summaryrefslogtreecommitdiffstats
path: root/roles/openvpn/server
Commit message (Collapse)AuthorAgeFilesLines
* Add certgetter01 ccd filePatrick Uiterwijk2017-09-091-0/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* VPN ccd entries for odcs and freshmaker.Ralph Bean2017-08-312-0/+4
|
* add vpn client and ccd files for os clusterKevin Fenzi2017-08-225-0/+10
|
* Initial attempt at docker-registry02.phx2 and docker-registry03.phx2Ricky Elrod2017-07-192-0/+4
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* put server ccd files under server subdirKevin Fenzi2017-05-151-3/+3
|
* Check the certificate key usagePatrick Uiterwijk2017-05-141-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* also the server filesKevin Fenzi2017-05-141-4/+4
|
* switch openvpn to use seperate service units and directories for client and ↵Kevin Fenzi2017-05-141-2/+9
| | | | server, hopefully in a mostly transparent way that will not cause much outage
* add ccd for ci-cc-rdu01.fedoraproject.orgRicky Elrod2017-05-101-0/+2
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* change state=running to start=started as the old one is going away in ↵Kevin Fenzi2017-04-131-1/+1
| | | | ansible 2.7
* we have a new nagios vpnStephen Smoogen2017-03-171-0/+2
|
* add ccd for modernpaste02Ricky Elrod2017-02-281-0/+2
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* and remove its little doggies too <<cackle>>Stephen Smoogen2017-02-221-2/+0
|
* add ccd for modernpaste01Ricky Elrod2017-02-151-0/+2
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* VPN ccd files for MBS frontend.Ralph Bean2017-01-102-0/+4
|
* adding vpn config for qa-prod01.qaTim Flink2016-12-161-0/+3
|
* and we have new data for vpnsStephen Smoogen2016-12-012-0/+4
|
* update files to put basics for proxy13/proxy14 into beingStephen Smoogen2016-12-012-0/+4
|
* Create ccd filesPatrick Uiterwijk2016-10-132-0/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Update out vpn configs for better encryption.Kevin Fenzi2016-08-311-0/+2
|
* Docke-candidate-registry ccd filePatrick Uiterwijk2016-08-181-0/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Another pile of trailing whitespace fixesKevin Fenzi2016-08-081-1/+1
|
* Add osbs-master01 ccd filePatrick Uiterwijk2016-07-141-0/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Create docker-registry01 vpn configPatrick Uiterwijk2016-07-121-0/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Create mm-frontend-checkin01Patrick Uiterwijk2016-06-171-0/+1
| | | | | | | This server should be regarded as untrusted. Related: CVE-2016-1000003 Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Drop mm-crawler03 - ticket 4877Kevin Fenzi2016-05-261-1/+0
|
* Remove VPN config for old Koschei hostMikolaj Izdebski2016-05-121-2/+0
|
* Add vpn ccd for koschei-web01Kevin Fenzi2016-05-121-0/+2
|
* remove the old rdu download boxes we will decommissionStephen Smoogen2016-05-042-2/+2
|
* Create OpenVPN config for basset01Patrick Uiterwijk2016-04-141-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* adding vpn server side config for beaker01.qaTim Flink2016-04-141-0/+2
|
* Create OpenVPN config for basset01Patrick Uiterwijk2016-03-171-0/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* vpn ccd file for zanata2fedmsg01.Ralph Bean2016-03-031-0/+2
|
* openvpn ccd files for pdc nodes.Ralph Bean2016-01-042-0/+4
|
* adding openqa01.qa to vpnTim Flink2015-12-011-0/+3
|
* Add hosts file and vpn ccd for mdapi01Kevin Fenzi2015-11-171-0/+2
|
* Add mirrorlist-ibiblio02 vpn ccdPatrick Uiterwijk2015-10-251-0/+2
|
* Disable persist-tun for openvpnPatrick Uiterwijk2015-10-211-1/+0
| | | | | | | | | | | | | | | | This should solve the issue where RHEL7 machines that get a network hiccup need an OpenVPN restart to restore their routes. The code is broken in the current upstream OpenVPN release, such that it does tear down some of the routes during a ping-restart (when the connection is dropped due to network hiccups), but the reconnection code does not restore the routes. I am working on an upstream patch to fix this, but in the meantime disabling persist-tun will make sure that OpenVPN does the entire initialization upon reconnection, which makes sure that all routes are created. Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Add first cut at a infinote server (config to come)Kevin Fenzi2015-10-091-0/+1
|
* Add CCD files for statscache-web.Ralph Bean2015-10-092-0/+4
|
* Add proxy12 on ibiblio05Patrick Uiterwijk2015-10-091-0/+2
|
* Add ccd file tooKevin Fenzi2015-10-061-0/+2
|
* add a batcave ccdStephen Smoogen2015-09-281-0/+2
|
* Move all puppet_private stuff to ansible private so we can stop using puppet ↵Kevin Fenzi2015-09-251-4/+4
| | | | private.
* ccd files for new autocloud prod web nodes.Ralph Bean2015-09-242-0/+3
|
* add ccd file for mm-crawler03Kevin Fenzi2015-09-031-0/+1
|
* Rename ccd file correctly this time.Kevin Fenzi2015-08-311-0/+0
|
* Initial cut of new darkserver02 instance.Kevin Fenzi2015-08-311-2/+1
|
* more removal of ibiblio01Stephen Smoogen2015-08-191-1/+1
|
* Add mm-frontend02Patrick Uiterwijk2015-07-281-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>