diff --git a/playbooks/prereqs_wireguard.play.yml b/playbooks/prereqs_wireguard.play.yml
new file mode 100644
index 0000000000000000000000000000000000000000..476403992bc966c9e08d0906bc1a38c20d468019
--- /dev/null
+++ b/playbooks/prereqs_wireguard.play.yml
@@ -0,0 +1,22 @@
+---
+- name: Prerequisites for WireGuard installation
+  hosts: all
+  become: true
+
+  tasks:
+    - name: DHCP mgmt0 route
+      ansible.builtin.command:
+        cmd: dhclient -v mgmt0
+
+    - name: Update package db
+      ansible.builtin.command:
+        cmd: apt update
+
+    - name: Install packages
+      ansible.builtin.apt:
+        name: ["nginx", "wireguard", "curl"]
+        state: present
+
+    - name: Remove DHCP route
+      ansible.builtin.command:
+        cmd: ip r del default