Archive Legacy Setup And Add Ansible Control Plane

ansible/roles/openvpn_gateway/templates/down.sh.j2

@@ -0,0 +1,2 @@
+#!/bin/sh
+iptables -t nat -D POSTROUTING -s {{ openvpn_network_cidr }} -d {{ homelab_lan_cidr }} -o eth0 -j MASQUERADE 2>/dev/null || true

ansible/roles/openvpn_gateway/templates/homelab-openvpn.service.j2

@@ -0,0 +1,13 @@
+[Unit]
+Description=HomeLab OpenVPN {{ openvpn_role }}
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+ExecStart=/usr/sbin/openvpn --config {{ openvpn_config_path }}
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target

ansible/roles/openvpn_gateway/templates/homelab.conf.j2

@@ -0,0 +1,26 @@
+dev {{ openvpn_interface }}
+ifconfig {{ openvpn_local_ip }} {{ openvpn_peer_ip }}
+secret {{ openvpn_static_key_path }}
+cipher AES-256-CBC
+auth SHA256
+persist-key
+persist-tun
+verb 3
+keepalive 10 60
+{% if openvpn_role == 'server' %}
+proto {{ openvpn_proto_server }}
+port {{ openvpn_listen_port }}
+{% for route in openvpn_home_routes %}
+route {{ route.network }} {{ route.netmask }}
+{% endfor %}
+{% endif %}
+{% if openvpn_role == 'gateway' %}
+proto {{ openvpn_proto_client }}
+remote 157.22.231.198 {{ openvpn_listen_port }}
+resolv-retry infinite
+nobind
+route-nopull
+script-security 2
+up /etc/openvpn/homelab/up.sh
+down /etc/openvpn/homelab/down.sh
+{% endif %}

ansible/roles/openvpn_gateway/templates/up.sh.j2

@@ -0,0 +1,3 @@
+#!/bin/sh
+iptables -t nat -C POSTROUTING -s {{ openvpn_network_cidr }} -d {{ homelab_lan_cidr }} -o eth0 -j MASQUERADE 2>/dev/null || \
+  iptables -t nat -A POSTROUTING -s {{ openvpn_network_cidr }} -d {{ homelab_lan_cidr }} -o eth0 -j MASQUERADE