mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-09 20:26:33 +00:00
The drill strips the services it cannot run without from the incoming disable list, and wireguard was not among them. For an app whose own graph does not reach it, the provision step disabled the service while extend_inventory had already placed svc-net-wireguard on every swarm host, and the services disabler rejected the pair: service 'wireguard' is disabled, but provider role 'svc-net-wireguard' is still active in .../devices.yml svc-swarm-node declares the service required for exactly this reason, so the drill has no more business disabling it than it has disabling node.