From 725283decfbb75ed655cf0cafdcb9ed6478055f4 Mon Sep 17 00:00:00 2001
From: A Holt <holta@users.noreply.github.com>
Date: Wed, 5 Sep 2018 16:17:02 -0400
Subject: [PATCH] Update iiab-remote-off

---
 roles/openvpn/templates/iiab-remote-off | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/roles/openvpn/templates/iiab-remote-off b/roles/openvpn/templates/iiab-remote-off
index ca1ff41c2..b7ffc9da2 100644
--- a/roles/openvpn/templates/iiab-remote-off
+++ b/roles/openvpn/templates/iiab-remote-off
@@ -3,6 +3,15 @@
 # /usr/bin/iiab-remote-off should fully turn off multiple remote support
 # services like OpenVPN and others, to reduce risk of remote attacks.
 
+echo -e '\nWARNING: To disable OpenVPN long-term, it'"'"'s recommended you:\n'
+
+echo -e '1) Set this variable in /etc/local/local_vars.yml'
+echo -e '   openvpn_enabled: False\n'
+
+echo -e '2) Run:'
+echo -e '   cd /opt/iiab/iiab'
+echo -e '   sudo ./runrole openvpn\n'
+
 # Do nothing if OpenVPN not installed
 which openvpn
 if [ $? -ne 0 ]; then