diff options
| author | Seth Vidal <skvidal@fedoraproject.org> | 2013-05-21 22:18:01 +0000 |
|---|---|---|
| committer | Seth Vidal <skvidal@fedoraproject.org> | 2013-05-21 22:18:01 +0000 |
| commit | 67729ebdc95e3b9dee3bd4c238d4d74ee7146f0b (patch) | |
| tree | 63bcaaca13e55d676b78bb2e2f169d1e1f2fde1a | |
| parent | 5f24945124c4caa754a33f9d1d456f0d18050823 (diff) | |
| download | ansible-67729ebdc95e3b9dee3bd4c238d4d74ee7146f0b.tar.gz ansible-67729ebdc95e3b9dee3bd4c238d4d74ee7146f0b.tar.xz ansible-67729ebdc95e3b9dee3bd4c238d4d74ee7146f0b.zip | |
add first cut openvpn_client tasklist
| -rw-r--r-- | files/openvpn/client.conf | 25 | ||||
| -rw-r--r-- | tasks/openvpn_client.yml | 48 |
2 files changed, 73 insertions, 0 deletions
diff --git a/files/openvpn/client.conf b/files/openvpn/client.conf new file mode 100644 index 000000000..d274e72ac --- /dev/null +++ b/files/openvpn/client.conf @@ -0,0 +1,25 @@ +client + +dev tun + +proto udp + +# Specify multiple vpn servers here +remote gateway +remote bastion02 + +resolv-retry infinite + +nobind + +persist-key +persist-tun + +ca ca.crt +cert client.crt +key client.key + +comp-lzo + +#route 10.5.126.0 255.255.255.0 +keepalive 10 60 diff --git a/tasks/openvpn_client.yml b/tasks/openvpn_client.yml new file mode 100644 index 000000000..3ad2e6f04 --- /dev/null +++ b/tasks/openvpn_client.yml @@ -0,0 +1,48 @@ +--- +# openvpn - ftw - or something +- name: install openvpn + yum: name=openvpn state=installed + tags: + - packages + +- name: /etc/openvpn/ca.crt from vpn/openvpn/keys/ca.crt + copy: src=$puppet_private/vpn/openvpn/keys/ca.crt dest=/etc/openvpn/ca.crt mode=0600 owner=root group=root + tags: + - config + notify: + - restart openvpn + +- name: /etc/openvpn/crl.pem g/secure/vpn/openvpn/keys/crl.pem + copy: src=$puppet_private/vpn/openvpn/keys/crl.pem dest=/etc/openvpn/crl.pem mode=0644 owner=root group=root + tags: + - config + notify: + - restart openvpn + +- name: /etc/openvpn/openvpn.conf + copy: src=$files/openvpn/client.conf dest=/etc/openvpn/openvpn.conf + tags: + - config + notify: + - restart openvpn + +- name: /etc/openvpn/client.crt + copy: src=$puppet_private/vpn/openvpn/keys/${inventory_hostname}.crt dest=/etc/openvpn/client.crt mode=0600 owner=root group=root + tags: + - config + notify: + - restart openvpn + +- name: /etc/openvpn/client.key + copy: src=$puppet_private/vpn/openvpn/keys/${inventory_hostname}.key dest=/etc/openvpn/client.key mode=0600 owner=root group=root + tags: + - config + notify: + - restart openvpn + + +- name: enable openvpn service + service: name=openvpn state=running enabled=true + tags: + - service + |