diff --git a/roles/server/tasks/main.yml b/roles/server/tasks/main.yml index 528928e..2b6eb99 100644 --- a/roles/server/tasks/main.yml +++ b/roles/server/tasks/main.yml @@ -100,3 +100,13 @@ value: '{{ item.value }}' loop: '{{ server_openvpn_sysctl_settings | dict2items }}' notify: 'Restart openvpn server' + +- name: 'Configure masquerading on firewall for the vpn traffic to the internet' + become: true + ansible.builtin.iptables: + chain: 'POSTROUTING' + comment: 'Enable masquerading from the vpn network' + out_interface: '{{ server_openvpn_nat_interface }}' + source: '{{ server_openvpn_ipv4_pool }}/24' + table: 'nat' + jump: 'MASQUERADE'