fix: wireguard config failfast

This commit is contained in:
Clément Désiles 2026-01-18 13:21:37 +01:00
parent aa5de65d30
commit 8d3db69172
No known key found for this signature in database
2 changed files with 14 additions and 2 deletions

View File

@ -4,6 +4,6 @@ wireguard_port: 51820 # static port to receive input connections
wireguard_server_mode: true # enables NAT and open port wireguard_server_mode: true # enables NAT and open port
wireguard_interface: wg0 wireguard_interface: wg0
wireguard_config_base_path: /etc/wireguard wireguard_config_base_path: /etc/wireguard
wireguard_address: 192.168.27.1/27 # wireguard_address: 192.168.27.1/27 # Intentionally undefined - role will fail if not set
wireguard_dns: 192.168.27.1 # wireguard_dns: 192.168.27.1 # Intentionally undefined - role will fail if not set
wireguard_peers: [] wireguard_peers: []

View File

@ -1,4 +1,16 @@
--- ---
- name: Validate required variables are set
ansible.builtin.assert:
that:
- wireguard_address is defined
- wireguard_address | length > 0
- wireguard_dns is defined
- wireguard_dns | length > 0
fail_msg: |
wireguard_address and wireguard_dns are required.
See roles/wireguard/defaults/main.yml for configuration instructions.
success_msg: "Variable validation passed"
- name: Install wireguard - name: Install wireguard
ansible.builtin.package: ansible.builtin.package:
name: "{{ (ansible_facts['os_family'] == 'Archlinux') | ternary('wireguard-tools', 'wireguard') }}" name: "{{ (ansible_facts['os_family'] == 'Archlinux') | ternary('wireguard-tools', 'wireguard') }}"