add nginx, sshd, ssl roles

roles/openvpn/tasks/configure-client.yml

@@ -0,0 +1,19 @@
+---
+- name: render openvpn client config
+  ansible.builtin.template:
+    src: "{{ item }}"
+    dest: "/etc/openvpn/{{ item | basename | regex_replace('\\.j2$', '') }}"
+    owner: root
+    group: root
+    mode: '0600'
+  loop: "{{ query('fileglob', role_path + '/templates/' + inventory_hostname + '/*.conf.j2') }}"
+  register: openvpn_client_configs
+
+- name: restart openvpn client
+  ansible.builtin.systemd_service:
+    name: "openvpn@{{ item.item | basename | regex_replace('\\.conf\\.j2$', '') }}"
+    state: restarted
+    enabled: true
+    daemon_reload: true
+  loop: "{{ openvpn_client_configs.results }}"
+  when: item.changed

roles/openvpn/tasks/configure-server.yml

@@ -0,0 +1,27 @@
+---
+- name: deploy ccd files
+  ansible.builtin.copy:
+    src: "{{ role_path }}/files/{{ inventory_hostname }}/ccd/"
+    dest: /etc/openvpn/ccd/
+    owner: root
+    group: root
+    mode: '0644'
+
+- name: render openvpn config
+  ansible.builtin.template:
+    src: "{{ item }}"
+    dest: "/etc/openvpn/{{ item | basename | regex_replace('\\.j2$', '') }}"
+    owner: root
+    group: root
+    mode: '0600'
+  loop: "{{ query('ansible.builtin.fileglob', role_path + '/templates/' + inventory_hostname + '/*.conf.j2') }}"
+  register: openvpn_configs
+
+- name: restart openvpn
+  ansible.builtin.systemd_service:
+    name: "openvpn@{{ item.item | basename | regex_replace('\\.conf\\.j2$', '') }}"
+    state: restarted
+    enabled: true
+    daemon_reload: true
+  loop: "{{ openvpn_configs.results }}"
+  when: item.changed

roles/openvpn/tasks/install.yml

@@ -0,0 +1,6 @@
+---
+- name: install openvpn
+  ansible.builtin.apt:
+    name: openvpn
+    state: latest
+    update_cache: true

roles/openvpn/tasks/main.yml

@@ -0,0 +1,11 @@
+---
+- name: include install
+  ansible.builtin.include_tasks: install.yml
+
+- name: include server configuration
+  ansible.builtin.include_tasks: configure-server.yml
+  when: openvpn_role == 'server'
+
+- name: include client configuration
+  ansible.builtin.include_tasks: configure-client.yml
+  when: openvpn_role == 'client'