meta: bump collection version to 0.4.1

galaxy.yml

@@ -1,6 +1,6 @@
 namespace: finallycoffee
 name: base
-version: 0.4.0
+version: 0.4.1
 readme: README.md
 authors:
 - transcaffeine <transcaffeine@finally.coffee>

playbooks/wg_quick.yml

@@ -1,6 +1,6 @@
 ---
 - name: Configure wireguard interfaces with wg_quick
-  hosts: "{{ wg_quick_hosts | default(wg_quick) }}"
+  hosts: "{{ wg_quick_hosts | default('wg_quick') }}"
   become: "{{ wg_quick_become | default(false) }}"
   gather_facts: "{{ wg_quick_gather_facts | default(false) }}"
   roles:

roles/wg_quick/README.md

@@ -0,0 +1,5 @@
+# `finallycoffee.base.wg_quick` ansible role
+
+Configure a wireguard interface using `wg_quick`. This role writes
+the configuration files and activates the interface using the systemd
+template service abstractions.

roles/wg_quick/tasks/configure-interface.yml

@@ -17,3 +17,9 @@
     state: >-2
       {{ (wg_quick_iface.state | default(wg_quick_state) == 'present')
         | ternary('started', 'absent') }}
+
+- name: Ensure wg-quick configuration for interface '{{ wg_quick_iface.name }}' is absent
+  ansible.builtin.file:
+    path: "{{ wg_quick_configuration_dir }}/{{ wg_quick_face.name }}.conf"
+    state: "absent"
+  when: wg_quick_iface.state | default(wg_quick_state) == 'absent'

roles/wg_quick/tasks/main.yml

@@ -1,4 +1,11 @@
 ---
+- name: Ensure wg_quick_state is valid
+  ansible.builtin.fail:
+    msg: >-2
+      Invalid state '{{ wg_quick_state }}'. Valid
+      states are {{ wg_quick_states | join(', ') }}.
+  when: wg_quick_state not in wg_quick_states
+
 - name: Ensure system packages are available
   ansible.builtin.package:
     name: "{{ wg_quick_system_packages }}"

roles/wg_quick/templates/wg-quick.conf.j2

@@ -8,7 +8,7 @@ PrivateKey = {{ wg_quick_iface.private_key }}
 PrivateKeyFile = {{ wg_quick_iface.private_key_file }}
 {% endif %}
 {% if wg_quick_iface.table is defined %}
-Table = {{ wg_quick_iface.table | ternary('On', 'Off') }}
+Table = {{ wg_quick_iface.table | ternary('on', 'off') }}
 {% endif %}
 {% if wg_quick_iface.post_up %}
 PostUp = /bin/bash -c "{{ wg_quick_iface.post_up | join('; ') }}"
@@ -26,4 +26,7 @@ AllowedIPs = {{ _peer.allowed_ips | join(', ') }}
 {% if _peer.persistent_keepalive %}
 PersistentKeepalive = {{ _peer.persistent_keepalive }}
 {% endif %}
+{% if 'psk' in _peer %}
+PresharedKey = {{ _peer.psk }}
+{% endif %}
 {% endfor %}

roles/wg_quick/vars/main.yml

@@ -0,0 +1,4 @@
+---
+wg_quick_states:
+  - "present"
+  - "absent"