add nginx, sshd, ssl roles

2026-09-20 22:14:56 +00:00
parent ba9e1a664f
commit c640406c10
131 changed files with 1535 additions and 780 deletions
@@ -0,0 +1,24 @@
+client
+dev tap0
+dev-type tap
+proto tcp
+remote 127.0.0.1 1195
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+remote-cert-tls server
+auth SHA256
+cipher AES-256-GCM
+tun-mtu 1500
+mssfix 1300
+verb 3
+<ca>
+{{ lookup('file', '/etc/easy-rsa/pki/tap0/ca.crt') }}
+</ca>
+<cert>
+{{ lookup('file', '/etc/easy-rsa/pki/tap0/issued/ltrefilov.crt') }}
+</cert>
+<key>
+{{ lookup('file', '/etc/easy-rsa/pki/tap0/private/ltrefilov.key') }}
+</key>
@@ -0,0 +1,21 @@
+client
+dev tun0
+proto tcp
+remote 127.0.0.1 1194
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+remote-cert-tls server
+auth SHA256
+cipher AES-256-GCM
+verb 3
+<ca>
+{{ lookup('file', '/etc/easy-rsa/pki/tun0/ca.crt') }}
+</ca>
+<cert>
+{{ lookup('file', '/etc/easy-rsa/pki/tun0/issued/mur89.crt') }}
+</cert>
+<key>
+{{ lookup('file', '/etc/easy-rsa/pki/tun0/private/mur89.key') }}
+</key>