---
# these are defaults
# change these in group/host vars

# NOTE: copy the *entire* wireguard config if you wish to override it (all or nothing)

# also see group_vars/all/00-secret-template.yml

# this key is defined in group_vars/all/50-vars.yml
# it's duplicated here just in case
wireguard_interface: "wg0"

wireguard:
  dns_servers:
    - "{{ dns_forward }}"
  ip:
    # cidr range in tunnel
    cidr: "10.66.77.0/24"

    server_public: "net.{{ domain }}"
    # UDP port
    port: 51820

  # place to output client configs
  client_folder: "/tmp/wireguard-clients"