external/iiab
1
0
Fork 0
mirror of https://github.com/iiab/iiab.git synced 2025-02-14 20:22:08 +00:00
Code Issues Releases Wiki Activity

Merge pull request #1080 from holta/openvpn2

Browse source 
Explanation added for OpenVPN Proposed Fix PR #1079
This commit is contained in:
A Holt 2018-09-02 19:14:43 -04:00 committed by GitHub
commit 2a7c97d233
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
roles/openvpn/tasks/main.yml
View file

@ -154,12 +154,21 @@
# /etc/iiab/openvpn_handle to xscenet.net -- and
# "systemctl restart openvpn@xscenet" was failing completely (no matter how
# many times it was run) to transmit /etc/iiab/openvpn_handle to xscenet.net
# 2018-09-02: OpenVPN had been starting tunnels by accident after reboot,
# with new IIAB installs. Fix below (https://github.com/iiab/iiab/pull/1079)
# changes most all instances below from PARENT service "openvpn@xscenet" to
# CHILD service "openpvn". See these 2 critical files to understand why:
#
# /etc/default/openvpn
# /etc/openvpn/xscenet.conf
- name: Enable & (Re)Start PARENT service openvpn, which (re)starts CHILD service openvpn@xscenet (& actual tunnel)
systemd:
name: openvpn
daemon_reload: yes
enabled: yes
state: restarted
state: restarted # 2018-09-02: Should we be concerned that "systemctl status openvpn" often shows "active (exited)" ? If so we might consider "state: started" or "state: reloaded" instead?
when: openvpn_enabled
- name: Enable hourly cron job for OpenVPN (starts CHILD service openvpn@xscenet, typically for CentOS only?)