external/iiab
1
0
Fork 0
mirror of https://github.com/iiab/iiab.git synced 2025-02-13 11:42:08 +00:00
Code Issues Releases Wiki Activity

Merge pull request #3341 from holta/iiab-support-off

Browse source 
/usr/bin/iiab-support-off: Disable openvpn service AND openvpn_enabled in local_vars.yml
This commit is contained in:
A Holt 2022-08-11 12:05:28 -04:00 committed by GitHub
commit 5f8fcdd075
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 18 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
roles/openvpn/templates/iiab-remote-off
View file

@ -3,14 +3,14 @@
# /usr/bin/iiab-remote-off should fully turn off multiple remote support # /usr/bin/iiab-remote-off should fully turn off multiple remote support
# services like OpenVPN and others, to reduce risk of remote attacks. # services like OpenVPN and others, to reduce risk of remote attacks.
echo -e '\nWARNING: To disable OpenVPN long-term, it'"'"'s recommended you:\n' # echo -e '\nWARNING: To disable OpenVPN long-term, it'"'"'s recommended you:\n'
#
echo -e '1) Set this variable in /etc/iiab/local_vars.yml' # echo -e '1) Set this variable in /etc/iiab/local_vars.yml'
echo -e ' openvpn_enabled: False\n' # echo -e ' openvpn_enabled: False\n'
#
echo -e '2) Run:' # echo -e '2) Run:'
echo -e ' cd /opt/iiab/iiab' # echo -e ' cd /opt/iiab/iiab'
echo -e ' sudo ./runrole openvpn\n' # echo -e ' sudo ./runrole openvpn\n'
# Do nothing if OpenVPN not installed # Do nothing if OpenVPN not installed
which openvpn which openvpn
@ -19,13 +19,21 @@ if [ $? -ne 0 ]; then
exit 1 exit 1
fi fi
if grep -q '^openvpn_enabled:' /etc/iiab/local_vars.yml; then
sed -i "s/^openvpn_enabled:.*/openvpn_enabled: False/" /etc/iiab/local_vars.yml
else
echo "openvpn_enabled: False" >> /etc/iiab/local_vars.yml
fi
systemctl disable openvpn systemctl disable openvpn
systemctl stop openvpn systemctl stop openvpn
sleep 5 sleep 5
ps -e | grep openvpn # 2018-09-05: "ps -e | grep vpn" no longer works (nor would "pgrep vpn") when invoked from iiab-vpn-off (as filename itself causes [multiple] "vpn" instances to appear in process list!) ps -e | grep openvpn # 2018-09-05: "ps -e | grep vpn" no longer works (nor would "pgrep vpn") when invoked from iiab-vpn-off (as filename itself causes [multiple] "vpn" instances to appear in process list!)
if [ $? -eq 0 ]; then if [ $? -eq 0 ]; then
echo OpenVPN failed to stop. echo "OpenVPN failed to stop."
else else
echo Successfully stopped and disabled OpenVPN. echo "OpenVPN's systemd service was successfully stopped and disabled."
echo
echo "Also, 'openvpn_enabled: False' was set in /etc/iiab/local_vars.yml"
fi fi