2016-07-11 21:51:31 +00:00
|
|
|
---
|
|
|
|
|
|
|
|
|
|
easyrsa_dir: /opt/easy-rsa-ipsec
|
|
|
|
|
easyrsa_ca_expire: 3650
|
|
|
|
|
easyrsa_cert_expire: 3650
|
|
|
|
|
|
2016-08-04 19:58:29 +00:00
|
|
|
# If True re-init all existing certificates. (True or False)
|
|
|
|
|
easyrsa_reinit_existent: False
|
2016-07-11 21:51:31 +00:00
|
|
|
|
2016-08-04 19:58:29 +00:00
|
|
|
vpn_network: 10.19.48.0/24
|
2016-08-20 13:36:33 +00:00
|
|
|
vpn_network_ipv6: 'fd9d:bc11:4020::/48'
|
|
|
|
|
# https://www.sixxs.net/tools/whois/?fd9d:bc11:4020::/48
|
2016-08-04 19:58:29 +00:00
|
|
|
server_name: "{{ ansible_ssh_host }}"
|
2016-08-18 09:17:46 +00:00
|
|
|
IP_subject_alt_name: "{{ ansible_ssh_host }}"
|
2016-08-04 19:58:29 +00:00
|
|
|
|
2016-08-22 20:01:43 +00:00
|
|
|
|
2016-08-04 19:58:29 +00:00
|
|
|
# Enable this variable if you want to use a local DNS resolver to block ads while surfing. (True or False)
|
|
|
|
|
service_dns: True
|
|
|
|
|
|
|
|
|
|
# If you don't want to use a local DNS resolver (option `service_dns`) you need to define DNS servers in this list.
|
2016-07-31 11:24:56 +00:00
|
|
|
dns_servers:
|
|
|
|
|
- 8.8.8.8
|
2016-08-02 21:22:49 +00:00
|
|
|
- 8.8.4.4
|
|
|
|
|
- 2001:4860:4860::8888
|
|
|
|
|
- 2001:4860:4860::8844
|
2016-08-21 10:29:53 +00:00
|
|
|
|
2016-08-21 10:30:54 +00:00
|
|
|
# IP address for the proxy and the local dns resolver
|
2016-08-21 10:29:53 +00:00
|
|
|
local_service_ip: 172.16.0.1
|
2016-07-11 21:51:31 +00:00
|
|
|
|
|
|
|
|
users:
|
|
|
|
|
- mr.smith
|
|
|
|
|
- mrs.smith
|
2016-07-24 13:25:06 +00:00
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# auditd options
|
|
|
|
|
# email for auditd actions:
|
2016-07-30 09:30:33 +00:00
|
|
|
auditd_action_mail_acct: email@example.com
|
