# network ~~ playbooks/network.yml
# common network configuration

---

- hosts: localhost
  gather_facts: no
  roles:
    - { role: ssh_dns }

- hosts: all
  gather_facts: no
  roles:
    - { role: wireguard }

- hosts: servers
  roles:

    - role: rc
      vars:
        rc_cmd: "{{ path_wgquick }}"
        rc_args: "up {{ global.dcontroller }}"
        rc_name: wireguard
        rc_user: "{{ user_root }}"
      ignore_errors: true

    - { role: dns }
    - { role: sshd }

- hosts: dcontroller
  roles:
    - { role: pf }