ansible-openvpn

Ansible role to install openvpn from source with TLS1.2 enabled

Tunables

• openvpn_server_port (integer) - port to listen on
• openvpn_server_firewall_enabled (boolean) - use UFW to harden this installation? Only disable if you know what your doing and have a firewall upstream.
• openvpn_server_firewall_allow_ssh (boolean) - allow ssh connections to this box? Disabled by default, if you dont have physical access to the box and need remote connections its probally safe to enable.
• openvpn_server_firewall_allow_dns (boolean) - allow DNS requests through the firewall
• openvpn_server_firewall_dns_gateway (boolean) - your networks gateway (where the dns requests will be routed from)
• openvpn_server_logging (boolean) - should we write a log file
• openvpn_server_log_path (string) - path of log file
• openvpn_server_log_verbosity (integer) - openvpn logging level

Dependencies

None

Example Playbook

- hosts: servers
  roles:
     - role: stevenharradine.openvpn

License

MIT

Contributors

• Steven Harradine