add nginx, sshd, ssl roles

2026-09-20 22:14:56 +00:00
parent ba9e1a664f
commit c640406c10
131 changed files with 1535 additions and 780 deletions
@@ -0,0 +1,27 @@
+port 1195
+proto tcp
+dev tap0
+dev-type tap
+server-bridge nogw
+client-to-client
+keepalive 10 60
+cipher AES-256-GCM
+auth SHA256
+persist-key
+persist-tun
+status openvpn-tap0-status.log
+verb 6
+tun-mtu 1500
+mssfix 1300
+<ca>
+{{ lookup('file', '/etc/easy-rsa/pki/tap0/ca.crt') }}
+</ca>
+<cert>
+{{ lookup('file', '/etc/easy-rsa/pki/tap0/issued/server.crt') }}
+</cert>
+<key>
+{{ lookup('file', '/etc/easy-rsa/pki/tap0/private/server.key') }}
+</key>
+<dh>
+{{ lookup('file', '/etc/easy-rsa/pki/tap0/dh.pem') }}
+</dh>