From 2db8a4f137da5e3addddce407ab892314ad6093d Mon Sep 17 00:00:00 2001
From: Ahmed Abdelhalim <pm@a14m.dev>
Date: Thu, 13 Nov 2025 22:34:00 +0100
Subject: Minor fixes to autostart connection validation/service logic

---
 roles/wireguard/tasks/main.yml | 21 +++++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

(limited to 'roles/wireguard')

diff --git a/roles/wireguard/tasks/main.yml b/roles/wireguard/tasks/main.yml
index 9a69f0d9..b781f114 100644
--- a/roles/wireguard/tasks/main.yml
+++ b/roles/wireguard/tasks/main.yml
@@ -41,16 +41,25 @@
   loop: "{{ wireguard_connections.keys() }}"
   when: wireguard_connections | length > 0
 
+- name: "Ensure all wireguard interfaces are disabled on startup"
+  become: true
+  ansible.builtin.systemd_service:
+    name: "wg-quick@wg-{{ item }}"
+    enabled: false
+    state: "stopped"
+  when: wireguard_autostart_connection == ""
+  loop: "{{ wireguard_connections.keys() | list }}"
+
 - name: "Configure autostart connection"
   become: true
   when: wireguard_autostart_connection != ""
   block:
-    - name: "Ensure all wireguard connections are stopped"
-      ansible.builtin.systemd_service:
-        name: "wg-quick@wg-{{ item }}"
-        enabled: false
-        state: "stopped"
-      loop: "{{ wireguard_connections.keys() | list }}"
+    - name: "Validate wireguard_autostart_connection"
+      ansible.builtin.assert:
+        that:
+          - wireguard_autostart_connection in wireguard_connections.keys()
+        fail_msg: "wireguard_autostart_connection '{{ wireguard_autostart_connection }}'
+          is not defined in wireguard_connections"
 
     - name: "Ensure all wireguard interfaces are down"
       ansible.builtin.command:
-- 
cgit v1.2.3