---
- hosts: all
  become: yes
  roles:
    - wireguard
  tasks:
    - name: Setup wireguard as trusted network
      firewalld:
        zone: trusted
        immediate: yes
        interface: wg0
        permanent: yes
        state: enabled
      when: "'frames' in group_names"