refactor(wireguard_server): Load vault inside role using include_vars

playbooks/services/wireguard-cerberus.yml

@@ -1,9 +1,6 @@
 - name: cerberos init
   hosts: wireguard-cerberus
   become: true
-  vars_files:
-    - group_vars/vault.yml
-    - group_vars/all.yml
   tasks:
     - name: wireguard-server
       ansible.builtin.include_role:

roles/wireguard_server/tasks/main.yml

@@ -1,4 +1,8 @@
 ---
+- name: Load vault variables
+  ansible.builtin.include_vars:
+    file: ../../group_vars/vault.yml
+
 - name: WStunnel setup
   ansible.builtin.import_tasks: wstunnel.yml
 
@@ -9,7 +13,7 @@
     owner: root
     group: root
     mode: '0644'
-  notify: wireguard-server restart
+  notify: Restart wstunnel
 
 - name: Install iptables
   ansible.builtin.package:
@@ -19,4 +23,4 @@
   ansible.builtin.service:
     name: wg-quick@wireguardserver
     state: started
-    enabled: true
+    enabled: true