freifunk/Ansible-Configuration Changeset - a54e10aa3488 · Chaos Computer Club Lëtzebuerg Projects

Changeset - a54e10aa3488

Parent rev.

Child rev.

[Not reviewed]

0 1 0

x - 3 months ago 2025-03-15 00:03:05
xbr@c3l.lu

feat: switch from HideMe to Mullvad VPN

1 file changed with 15 insertions and 7 deletions:

gateway/initial_gw_setup.yml

0 comments (0 inline, 0 general)

gateway/initial_gw_setup.yml

➞

Show inline comments

@@ @@ -185,139 +185,147 @@ @@
       ansible.builtin.find:
         path: "{{ server_config_dir }}/fastd/peers-gw/"
         excludes: "{{ inventory_hostname }}"
       delegate_to: localhost
       become: false
       register: peers_to_copy
       tags: config
     - name: Copy fastd peers
       ansible.builtin.copy:
         src: "{{ item.path }}"
         dest: /etc/fastd/fflux/peers-gw/
         owner: root
         mode: "0644"
       with_items: "{{ peers_to_copy.files }}"
       tags: config
     - name: Copy fastd blacklist script
       ansible.builtin.copy:
         src: "{{ server_scripts_dir }}/fastd-blacklist.sh"
         dest: /etc/fastd/fflux/fastd-blacklist.sh
         owner: root
         group: root
         mode: "0755"
       tags: config
     - name: Copy fastd key
       ansible.builtin.copy:
         src: "~/keys/{{ inventory_hostname }}.conf"
         dest: /etc/fastd/fflux/secret.conf
         owner: root
         group: root
         mode: "0400"
     - name: Start + Enable fastd
       ansible.builtin.service:
         name: "fastd@fflux"
         state: "started"
         enabled: true
       tags: config
     # OpenVPN
     - name: Remove client directory
       ansible.builtin.file:
         path: /etc/openvpn/client
         state: absent
       tags: config
     - name: Remove server directory
       ansible.builtin.file:
         path: /etc/openvpn/server
         state: absent
       tags: config
-    - name: Copy hideme config
+    - name: Copy VPN config
       ansible.builtin.copy:
         src: "{{ server_config_dir }}/openvpn/hideme.conf"
         dest: /etc/openvpn/hideme.conf
         src: "{{ server_config_dir }}/openvpn/mullvad.conf"
         dest: /etc/openvpn/mullvad.conf
         owner: root
         group: root
         mode: "0644"
       tags: config
-    - name: Copy hideme auth file
+    - name: Copy VPN auth file
       ansible.builtin.copy:
         src: "{{ server_config_dir }}/openvpn/auth.txt"
         dest: /etc/openvpn/auth.txt
         src: "{{ server_config_dir }}/openvpn/mullvad_userpass.txt"
         dest: /etc/openvpn/mullvad_userpass.txt
         owner: root
         group: root
         mode: "0640"
       tags: config
     - name: Copy VPN CA file
       ansible.builtin.copy:
         src: "{{ server_config_dir }}/openvpn/mullvad_ca.crt"
         dest: /etc/openvpn/mullvad_ca.crt
         owner: root
         group: root
         mode: "0644"
       tags: config
     - name: Copy hideme-up script
       ansible.builtin.copy:
         src: "{{ server_scripts_dir }}/hideme-up"
         dest: /etc/openvpn/hideme-up
         owner: root
         group: root
         mode: "0755"
       tags: config
     - name: Copy hideme-down script
       ansible.builtin.copy:
         src: "{{ server_scripts_dir }}/hideme-down"
         dest: /etc/openvpn/hideme-down
         owner: root
         group: root
         mode: "0755"
       tags: config
     - name: Copy update-resolv-conf
       ansible.builtin.copy:
         src: "{{ server_config_dir }}/openvpn/update-resolv-conf"
         dest: /etc/openvpn/update-resolv-conf
         owner: root
         group: root
         mode: "0755"
       tags: config
     - name: Ensure OpenVPN sevice is enabled + starts
       ansible.builtin.service:
-        name: "openvpn@hideme"
+        name: "openvpn@mullvad"
         state: "started"
         enabled: true
       tags: config
     # batman-adv
     - name: Add batman-adv to modules
       community.general.modprobe:
         name: "batman-adv"
         state: "present"
         persistent: "present"
       tags: config
     - name: Add nf_conntrack to modules
       community.general.modprobe:
         name: "nf_conntrack"
         state: "present"
         persistent: "present"
       tags: config
     - name: Add ebtables to modules
       community.general.modprobe:
         name: "ebtables"
         state: "present"
         persistent: "present"
       tags: config
     # "check" scripts
     - name: Copy check gateway script
       ansible.builtin.copy:
         src: "{{ server_scripts_dir }}/check_gateway.sh"
         dest: /usr/local/bin
         owner: root
         group: root
         mode: "0755"
       tags: config
     - name: Copy check vpn script
       ansible.builtin.copy:
         src: "{{ server_scripts_dir }}/check_vpn.sh"
         dest: /usr/local/bin
         owner: root
         group: root
         mode: "0755"
       tags: config
     # mesh-announce
     - name: Clone mesh-announce git repo
       ansible.builtin.git:
         repo: "https://github.com/ffnord/mesh-announce"
         dest: /opt/mesh-announce
         # TODO: Verify that there has been no update!

0 comments (0 inline, 0 general)