tinc is a Virtual Private Network daemon, it can be used to create encrypted and tunneled connections to other hosts, forming a separate network, either a centralized or a mesh one.

debops.tinc Ansible role allows you to install and configure a mesh VPN using tinc, including automatic public key exchange between all hosts in the Ansible inventory, connection to external hosts and secure configuration.