---

- name: install packages
  package:
    name: openvpn--
    state: installed

- name: create chroot
  file:
    path: /var/openvpn
    state: directory
    mode: 0750
    owner: root
    group: _openvpn

- name: create chroot /tmp
  file:
    path: /var/openvpn/tmp
    state: directory
    mode: 0770
    owner: _openvpn
    group: _openvpn

- name: create config directory
  file:
    path: /etc/openvpn
    state: directory
    mode: 0755
    owner: root
    group: "{{ ansible_wheel }}"

- name: create key directory
  file:
    path: /etc/openvpn/keys
    state: directory
    mode: 0700
    owner: root
    group: "{{ ansible_wheel }}"

- name: copy authentication key
  copy:
    src: "{{ ansible_private }}/files/openvpn/tap0.key.{{ inventory_hostname }}"
    dest: /etc/openvpn/keys/tap0.key
    mode: 0600
    owner: root
    group: "{{ ansible_wheel }}"

- name: copy config
  copy:
    src: "{{ ansible_private }}/files/openvpn/tap0.conf.{{ inventory_hostname }}"
    dest: /etc/openvpn/tap0.conf
    mode: 0600
    owner: root
    group: "{{ ansible_wheel }}"

- name: create interface config
  copy:
    src: hostname.tap0
    dest: /etc/hostname.tap0
    mode: 0600
    owner: root
    group: "{{ ansible_wheel }}"