# WireGuard swarm plane — rendered by drone-provision.yml
[Interface]
Address = {{ wg_address }}
ListenPort = {{ wg_port }}
PrivateKey = __REPLACED_FROM_HSM_AT_SEALING__

{% for peer in groups['drones'] | difference([inventory_hostname]) %}
[Peer]
# {{ peer }}
PublicKey = __PEER_{{ peer | upper | replace('-', '_') }}_PUBKEY__
AllowedIPs = {{ hostvars[peer].wg_address | ansible.utils.ipaddr('address') }}/32
{% endfor %}