---
# LOCAL directory where the WireGuard certificates used to be stored
# in older version of this role.
# Private keys are now read from the remote host, public key are derived
# from private key
#
# This config is kept to be able to delete the old folder, as having
# all the private keys locally is not a security best practice.
wireguard_cert_directory: "{{ '~/wireguard/certs' | expanduser }}"
# Directory to store WireGuard configuration on the remote hosts
wireguard_remote_directory: "/etc/wireguard"
# The port WireGuard will listen on.
wireguard_port: "51820"
# The interface name that wireguard should use.
wireguard_interface: "wg0"
