setup-openvpn.yaml

- name: Install pip
  apt:
    name: python-pip

- name: Install python deps
  pip:
    name:
      - docker
      - pexpect

- name: Fix python deps 1
  pip:
    name: backports.ssl-match-hostname
    state: absent

- name: Fix python deps 2
  apt:
    name: python-backports.ssl-match-hostname

- name: Remove existing OVPN container
  docker_container:
    name: ovpn-daemon
    state: absent

- name: Create a volume for openvpn
  docker_volume:
    recreate: always
    name: ovpn_vol

- name: Generate OpenVPN configs
  docker_container:
    name: ovpn-genconfig
    image: kylemanna/openvpn
    log_driver: none
    volumes:
      - ovpn_vol:/etc/openvpn
    auto_remove: true
    command: ["ovpn_genconfig", "-u", "udp://{{ dns_hostname }}"]

- name: Init OpenVPN PKI
  expect:
    command: docker run -v ovpn_vol:/etc/openvpn --log-driver=none --rm -it kylemanna/openvpn ovpn_initpki
    timeout: 600
    responses:
      Enter New CA Key Passphrase: "{{ ovpn_pki_password }}"
      Re-Enter New CA Key Passphrase: "{{ ovpn_pki_password }}"
      Common Name(.*): "{{ dns_hostname }}"
      Enter pass phrase for(.*): "{{ ovpn_pki_password }}"
      (.*)Enter pass phrase for(.*): "{{ ovpn_pki_password }}"

- name: Start OpenVPN daemon
  docker_container:
    name: ovpn-daemon
    image: kylemanna/openvpn
    volumes: ovpn_vol:/etc/openvpn
    capabilities: NET_ADMIN
    detach: yes
    restart_policy: always
    ports:
      - "1194:1194/udp"