PR#223: Freeze break request: add vpn ccd file and vpn role to retrace - fedora-infra/ansible

fedora-infra / ansible

#223 Freeze break request: add vpn ccd file and vpn role to retrace

Merged 3 years ago by smooge. Opened 3 years ago by kevin.

Unknown source retrace-vpn into master

Freeze break request: add vpn ccd file and vpn role to retrace

Kevin Fenzi • 3 years ago

1cf024e

file modified

		`@@ -65,6 +65,7 @@`
		`- import_role: name=fas_client`
		`- import_role: name=rkhunter`
		`- import_role: name=nagios_client`
		`+ - import_role: name=openvpn/client`
		`- import_role: name=sudo`

		`- import_tasks: "{{ tasks_path }}/2fa_client.yml"`

roles/openvpn/server/files/ccd/retrace03.rdu-cc.fedoraproject.org

file added

		`@@ -0,0 +1,2 @@`
		`+ # ifconfig-push actualIP PtPIP`
		`+ ifconfig-push 192.168.1.36 192.168.0.36`

kevin commented 3 years ago

We need retrace03 on the vpn at least for now, or else 2fa won't work.
At some point when fasClient is gone we may be able to drop this
when we switch to sssd or something else.

Signed-off-by: Kevin Fenzi kevin@scrye.com