a

roles/keys/tasks/main.yml

@@ -7,7 +7,10 @@
   shell:
     cmd: umask 077
   shell:
+    chdir: /etc/wireguard
+    creates: /etc/wireguard/publickey
     cmd: wg genkey | tee privatekey | wg pubkey > publickey
+  become: yes
   
 - name: key-get
   command: cat publickey

templates/wg

 [Interface]
 Address = {{ myAddr }}
-PostUp = wg set %i private-key /home/gitlab-runner/privatekey
+PostUp = wg set %i private-key /etc/wireguard/privatekey
 ListenPort = 51902
 
 [Peer]