Add VPN tunnel from fafnir to IC

[chef.git] / roles / fafnir.rb

diff --git a/roles/fafnir.rb b/roles/fafnir.rb
index 2a8a1d138d19defd1ee219408961aec53ec22c5f..2345b25654d21b74908ea9b8e3040d4c4a6c9463 100644 (file)
--- a/roles/fafnir.rb
+++ b/roles/fafnir.rb
@@ -16,6 +16,18 @@ default_attributes(
       }
     }
   },
+  :openvpn => {
+    :address => "10.0.16.4",
+    :tunnels => {
+      :aws2ic => {
+        :port => "1194",
+        :mode => "client",
+        :peer => {
+          :host => "ironbelly.openstreetmap.org"
+        }
+      }
+    }
+  },
   :postgresql => {
     :settings => {
       :defaults => {
@@ -38,5 +50,6 @@ default_attributes(
 )
 
 run_list(
-  "role[aws]"
+  "role[aws]",
+  "recipe[openvpn]"
 )