Hijacking this for a project I created a while back. An ansible role that creates a "mesh" VPN between a set of servers using wireguard: https://github.com/mawalu/wireguard-private-networking