---
-
    name: Read WireGuard private key
    slurp:
        src: /etc/wireguard/private.key
    register: wg_private_key_file

-
    name: Deploy WireGuard configuration
    template:
        src: wg.conf.j2
        dest: "/etc/wireguard/{{ wg_interface }}.conf"
        mode: "0600"
    notify: restart wireguard

-
    name: Enable and start WireGuard
    systemd:
        name: "wg-quick@{{ wg_interface }}"
        enabled: yes
        state: started