Manage /etc/default file and set autostart

Author: drkp

manifests/init.pp

@@ -6,6 +6,7 @@
   $openvpn_dir    = $openvpn::params::openvpn_dir,
   $package_name   = $openvpn::params::package_name,
   $manage_service = $openvpn::params::manage_service,
+  $autostart_all  = $openvpn::params::autostart_all
 ) inherits openvpn::params {
 
   package { $package_name:
@@ -26,5 +27,20 @@
       enable  => true,
       require => File[$openvpn_dir],
     }
+
+    if $::osfamily == 'Debian' {
+      concat { '/etc/default/openvpn':
+        owner => root,
+        group => 0,
+        mode  => '0644',
+        warn  => true,
+      }
+      
+      concat::fragment { 'openvpn.default.header':
+        content => template('openvpn/etc-default-openvpn.erb'),
+        target  => '/etc/default/openvpn',
+        order   => '01',
+      }
+    }
   }
 }

manifests/params.pp

@@ -9,6 +9,7 @@
       $openvpn_dir    = '/usr/local/etc/openvpn'
       $package_name   = 'security/openvpn'
       $manage_service = true
+      $autostart_all  = true
       $openvpn_user   = undef
       $openvpn_group  = undef
       $openssl        = '/usr/bin/openssl'
@@ -17,6 +18,7 @@
       $openvpn_dir    = '/etc/openvpn'
       $package_name   = 'openvpn'
       $manage_service = false
+      $autostart_all  = false
       $openvpn_user   = '_openvpn'
       $openvpn_group  = '_openvpn'
       if ( versioncmp($::kernelversion, '5.7') < 0 ) {
@@ -29,6 +31,7 @@
       $openvpn_dir    = '/etc/openvpn'
       $package_name   = 'openvpn'
       $manage_service = true
+      $autostart_all  = true
       $openvpn_user   = 'nobody'
       $openvpn_group  = 'nobody'
       $openssl        = '/usr/bin/openssl'

templates/etc-default-openvpn.erb

@@ -0,0 +1,24 @@
+# This is the configuration file for /etc/init.d/openvpn
+
+#
+# Start only these VPNs automatically via init script.
+# Allowed values are "all", "none" or space separated list of
+# names of the VPNs. If empty, "all" is assumed.
+#
+#AUTOSTART="all"
+#AUTOSTART="none"
+#AUTOSTART="home office"
+#
+# Refresh interval (in seconds) of default status files
+# located in /var/run/openvpn.$NAME.status
+# Defaults to 10, 0 disables status file generation
+#
+#STATUSREFRESH=10
+#STATUSREFRESH=0
+# Optional arguments to openvpn's command line
+OPTARGS=""
+<% if scope.lookupvar('::openvpn::autostart_all') -%>
+AUTOSTART="all"
+<% else -%>
+AUTOSTART=""
+<% end -%>