ansible-nas/tasks/vpn.yml
David Stephens 3da19e5708 Major updates:
* Rejig of playbook to load roles from ansible-galaxy
* Remove ansible-nas role and move tasks to tasks directory
* Add InfluxDB/Telegraf/Grafana for monitoring & dashboards
* Automatically configure InfluxDB as a datasource in Grafana
* Switch to ZFS Docker driver
* Add note about switching to overlay2 Docker driver if required
2018-04-08 23:29:25 +01:00

38 lines
1.1 KiB
YAML

---
- include_vars: group_vars/vpn_credentials.yml
- name: Create NordVPN Config Directory
file:
path: "{{ item }}"
state: directory
# mode: 0755
with_items:
- "{{ openvpn_config_directory }}/nordvpn"
- name: Download latest NordVPN configs
unarchive:
src: https://nordvpn.com/api/files/zip
dest: "{{ openvpn_config_directory }}/nordvpn"
remote_src: True
- name: Replace NordVPN configs with credential file
shell: 'sed -i "s/auth-user-pass/auth-user-pass \/config\/openvpn-credentials.txt/" {{ openvpn_config_directory }}/nordvpn/*.ovpn'
- name: VPN Container
docker_container:
name: openvpn-client
image: dceschmidt/openvpn-client
pull: true
env:
OPENVPN_PROVIDER: "{{ openvpn_provider }}"
OPENVPN_USERNAME: "{{ openvpn_username }}"
OPENVPN_PASSWORD: "{{ openvpn_password }}"
OPENVPN_CONFIG: "{{ openvpn_config }}"
volumes:
"{{ openvpn_config_directory }}/nordvpn:/etc/openvpn/conf/nordvpn:rw"
devices:
- /dev/net/tun
capabilities:
- NET_ADMIN
restart_policy: unless-stopped
memory: 1g