blob: 3f392316da2908af01abfa28fdb8e6db029acb30 [file] [log] [blame]
Bartosz Stebel9fed3c92020-07-09 15:13:42 +02001local kube = import "../../../kube/kube.libsonnet";
2local vpn = import "vpn.libsonnet";
3
4{
5 local top = self,
6 tls: vpn.PKI("implr-vpn"),
7
8 servers: {
9 praisethesun: vpn.Server("openvpn-implr-praisethesun", 11223, top.tls) {
10 cfg+: {
11 namespace: "implr-vpn",
12 configFile: |||
13 dev tun
14 tmp-dir /dev/shm/
15 proto udp
16 port 11223
17 topology subnet
18 server 172.17.1.0 255.255.255.0
19 keepalive 10 60
20 persist-tun
21 persist-key
22 compress lz4
23 cipher AES-256-CBC
24 dh none
25 ca /mnt/pki/ca.crt
26 cert /mnt/pki/tls.crt
27 key /mnt/pki/tls.key
28 |||
29 }
30 },
31 },
32 clients: {
33 kektop: vpn.Client("kektop", top.servers.praisethesun),
34 admin1: vpn.Client("admin1", top.servers.praisethesun),
35 desk1: vpn.Client("desk1", top.servers.praisethesun),
36 }
37}