ansible/tasks/openvpn_client.yml

---
# openvpn - ftw - or something
- name: install openvpn
  yum: name=openvpn state=installed
  tags:
  - packages

- name: /etc/openvpn/ca.crt from  vpn/openvpn/keys/ca.crt
  copy: src=$puppet_private/vpn/openvpn/keys/ca.crt dest=/etc/openvpn/ca.crt mode=0600 owner=root group=root
  tags:
  - config
  notify:
  - restart openvpn
  when_string: 10.5 not in ${ansible_default_ipv4.address}

- name: /etc/openvpn/crl.pem from vpn/openvpn/keys/crl.pem
  copy: src=$puppet_private/vpn/openvpn/keys/crl.pem dest=/etc/openvpn/crl.pem mode=0644 owner=root group=root
  tags:
  - config
  notify:
  - restart openvpn
  when_string: 10.5" not in ${ansible_default_ipv4.address}

- name: /etc/openvpn/openvpn.conf
  copy: src=$files/openvpn/client.conf dest=/etc/openvpn/openvpn.conf
  tags:
  - config
  notify:
  - restart openvpn
  when_string: 10.5" not in ${ansible_default_ipv4.address}

- name: /etc/openvpn/client.crt
  copy: src=$puppet_private/vpn/openvpn/keys/${inventory_hostname}.crt dest=/etc/openvpn/client.crt mode=0600 owner=root group=root
  tags:
  - config
  notify:
  - restart openvpn
  when_string: 10.5" not in ${ansible_default_ipv4.address}

- name: /etc/openvpn/client.key
  copy: src=$puppet_private/vpn/openvpn/keys/${inventory_hostname}.key dest=/etc/openvpn/client.key mode=0600 owner=root group=root
  tags:
  - config
  notify:
  - restart openvpn
  when_string: 10.5" not in ${ansible_default_ipv4.address}

- name: enable openvpn service
  service: name=openvpn state=running enabled=true
  tags:
  - service
  when_string: 10.5" not in ${ansible_default_ipv4.address}