Skip to content

Openvpn client fqdn pr 2.x #1506

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 12 commits into from
Mar 12, 2024
Merged

Openvpn client fqdn pr 2.x #1506

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
5518f67
Supporting a fixed PHP version with a fixed port number.
gregharvey Dec 12, 2023
e038b24
Merging 2.x.
gregharvey Dec 22, 2023
e2defdf
Accidently re-added the old VPN role - re-deleting!
gregharvey Dec 22, 2023
560cf3f
Handling allowing client config template for ovpn to have an FQDN.
gregharvey Mar 12, 2024
9aa5f34
Merge branch 'opcache_vars_v2-PR-2.x' into openvpn_client_fqdn
gregharvey Mar 12, 2024
66bfe31
Merge branch '2.x' into openvpn_client_fqdn
gregharvey Mar 12, 2024
029b178
Let's not assume port 1194 for ovpn.
gregharvey Mar 12, 2024
ecb5f5c
Merge branch '2.x' into openvpn_client_fqdn-PR-2.x
gregharvey Mar 12, 2024
492c4c9
Merge branch 'openvpn_client_fqdn' into openvpn_client_fqdn-PR-2.x
gregharvey Mar 12, 2024
4fe25a5
Tweaking FQDN handling in ovpn.
gregharvey Mar 12, 2024
d8abbb3
Merge branch '2.x' into openvpn_client_fqdn-PR-2.x
gregharvey Mar 12, 2024
7981437
Merge branch 'openvpn_client_fqdn' into openvpn_client_fqdn-PR-2.x
gregharvey Mar 12, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/roles/debian/openvpn.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ At the moment we do not support headless customisation of encryption settings. T
---
openvpn:
script_install_path: "/home/{{ user_provision.username }}"
fqdn: "" # fully qualified domain name of VPN server for use in client config, uses IP address if empty
fqdn: "" # fully qualified domain name of VPN server for use in client config, uses IP address if empty - only works with port_choice: "1"
auto_install: true
# post install server config tweaks
ipv4_settings: "" # defaults to `10.8.0.0 255.255.255.0` - example, to use 192.168.140.0/24 set "192.168.140.0 255.255.255.0"
Expand Down
2 changes: 1 addition & 1 deletion roles/debian/openvpn/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ At the moment we do not support headless customisation of encryption settings. T
---
openvpn:
script_install_path: "/home/{{ user_provision.username }}"
fqdn: "" # fully qualified domain name of VPN server for use in client config, uses IP address if empty
fqdn: "" # fully qualified domain name of VPN server for use in client config, uses IP address if empty - only works with port_choice: "1"
auto_install: true
# post install server config tweaks
ipv4_settings: "" # defaults to `10.8.0.0 255.255.255.0` - example, to use 192.168.140.0/24 set "192.168.140.0 255.255.255.0"
Expand Down
2 changes: 1 addition & 1 deletion roles/debian/openvpn/defaults/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
openvpn:
script_install_path: "/home/{{ user_provision.username }}"
fqdn: "" # fully qualified domain name of VPN server for use in client config, uses IP address if empty
fqdn: "" # fully qualified domain name of VPN server for use in client config, uses IP address if empty - only works with port_choice: "1"
auto_install: true
# post install server config tweaks
ipv4_settings: "" # defaults to `10.8.0.0 255.255.255.0` - example, to use 192.168.140.0/24 set "192.168.140.0 255.255.255.0"
Expand Down
5 changes: 3 additions & 2 deletions roles/debian/openvpn/tasks/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -168,11 +168,12 @@
mode: '0644'
when: openvpn.tls_cipher | length > 0

# Only works when openvpn.port_choice == '1' because otherwise port will not be 1194 and regexp will not match
- name: Use FQDN as OpenVPN server remote in client config.
ansible.builtin.lineinfile:
path: /etc/openvpn/client-template.txt
regexp: '^remote (.*)'
line: "remote {{ openvpn.fqdn }}"
regexp: '^remote (.*) 1194'
line: "remote {{ openvpn.fqdn }} 1194"
owner: root
group: root
mode: '0644'
Expand Down