
- Consolidate `lmn_wlan`, `lmn_wlan_nm`, and `lmn_wlan_8021x` into single `lmn_wlan` role. - Implement a check for the availability of the radius-server during the EAP-TLS rollout. - Enhance variable support with a standardized naming schema: - Mode selection via `wlan` variable (`none`, `psk`, `eap-tls`). - EAP-TLS CA configuration (CA information, email address, CA password). - Introduce a switch to force the (re-)issue of existing certificates. - PSK configuration through `wlan_ssid` and `wlan_password`. - Add a check to verify if the radius certificate is revoked. - Ensure required packages and services are only installed and configured if the `wifi` variable is set.
13 lines
297 B
YAML
13 lines
297 B
YAML
---
|
|
wlan: none
|
|
wlan_force_issue: false
|
|
wlan_ssid: "Linux-Wlan"
|
|
wlan_password: "VerySecurePassw0rd"
|
|
wlan_eap_ca:
|
|
C: "DE"
|
|
ST: "Baden-Wuerttemberg"
|
|
L: "Reutlingen"
|
|
O: "Linuxschule"
|
|
emailAddress: "admin@example.com"
|
|
CN: "Radius Certificate Authority"
|
|
password: "OtherVerySecurePassw0rd"
|