-changes to ssh key deployment

-simplified instructions
-attempt to prevent connman from installing - causes multiple ip's
-cleanup some unused tasks
-move openvpn to separate role

roles/common/tasks/main.yaml

@@ -20,6 +20,16 @@
           content: "{{ lookup('template', '{{ role_path }}/templates/hosts.j2') }}"
           state: present
   tags: update_hosts
+- name: update package cache
+  become: true
+  ansible.builtin.apt:
+    update_cache: yes
+- name: hold connman - using netplan
+  become: true
+  dpkg_selections:
+    name: connman
+    selection: hold
+
 - name: install required packages
   become: true
   package:
@@ -30,29 +40,6 @@
   hostname:
     name: '{{ inventory_hostname }}'
   tags: set_hostname
-- name: enable openvpn
-  become: true
-  service:
-          name: openvpn
-          enabled: yes
-  tags: enable_openvpn
-  register: openvpn_enabled
-- name: enable openvpn config
-  become: true
-  lineinfile:
-          path: /etc/default/openvpn
-          state: present
-          regexp: '^#AUTOSTART="all"'
-          line: 'AUTOSTART="all"'
-  tags: enable_openvpn
-- name: start openvpn
-  become: true
-  systemd:
-          daemon_reload: yes
-          name: openvpn
-          state: restarted
-  tags: enable_openvpn
-  when: openvpn_enabled
 - name: allow pi to sudo without pw
   lineinfile:
     path: /etc/sudoers

roles/common/vars/os_Debian_10.yml

@@ -7,4 +7,3 @@ dependency_packages:
   - screen
   - cockpit-storaged
   - cockpit
-  - openvpn

roles/common/vars/os_Raspbian_10.yml

@@ -16,7 +16,6 @@ dependency_packages:
   - smbclient
   - ncurses-dev
   - build-essential
-  - openvpn
   - lightdm
   - lxde
   - realvnc-vnc-server

roles/common/vars/os_Raspbian_11.yml

@@ -16,7 +16,6 @@ dependency_packages:
   - smbclient
   - ncurses-dev
   - build-essential
-  - openvpn
   - lightdm
   - lxde
   - realvnc-vnc-server

roles/common/vars/os_Raspbian_9.yml

@@ -16,7 +16,6 @@ dependency_packages:
   - smbclient
   - ncurses-dev
   - build-essential
-  - openvpn
   - lightdm
   - lxde
   - realvnc-vnc-server

roles/common/vars/os_Ubuntu_18.yml

@@ -3,7 +3,6 @@ dependency_packages:
   - vim
   - mc
   - build-essential
-  - openvpn
   - aptitude
   - mtr
   - screen

roles/common/vars/os_Ubuntu_20.yml

@@ -3,7 +3,6 @@ dependency_packages:
   - vim
   - mc
   - build-essential
-  - openvpn
   - aptitude
   - mtr
   - screen

roles/common/vars/os_Ubuntu_22.yml

@@ -3,7 +3,6 @@ dependency_packages:
   - vim
   - mc
   - build-essential
-  - openvpn
   - aptitude
   - mtr
   - screen

roles/openvpn/taks/main.yaml

@@ -0,0 +1,30 @@
+---
+- name: install openvpn
+  ansible.builtin.apt:
+    name: openvpn
+    state: present
+    update_cache: yes
+
+- name: enable openvpn
+  become: true
+  service:
+          name: openvpn
+          enabled: yes
+  tags: enable_openvpn
+  register: openvpn_enabled
+- name: enable openvpn config
+  become: true
+  lineinfile:
+          path: /etc/default/openvpn
+          state: present
+          regexp: '^#AUTOSTART="all"'
+          line: 'AUTOSTART="all"'
+  tags: enable_openvpn
+- name: start openvpn
+  become: true
+  systemd:
+          daemon_reload: yes
+          name: openvpn
+          state: restarted
+  tags: enable_openvpn
+  when: openvpn_enabled