- name: List all peers but ourselves

      ansible.builtin.find:

        path: "{{ server_config_dir }}/fastd/peers-gw/"

        excludes: "{{ inventory_hostname }}"

      delegate_to: localhost

      become: false

      register: peers_to_copy

      tags: config

    - name: Copy fastd peers

      ansible.builtin.copy:

        src: "{{ item.path }}"

        dest: /etc/fastd/fflux/peers-gw/

        owner: root

        mode: "0644"

      with_items: "{{ peers_to_copy.files }}"

      tags: config

    - name: Copy fastd blacklist script

      ansible.builtin.copy:

        src: "{{ server_scripts_dir }}/fastd-blacklist.sh"

        dest: /etc/fastd/fflux/fastd-blacklist.sh

        owner: root

        group: root

        mode: "0755"

      tags: config

    - name: Start + Enable fastd

      ansible.builtin.service:

        name: "fastd@fflux"

        state: "started"

        enabled: true

      tags: config

    # OpenVPN

    - name: Remove client directory

      ansible.builtin.file:

        path: /etc/openvpn/client

        state: absent

      tags: config

    - name: Remove server directory

      ansible.builtin.file:

        path: /etc/openvpn/server

        state: absent

      tags: config

    - name: Copy hideme config

      ansible.builtin.copy:

        src: "{{ server_config_dir }}/openvpn/hideme.conf"

        dest: /etc/openvpn/hideme.conf

        owner: root

        group: root