- name: wireguard audit-peers script
    ansible.builtin.copy:
      src: templates/wireguard-peers.bash
      dest: /root/
      mode: 0700
    diff: true

  - name: wireguard audit-peers cron job
    ansible.builtin.cron:
      name: "audit wireguard peers"
      minute: "*"
      # override tail file to avoid log rotation
      job: "/root/wireguard-peers.bash > /var/log/wireguard-peers.json 2>&1"
    diff: true