feat(wg-admin): install wireguard

group_vars/matrix_servers

@@ -393,6 +393,8 @@ devture_systemd_service_manager_services_list_auto: |
     ([{'name': (devture_traefik_identifier + '.service'), 'priority': 3000, 'groups': ['matrix', 'traefik', 'reverse-proxies']}] if devture_traefik_enabled else [])
     +
     ([{'name': (devture_traefik_certs_dumper_identifier + '.service'), 'priority': 3500, 'groups': ['matrix', 'traefik-certs-dumper']}] if devture_traefik_certs_dumper_enabled else [])
+    +
+    ([{'name': 'wg-quick@wg0', 'priority': 650, 'groups': ['matrix', 'matrix-admin-wireguard']}] if matrix_admin_wireguard_enabled else [])
   }}
 
 ########################################################################

roles/custom/matrix-admin-wireguard/tasks/install.yml

@@ -0,0 +1,14 @@
+---
+
+- name: Install WireGuard
+  ansible.builtin.package:
+    name: wireguard
+    state: present
+
+- name: Install WireGuard Configuration Template
+  ansible.builtin.template:
+    src: "{{ role_path }}/templates/wg0.conf.j2"
+    dest: /etc/wireguard/wg0.conf
+    owner: root
+    group: root
+    mode: '0600'

roles/custom/matrix-admin-wireguard/tasks/main.yml

@@ -0,0 +1,18 @@
+---
+
+-
+  tags:
+    - setup-all
+    - setup-admin-wireguard
+    - install-all
+    - install-admin-wireguard
+  block:
+    - when: matrix_admin_wireguard_enabled | bool
+      ansible.builtin.include_tasks: "{{ role_path }}/tasks/install.yml"
+
+- tags:
+    - setup-all
+    - setup-bot-chatgpt
+  block:
+    - when: not matrix_admin_wireguard_enabled | bool
+      ansible.builtin.include_tasks: "{{ role_path }}/tasks/uninstall.yml"

roles/custom/matrix-admin-wireguard/tasks/uninstall.yml

@@ -0,0 +1,17 @@
+---
+
+- name: Stop and Disable WireGuard Service
+  ansible.builtin.systemd:
+    name: "wg-quick@wg0"
+    state: stopped
+    enabled: false
+
+- name: Remove WireGuard Configuration File
+  ansible.builtin.file:
+    path: "/etc/wireguard/wg0.conf"
+    state: absent
+
+- name: Uninstall WireGuard
+  ansible.builtin.package:
+    name: wireguard
+    state: absent

setup.yml

@@ -118,6 +118,7 @@
     - custom/matrix-nginx-proxy
     - custom/matrix-coturn
     - custom/matrix-media-repo
+    - custom/matrix-admin-wireguard
 
     - role: galaxy/auxiliary