mirror of
https://github.com/trailofbits/algo
synced 2024-11-18 09:25:38 +00:00
e8947f318b
* Refactoring, booleans declaration and update users fix * Make server_name more FQDN compatible * Rename variables * Define the default value for store_cakey * Skip a prompt about the SSH user if deploying to localhost * Disable reboot for non-cloud deployments * Enable EC2 volume encryption by default * Add default server value (localhost) for the local installation Delete empty files * Add default region to aws_region_facts * Update docs * EC2 credentials fix * Warnings fix * Update deploy-from-ansible.md * Fix a typo * Remove lightsail from the docs * Disable EC2 encryption by default * rename droplet to server * Disable dependencies * Disable tls_cipher_suite * Convert wifi-exclude to a string. Update-users fix * SSH access congrats fix * 16.04 > 18.04 * Dont ask for the credentials if specified in the environment vars * GCE server name fix
61 lines
1.8 KiB
YAML
61 lines
1.8 KiB
YAML
- name: Gather Facts
|
|
setup:
|
|
|
|
- name: Include system based facts and tasks
|
|
import_tasks: systems/main.yml
|
|
|
|
- name: Install prerequisites
|
|
package: name="{{ item }}" state=present
|
|
with_items:
|
|
- "{{ prerequisites }}"
|
|
|
|
- name: Install strongSwan
|
|
package: name=strongswan state=present
|
|
|
|
- name: Setup the ipsec config
|
|
template:
|
|
src: "roles/vpn/templates/client_ipsec.conf.j2"
|
|
dest: "{{ configs_prefix }}/ipsec.{{ IP_subject_alt_name }}.conf"
|
|
mode: '0644'
|
|
with_items:
|
|
- "{{ vpn_user }}"
|
|
notify:
|
|
- restart strongswan
|
|
|
|
- name: Setup the ipsec secrets
|
|
template:
|
|
src: "roles/vpn/templates/client_ipsec.secrets.j2"
|
|
dest: "{{ configs_prefix }}/ipsec.{{ IP_subject_alt_name }}.secrets"
|
|
mode: '0600'
|
|
with_items:
|
|
- "{{ vpn_user }}"
|
|
notify:
|
|
- restart strongswan
|
|
|
|
- name: Include additional ipsec config
|
|
lineinfile:
|
|
dest: "{{ item.dest }}"
|
|
line: "{{ item.line }}"
|
|
create: yes
|
|
with_items:
|
|
- dest: "{{ configs_prefix }}/ipsec.conf"
|
|
line: "include ipsec.{{ IP_subject_alt_name }}.conf"
|
|
- dest: "{{ configs_prefix }}/ipsec.secrets"
|
|
line: "include ipsec.{{ IP_subject_alt_name }}.secrets"
|
|
notify:
|
|
- restart strongswan
|
|
|
|
- name: Setup the certificates and keys
|
|
template:
|
|
src: "{{ item.src }}"
|
|
dest: "{{ item.dest }}"
|
|
with_items:
|
|
- src: "configs/{{ IP_subject_alt_name }}/pki/certs/{{ vpn_user }}.crt"
|
|
dest: "{{ configs_prefix }}/ipsec.d/certs/{{ vpn_user }}.crt"
|
|
- src: "configs/{{ IP_subject_alt_name }}/pki/cacert.pem"
|
|
dest: "{{ configs_prefix }}/ipsec.d/cacerts/{{ IP_subject_alt_name }}.pem"
|
|
- src: "configs/{{ IP_subject_alt_name }}/pki/private/{{ vpn_user }}.key"
|
|
dest: "{{ configs_prefix }}/ipsec.d/private/{{ vpn_user }}.key"
|
|
notify:
|
|
- restart strongswan
|