mirror of
https://github.com/iiab/iiab.git
synced 2025-02-13 19:52:06 +00:00
122 lines
4.4 KiB
YAML
122 lines
4.4 KiB
YAML
---
|
|
|
|
- name: Install OpenVPN packages
|
|
package: name={{ item }}
|
|
state=present
|
|
with_items:
|
|
- openvpn
|
|
- nmap
|
|
tags:
|
|
- download
|
|
|
|
- name: Create the directory for keys
|
|
file: dest=/etc/openvpn/keys
|
|
state=directory
|
|
owner=root
|
|
group=root
|
|
mode=0755
|
|
|
|
- name: Create the directory for scripts
|
|
file: dest=/etc/openvpn/scripts
|
|
state=directory
|
|
owner=root
|
|
group=root
|
|
mode=0755
|
|
|
|
- name: Create a folder for iiab executable not on path
|
|
file: path=/usr/lib/iiab
|
|
state=directory
|
|
|
|
- name: Configure OpenVPN
|
|
template: src={{ item.src }}
|
|
dest={{ item.dest }}
|
|
owner={{ item.owner }}
|
|
group=root
|
|
mode={{ item.mode }}
|
|
with_items:
|
|
- { src: 'ca.crt', dest: '/etc/openvpn/keys/ca.crt', owner: "root" , mode: '0644' }
|
|
- { src: 'client1.crt', dest: '/etc/openvpn/keys/client1.crt', owner: "root" , mode: '0644' }
|
|
- { src: 'client1.key', dest: '/etc/openvpn/keys/client1.key', owner: "root" , mode: '0600' }
|
|
- { src: 'announce', dest: '/etc/openvpn/scripts/announce', owner: "root" , mode: '0755' }
|
|
- { src: 'announcer', dest: '/etc/openvpn/scripts/announcer', owner: "root" , mode: '0755' }
|
|
- { src: 'silence', dest: '/etc/openvpn/scripts/silence', owner: "root" , mode: '0755' }
|
|
- { src: 'xscenet.conf', dest: '/etc/openvpn/xscenet.conf', owner: "root" , mode: '0644' }
|
|
- { src: 'iiab-vpn.conf.in', dest: '/etc/openvpn/iiab-vpn.conf.in', owner: "root" , mode: '0644' }
|
|
- { src: 'iiab-vpn', dest: '/usr/bin/iiab-vpn', owner: "root" , mode: '0755' }
|
|
- { src: 'iiab-handle', dest: '/usr/bin/iiab-handle', owner: "root" , mode: '0755' }
|
|
- { src: 'up_wan', dest: '/usr/lib/iiab/up_wan', owner: "root" , mode: '0755' }
|
|
- { src: 'start.j2', dest: '/usr/lib/iiab/start', owner: "root" , mode: '0755' }
|
|
- { src: 'iiab-remote-on', dest: '/usr/bin/iiab-remote-on', owner: "root" , mode: '0755' }
|
|
- { src: 'iiab-remote-off', dest: '/usr/bin/iiab-remote-off', owner: "root" , mode: '0755' }
|
|
|
|
- name: Put up_wan in place for Debian
|
|
template: src=up_wan dest=/usr/lib/iiab/up_wan
|
|
when: is_debuntu
|
|
|
|
- name: Put dispatcher up for NM
|
|
template: src=15-openvpn dest=/etc/NetworkManager/dispatcher.d/
|
|
when: not is_debuntu
|
|
|
|
- name: Check for manually configured OpenVPN tunnel
|
|
stat: path=/etc/openvpn/iiab-vpn.conf
|
|
register: stat
|
|
|
|
|
|
# note that ansible does not currently handle @ in a service name
|
|
- name: Enable the OpenVPN tunnel at boot time
|
|
shell: systemctl enable openvpn@xscenet.service
|
|
when: openvpn_enabled and not stat.exists is defined and is_debuntu
|
|
|
|
- name: Enable the OpenVPN tunnel at boot time for Debian
|
|
shell: update-rc.d openvpn enable
|
|
when: openvpn_enabled and not stat.exists is defined and is_debuntu
|
|
|
|
- name: Start the OpenVPN tunnel now
|
|
shell: systemctl start openvpn@xscenet.service
|
|
when: openvpn_enabled and not stat.exists is defined and not installing
|
|
|
|
|
|
- name: Make OpenVPN connection automatic
|
|
lineinfile: dest=/etc/crontab
|
|
line="25 * * * * root (/usr/bin/systemctl start openvpn@xscenet.service) > /dev/null"
|
|
when: openvpn_enabled and openvpn_cron_enabled and not stat.exists is defined
|
|
|
|
- name: Make OpenVPN connection manual
|
|
lineinfile: dest=/etc/crontab
|
|
regexp=".*/usr/bin/systemctl*"
|
|
state=absent
|
|
when: not openvpn_enabled or not openvpn_cron_enabled
|
|
|
|
|
|
- name: Stop starting the OpenVPN tunnel at boot time
|
|
shell: systemctl disable openvpn@xscenet.service
|
|
when: not openvpn_enabled and not is_debuntu
|
|
|
|
- name: Stop starting the OpenVPN tunnel at boot time for Debian
|
|
shell: update-rc.d openvpn disable
|
|
when: not openvpn_enabled and is_debuntu
|
|
|
|
- name: Stop OpenVPN tunnel immediately
|
|
shell: systemctl stop openvpn@xscenet.service
|
|
ignore_errors: True
|
|
when: not openvpn_enabled and not installing
|
|
|
|
|
|
- name: Add OpenVPN to service list
|
|
ini_file: dest='{{ service_filelist }}'
|
|
section=openvpn
|
|
option='{{ item.option }}'
|
|
value='{{ item.value }}'
|
|
with_items:
|
|
- option: name
|
|
value: "openvpn"
|
|
- option: description
|
|
value: '"OpenVPN is a means of connecting to a server anywhere on the internet, via a middleman server."'
|
|
- option: middleman_url
|
|
value: "{{ vpn_presence }}"
|
|
- option: port
|
|
value: "{{ openvpn_server_port }}"
|
|
- option: enabled
|
|
value: "{{ openvpn_enabled }}"
|
|
- option: cron_enabled
|
|
value: "{{ openvpn_cron_enabled }}"
|