Refactor lmn_wlan role
- Consolidate `lmn_wlan`, `lmn_wlan_nm`, and `lmn_wlan_8021x` into single `lmn_wlan` role. - Implement a check for the availability of the radius-server during the EAP-TLS rollout. - Enhance variable support with a standardized naming schema: - Mode selection via `wlan` variable (`none`, `psk`, `eap-tls`). - EAP-TLS CA configuration (CA information, email address, CA password). - Introduce a switch to force the (re-)issue of existing certificates. - PSK configuration through `wlan_ssid` and `wlan_password`. - Add a check to verify if the radius certificate is revoked. - Ensure required packages and services are only installed and configured if the `wifi` variable is set.
This commit is contained in:
parent
9f1c60eefd
commit
a68aaeb81c
9 changed files with 561 additions and 538 deletions
13
roles/lmn_wlan/defaults/main.yaml
Normal file
13
roles/lmn_wlan/defaults/main.yaml
Normal file
|
@ -0,0 +1,13 @@
|
|||
---
|
||||
wlan: none
|
||||
wlan_force_issue: false
|
||||
wlan_ssid: "Linux-Wlan"
|
||||
wlan_password: "VerySecurePassw0rd"
|
||||
wlan_eap_ca:
|
||||
C: "DE"
|
||||
ST: "Baden-Wuerttemberg"
|
||||
L: "Reutlingen"
|
||||
O: "Linuxschule"
|
||||
emailAddress: "admin@example.com"
|
||||
CN: "Radius Certificate Authority"
|
||||
password: "OtherVerySecurePassw0rd"
|
Loading…
Add table
Add a link
Reference in a new issue