[wireguard] add

playbook.yml

@@ -16,3 +16,4 @@
     - role: docker
       tags:
         - docker
+    - role: wireguard

roles/wireguard/files/apt-preferences-unstable

@@ -0,0 +1,3 @@
+Package: *
+Pin: release a=unstable
+Pin-Priority: 90

roles/wireguard/tasks/main.yml

@@ -0,0 +1,7 @@
+---
+- block:
+  - import_tasks: packages.yml
+    tags:
+      - wireguard:packages
+  tags:
+    - wireguard

roles/wireguard/tasks/packages.yml

@@ -0,0 +1,16 @@
+---
+- name: add unstable repositories
+  apt_repository:
+    repo: deb https://deb.debian.org/debian/ unstable main
+    state: present
+
+- name: configure apt pinning for unstable
+  copy:
+    src: apt-preferences-unstable
+    dest: /etc/apt/preferences.d/limit-unstable
+
+- name: install wireguard
+  apt:
+    name: wireguard
+    update_cache: yes
+    state: present