Skip to content

Commit

Permalink
move 3rdparty ansible galaxy roles to roles/galaxy
Browse files Browse the repository at this point in the history
  • Loading branch information
reefactor committed Oct 4, 2020
1 parent c83b72b commit 2d12613
Show file tree
Hide file tree
Showing 94 changed files with 1,813 additions and 5 deletions.
2 changes: 0 additions & 2 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -6,5 +6,3 @@
# vagrant logs
/ubuntu-xenial-16.04-cloudimg-console.log

# installed via requirements.yml
/roles/Stouts.openvpn/
2 changes: 1 addition & 1 deletion ansible.cfg
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
[defaults]
# inventory = ./environments/test
retry_files_enabled = False
roles_path = ./roles
roles_path = ./roles/galaxy:./roles
gathering = smart
fact_caching = jsonfile
fact_caching_connection = ./.facts
Expand Down
6 changes: 6 additions & 0 deletions roles/galaxy/Stouts.openvpn/.bumpversion.cfg
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
[bumpversion]
commit = True
current_version = 2.4.1
tag = True
tag_name = {new_version}

18 changes: 18 additions & 0 deletions roles/galaxy/Stouts.openvpn/.travis.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
---

language: python

env:
- MOLECULE_DISTRO=ubuntu1604
- MOLECULE_DISTRO=ubuntu1804
- MOLECULE_DISTRO=debian8 MOLECULE_INIT_CMD=/lib/systemd/systemd
- MOLECULE_DISTRO=debian9 MOLECULE_INIT_CMD=/lib/systemd/systemd
- MOLECULE_DISTRO=debian10 MOLECULE_INIT_CMD=/lib/systemd/systemd
install:
- pip install docker molecule ansible-lint

script:
- molecule test

notifications:
webhooks: https://galaxy.ansible.com/api/v1/notifications/
20 changes: 20 additions & 0 deletions roles/galaxy/Stouts.openvpn/CONTRIBUTORS
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
Contributors:

* Adam Kunicki (https://github.com/kunickiaj)
* Adham Helal (https://github.com/ahelal)
* Daniel Miranda (https://github.com/danielkza)
* Elias (https://github.com/viderizer)
* Federico Capoano (https://github.com/nemesisdesign)
* JP Viljoen (https://github.com/froztbyte)
* Jason Bond Pratt (https://github.com/juniorplenty)
* Kirill Klenov (http://klen.github.io/)
* Kurt Sussman (https://github.com/neophiliac)
* Mahmoud Abdelkader (https://github.com/mahmoudimus)
* Marcelo Anton (https://github.com/mbanton)
* Maxim Kravets (https://github.com/zeelax)
* Michael Frister (https://github.com/meeee)
* Mohammed Naser (https://github.com/mnaser)
* Roland von Ohlen (https://github.com/RockingRolli)
* Sebastien Badia (https://github.com/sbadia)
* Thomas Krille (https://github.com/tkrille)
* https://github.com/teadur
22 changes: 22 additions & 0 deletions roles/galaxy/Stouts.openvpn/LICENSE
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
The MIT License (MIT)

Copyright (c) 2014 Stouts

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

20 changes: 20 additions & 0 deletions roles/galaxy/Stouts.openvpn/Makefile
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
.PHONY: release major minor patch

VERSION?=minor
release:
@bumpversion $(VERSION)
@git checkout master
@git merge develop
@git checkout develop
@git push --all
@git push --tags
@git checkout develop

major:
make release VERSION=major

minor:
make release VERSION=minor

patch:
make release VERSION=patch
83 changes: 83 additions & 0 deletions roles/galaxy/Stouts.openvpn/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,83 @@
# Stouts.openvpn

[![Build Status](http://img.shields.io/travis/Stouts/Stouts.openvpn.svg?style=flat-square)](https://travis-ci.org/Stouts/Stouts.openvpn)
[![Galaxy](http://img.shields.io/badge/galaxy-Stouts.openvpn-blue.svg?style=flat-square)](https://galaxy.ansible.com/Stouts/openvpn/)

Ansible role that installs an openvpn server

* Install and setup OpenVPN server
* Setup authentication

## Requirements

Previous versions of the role supported generating certificates and keys for the
OpenVPN server to use. Since version 3.0.0, such support has been removed and
the users of the role are expected to use some other way of generating
certificates/keys (eg using another Ansible role). See the example playbook for
an example.

An EasyRSA role that was created specifically to compliment this role can be
found [here](https://github.com/nkakouros-original/ansible-role-easyrsa).

## Supported platforms

- Ubuntu 14.04
- Ubuntu 16.04
- Ubuntu 18.04
- Debian 8
- Debian 9
- Centos 7

## Variables

See [defaults/main.yml](defaults/main.yml) for a full list of variables together
with documentation on how to use them to configure this role.

## Elastic Beats from monitoring
### Heartbeat monitor

The role comes bundled with a [meta/monitors.yml](meta/monitors.yml) template
that can be used by [Heartbeat](https://www.elastic.co/products/beats/heartbeat)
to check if the OpenVPN server is up and running. The template can be
configured via variables (they should be self-explanatory). To use it, you can
use some Ansible tasks to upload it to your Heartbeat instance. For example:

```yaml
- name: Add earth-kibana host
add_host:
name: heartbeat_instance
hostname: "{{ heartbeat.hostname }}"
ansible_host: "{{ heartbeat.ansible_host }}"
ansible_password: "{{ heartbeat.ansible_password }}"
ansible_user: "{{ heartbeat.ansible_user }}"

- name: Upload role monitors
template:
src: "{{ item.1 + '/' + item.0 }}/meta/monitors.yml"
dest: "/etc/heartbeat/monitors.d/{{ inventory_hostname }}.{{ item.0.split('.')[-1] }}.yml"
when: (item.1 + '/' + item.0 + '/meta/monitors.yml') is file
loop: "{{ roles | product(lookup('config', 'DEFAULT_ROLES_PATH')) | list }}"
delegate_to: heartbeat_instance
```
### Filebeat input
The role also includes a filebeat input file that can be uploaded to a filebeat
server. The input reads the OpenVPN log and reads the lines that correspond to
successful connections. The role includes an Elasticsearch ingest pipeline that
can be imported to Elasticsearch to parse and break the log lines into fields.
The files can be found under the `meta/` folder.

## Example playbook

See [molecule/default/playbook.yml](molecule/default/playbook.yml) for a working
example of how to use this role.


## License

Licensed under the MIT License. See the LICENSE file for details.

## Feedback, bug-reports, requests, ...

...are [welcome](https://github.com/Stouts/Stouts.openvpn/issues)!
Loading

0 comments on commit 2d12613

Please sign in to comment.