Home Explore Help
Sign In
mark22k
/
ansible-crxn-router
mirror of https://codeberg.org/mark22k/ansible-crxn-router.git
Watch 1
Star 0
Fork 0
Files Issues 0
Branch: main
Branches Tags
ansible-crxn...
/
roles
/
openvpn
/
templates
/
config.j2

config.j2 818 B
Permalink History Raw

12345678910111213141516171819202122232425262728293031323334353637383940 
  1. {% if item.openvpn.type == "ipv4" %}
    2. 

  2.     {% set proto = "udp" %}
    3. 

  3.     {% set localip = system.ipv4 %}
    4. 

  4. {% else %}
    5. 

  5.     {% set proto = "udp6" %}
    6. 

  6.     {% set localip = system.ipv6 %}
    7. 

  7. {% endif %}
    8. 

  8. 

  9. mode p2p
    10. 

  10. 

  11. proto {{ proto }}
    12. 

  12. 

  13. {% if item.openvpn.mode == "public" %}
    14. 

  14. remote {{ item.openvpn.peer.endpoint }}
    15. 

  15. local {{ localip }}
    16. 

  16. rport {{ item.openvpn.peer.port }}
    17. 

  17. {% else %}
    18. 

  18. float
    19. 

  19. keepalive {{ item.openvpn.keepalive.interval }} {{ item.openvpn.keepalive.timeout }}
    20. 

  20. {% endif %}
    21. 

  21. 

  22. lport {{ item.openvpn.port }}
    23. 

  23. 

  24. dev-type tun
    25. 

  25. dev {{ item.interface }}
    26. 

  26. 

  27. script-security 1
    28. 

  28. cipher {% if item.openvpn.cipher is defined %}{{ item.openvpn.cipher }}{% else %}aes-256-cbc{% endif %}
    29. 

  29. 

  30. resolv-retry infinite
    31. 

  31. 

  32. persist-key
    33. 

  33. persist-tun
    34. 

  34. 

  35. tun-mtu {{ item.openvpn.mtu }}
    36. 

  36. 

  37. ifconfig-ipv6 {{ peering.linklocal }} fe80::1000
    38. 

  38. 

  39. secret {{ item.name }}.key
    40. 

  40.