diff --git a/roles/openvpn/templates/announcer.j2 b/roles/openvpn/templates/announcer.j2 index 8b4abaf96..0b4a10a63 100755 --- a/roles/openvpn/templates/announcer.j2 +++ b/roles/openvpn/templates/announcer.j2 @@ -8,7 +8,15 @@ if [ -f /etc/iiab/openvpn_handle ]; then # Option #1 HANDLE=`cat /etc/iiab/openvpn_handle` # Option #2: UUID is later used, if openvpn_handle is not set -# Sourcing a variable from ~4 different places is a recipe for total confusion (or worse!) + +# Sourcing a variable from ~4 different places is a recipe for total confusion +# (or worse!) Far better to make variable openvpn_handle and file +# /etc/iiab/openvpn_handle "obligatory" (EMPTY STRING "" IS TOLERATED, in which +# case OpenVPN server should use /etc/iiab/uuid in lieu of the handle). + +# CLARIF: "systemctl restart openvpn@xscenet" still runs even if the above is +# defied. e.g. if an implementer deletes /etc/iiab/openvpn_handle by accident. + #else # # Option #3: Dangerous to invoke hypothetical variables :( # source /etc/iiab/iiab.env