From 16160b5b4ab9759534bc94cb2d0624f4675db9d3 Mon Sep 17 00:00:00 2001 From: alex Date: Sat, 16 Sep 2023 16:05:47 +0200 Subject: Add support for ocserv --- personal_infra/puppet/site/01-tinc.pp | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'personal_infra/puppet/site') diff --git a/personal_infra/puppet/site/01-tinc.pp b/personal_infra/puppet/site/01-tinc.pp index a883e891..6acbbd2e 100644 --- a/personal_infra/puppet/site/01-tinc.pp +++ b/personal_infra/puppet/site/01-tinc.pp @@ -12,6 +12,7 @@ $tinc_locations = Hash($tinc_hosts.map |$host_name| { [ $tinc_connect_to = $tinc_other_hosts.map |$host_name| { lookup("hostvars.'$host_name'.network.tinc.location") } $tinc_other_networks = $tinc_other_hosts.map |$host_name| { lookup("hostvars.'$host_name'.network.self_internal_network") } +$ocserv_networks = $tinc_hosts.map |$host_name| { lookup("hostvars.'$host_name'.network.self_internal_network") } if 'tinc' in lookup("group_names") { class {'tinc': @@ -24,4 +25,15 @@ if 'tinc' in lookup("group_names") { tinc_other_networks => $tinc_other_networks, firewall => !lookup({"name" => "network.disable_firewall", "default_value" => false}), } + + class {'ocserv': + ocserv_tcp_port => 444, + ocserv_udp_port => 444, + ocserv_default_domain => "int.pdp7.net", + ocserv_ipv4_network => lookup("network.ocserv.network"), + ocserv_dns => lookup("network.self_internal_ip"), + ocserv_split_dns => lookup("tinc_global.ocserv_domain"), + ocserv_routes => $ocserv_networks, + firewall => !lookup({"name" => "network.disable_firewall", "default_value" => false}), + } } -- cgit v1.2.3