---
- name: ensure /etc/wireguard exists
  ansible.builtin.file:
    path: /etc/wireguard
    state: directory
    mode: "0700"

- name: deploy wireguard config
  ansible.builtin.template:
    src: "wg0.conf.j2"
    dest: "/etc/wireguard/wg0.conf"
    mode: "0644"
  register: wg0_conf

- name: restart wg0 systemd service unit
  ansible.builtin.systemd_service:
    name: wg-quick@wg0
    daemon_reload: true
    state: restarted
    enabled: true
  when: wg0_conf.changed