Skip to content

Instantly share code, notes, and snippets.

@joedougherty
Created September 26, 2015 16:31
Show Gist options
  • Save joedougherty/bac1f1f92576d7f46758 to your computer and use it in GitHub Desktop.
Save joedougherty/bac1f1f92576d7f46758 to your computer and use it in GitHub Desktop.
create-vpn-log-2015-09-26_12:30:28
joe@nor ~/ansible-digitalocean-vpn $ ./create-vpn
PLAY [create vpn server] ******************************************************
GATHERING FACTS ***************************************************************
ok: [localhost]
TASK: [create-droplet | ensure dopy is installed (for digitalocean API)] ******
ok: [localhost]
TASK: [create-droplet | create digitalocean droplet] **************************
changed: [localhost]
TASK: [create-droplet | add digitalocean vpn droplet to inventory] ************
ok: [localhost]
TASK: [create-droplet | add client machine to dynamic inventory] **************
ok: [localhost]
TASK: [create-droplet | flush old IPs from SSH known_hosts] *******************
changed: [localhost]
TASK: [create-droplet | add new IP to SSH known_hosts] ************************
changed: [localhost]
PLAY [configure vpn server] ***************************************************
GATHERING FACTS ***************************************************************
ok: [digitalocean_vpn_server]
TASK: [configure-server | update apt cache] ***********************************
ok: [digitalocean_vpn_server]
TASK: [configure-server | install required packages] **************************
changed: [digitalocean_vpn_server] => (item=git,openvpn,easy-rsa,python-keyczar,ufw)
TASK: [configure-server | copy easy-rsa files to openvpn dir] *****************
changed: [digitalocean_vpn_server]
TASK: [configure-server | ensure key directory exists] ************************
changed: [digitalocean_vpn_server]
TASK: [configure-server | copy openssl config] ********************************
changed: [digitalocean_vpn_server]
TASK: [configure-server | copy vars file for cert generation] *****************
changed: [digitalocean_vpn_server]
TASK: [configure-server | patch pktool for headless cert generation] **********
ok: [digitalocean_vpn_server]
TASK: [configure-server | clean cert dir on first run] ************************
changed: [digitalocean_vpn_server]
TASK: [configure-server | build certificate authority] ************************
changed: [digitalocean_vpn_server]
TASK: [configure-server | ensure server certificate exists] *******************
changed: [digitalocean_vpn_server]
TASK: [configure-server | ensure client certificate exists] *******************
changed: [digitalocean_vpn_server] => (item=laptop)
changed: [digitalocean_vpn_server] => (item=phone)
TASK: [configure-server | create openvpn config] ******************************
changed: [digitalocean_vpn_server]
TASK: [configure-server | generate pem file] **********************************
changed: [digitalocean_vpn_server]
TASK: [configure-server | enable ipv4 forwarding] *****************************
ok: [digitalocean_vpn_server]
TASK: [configure-server | start openvpn server] *******************************
skipping: [digitalocean_vpn_server]
TASK: [configure-server | start openvpn server] *******************************
changed: [digitalocean_vpn_server]
TASK: [configure-server | allow ssh through firewall] *************************
ok: [digitalocean_vpn_server]
TASK: [configure-server | allow openvpn through firewall] *********************
ok: [digitalocean_vpn_server]
TASK: [configure-server | copy ufw before.rules config file] ******************
changed: [digitalocean_vpn_server]
TASK: [configure-server | set default ufw forward policy to accept] ***********
changed: [digitalocean_vpn_server]
TASK: [configure-server | ensure ufw is running] ******************************
changed: [digitalocean_vpn_server]
TASK: [configure-server | copy ovpn file to vpn client (from vpn_server to vpn_client)] ***
ok: [digitalocean_vpn_server] => (item=laptop)
ok: [digitalocean_vpn_server] => (item=phone)
TASK: [configure-server | copy key file to vpn client (from vpn_server to vpn_client)] ***
changed: [digitalocean_vpn_server] => (item=laptop)
changed: [digitalocean_vpn_server] => (item=phone)
TASK: [configure-server | copy cert file to vpn client (from vpn_server to vpn_client)] ***
changed: [digitalocean_vpn_server] => (item=laptop)
changed: [digitalocean_vpn_server] => (item=phone)
TASK: [configure-server | copy ca file to vpn client (from vpn_server to vpn_client)] ***
changed: [digitalocean_vpn_server]
NOTIFIED: [configure-server | restart openvpn] ********************************
changed: [digitalocean_vpn_server]
NOTIFIED: [configure-server | restart ufw] ************************************
changed: [digitalocean_vpn_server]
PLAY [configure vpn client] ***************************************************
GATHERING FACTS ***************************************************************
ok: [localhost]
TASK: [configure-client | ensure openvpn key directory exists] ****************
changed: [localhost]
TASK: [configure-client | copy key files to openvpn directory] ****************
skipping: [localhost] => (item=client.crt)
skipping: [localhost] => (item=client.key)
skipping: [localhost] => (item=ca.crt)
TASK: [configure-client | create networkmanager connection config file] *******
skipping: [localhost]
TASK: [configure-client | create ovpn client config file] *********************
changed: [localhost] => (item=laptop)
changed: [localhost] => (item=phone)
TASK: [configure-client | add openvpn config to networkmanager system-settings] ***
skipping: [localhost]
TASK: [configure-client | check if nmcli is installed] ************************
ok: [localhost]
TASK: [configure-client | set host fact with nmcli status] ********************
ok: [localhost]
TASK: [configure-client | check current vpn status] ***************************
skipping: [localhost]
TASK: [configure-client | ensure vpn connection is activated] *****************
skipping: [localhost]
{"digitalocean_vpn_server": {"unreachable": 0, "skipped": 1, "ok": 27, "changed": 20, "failures": 0}, "localhost": {"unreachable": 0, "skipped": 4, "ok": 13, "changed": 5, "failures": 0}}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment