ansible
/
xoxys.openvpn_client
0
0
Fork 0
Code Issues Pull Requests Releases Activity

chore: drop deprecated options
continuous-integration/drone/push Build is passing Details

This commit is contained in:
Robert Kaussow 2023-06-13 12:19:44 +02:00
parent 372793ae66
commit 1435bf2e2a
Signed by: xoxys
GPG Key ID: 4E692A2EAECC03C0
2 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
defaults/main.yml
View File

@ -2,15 +2,16 @@
openvpn_client_name: client openvpn_client_name: client
openvpn_client_server: vpn.example.com openvpn_client_server: vpn.example.com
openvpn_client_port: 1194 openvpn_client_port: 1194
openvpn_client_proto: udp
openvpn_service_state: started openvpn_service_state: started
openvpn_client_packages_extra: [] openvpn_client_packages_extra: []
openvpn_client_cipher: AES-256-CBC # openvpn_client_cipher: AES-256-CBC
openvpn_client_auth: SHA512 openvpn_client_auth: SHA512
# openvpn_client_x509_name: # openvpn_client_x509_subject:
openvpn_client_ca_file: "/etc/pki/tls/certs/ca-bundle.crt" openvpn_client_ca_file: "/etc/pki/tls/certs/ca-bundle.crt"
# openvpn_client_ca_source: # openvpn_client_ca_source:

15
templates/etc/openvpn/client.conf.j2
View File

@ -3,17 +3,18 @@
dev tun dev tun
persist-tun persist-tun
persist-key persist-key
{% if openvpn_client_cipher is defined %}
cipher {{ openvpn_client_cipher }} cipher {{ openvpn_client_cipher }}
ncp-disable {% endif %}
auth {{ openvpn_client_auth }} auth {{ openvpn_client_auth }}
tls-client
client client
resolv-retry infinite resolv-retry infinite
remote {{ openvpn_client_server }} {{ openvpn_client_port }} remote {{ openvpn_client_server }} {{ openvpn_client_port }} {{ openvpn_client_proto }}
nobind lport 0
{% if openvpn_client_x509_name is defined %} {% if openvpn_client_x509_subject is defined %}
verify-x509-name "{{ openvpn_client_x509_name }}" name verify-x509-name "{{ openvpn_client_x509_subject }}" subject
{% endif %} {% endif %}
remote-cert-tls server
{% if openvpn_client_ca_file is defined %} {% if openvpn_client_ca_file is defined %}
ca /etc/openvpn/certs/{{ openvpn_client_ca_file }} ca /etc/openvpn/certs/{{ openvpn_client_ca_file }}
{% endif %} {% endif %}
@ -27,5 +28,3 @@ key /etc/openvpn/certs/{{ openvpn_client_key_file }}
tls-auth /etc/openvpn/certs/{{ openvpn_client_ta_file }} tls-auth /etc/openvpn/certs/{{ openvpn_client_ta_file }}
{% endif %} {% endif %}
key-direction 1 key-direction 1
remote-cert-tls server
comp-lzo adaptive