From 65fb49fc5f3e4628353ee2e54c5ced76c5bc40fa Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Tue, 16 Nov 2021 22:34:30 +0100
Subject: openvpn: initial support for server/client

---
 roles/network/openvpn/client/tasks/main.yml | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

(limited to 'roles/network/openvpn/client/tasks/main.yml')

diff --git a/roles/network/openvpn/client/tasks/main.yml b/roles/network/openvpn/client/tasks/main.yml
index 49f6443f..3067609c 100644
--- a/roles/network/openvpn/client/tasks/main.yml
+++ b/roles/network/openvpn/client/tasks/main.yml
@@ -2,6 +2,14 @@
 - name: create TLS certificate and key
   import_tasks: tls.yml
 
-## TODO:
-## - generate/install openvpn configuration
-## - enable/start "openvpn-server@{{ openvpn_zone.name }}"
+- name: generate openvpn config
+  template:
+    src: conf.j2
+    dest: "/etc/openvpn/client/{{ openvpn_zone.name }}.conf"
+  notify: restart openvpn-client
+
+- name: make sure openvpn-client systemd unit is enabled and started
+  systemd:
+    name: "openvpn-client@{{ openvpn_zone.name }}"
+    state: started
+    enabled: yes
-- 
cgit v1.2.3