add option to not configure nat (#187)

Co-authored-by: Kyle Lexmond <[email protected]>
kyl191 · Dec 22, 2024 · 09aeb80 · 09aeb80
1 parent 1579e39
commit 09aeb80
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/defaults/main/role.yml b/defaults/main/role.yml
@@ -19,6 +19,7 @@ iptables_service: iptables
 manage_firewall_rules: true
 openvpn_firewall: auto
 openvpn_masquerade_not_snat: false
+openvpn_no_nat: false
 
 # Misc
 ci_build: false

diff --git a/tasks/iptables.yml b/tasks/iptables.yml
@@ -69,7 +69,7 @@
     jump: SNAT
     action: insert
     comment: "Perform NAT readdressing"
-  when: not openvpn_masquerade_not_snat
+  when: not openvpn_masquerade_not_snat and not openvpn_no_nat
   notify: "save iptables"
 
 - name: Perform NAT readdressing with MASQUERADE - iptables
@@ -80,7 +80,7 @@
     jump: MASQUERADE
     action: insert
     comment: "Perform NAT readdressing"
-  when: openvpn_masquerade_not_snat
+  when: openvpn_masquerade_not_snat and not openvpn_no_nat
   notify:
     - Save iptables