dn42-router/roles/config-wireguard-ddns/tasks/main.yml

---
- name: Enable DDNS
  become: true
  systemd:
    name: "wg-reresolve-dns@{{ item.name }}.timer"
    enabled: true
    masked: false
    state: started
  when: item.ddns is defined and item.ddns
  loop: "{{ wireguard | flatten(levels=1) }}"