- name: create local wireguard directory
  file:
    path: "{{ wireguard_local_dir }}"
    state: directory
    mode: 0700
  run_once: true
  delegate_to: localhost

- name: create wireguard directory
  file:
    path: "{{ wireguard_dir }}"
    owner: 0
    group: 0
    mode: 0700
    state: directory

- name: include key generation
  include_tasks: keys.yml

- name: include configuration generation
  include_tasks: configuration.yml

- name: install wireguard on remote host
  package:
    name: wireguard-tools
    state: present

- name: include service configuration for server
  include_tasks: service.yml
  when: inventory_hostname == wireguard_domain_controller

- name: include service configuration for hosts
  include_tasks: service.yml
  when: inventory_hostname != wireguard_domain_controller