From 85d4cf5d7b9b10f32b6d906f62dec9cd23c6ac5b Mon Sep 17 00:00:00 2001 From: A Holt Date: Wed, 9 Oct 2019 11:41:31 -0400 Subject: [PATCH] Delete iiab-vpn.j2.deprecated --- .../openvpn/templates/iiab-vpn.j2.deprecated | 92 ------------------- 1 file changed, 92 deletions(-) delete mode 100755 roles/openvpn/templates/iiab-vpn.j2.deprecated diff --git a/roles/openvpn/templates/iiab-vpn.j2.deprecated b/roles/openvpn/templates/iiab-vpn.j2.deprecated deleted file mode 100755 index d463f85ed..000000000 --- a/roles/openvpn/templates/iiab-vpn.j2.deprecated +++ /dev/null @@ -1,92 +0,0 @@ -#!/bin/bash -# script to manage openvpn - -if [ ! -f "/etc/openvpn/iiab-vpn.conf" ]; then - VPNCONFIG='xscenet.conf' # WAS BUGGY (set to non-existent "party-line.conf", but thankfully unused) as of August 2018 - VPNIP={{ openvpn_server_virtual_ip }} -else - # expect the sourced file to set the above variables - source /etc/openvpn/iiab-vpn.conf -fi - -# we'd like the user of this script to have root privilege -if [ "$(id -u)" != "0" ]; then - echo "This script must be run as root" 1>&2 - exit 1 -fi - -case $1 in - "stop" | "no" | "off") - killall openvpn - exit 0 - ;; - "status") - pid=`ps -e|grep openvpn` - if [ -z "$pid" ]; then - echo "The OpenVPN process is not running" - else - echo "OpenVPN is running with id $pid" - ip=`ifconfig tun | gawk '(/netmask /) {print( $2);}'` - echo "Local vpn tunnel address is $ip" - fi - exit 0 - ;; -esac - -# we'd like for password authentication to be turned off -grep -e^PasswordAuthentication.*[Yy]es /etc/ssh/sshd_config -PASSWORDS_ENABLED=$? - -if [ $PASSWORDS_ENABLED -eq 0 ];then - case $1 in - "test" | "unsafe") ;; - *) - echo "OpenVPN is only safe when public/private keys are used" - echo " And when passwords are turned off in /etc/ssh/sshd_conf" - exit 1 - esac -fi - -# openvpn config file directory -dir=/etc/openvpn - -if [ $# -eq 0 ]; then - cmd="test" -else - cmd=$1 -fi - -case $cmd in - "test" | "unsafe" ) - # load TUN/TAP kernel module - modprobe tun - - # make sure the wan is functioning - # 8.8.8.8 is one of google's dns servers - ping -c 3 -i 3 8.8.8.8 - if [ $? -ne 0 ]; then - echo "internet is not available, tunnel not possible" - exit 1 - fi - - # check the vpn tunnel - ping -c 5 -i 5 "$VPNIP" - # a zero return means the tunnel is up - if [ $? -ne "0" ]; then - echo "Stopping any openvpn instance" - killall openvpn - sleep 10 - echo "Starting OpenVPN and waiting 10 seconds for daemon to become ready" - openvpn --cd $dir --daemon --config $VPNCONFIG - fi - sleep 10 - echo "Testing VPN connection" - ping -c 4 -i 4 "$VPNIP" - if [ $? -eq 0 ]; then - echo "vpn tunnel established" - else - echo "vpn connection failed" - fi - - ;; -esac