- name: Install WireGuard (Debian)
  become: true
  apt:
    autoclean: yes
    autoremove: yes
    cache_valid_time: 3600
    install_recommends: no
    name: ['wireguard', 'resolvconf']
    state: latest
    update_cache: yes
  when: ansible_facts.os_family == 'Debian'