#!/usr/bin/env ansible-playbook
---
# Deploy tunnel
- hosts: sputnik.adm.crans.org
  vars:
    debian_mirror: http://mirror.crans.org/debian
    wireguard:
      sputnik: true
      private_key: "{{ vault_wireguard_sputnik_private_key }}"
      peer_public_key: "{{ vault_wireguard_boeing_public_key }}"
  roles:
    - wireguard

- hosts: boeing.adm.crans.org
  vars:
    # Debian mirror on adm
    debian_mirror: http://mirror.adm.crans.org/debian
    wireguard:
      sputnik: false
      if: ens18
      private_key: "{{ vault_wireguard_boeing_private_key }}"
      peer_public_key: "{{ vault_wireguard_sputnik_public_key }}"
  roles:
    - wireguard