+ site_openvpn::keys

1 files changed, 23 insertions, 0 deletions

diff --git a/puppet/modules/site_openvpn/manifests/keys.pp b/puppet/modules/site_openvpn/manifests/keys.pp
new file mode 100644
index 00000000..b31369c9
--- /dev/null
+++ b/puppet/modules/site_openvpn/manifests/keys.pp
@@ -0,0 +1,23 @@
+class site_openvpn::keys {
+  $openvpn_keys = hiera_hash('openvpn_keys')
+
+  file { '/etc/openvpn/keys/ca.crt':
+    content => $openvpn_keys['ca'],
+    mode    => '0644',
+  }
+
+  file { '/etc/openvpn/keys/dh.pem':
+    content => $openvpn_keys['dh'],
+    mode    => '0644',
+  }
+
+  file { '/etc/openvpn/keys/server.key':
+    content => $openvpn_keys['server_key'],
+    mode    => '0600',
+  }
+
+  file { '/etc/openvpn/keys/server.crt':
+    content => $openvpn_keys['server_cert'],
+    mode    => '0644',
+  }
+}