diff --git a/tasks/setup.yml b/tasks/setup.yml index b702cfb..ee4f997 100644 --- a/tasks/setup.yml +++ b/tasks/setup.yml @@ -32,17 +32,33 @@ dest: "{{ item.dest }}" mode: "{{ item.mode }}" loop: - - { src: "{{ openvpn_client_ca_source | default('') }}", dest: "/etc/openvpn/certs/{{ openvpn_client_ca_file }}", mode: "0640" } - - { src: "{{ openvpn_client_cert_source | default('') }}", dest: "/etc/openvpn/certs/{{ openvpn_client_cert_file }}", mode: "0640" } - - { src: "{{ openvpn_client_key_source | default('') }}", dest: "/etc/openvpn/certs/{{ openvpn_client_key_file }}", mode: "0600" } - - { src: "{{ openvpn_client_ta_source | default('') }}", dest: "/etc/openvpn/certs/{{ openvpn_client_ta_file }}", mode: "0600" } + - { + src: "{{ openvpn_client_ca_source | default('') }}", + dest: "/etc/openvpn/certs/{{ openvpn_client_ca_file }}", + mode: "0640", + } + - { + src: "{{ openvpn_client_cert_source | default('') }}", + dest: "/etc/openvpn/certs/{{ openvpn_client_cert_file }}", + mode: "0640", + } + - { + src: "{{ openvpn_client_key_source | default('') }}", + dest: "/etc/openvpn/certs/{{ openvpn_client_key_file }}", + mode: "0600", + } + - { + src: "{{ openvpn_client_ta_source | default('') }}", + dest: "/etc/openvpn/certs/{{ openvpn_client_ta_file }}", + mode: "0600", + } loop_control: label: "{{ item.dest }}" when: item.src | length > 0 notify: __openvpn_restart - name: Ensure openvpn service is up and running - systemd: + service: name: "openvpn@{{ openvpn_client_name }}" state: "{{ openvpn_service_state }}" enabled: yes