containers, synapse: groups -> group_names

roles/containers/tasks/main.yml

@@ -15,7 +15,7 @@
   user:
     name: gitea
   register: user_gitea
-  when: '"gitea" in groups'
+  when: '"gitea" in group_names'
 
 - name: Create Syncthing group
   group:
@@ -27,7 +27,7 @@
     name: syncthing
     group: vault
   register: user_syncthing
-  when: '"syncthing" in groups'
+  when: '"syncthing" in group_names'
 
 - name: Create Syncthing vault directories
   file:
@@ -95,7 +95,7 @@
   user:
     name: navidrome
   register: user_navidrome
-  when: '"navidrome" in groups'
+  when: '"navidrome" in group_names'
 
 - name: Create Navidrome directory
   file:
@@ -124,7 +124,7 @@
   user:
     name: synapse
   register: user_synapse
-  when: '"synapse" in groups'
+  when: '"synapse" in group_names'
 
 - name: Figure out local IP address
   set_fact:

roles/synapse/tasks/main.yml

@@ -3,7 +3,7 @@
 - name: Create Synapse user
   user:
     name: synapse
-  when: '"synapse" in groups'
+  when: '"synapse" in group_names'
 
 - name: Create Synapse directories
   file:

roles/wireguard/tasks/main.yml

@@ -17,6 +17,13 @@
     reload: yes
   when: '"bastion" in group_names'
 
+- name: Prevent UFW from removing IP forwarding
+  lineinfile:
+    path: /etc/ufw/sysctl.conf
+    regexp: "^net/ipv4/ip_forward="
+    line: "net/ipv4/ip_forward=1"
+  when: '"bastion" in group_names'
+
 - name: Setup UFW rules to accept VPN traffic
   community.general.ufw:
     rule: allow