---
- hosts: all
become: yes
roles:
- wireguard
tasks:
- name: Setup wireguard as trusted network
firewalld:
zone: trusted
immediate: yes
interface: wg0
permanent: yes
state: enabled
when: "'frames' in group_names"