wireguard homepage: www.wireguard.com

• A VPS which got Ubuntu Linux installed, and a public IP address.
• dnsmasq (or the like) installed for DNS forwarding
• net.ipv4.ip_forward = 1 presents in /etc/sysctl.conf file

• Listen host: Public IP address
• Listen port: UDP/51820
• Tunnel network: 10.0.0.0/24
• Create users those listed in vars/main.yml with fields:
  • username: username
  • private_ip: private IP address to be assigned on Wireguard tunnel
  • default_route: yes if user is allowed to use VPN as default route
  • wg_dns_enabled: yes if user is allowed to use server DNS resolver
  • remove: no (yes if user is marked to be deleted)

Create an Ansible playbook with below content

- hosts: all
  gather_facts: yes
  become: yes

  roles:
    - wireguard

Run ansible

$ ansible-playbook -i hosts main.yml

Check ~/Download/<server_public_ip>/etc/wireguard/ directory on local machine for users configs.