---
vpn_config_dir: "/etc/wireguard"

wireguard_media_defaults:
  prefix: 24
  interface: wg1
  dns: 10.0.1.1
  domains:
    - "~media-vpn.{{ server_domain }}"
    - "~jellyfin.{{ server_domain }}"

  public_key_path: "{{ vpn_config_dir }}/keys/public/media/fudiggity.pub"
  private_key_path: "{{ vpn_config_dir }}/keys/private/media/fudiggity.key"

  peers:
    - name: fudiggity
      allowed_ips:
        - 10.0.1.0/24
        - 172.8.238.0/24
      endpoint: "{{ server_domain }}:51903"
      public_key: EugKeo63C5N5kz9ShMHtYswO9Qh6mE00MtfLSFmqqjg=
      preshared_key_path: "{{ vpn_config_dir }}/keys/private/media/fudiggity.psk"
      preshared_key_source_path: files/wireguard-media/{{ ansible_hostname }}/preshared.psk