diff --git a/roles/openvpn/tasks/main.yml b/roles/openvpn/tasks/main.yml index a141dea47..2f7061cfd 100644 --- a/roles/openvpn/tasks/main.yml +++ b/roles/openvpn/tasks/main.yml @@ -79,11 +79,11 @@ - { src: 'iiab-handle.j2', dest: '/usr/bin/iiab-handle', mode: '0755' } # Comment out in future? Might still be relevant for CentOS but unused for ~2 years as of August 2018: - { src: 'up_wan', dest: '/usr/lib/iiab/up_wan', mode: '0755' } - # Unused for ~2 years as of August 2018: + # Obsolete & unused for ~2 years as of August 2018: #- { src: 'start.j2', dest: '/usr/lib/iiab/start', mode: '0755' } - # Buggy & rarely used as of August 2018: + # Obsolete & unused for ~2 years as of August 2018: #- { src: 'iiab-vpn.conf.in', dest: '/etc/openvpn/iiab-vpn.conf.in', mode: '0644' } - # Buggy & rarely used as of August 2018: + # Obsolete & unused for ~2 years as of August 2018: #- { src: 'iiab-vpn.j2', dest: '/usr/bin/iiab-vpn', mode: '0755' } # up_wan was being installed twice (also above) and was unused for ~2 years @@ -137,11 +137,13 @@ # 2018-09-02: OpenVPN had been starting tunnels by accident after reboot, # with new IIAB installs. Fix below (https://github.com/iiab/iiab/pull/1079) -# changes most all instances below from PARENT service "openvpn@xscenet" to -# CHILD service "openpvn". See these 2 critical files to understand why: +# changes most all instances below from CHILD service "openvpn@xscenet" to +# PARENT service "openpvn". See these critical files to understand why: # -# /etc/default/openvpn -# /etc/openvpn/xscenet.conf +# /etc/default/openvpn implies AUTOSTART="all" +# /etc/init.d/openvpn has AUTOSTART="all" +# /etc/openvpn/xscenet.conf our VPN connection +# /etc/network/if-up.d/openvpn appears to auto-start xscenet.conf - name: Enable & (Re)Start PARENT service openvpn, which (re)starts CHILD service openvpn@xscenet (& actual tunnel) systemd: