summaryrefslogtreecommitdiff
path: root/manifests/client_specific_config.pp
blob: 231d55d86f4e7a9f37d0807c55096995a211d6eb (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
# == Define: openvpn::client_specific_config
#
# This define configures options which will be pushed by the server to a
# specific client only.
#  http://openvpn.net/index.php/open-source/documentation/howto.html#policy
#
# === Parameters
#
# [*server*]
#   String.  Name of the corresponding openvpn endpoint
#   Required
#
# [*iroute*]
#   Array.  Array of iroute combinations.
#   Default: []
#
# [*ifconfig*]
#   String.  IP configuration to push to the client.
#   Default: false
#
# [*dhcp_options]
#   Array.  DHCP options to push to the client.
#   Default: []
#
#
# === Examples
#
#   openvpn::client_specific_config {
#     'vpn_client':
#       server       => 'contractors',
#       iroute       => ['10.0.1.0 255.255.255.0'],
#       ifconfig     => '10.10.10.2 255.255.255.0',
#       dhcp_options => ['DNS 8.8.8.8']
#    }
#
# * Removal:
#     Manual process right now, todo for the future
#
#
# === Authors
#
# * Raffael Schmid <mailto:raffael@yux.ch>
#
define openvpn::client_specific_config(
  $server,
  $iroute       = [],
  $ifconfig     = false,
  $dhcp_options = []
) {

  Openvpn::Server[$server] ->
  Openvpn::Client[$name] ->
  Openvpn::Client_specific_config[$name]

  file { "/etc/openvpn/${server}/client-configs/${name}":
    ensure  => present,
    content => template('openvpn/client_specific_config.erb')
  }

}