hxpro/ansible-role-openvpn

OpenVPN Server

hxpro.openvpn

OpenVPN server

This role si under development. Do not use it in production.

Tested on CentOS 7

Requirements

• Public certificate of Certificate Authority ovpn_ca
• Server key ovpn_key and certificate ovpn_cert issued by CA

Role Variables

ovpn_name: 'server'

ovpn_port: 1194
ovpn_proto: udp
ovpn_device: tun
ovpn_user: openvpn
ovpn_group: openvpn
ovpn_max_clients: 30

ovpn_log: /var/log/openvpn
ovpn_verb: 1

# Possible variables are: lzo, lz4
# undefined variable - no compression
ovpn_compress: lzo

# show all message digest algorithms to use with the auth option: openvpn --show-digests
# undefined variable ovpn_auth - default auth SHA1
# set none to disable authentication
ovpn_auth: none

# show all cipher algorithms to use with the cipher option: openvpn --show-ciphers
# set none to disable encryption
ovpn_cipher: BF-CBC

ovpn_duplicate_cn: true

ovpn_ca: "{{ lookup('file', 'ca.pem') }}"
ovpn_cert: "{{ lookup('file', 'server.pem') }}"
ovpn_key: "{{ lookup('file', 'key.pem') }}"
ovpn_dh: dh.pem

ovpn_client_to_client: true

ovpn_client_connect: false
ovpn_client_disconnect: false
ovpn_auth_user_pass_verify: false

ovpn_up_restart: false
ovpn_up: false
ovpn_down: false

ovpn_push:
  - "route 192.168.0.0 255.255.255.0"
  - "dhcp-option DNS 192.168.0.1"

ovpn_server_network: 192.168.5.0
ovpn_server_netmask: 255.255.255.0

# ifconfig local-IP [netmask]     
ovpn_ifconfig: 192.168.5.1 255.255.255.0
# ifconfig-pool start-IP end-IP [netmask]
ovpn_ifconfig_pool: 192.168.5.100 192.168.5.254 255.255.255.0

ovpn_ipv4_forwarding: true
ovpn_client_config_dir: /etc/openvpn/server/ccd

ovpn_persist_key: false
ovpn_persist_tun: false

ovpn_username_as_common_name: false
ovpn_auth_user_pass_optional: false

Dependencies

• hxpro.epel
• hxpro.selinux

Example Playbook

- hosts: servers
  roles:
     - role: hxpro.openvpn
       ovpn_proto: tcp

License

WTFPL

Author Information

Matěj Koudelka matej@hxpro.cz