ansible-role-openvpn icon indicating copy to clipboard operation
ansible-role-openvpn copied to clipboard

Added ability to optionally configure NAT source address

Open coofercat opened this issue 3 years ago • 1 comments

A very simple change to optionally be able to configure in the NAT source address. This becomes important if your server has multiple network devices and the network(s) you want them to be able to access aren't on the default interface.

In my case, my openvpn server has a public address on the default interface (ens3) and a private network on the secondary (ens4). Since I want to provide access to the private network, I need to be able to NAT to the address on the ens4 interface. This can be configured in easily, perhaps in a group_vars/vpn_servers.yml:

openvpn_lan_source_ip: "{{ ansible_ens4.ipv4.address }}"

Please note: the default behaviour is the original one (ie. use the ansible_default_ipv4 address).

coofercat avatar Nov 03 '21 16:11 coofercat

Very good point - and better style than my (rather hurried) change. Updated as requested.

coofercat avatar Jan 07 '22 12:01 coofercat