|
18 | 18 | -> Openvpn::Client[$name] |
19 | 19 | -> Openvpn::Deploy::Export[$name] |
20 | 20 |
|
21 | | - if $facts['openvpn'] { |
22 | | - if $facts['openvpn'][$server][$name] { |
23 | | - $data = $facts['openvpn'][$server][$name] |
| 21 | + if fact("openvpn.${server}.${name}") { |
| 22 | + $data = $facts['openvpn'][$server][$name] |
24 | 23 |
|
25 | | - @@file { "exported-${server}-${name}-config": |
26 | | - ensure => file, |
27 | | - path => "${openvpn::etc_directory}/openvpn/${name}.conf", |
28 | | - owner => 'root', |
29 | | - group => 'root', |
30 | | - mode => '0600', |
31 | | - content => $data['conf'], |
32 | | - tag => "${server}-${name}", |
33 | | - } |
| 24 | + @@file { "exported-${server}-${name}-config": |
| 25 | + ensure => file, |
| 26 | + path => "${openvpn::etc_directory}/openvpn/${name}.conf", |
| 27 | + owner => 'root', |
| 28 | + group => 'root', |
| 29 | + mode => '0600', |
| 30 | + content => $data['conf'], |
| 31 | + tag => "${server}-${name}", |
| 32 | + } |
34 | 33 |
|
35 | | - @@file { "exported-${server}-${name}-ca": |
36 | | - ensure => file, |
37 | | - path => "${openvpn::etc_directory}/openvpn/keys/${name}/ca.crt", |
38 | | - owner => 'root', |
39 | | - group => 'root', |
40 | | - mode => '0600', |
41 | | - content => $data['ca'], |
42 | | - tag => "${server}-${name}", |
43 | | - } |
| 34 | + @@file { "exported-${server}-${name}-ca": |
| 35 | + ensure => file, |
| 36 | + path => "${openvpn::etc_directory}/openvpn/keys/${name}/ca.crt", |
| 37 | + owner => 'root', |
| 38 | + group => 'root', |
| 39 | + mode => '0600', |
| 40 | + content => $data['ca'], |
| 41 | + tag => "${server}-${name}", |
| 42 | + } |
44 | 43 |
|
45 | | - @@file { "exported-${server}-${name}-crt": |
46 | | - ensure => file, |
47 | | - path => "${openvpn::etc_directory}/openvpn/keys/${name}/${name}.crt", |
48 | | - owner => 'root', |
49 | | - group => 'root', |
50 | | - mode => '0600', |
51 | | - content => $data['crt'], |
52 | | - tag => "${server}-${name}", |
53 | | - } |
| 44 | + @@file { "exported-${server}-${name}-crt": |
| 45 | + ensure => file, |
| 46 | + path => "${openvpn::etc_directory}/openvpn/keys/${name}/${name}.crt", |
| 47 | + owner => 'root', |
| 48 | + group => 'root', |
| 49 | + mode => '0600', |
| 50 | + content => $data['crt'], |
| 51 | + tag => "${server}-${name}", |
| 52 | + } |
| 53 | + |
| 54 | + @@file { "exported-${server}-${name}-key": |
| 55 | + ensure => file, |
| 56 | + path => "${openvpn::etc_directory}/openvpn/keys/${name}/${name}.key", |
| 57 | + owner => 'root', |
| 58 | + group => 'root', |
| 59 | + mode => '0600', |
| 60 | + content => $data['key'], |
| 61 | + tag => "${server}-${name}", |
| 62 | + } |
54 | 63 |
|
55 | | - @@file { "exported-${server}-${name}-key": |
| 64 | + if $tls_auth { |
| 65 | + @@file { "exported-${server}-${name}-ta": |
56 | 66 | ensure => file, |
57 | | - path => "${openvpn::etc_directory}/openvpn/keys/${name}/${name}.key", |
| 67 | + path => "${openvpn::etc_directory}/openvpn/keys/${name}/ta.key", |
58 | 68 | owner => 'root', |
59 | 69 | group => 'root', |
60 | 70 | mode => '0600', |
61 | | - content => $data['key'], |
| 71 | + content => $data['ta'], |
62 | 72 | tag => "${server}-${name}", |
63 | 73 | } |
64 | | - |
65 | | - if $tls_auth { |
66 | | - @@file { "exported-${server}-${name}-ta": |
67 | | - ensure => file, |
68 | | - path => "${openvpn::etc_directory}/openvpn/keys/${name}/ta.key", |
69 | | - owner => 'root', |
70 | | - group => 'root', |
71 | | - mode => '0600', |
72 | | - content => $data['ta'], |
73 | | - tag => "${server}-${name}", |
74 | | - } |
75 | | - } |
76 | 74 | } |
77 | | - } else { |
78 | | - fail('openvpn not defined, is pluginsync enabled?') |
79 | 75 | } |
80 | 76 | } |
0 commit comments