add nginx, sshd, ssl roles

2026-09-20 22:14:56 +00:00
parent ba9e1a664f
commit c640406c10
131 changed files with 1535 additions and 780 deletions
@@ -0,0 +1,26 @@
+client
+dev tap0
+proto tcp
+remote 127.0.0.1 1195
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+remote-cert-tls server
+auth SHA256
+cipher AES-256-GCM
+verb 3
+{% if item.1.ip is defined %}
+route-metric {{ item.1.route_metric | default(50) }}
+script-security 2
+up "C:\\Windows\\System32\\netsh.exe interface ip set address name="OpenVPN TAP-Windows6" static {{ item.1.ip }} 255.255.255.0"
+{% endif %}
+<ca>
+{{ lookup('file', item.0.pki_dir + '/ca.crt') }}
+</ca>
+<cert>
+{{ lookup('file', item.0.pki_dir + '/issued/' + item.1.name + '.crt') }}
+</cert>
+<key>
+{{ lookup('file', item.0.pki_dir + '/private/' + item.1.name + '.key') }}
+</key>
@@ -0,0 +1,21 @@
+client
+dev tun0
+proto tcp
+remote 127.0.0.1 1194
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+remote-cert-tls server
+auth SHA256
+cipher AES-256-GCM
+verb 3
+<ca>
+{{ lookup('file', item.0.pki_dir + '/ca.crt') }}
+</ca>
+<cert>
+{{ lookup('file', item.0.pki_dir + '/issued/' + item.1.name + '.crt') }}
+</cert>
+<key>
+{{ lookup('file', item.0.pki_dir + '/private/' + item.1.name + '.key') }}
+</key>