Files
computer-playbook/roles/svc-net-wireguard/tasks/utils/interface_up.yml
evangelostsak b25dc7f667 docs(svc-net-wireguard): drop the syncconf rationale
Why the interface is reconfigured in place rather than restarted is
recorded in requirement 037; the task file only has to do it.
2026-10-05 12:43:23 +02:00

23 lines
739 B
YAML

---
- name: "🔍 Check whether '{{ mesh_name }}' is already up"
ansible.builtin.command: "wg show {{ mesh_name | quote }}"
register: wireguard_present
changed_when: false
failed_when: false
- name: "🔺 Bring '{{ mesh_name }}' up"
ansible.builtin.command: "wg-quick up {{ mesh_name | quote }}"
register: wireguard_up
changed_when: wireguard_up.rc == 0
when: wireguard_present.rc != 0
- name: "♻️ Reconfigure the live '{{ mesh_name }}' in place"
ansible.builtin.shell: >
set -o pipefail && wg syncconf {{ mesh_name | quote }}
<(wg-quick strip {{ mesh_name | quote }})
args:
executable: /bin/bash
register: wireguard_synced
changed_when: wireguard_synced.rc == 0
when: wireguard_present.rc == 0