diff --git a/ansible/playbook.yaml b/ansible/playbook.yaml
index 5d55635..d7bf5e9 100644
--- a/ansible/playbook.yaml
+++ b/ansible/playbook.yaml
@@ -2,37 +2,37 @@
   vars:
     ansible_become: True
   roles:
-    # - sudo
-    # - users
-    # - package_manager
-    # - zrepl
-    # - zsh
-    # - network
-    # - sshd
-    # - base
-    # - firewall
-    # - cpu
-    # - ntp
-    # - build
-    # - graphics
-    # - gpg
-    # - fonts
-    # - alacritty
-    # - sway
-    # - emacs
-    # - firefox
-    # - devfs
-    # - ssh_client
-    # - sshfs
-    # - jail
-    # - fuse
-    # - autofs
-    # - exfat
-    # - bhyve
-    # - media
-    # - kubernetes
-    # - google_cloud_sdk
-    # - ansible
+    - sudo
+    - users
+    - package_manager
+    - zrepl
+    - zsh
+    - network
+    - sshd
+    - base
+    - firewall
+    - cpu
+    - ntp
+    - build
+    - graphics
+    - gpg
+    - fonts
+    - alacritty
+    - sway
+    - emacs
+    - firefox
+    - devfs
+    - ssh_client
+    - sshfs
+    - jail
+    - fuse
+    - autofs
+    - exfat
+    - bhyve
+    - media
+    - kubernetes
+    - google_cloud_sdk
+    - ansible
     - wireguard
 
 - hosts: nat_dhcp:homeserver_nat_dhcp
diff --git a/ansible/roles/wireguard/tasks/freebsd.yaml b/ansible/roles/wireguard/tasks/freebsd.yaml
index 6b8b3fe..8ff24c4 100644
--- a/ansible/roles/wireguard/tasks/freebsd.yaml
+++ b/ansible/roles/wireguard/tasks/freebsd.yaml
@@ -10,7 +10,7 @@
     dest: /usr/local/etc/wireguard/
     mode: 0440
     owner: root
-    group: root
+    group: wheel
   with_fileglob: "files/wireguard_configs/{{ wireguard_directory }}/*.conf"
 
 - name: Enable gateway