|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
# Add as many users as you want for your VPN server here.
|
|
|
|
|
# Credentials will be generated for each one.
|
|
|
|
|
users:
|
|
|
|
|
- dan
|
|
|
|
|
- jack
|
|
|
|
|
|
|
|
|
|
# NOTE: If your usernames have leading 0's, like "000dan", you have to escape them
|
|
|
|
|
|
|
|
|
|
### Advanced users only below this line ###
|
|
|
|
|
|
|
|
|
|
# If True re-init all existing certificates. (True or False)
|
|
|
|
|
easyrsa_reinit_existent: False
|
|
|
|
|
|
|
|
|
|
vpn_network: 10.19.48.0/24
|
|
|
|
|
# https://www.sixxs.net/tools/whois/?fd9d:bc11:4020::/48
|
|
|
|
|
vpn_network_ipv6: 'fd9d:bc11:4020::/48'
|
|
|
|
|
|
|
|
|
|
server_name: "{{ ansible_ssh_host }}"
|
|
|
|
|
IP_subject_alt_name: "{{ ansible_ssh_host }}"
|
|
|
|
|
|
|
|
|
|
dns_servers:
|
|
|
|
|
ipv4:
|
|
|
|
|
- 8.8.8.8
|
|
|
|
|
- 8.8.4.4
|
|
|
|
|
ipv6:
|
|
|
|
|
- 2001:4860:4860::8888
|
|
|
|
|
- 2001:4860:4860::8844
|
|
|
|
|
|
|
|
|
|
# IP address for the local dns resolver
|
|
|
|
|
local_service_ip: 172.16.0.1
|
|
|
|
|
|
|
|
|
|
pkcs12_PayloadCertificateUUID: "{{ 900000 | random | to_uuid | upper }}"
|
|
|
|
|
VPN_PayloadIdentifier: "{{ 800000 | random | to_uuid | upper }}"
|
|
|
|
|
CA_PayloadIdentifier: "{{ 700000 | random | to_uuid | upper }}"
|
|
|
|
|
|
|
|
|
|
# Block traffic between connected clients
|
|
|
|
|
BetweenClients_DROP: Y
|
|
|
|
|
|
|
|
|
|
congrats:
|
|
|
|
|
common: |
|
|
|
|
|
"# Congratulations! #"
|
|
|
|
|
"# Your Algo server is running. #"
|
|
|
|
|
"# Config files and certificates are in the ./configs/ directory. #"
|
|
|
|
|
"# Go to https://whoer.net/ after connecting #"
|
|
|
|
|
"# and ensure that all your traffic passes through the VPN. #"
|
|
|
|
|
"# Local DNS resolver {{ local_service_ip }} #"
|
|
|
|
|
p12_pass: |
|
|
|
|
|
"# The p12 and SSH keys password is {{ easyrsa_p12_export_password }} #"
|
|
|
|
|
ca_key_pass: |
|
|
|
|
|
"# The CA key password is {{ easyrsa_CA_password }} #"
|
|
|
|
|
ssh_access: |
|
|
|
|
|
"# Shell access: ssh -i {{ ansible_ssh_private_key_file|default(omit) }} {{ ansible_ssh_user|default(omit) }}@{{ ansible_ssh_host|default(omit) }} #"
|
|
|
|
|
|
|
|
|
|
SSH_keys:
|
|
|
|
|
comment: algo@ssh
|
|
|
|
|
private: configs/algo.pem
|
|
|
|
|
public: configs/algo.pem.pub
|
|
|
|
|
|
|
|
|
|
cloud_providers:
|
|
|
|
|
azure:
|
|
|
|
|
size: Basic_A0
|
|
|
|
|
image:
|
|
|
|
|
offer: UbuntuServer
|
|
|
|
|
publisher: Canonical
|
|
|
|
|
sku: '16.04-LTS' # 16.04-LTS
|
|
|
|
|
version: latest
|
|
|
|
|
digitalocean:
|
|
|
|
|
size: 512mb
|
|
|
|
|
image: "ubuntu-16-04-x64" # ubuntu-16-04-x64 / ubuntu-17-04-x64
|
|
|
|
|
ec2:
|
|
|
|
|
size: t2.micro
|
|
|
|
|
image:
|
|
|
|
|
name: "ubuntu-xenial-16.04" # ubuntu-xenial-16.04 / ubuntu-zesty-17.04
|
|
|
|
|
owner: "099720109477"
|
|
|
|
|
gce:
|
|
|
|
|
size: f1-micro
|
|
|
|
|
image: ubuntu-1604 # ubuntu-1604 / ubuntu-1704
|
|
|
|
|
local:
|
