DmitryandClaude Opus 5
c676be81ec
Commit the accumulated infrastructure work that was living only in the working tree: monitoring stack, emergency access/bot, gyro allocator, grimmory, adguard, backup audit and the OpenCode agent definitions. Also ignore Python bytecode, local archives and Nix/direnv artifacts. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GTocXkGUUazHdKKd3r9k71
35 lines
909 B
Django/Jinja
35 lines
909 B
Django/Jinja
dev {{ openvpn_interface }}
|
|
ifconfig {{ openvpn_local_ip }} {{ openvpn_peer_ip }}
|
|
secret {{ openvpn_static_key_path }}
|
|
cipher AES-256-CBC
|
|
auth SHA256
|
|
persist-key
|
|
persist-tun
|
|
verb 3
|
|
keepalive 10 60
|
|
{% if openvpn_role == 'server' %}
|
|
proto {{ openvpn_proto_server }}
|
|
port {{ openvpn_listen_port }}
|
|
{% for route in openvpn_home_routes %}
|
|
route {{ route.network }} {{ route.netmask }}
|
|
{% endfor %}
|
|
{% for service in openvpn_forwarded_services %}
|
|
route {{ service.target_host }} 255.255.255.255
|
|
{% endfor %}
|
|
{% if openvpn_forwarded_services | length > 0 %}
|
|
script-security 2
|
|
up /etc/openvpn/homelab/up.sh
|
|
down /etc/openvpn/homelab/down.sh
|
|
{% endif %}
|
|
{% endif %}
|
|
{% if openvpn_role == 'gateway' %}
|
|
proto {{ openvpn_proto_client }}
|
|
remote 157.22.231.198 {{ openvpn_listen_port }}
|
|
resolv-retry infinite
|
|
nobind
|
|
route-nopull
|
|
script-security 2
|
|
up /etc/openvpn/homelab/up.sh
|
|
down /etc/openvpn/homelab/down.sh
|
|
{% endif %}
|