3 Commits

Include renames

Author	SHA1	Message	Date
evangelostsak	b25dc7f667	docs(svc-net-wireguard): drop the syncconf rationale ... Why the interface is reconfigured in place rather than restarted is recorded in requirement 037; the task file only has to do it.	2026-10-05 12:43:23 +02:00
evangelostsak	041805f1ea	fix(svc-net-wireguard): reconfigure a live interface instead of restarting it ... wg-quick down on the interface Ansible is connected over kills the session carrying the play, and the up that would restore it never runs. syncconf applies new keys and peers to the live interface, so a rotated mesh converges without dropping the connection that is rotating it. Latent until now only because the deploy still runs over the underlay.	2026-09-25 22:35:07 +02:00
evangelostsak	c6f2b9fc27	feat(wireguard): restart each interface rather than only starting it ... wg-quick up on an already-up interface is a no-op, which would leave the old keys live in the kernel after a rotation rewrote the config. Taking the interface down first is what makes a rotated deploy actually take effect; the down half is tolerated because it exits non-zero when nothing was up.	2026-09-18 10:35:25 +02:00