public_key = $(shell cat /etc/wireguard/dmz_public_key)
name := $(shell git config list | grep user.nam | cut -d= -f2)

wgkeys.rec: /etc/wireguard/dmz_public_key
	recins $@ -t $(basename $@) -f name -v "$(name)" -f pubkey -v "$(public_key)"

/etc/wireguard/dmz.conf: xecut/nimbus/wireguard_client.conf | /etc/wireguard/dmz_private_key
	sed 's/PRIVATE_KEY/$(shell cat $|)/' $< > $@

/etc/wireguard/dmz_private_key: | /bin/wg
	$| genkey > $@
	chmod 700 $@

ansible/host_vars/local_host.yml: wgkeys.rec
	recsel $< -t $(basename $<) -e 'name = "$(name)"' -P pubkey

/etc/wireguard/dmz_public_key: /etc/wireguard/dmz_private_key | /bin/wg
	$| pubkey < $< > $@

.PHONY: wgkeys
wgkeys: /etc/wireguard/dmz.conf ## Create dmz-keys on your machine for wiregurd.