Add wireguard configuration

vars/desktop.yml

@@ -1 +1,26 @@
 platform_packages: []
+
+vpn_ip: '10.0.0.3'
+vpn_subnet: '24'
+
+vpn_public_key_path: '/etc/wireguard/keys/public/desktop.pub'
+vpn_private_key_path: '/etc/wireguard/keys/private/desktop.key'
+vpn_private_key: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          65386334366166306164363464633364383935313739373730373139663139373964336665636264
+          3563663038313039363230623266393164646164373739620a623536633631643231633938613461
+          63366239333230663531306333383962353937353736663336343434663633303232386531353832
+          6434633935333538650a613065306239333031656362356165326136333131356135383436326561
+          62303035386634636333353664373231633434656538303866386262353139363439363435346637
+          6637363334623133376134306165626564343864633032613763
+
+vpn_peers:
+  - {
+      name: 'zeus',
+      allowd_ips: '10.0.0.1/32',
+      endpoint: '178.85.119.159:51902',
+      public_key: 'CeybSMpJiicXmndIuhe89Bay3z3PEdYNyAwIFsacBEo=',
+      preshared_key_path: '/etc/wireguard/keys/private/preshared-zeus.psk',
+      preshared_key_source_path: 'files/desktop/wireguard/preshared.psk',
+      preshared_key: !vault "$ANSIBLE_VAULT;1.1;AES256\r\n363333633336613939306632323163396239303739366135393232396134393266623939613534326238393638333137383235313039623264343932303038330a633934373638363966306533346235326234663464313963356238623064666430303030643533666536393662316237333463336462376366343335363131350a333135366239633765633136316133653535336661666461666365636233656165666635663037386666323931643265623233366133623237663734623661623661316436396465343866363266393565653237636136626536353630383263"
+    }

vars/laptop.yml

@@ -1,3 +1,5 @@
 platform_packages:
   - iwd
   - powertop
+
+vpn_ip: '10.0.0.2'

vars/main.yml

@@ -10,7 +10,6 @@ packages:
   - nftables
   - mpd
   - nfs-utils
-  - openvpn
   - okular
   - postgresql
   - plasma-meta
@@ -29,5 +28,6 @@ packages:
   - pipewire
   - pipewire-pulse
   - pipewire-alsa
+  - wireguard-tools
 
 platform_packages: []

vars/vpn.yml

@@ -1,5 +1,2 @@
-vpn_ip: '178.85.119.159'
-vpn_port: '7531'
-vpn_interface: 'tun0'
+vpn_interface: 'wg0'
 vpn_protocol: 'udp'
-vpn_verbosity: '1'