OpenVPN Access Server Chef Cookbook

A Chef cookbook to install and do basic configuration OpenVPN Access Server.

Includes support for:

• Company name via Chef attribute
• Logo, png format base64 encoded set as a Chef attribute - openssl base64 < path/to/file.png | tr -d '\n' | pbcopy
• Automatic daily backup of database (optional)
• Restoration of backed up database on Chef run (optional)
• SSL Certificate via https://github.com/balanced-cookbooks/citadel
• IAM roles for storing secrets and backups in S3

Designed (very loosly) for use in AWS.

Attributes

Attributes listed with their default values:

default['openvpnas']['url'] = 'http://swupdate.openvpn.org/as/openvpn-as-2.1.2-CentOS7.x86_64.rpm'
default['openvpnas']['dir'] = '/usr/local/openvpn_as/'
default['openvpnas']['company_name'] = ''
default['openvpnas']['logo'] = ''
default['openvpnas']['backup']['enabled'] = false
default['openvpnas']['backup']['bucket'] = ''
default['openvpnas']['ssl'] = false
default['citadel']['bucket'] = node['openvpnas']['backup']['bucket']

default['citadel']['bucket'] is the source for the SSL certificate and private key.

Recipes

• openvpnas::default - recipe to install, configures and enables+runs.
• openvpnas::backup - creates backup script and schedules it in the cron.
• openvpnas::restore - restores from backup on convergence.

Contributing

• File bug reports via GitHub issues.
• Pull requests are welcome.

1. Fork it
2. Create your feature branch (git checkout -b my-new-feature)
3. Commit your changes (git commit -am 'Added some feature')
4. Push to the branch (git push origin my-new-feature)
5. Create new Pull Request

Authors

• Robert Coleman ([email protected]) - https://github.com/rjocoleman
• Alex Romanov ([email protected]) - https://github.com/netflash