dn42-router/roles/config-stunnel/tasks/main.yml

---
- name: Ensure permission on OpenVPN directory
  become: true
  file:
    path: /etc/stunnel
    state: directory
    mode: 0700
    owner: stunnel4
    group: stunnel4

- name: Install stunnel configuration
  become: true
  template:
    src: templates/config.j2
    dest: "/etc/stunnel/{{ item.name }}.conf"
    mode: 0600
    owner: stunnel4
    group: stunnel4
  loop: "{{ stunnel | flatten(levels=1) }}"

- name: Install local keys
  become: true
  copy:
    content: "{{ item.key }}"
    dest: "/etc/stunnel/{{ item.name }}.pem"
    mode: 0600
    owner: stunnel4
    group: stunnel4
  loop: "{{ stunnel | flatten(levels=1) }}"

- name: Install local certificates
  become: true
  copy:
    content: "{{ item.certificate }}"
    dest: "/etc/stunnel/{{ item.name }}.crt"
    mode: 0600
    owner: stunnel4
    group: stunnel4
  loop: "{{ stunnel | flatten(levels=1) }}"

- name: Install local remote
  become: true
  copy:
    content: "{{ item.remote_certificate }}"
    dest: "/etc/stunnel/{{ item.name }}_remote.crt"
    mode: 0600
    owner: stunnel4
    group: stunnel4
  loop: "{{ stunnel | flatten(levels=1) }}"

- name: Enable autostart
  become: true
  systemd:
    name: "stunnel@{{ item.name }}"
    masked: false
    enabled: true
  when: item.autostart
  loop: "{{ stunnel | flatten(levels=1) }}"

- name: Disable autostart
  become: true
  systemd:
    name: "stunnel@{{ item.name }}"
    masked: false
    enabled: false
  when: not item.autostart
  loop: "{{ stunnel | flatten(levels=1) }}"