mirror of
https://github.com/FAUSheppy/no-secrets-athq-ansible
synced 2025-12-07 04:41:37 +01:00
fix: openvpn config
This commit is contained in:
@@ -12,13 +12,21 @@
|
|||||||
with_items:
|
with_items:
|
||||||
- atlantishq
|
- atlantishq
|
||||||
|
|
||||||
|
- name: Create OpenVPN config dirs
|
||||||
|
file:
|
||||||
|
dest: "/etc/openvpn/{{ item.name }}-{{ item.dev_type }}/"
|
||||||
|
state: directory
|
||||||
|
with_items:
|
||||||
|
- { "name" : "atlantishq", "dev_type" : "tap", "port" : 7012, "proto" : "tcp" }
|
||||||
|
- { "name" : "atlantishq", "dev_type" : "tun", "port" : 7013, "proto" : "tcp" }
|
||||||
|
|
||||||
- name: Deploy OpenVPN configs
|
- name: Deploy OpenVPN configs
|
||||||
template:
|
template:
|
||||||
src: "{{ item }}.conf"
|
src: "{{ item.name }}.conf"
|
||||||
dest: "/etc/openvpn/{{ item.name }}-{{ item.dev_type }}/{{ item.name }}-{{ item.dev_type }}.conf"
|
dest: "/etc/openvpn/{{ item.name }}-{{ item.dev_type }}/{{ item.name }}-{{ item.dev_type }}.conf"
|
||||||
with_items:
|
with_items:
|
||||||
- { "name" : "atlantishq", "dev_type" : "tap", "port" : 7012 }
|
- { "name" : "atlantishq", "dev_type" : "tap", "port" : 7012, "proto" : "tcp" }
|
||||||
- { "name" : "atlantishq", "dev_type" : "tun", "port" : 7013 }
|
- { "name" : "atlantishq", "dev_type" : "tun", "port" : 7013, "proto" : "tcp" }
|
||||||
|
|
||||||
- name: Openvpn Mgnt interface Pass file
|
- name: Openvpn Mgnt interface Pass file
|
||||||
copy:
|
copy:
|
||||||
@@ -60,12 +68,6 @@
|
|||||||
src: "certificate-manager.yaml"
|
src: "certificate-manager.yaml"
|
||||||
dest: "/opt/certificate-manager/"
|
dest: "/opt/certificate-manager/"
|
||||||
|
|
||||||
- name: Log into private registry
|
|
||||||
docker_login:
|
|
||||||
registry: registry.atlantishq.de
|
|
||||||
username: docker
|
|
||||||
password: HISTORY_PURGED_SECRET
|
|
||||||
|
|
||||||
- name: Deploy compose templates
|
- name: Deploy compose templates
|
||||||
community.docker.docker_compose:
|
community.docker.docker_compose:
|
||||||
project_src: "/opt/certificate-manager/"
|
project_src: "/opt/certificate-manager/"
|
||||||
|
|||||||
@@ -2,12 +2,12 @@ server 172.16.1.0 255.255.255.0
|
|||||||
#server-ipv6 fd2a:aef:608:1::/64
|
#server-ipv6 fd2a:aef:608:1::/64
|
||||||
|
|
||||||
dev athq_sheppyvpn
|
dev athq_sheppyvpn
|
||||||
dev-type {{ dev_type }}
|
dev-type {{ item.dev_type }}
|
||||||
|
|
||||||
proto {{ proto }}
|
proto {{ item.proto }}
|
||||||
port {{ port }}
|
port {{ item.port }}
|
||||||
|
|
||||||
{% if dev_type == "tap" %}
|
{% if item.dev_type == "tap" %}
|
||||||
topology subnet
|
topology subnet
|
||||||
client-to-client
|
client-to-client
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|||||||
@@ -1,5 +1,5 @@
|
|||||||
certificate-manager:
|
certificate-manager:
|
||||||
image: registry.atlantishq.de/certificate-manager:latest
|
image: harbor-registry.atlantishq.de/atlantishq/certificate-manager:latest
|
||||||
restart: always
|
restart: always
|
||||||
ports:
|
ports:
|
||||||
- 6000:5000
|
- 6000:5000
|
||||||
|
|||||||
Reference in New Issue
Block a user