blob: 63d0afa31763ba0fef02219fd70ae36a037f257e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
---
# OpenVpn server
- name: Install needed packages
yum: pkg={{ item }} state=present
with_items:
- openvpn
tags:
- packages
- openvpn
when: ansible_distribution_major_version|int < 22
- name: Install needed packages
dnf: pkg={{ item }} state=present
with_items:
- openvpn
tags:
- packages
- openvpn
when: ansible_distribution_major_version|int > 21 and ansible_cmdline.ostree is not defined
- name: Install configuration files
copy: src={{ item.file }}
dest={{ item.dest }}
owner=root group=root mode={{ item.mode }}
with_items:
- { file: client.conf,
dest: /etc/openvpn/openvpn.conf,
mode: '0644' }
- { file: "{{ private }}/files/vpn/openvpn/keys/{{ inventory_hostname }}.crt",
dest: "/etc/openvpn/client.crt",
mode: '0600' }
- { file: "{{ private }}/files/vpn/openvpn/keys/{{ inventory_hostname }}.key",
dest: "/etc/openvpn/client.key",
mode: '0600' }
tags:
- install
- openvpn
# notify:
# - restart openvpn (Fedora)
# - restart openvpn (RHEL7)
# - restart openvpn (RHEL6)
- name: enable openvpn service for rhel 6
service: name=openvpn state=started enabled=true
when: ansible_distribution_major_version|int == 6
tags:
- service
- openvpn
- name: Make sure openvpn is running in rhel 7.1
service: name=openvpn@openvpn state=started enabled=true
when: ansible_distribution_major_version|int == 7
tags:
- service
- openvpn
- name: enable openvpn service for Fedora
service: name=openvpn@openvpn state=started enabled=true
when: is_fedora is defined
tags:
- service
- openvpn
|
