1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
# == Define: openvpn::client_specific_config
#
# This define configures options which will be pushed by the server to a
# specific client only. This feature is explained here:
# http://openvpn.net/index.php/open-source/documentation/howto.html#policy
#
# === Parameters
#
# All the parameters are explained in the openvpn documentation:
# http://openvpn.net/index.php/open-source/documentation/howto.html#policy
#
# [*server*]
# String. Name of the corresponding openvpn endpoint
# Required
#
# [*iroute*]
# Array. Array of iroute combinations.
# Default: []
#
# [*ifconfig*]
# String. IP configuration to push to the client.
# Default: false
#
# [*dhcp_options]
# Array. DHCP options to push to the client.
# Default: []
#
#
# === Examples
#
# openvpn::client_specific_config {
# 'vpn_client':
# server => 'contractors',
# iroute => ['10.0.1.0 255.255.255.0'],
# ifconfig => '10.10.10.1 10.10.10.2',
# dhcp_options => ['DNS 8.8.8.8']
# }
#
# * Removal:
# Manual process right now, todo for the future
#
#
# === Authors
#
# * Raffael Schmid <mailto:raffael@yux.ch>
#
# === License
#
# Copyright 2013 Raffael Schmid, <raffael@yux.ch>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
define openvpn::client_specific_config(
$server,
$iroute = [],
$ifconfig = false,
$dhcp_options = []
) {
Openvpn::Server[$server] ->
Openvpn::Client[$name] ->
Openvpn::Client_specific_config[$name]
file { "/etc/openvpn/${server}/client-configs/${name}":
ensure => present,
content => template('openvpn/client_specific_config.erb')
}
}
|
