Merge pull request 'Manage bridge insterface with ansible' (#1) from WIP into master
All checks were successful
continuous-integration/drone/push Build is passing

Reviewed-on: #1
This commit is contained in:
Adrien Reslinger 2020-12-31 00:11:59 +00:00
commit 90a11a1aad

View file

@ -16,6 +16,17 @@
when: when:
- openvpn_bridge_type == "ovs" - openvpn_bridge_type == "ovs"
# Does I need to run it 2 times ? Interface need to bee up when it run ?
- name: set bridge interface firewalld zone
ansible.posix.firewalld:
permanent: yes
zone: internal
interface: '{{ openvpn_bridge }}'
state: enabled
immediate: yes
when:
- openvpn_bridge_type == "bridge"
# - openvswitch_bridge: # - openvswitch_bridge:
# bridge: "{{ openvpn_bridge }}" # bridge: "{{ openvpn_bridge }}"
# parent: "{{ openvpn_bridgemaster }}" # parent: "{{ openvpn_bridgemaster }}"
@ -24,25 +35,15 @@
# when: # when:
# - openvpn_bridge_type == "ovs" # - openvpn_bridge_type == "ovs"
# Doesn't work !!
- name: try nmcli add bridge - conn_name only & ip4 gw4 mode - name: try nmcli add bridge - conn_name only & ip4 gw4 mode
community.general.nmcli: community.general.nmcli:
type: bridge type: bridge
conn_name: '{{ openvpn_bridge }}' conn_name: '{{ openvpn_bridge }}'
ifname: '{{ openvpn_bridge }}' ifname: '{{ openvpn_bridge }}'
ip4: '{{ openvpn_bridge_ip }}/24' ip4: '{{ openvpn_bridge_ip }}'
state: present state: present
when: when:
- openvpn_bridge_type == "bridge" - openvpn_bridge_type == "bridge"
- name: set bridge interface firewalld zone
ansible.posix.firewalld:
permanent: yes
zone: internal
interface: '{{ openvpn_bridge }}'
state: enabled
immediate: yes
when:
- openvpn_bridge_type == "bridge"
- name: Make server config directory - name: Make server config directory
file: file:
@ -132,7 +133,7 @@
when: result is changed when: result is changed
- name: Open Firewalld - name: Open Firewalld
firewalld: ansible.posix.firewalld:
service: openvpn-{{ openvpn_vpn_name | regex_replace('\.','_') }} service: openvpn-{{ openvpn_vpn_name | regex_replace('\.','_') }}
permanent: true permanent: true
state: enabled state: enabled