Merge branch 'feature/eip' into develop

1 files changed, 28 insertions, 0 deletions

diff --git a/puppet/modules/site_openvpn/manifests/keys.pp b/puppet/modules/site_openvpn/manifests/keys.pp
new file mode 100644
index 00000000..d029fbac
--- /dev/null
+++ b/puppet/modules/site_openvpn/manifests/keys.pp
@@ -0,0 +1,28 @@
+class site_openvpn::keys {
+  $openvpn_keys = hiera_hash('openvpn')
+
+  file { '/etc/openvpn/keys/ca.key':
+    content => $openvpn_keys['ca_key'],
+    mode    => '0600',
+  }
+
+  file { '/etc/openvpn/keys/ca.crt':
+    content => $openvpn_keys['ca_crt'],
+    mode    => '0644',
+  }
+
+  file { '/etc/openvpn/keys/dh.pem':
+    content => $openvpn_keys['dh_key'],
+    mode    => '0644',
+  }
+
+  file { '/etc/openvpn/keys/server.key':
+    content => $openvpn_keys['server_key'],
+    mode    => '0600',
+  }
+
+  file { '/etc/openvpn/keys/server.crt':
+    content => $openvpn_keys['server_crt'],
+    mode    => '0644',
+  }
+}