iiab/roles/openvpn/templates/15-openvpn

#!/bin/bash
# Not used as of August 2018: parent service "openvpn" reliably auto-starts child service "openpn@xscenet" on OS's in common use
# But could be revived for older CentOS etc?

export LC_ALL=C

#INTERFACE=$1 # The interface which is brought up or down
#STATUS=$2 # The new state of the interface

# whenever interface is brought up by NM (rhbz #565921)
if [ "$2" = "up" ]; then
    # wait a few seconds to allow interface startup to complete
    # (important at boot time without this the service still fails
    # time-out for dispatcher script is 3s (rhbz#1003695#8)
    sleep 2
    /sbin/ip route list dev "$1" | grep -q '^default' &&
    # restart the services
    #systemctl -q is-enabled openvpn@xscenet.service && /usr/lib/iiab/up_wan
    # EQUIVALENTLY:
    systemctl is-enabled openvpn && pgrep openvpn && systemctl start openvpn@xscenet
    # OR EQUIVALENTLY:
    # systemctl is-enabled openvpn && systemctl is-active openvpn && systemctl start openvpn@xscenet
fi

# we added this to prevent logs from filling with openvpn errors
#  but we do not expect openvpn to be on in that case
#if [ "$2" = "down" ]; then
#    sleep 2
#    /sbin/ip route list dev "$1" | grep -q '^default' ||
    # stop the services
#    systemctl -q is-enabled openvpn@xscenet.service && systemctl stop openvpn@xscenet.service
#fi

exit 0