diff --git a/tasks/main.yml b/tasks/main.yml index dd897c7..60d7e73 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -5,7 +5,7 @@ include_vars: "{{ ansible_os_family }}_{{ ansible_distribution_major_version }}.yml" - name: Install packages for openvpn - package: + ansible.builtin.package: name: "{{ openvpn_packages }}" state: present update_cache: yes @@ -25,14 +25,24 @@ # - openvpn_bridge_type == "ovs" # Doesn't work !! -# - name: try nmcli add bridge - conn_name only & ip4 gw4 mode -# nmcli: -# type: bridge -# conn_name: '{{ openvpn_bridge }}' -# ip4: '{{ openvpn_bridge_ip }}/24' -# state: present -# when: -# - openvpn_bridge_type == "bridge" + - name: try nmcli add bridge - conn_name only & ip4 gw4 mode + community.general.nmcli: + type: bridge + conn_name: '{{ openvpn_bridge }}' + ifname: '{{ openvpn_bridge }}' + ip4: '{{ openvpn_bridge_ip }}/24' + state: present + when: + - openvpn_bridge_type == "bridge" + - name: set bridge interface firewalld zone + ansible.posix.firewalld: + permanent: yes + zone: internal + interface: '{{ openvpn_bridge }}' + state: enabled + immediate: yes + when: + - openvpn_bridge_type == "bridge" - name: Make server config directory file: diff --git a/vars/RedHat_7.yml b/vars/RedHat_7.yml index 9981bb5..2e6d538 100644 --- a/vars/RedHat_7.yml +++ b/vars/RedHat_7.yml @@ -6,4 +6,5 @@ openvpn_packages: - NetworkManager-glib - libsemanage-python - policycoreutils-python - +# - python-libsemanage +# - python-policycoreutils diff --git a/vars/RedHat_8.yml b/vars/RedHat_8.yml index 0f0da32..f87f297 100644 --- a/vars/RedHat_8.yml +++ b/vars/RedHat_8.yml @@ -3,4 +3,4 @@ openvpn_packages: - openvpn - python3-libsemanage - python3-policycoreutils -# - NetworkManager-libnm + - NetworkManager-libnm