Ansible Role for Wireguard VPN setup

Compatibility

Platform	Version
debian	12

Dependencies

• Ansible (v2.14+)
• Molecule + (v4.0.4+) + docker plugin (for local testing)
• Docker (for local testing)

Role dependencies

• iptables required
• iptables persistent required
• docker compose (see prometheus_wireguard_exporter) optional
• prometheus (see prometheus_wireguard_exporter) optional

Local Testing

git clone https://github.com/unleftie/ansible-role-wireguard.git
cd ansible-role-wireguard/
molecule test

Installation

Upgradability notice: When upgrading from old version of this role, be aware that some files may be lost.

- name: Sample 1
  hosts: all
  become: true
  pre_tasks:
    - name: Ensure apt cache are updated
      apt:
        update_cache: true
        cache_valid_time: 3600
      when: ansible_os_family == "Debian"
  tasks:
    - include_role:
        name: "ansible-role-wireguard"

Adding new clients

bash /etc/wireguard/$WG_INTERFACE-files/add-client.sh

📝 License

This project is licensed under the MIT.