---
- name: create TLS certificate and key
  import_tasks: tls.yml

- name: generate openvpn config
  template:
    src: conf.j2
    dest: "/etc/openvpn/client/{{ openvpn_zone.name }}.conf"
  notify: restart openvpn-client

- name: make sure openvpn-client systemd unit is enabled and started
  systemd:
    name: "openvpn-client@{{ openvpn_zone.name }}"
    state: started
    enabled: yes