ansible/roles/vpn/templates/wiregard.conf.j2

{{ ansible_managed | comment }}

[Interface]
Address = {{ item.value.ip }}
PrivateKey = {{ item.value.private_key }}
ListenPort = {{ vpn_port }}

{% for peer in item.value.peers %}
[Peer]
{{ peer.comment | comment }}
Publickey = {{ peer.public_key }}
{% if peer.endpoint is defined %}
Endpoint = {{ peer.endpoint }}:{{ vpn_port }}
{% endif %}
AllowedIPs = {{ peer.allowed_ips | join(", ") }}

{% endfor %}
{% if item.value.keepalive %}
PersistentKeepalive = {{ vpn_keepalive_period }}
{% endif %}