mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-04-28 04:22:18 +08:00
130 lines
3.8 KiB
YAML
130 lines
3.8 KiB
YAML
---
|
|
# OpenVpn server
|
|
|
|
- name: Install needed packages
|
|
package:
|
|
state: present
|
|
name:
|
|
- openvpn
|
|
tags:
|
|
- packages
|
|
- openvpn
|
|
when: ansible_distribution_major_version|int < 8
|
|
|
|
- name: Install needed packages
|
|
package:
|
|
state: present
|
|
name:
|
|
- openvpn
|
|
tags:
|
|
- packages
|
|
- openvpn
|
|
when: ansible_distribution_major_version|int > 7 and ansible_cmdline.ostree is not defined
|
|
|
|
- name: Install main config file (rhel7 and fedora)
|
|
template: src=client.conf
|
|
dest=/etc/openvpn/client/openvpn.conf
|
|
owner=root group=root mode=0644
|
|
tags:
|
|
- install
|
|
- openvpn
|
|
# notify:
|
|
# - restart openvpn (Fedora)
|
|
# - restart openvpn (RHEL7)
|
|
# - restart openvpn (RHEL6)
|
|
when: ( ansible_distribution_major_version|int != 6 and ansible_distribution_major_version|int != 24) and ansible_cmdline.ostree is not defined
|
|
|
|
- name: Install configuration files (rhel7 and fedora)
|
|
copy: src={{ item.file }}
|
|
dest={{ item.dest }}
|
|
owner=root group=root mode={{ item.mode }}
|
|
with_items:
|
|
- { file: "{{ private }}/files/vpn/pki/issued/{{ inventory_hostname }}.crt",
|
|
dest: "/etc/openvpn/client/client.crt",
|
|
mode: '0600' }
|
|
- { file: "{{ private }}/files/vpn/pki/private/{{ inventory_hostname }}.key",
|
|
dest: "/etc/openvpn/client/client.key",
|
|
mode: '0600' }
|
|
tags:
|
|
- install
|
|
- openvpn
|
|
# notify:
|
|
# - restart openvpn (Fedora)
|
|
# - restart openvpn (RHEL7)
|
|
# - restart openvpn (RHEL6)
|
|
when: ( ansible_distribution_major_version|int != 6 and ansible_distribution_major_version|int != 24) and ansible_cmdline.ostree is not defined
|
|
|
|
- name: Install configuration files (rhel6)
|
|
copy: src={{ item.file }}
|
|
dest={{ item.dest }}
|
|
owner=root group=root mode={{ item.mode }}
|
|
with_items:
|
|
- { file: client.conf,
|
|
dest: /etc/openvpn/openvpn.conf,
|
|
mode: '0644' }
|
|
- { file: "{{ private }}/files/vpn/pki/issued/{{ inventory_hostname }}.crt",
|
|
dest: "/etc/openvpn/client.crt",
|
|
mode: '0600' }
|
|
- { file: "{{ private }}/files/vpn/pki/private/{{ inventory_hostname }}.key",
|
|
dest: "/etc/openvpn/client.key",
|
|
mode: '0600' }
|
|
tags:
|
|
- install
|
|
- openvpn
|
|
# notify:
|
|
# - restart openvpn (Fedora)
|
|
# - restart openvpn (RHEL7)
|
|
# - restart openvpn (RHEL6)
|
|
when: ( ansible_distribution_major_version|int == 6 or ansible_distribution_major_version|int == 24) and ansible_cmdline.ostree is not defined
|
|
|
|
- name: enable openvpn service for rhel 6
|
|
service: name=openvpn state=started enabled=true
|
|
when: ansible_distribution_major_version|int == 6
|
|
tags:
|
|
- service
|
|
- openvpn
|
|
|
|
- name: enable openvpn service for fedora 24
|
|
service: name=openvpn@openvpn state=started enabled=true
|
|
when: ansible_distribution_major_version|int == 24
|
|
tags:
|
|
- service
|
|
- openvpn
|
|
|
|
- name: Make sure old openvpn is not running in rhel 7
|
|
service: name=openvpn@openvpn state=stopped enabled=false
|
|
when: ansible_distribution_major_version|int == 7
|
|
tags:
|
|
- service
|
|
- openvpn
|
|
|
|
- name: Make sure openvpn is running in rhel 7
|
|
service: name=openvpn-client@openvpn state=started enabled=true
|
|
when: ansible_distribution_major_version|int == 7
|
|
tags:
|
|
- service
|
|
- openvpn
|
|
|
|
- name: enable openvpn service for Fedora
|
|
service: name=openvpn-client@openvpn state=started enabled=true
|
|
when: is_fedora is defined
|
|
tags:
|
|
- service
|
|
- openvpn
|
|
|
|
- name: Create directories for post-vpn service configs
|
|
file: path="/etc/systemd/system/{{item}}.service.d" state=directory
|
|
with_items: "{{postvpnservices}}"
|
|
when: is_fedora is defined or ansible_distribution_major_version|int == 7
|
|
tags:
|
|
- service
|
|
- openvpn
|
|
|
|
- name: Deploy postvpn.conf for post-vpn services
|
|
copy: src=postvpn.conf dest="/etc/systemd/system/{{item}}.service.d/postvpn.conf"
|
|
with_items: "{{postvpnservices}}"
|
|
when: is_fedora is defined or ansible_distribution_major_version|int == 7
|
|
tags:
|
|
- service
|
|
- openvpn
|