- name: "Setup reverse-proxy tunnel"
  hosts: berliet.medicenlutte.fr
  vars_files:
    - tunnel/vars.yml
  tasks:

    - name: Setup wireguard
      ansible.builtin.apt:
        name: wireguard
        state: present
      become: true

    - name: Setup wireguard folder
      ansible.builtin.file:
        path: /etc/wireguard
        state: directory
        owner: root
        group: root
        mode: u=rwx,g=-rwx,o=-rwx
      become: true
    
    - name: Setup wgkiwi wireguard
      ansible.builtin.template:
        src: tunnel/wgkiwi.conf
        dest: /etc/wireguard/wgkiwi.conf
        owner: root
        group: root
        mode: u=rwx,g=-rwx,o=-rwx
      become: true
    
    - name: Setup wireguard interface
      ansible.builtin.copy:
        src: tunnel/wgkiwi_berlier
        dest: /etc/network/interfaces.d/wgkiwi.conf
        owner: root
        group: root
      become: true