tinc is a Virtual Private Network daemon, it can be used to create encrypted and tunneled connections to other hosts, forming a separate network, either a centralized one or a mesh.

debops.tinc Ansible role allows you to install and configure a mesh VPN using tinc, including automatic public key exchange between all hosts in Ansble inventory, connection to external hosts and secure configuration.