stargate-cluster/vm-ansible
1
0
Fork 0
Code Pull Requests Releases Activity

update to latest state
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
Torma Kristóf
2023-02-19 13:42:53 +01:00
parent 21a7c54b96
commit 3c883cdded
6 changed files with 29 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
roles/openvpn/tasks/main.yaml
View File

@ -4,7 +4,7 @@
update_cache: yes
state: present
name:
- openvpn-server
- openvpn
- name : "Enable ipv4 forwarding via sysctl"
ansible.posix.sysctl:
@ -16,7 +16,7 @@
- name: Enable and restart openvpn daemon
service:
name: openvpn
name: openvpn-server@stargate
state: restarted
enabled: yes
@ -41,6 +41,13 @@
-A POSTROUTING -s 192.168.37.0/24 -o eth0 -j MASQUERADE
-A POSTROUTING -s 192.168.37.0/24 -o eth2 -j MASQUERADE
COMMIT
-A ufw-before-input -i tun+ -j ACCEPT
-A ufw-before-forward -i tun+ -j ACCEPT
-A ufw-before-forward -i tun+ -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A ufw-before-forward -i eth0 -o tun+ -m state --state RELATED,ESTABLISHED -j ACCEPT
-A ufw-before-forward -i tun+ -o eth2 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A ufw-before-forward -i eth2 -o tun+ -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT
# END OPENVPN RULES
- name: Reload ufw