From 0d95567234b9111217940e33fb78df63bc390470 Mon Sep 17 00:00:00 2001 From: georgejhunt Date: Mon, 12 Jun 2017 15:42:32 -0700 Subject: [PATCH] on/off vpn (#28) --- roles/openvpn/tasks/main.yml | 2 ++ roles/openvpn/templates/iiab-remote-off | 19 +++++++++++++++++++ roles/openvpn/templates/iiab-remote-on | 19 +++++++++++++++++++ 3 files changed, 40 insertions(+) create mode 100644 roles/openvpn/templates/iiab-remote-off create mode 100644 roles/openvpn/templates/iiab-remote-on diff --git a/roles/openvpn/tasks/main.yml b/roles/openvpn/tasks/main.yml index e3d7405e5..710b62162 100644 --- a/roles/openvpn/tasks/main.yml +++ b/roles/openvpn/tasks/main.yml @@ -46,6 +46,8 @@ - { src: 'xs-handle', dest: '/usr/bin/xs-handle', owner: "root" , mode: '0755' } - { src: 'up_wan', dest: '/usr/lib/iiab/up_wan', owner: "root" , mode: '0755' } - { src: 'start.j2', dest: '/usr/lib/iiab/start', owner: "root" , mode: '0755' } + - { src: 'iiab-remote-on', dest: '/usr/bin/iiab-remote-on', owner: "root" , mode: '0755' } + - { src: 'iiab-remote-off', dest: '/usr/bin/iiab-remote-off', owner: "root" , mode: '0755' } - name: put up_wan in place for debian template: src=up_wan dest=/usr/lib/iiab/up_wan diff --git a/roles/openvpn/templates/iiab-remote-off b/roles/openvpn/templates/iiab-remote-off new file mode 100644 index 000000000..527c77cab --- /dev/null +++ b/roles/openvpn/templates/iiab-remote-off @@ -0,0 +1,19 @@ +#!/bin/bash +# script to turn on openvpn + +# do nothing if it is not installed +which openvpn +if [ $? -ne 0 ]; then + echo Cannot find the openvpn program. + exit 1 +fi +systemctl disable openvpn@xscenet.service +systemctl stop openvpn@xscenet.service + +sleep 5 +ps -e|grep vpn +if [ $? -eq 0 ]; then + echo Openvpn failed to stop. +else + echo Successfully stopped and disabled Openvpn +fi diff --git a/roles/openvpn/templates/iiab-remote-on b/roles/openvpn/templates/iiab-remote-on new file mode 100644 index 000000000..5f40903da --- /dev/null +++ b/roles/openvpn/templates/iiab-remote-on @@ -0,0 +1,19 @@ +#!/bin/bash +# script to turn on openvpn + +# do nothing if it is not installed +which openvpn +if [ $? -ne 0 ]; then + echo Cannot find the openvpn program. + exit 1 +fi +systemctl enable openvpn@xscenet.service +systemctl start openvpn@xscenet.service + +sleep 5 +ping -c 2 10.8.0.1 +if [ $? -eq 0 ]; then + echo Openvpn successfully started. +else + echo Openvpn failed to contact remote server. +fi