iiab/roles/openvpn/tasks/main.yml

# Run 'sudo iiab-support' to turn on OpenVPN without hassle.  GENERAL TIPS:
# http://FAQ.IIAB.IO -> "How can I remotely manage my Internet-in-a-Box?"


# "How do i fail a task in Ansible if the variable contains a boolean value?
# I want to perform input validation for Ansible playbooks"
# https://stackoverflow.com/questions/46664127/how-do-i-fail-a-task-in-ansible-if-the-variable-contains-a-boolean-value-i-want/46667499#46667499

# We assume 0-init/tasks/validate_vars.yml has DEFINITELY been run, so no need
# to re-check whether vars are defined here.  As Ansible vars cannot be unset:
# https://serverfault.com/questions/856729/how-to-destroy-delete-unset-a-variable-value-in-ansible

- name: Assert that "openvpn_install is sameas true" (boolean not string etc)
  assert:
    that: openvpn_install is sameas true
    fail_msg: "PLEASE SET 'openvpn_install: True' e.g. IN: /etc/iiab/local_vars.yml"
    quiet: yes

- name: Assert that "openvpn_enabled | type_debug == 'bool'" (boolean not string etc)
  assert:
    that: openvpn_enabled | type_debug == 'bool'
    fail_msg: "PLEASE GIVE VARIABLE 'openvpn_enabled' A PROPER (UNQUOTED) ANSIBLE BOOLEAN VALUE e.g. IN: /etc/iiab/local_vars.yml"
    quiet: yes


- name: Install OpenVPN if 'openvpn_installed' not defined, e.g. in {{ iiab_state_file }}    # /etc/iiab/iiab_state.yml
  include_tasks: install.yml
  when: openvpn_installed is undefined


- include_tasks: enable-or-disable.yml


- name: Add 'openvpn' variable values to {{ iiab_ini_file }}
  ini_file:
    path: "{{ iiab_ini_file }}"    # /etc/iiab/iiab.ini
    section: openvpn
    option: "{{ item.option }}"
    value: "{{ item.value | string }}"
  with_items:
  - option: name
    value: OpenVPN
  - option: description
    value: '"OpenVPN enables live/remote support by connecting machines anywhere on the Internet, via a middleman server, using Virtual Private Network (VPN) techniques to create secure connections."'
# openvpn_handle variable can no longer be left completely undefined of August 2018 (EMPTY STRING "" IS TOLERATED, in which case OpenVPN server should use /etc/iiab/uuid in lieu of the handle)
  - option: openvpn_handle
    value: "{{ openvpn_handle }}"
  - option: openvpn_cron_enabled
    value: "{{ openvpn_cron_enabled }}"
  - option: openvpn_server
    value: "{{ openvpn_server }}"
  - option: openvpn_server_virtual_ip
    value: "{{ openvpn_server_virtual_ip }}"
  - option: openvpn_server_port
    value: "{{ openvpn_server_port }}"
  - option: openvpn_enabled
    value: "{{ openvpn_enabled }}"