PERSISTENTKEEPALIVE_PEERS=30
+      - LOG_CONFS=true
+    volumes:
+      - ./config:/config
+    ports:
+      - 51820:51820/udp
+    sysctls:
+      - net.ipv4.conf.all.src_valid_mark=1
+    restart: unless-stopped