--- wireguard_address: "10.0.1.4/24" wireguard_endpoint: "{{ ansible_default_ipv4.address }}" wireguard_persistent_keepalive: "30" wireguard_postup: - iptables -A FORWARD -o %i -j ACCEPT - iptables -A FORWARD -i %i -j ACCEPT - iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE wireguard_postdown: - iptables -D FORWARD -i %i -j ACCEPT - iptables -D FORWARD -o %i -j ACCEPT - iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE wireguard_unmanaged_peers: phone: public_key: ioG35kDFTtip+Acfq+je9qDHYbZij+J6+Pg3T6Z4N0w= allowed_ips: 10.0.1.3/32 persistent_keepalive: 0 zen: public_key: rYYljQw8InmM95pxCP9KyZ8R+kcicgnjr6E9qtkI1Ag= allowed_ips: 10.0.1.5/32 persistent_keepalive: 0 consul_client_addr: "127.0.0.1 10.0.1.4" consul_bind_address: "10.0.1.4" consul_ui: True consul_iface: "wg0" nomad_bind_addr: "10.0.1.4" nomad_host_networks: - name: "private" interface: wg0 - name: "public" interface: eth0 - name: "default" interface: wg0 vault_listener_address: 10.0.1.4