---
- name: Basic Setup
  hosts: ch-vpn
  roles:
  - role: apt-repo/base
  - role: core/base
  - role: core/sshd/base
  - role: core/zsh
  - role: core/ntp

- name: Payload Setup
  hosts: ch-vpn
  roles:
  - role: network/wireguard/base
  post_tasks:
  - name: install resolvconf
    apt:
      name: resolvconf
      state: present

## manual steps:
##  Download wireguard config from account.protonvpn.com
##  copy it to /etc/wireguard
## connect with: wg-quick up <config-file-name>