only run/set this up if we're not inside phx2

playbooks/groups/mirrorlist.yml

@@ -37,6 +37,7 @@
   - include: $tasks/base.yml
   - include: $tasks/fas_client.yml
   - include: $tasks/2fa_client.yml
+  - include: $tasks/openvpn_client.yml
   - include: $tasks/motd.yml
   - include: $tasks/sudo.yml
   - include: $tasks/rkhunter.yml

tasks/openvpn_client.yml

@@ -11,13 +11,15 @@
   - config
   notify:
   - restart openvpn
+  when_string: "10.5" not in ${ansible_default_ipv4.address}
 
-- name: /etc/openvpn/crl.pem g/secure/vpn/openvpn/keys/crl.pem
+- name: /etc/openvpn/crl.pem from vpn/openvpn/keys/crl.pem
   copy: src=$puppet_private/vpn/openvpn/keys/crl.pem dest=/etc/openvpn/crl.pem mode=0644 owner=root group=root
   tags:
   - config
   notify:
   - restart openvpn
+  when_string: "10.5" not in ${ansible_default_ipv4.address}
 
 - name: /etc/openvpn/openvpn.conf
   copy: src=$files/openvpn/client.conf dest=/etc/openvpn/openvpn.conf
@@ -25,6 +27,7 @@
   - config
   notify:
   - restart openvpn
+  when_string: "10.5" not in ${ansible_default_ipv4.address}
 
 - name: /etc/openvpn/client.crt
   copy: src=$puppet_private/vpn/openvpn/keys/${inventory_hostname}.crt dest=/etc/openvpn/client.crt mode=0600 owner=root group=root
@@ -32,6 +35,7 @@
   - config
   notify:
   - restart openvpn
+  when_string: "10.5" not in ${ansible_default_ipv4.address}
 
 - name: /etc/openvpn/client.key
   copy: src=$puppet_private/vpn/openvpn/keys/${inventory_hostname}.key dest=/etc/openvpn/client.key mode=0600 owner=root group=root
@@ -39,10 +43,11 @@
   - config
   notify:
   - restart openvpn
-
+  when_string: "10.5" not in ${ansible_default_ipv4.address}
 
 - name: enable openvpn service
   service: name=openvpn state=running enabled=true
   tags:
   - service
+  when_string: "10.5" not in ${ansible_default_ipv4.address}