From 5fb027c446aa8e2c940ecadc478da2493c3d43f1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20D=C3=A9siles?=
 <1536672+cdesiles@users.noreply.github.com>
Date: Thu, 22 Jan 2026 07:31:45 +0100
Subject: [PATCH] fix: open wg port only in server mode

---
 roles/wireguard/tasks/main.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/wireguard/tasks/main.yml b/roles/wireguard/tasks/main.yml
index 7b8644a..1c3da2a 100644
--- a/roles/wireguard/tasks/main.yml
+++ b/roles/wireguard/tasks/main.yml
@@ -90,6 +90,7 @@
   delay: 2
   register: ufw_result
   until: ufw_result is succeeded
+  when: wireguard_server_mode | default(false)
 
 - name: Start and enable service
   ansible.builtin.service: