- Consolidate `lmn_wlan`, `lmn_wlan_nm`, and `lmn_wlan_8021x` into single `lmn_wlan` role.
- Implement a check for the availability of the radius-server during the EAP-TLS rollout.
- Enhance variable support with a standardized naming schema:
- Mode selection via `wlan` variable (`none`, `psk`, `eap-tls`).
- EAP-TLS CA configuration (CA information, email address, CA password).
- Introduce a switch to force the (re-)issue of existing certificates.
- PSK configuration through `wlan_ssid` and `wlan_password`.
- Add a check to verify if the radius certificate is revoked.
- Ensure required packages and services are only installed and configured if the `wifi` variable is set.
13 lines
297 B
YAML
13 lines
297 B
YAML
---
|
|
wlan: none
|
|
wlan_force_issue: false
|
|
wlan_ssid: "Linux-Wlan"
|
|
wlan_password: "VerySecurePassw0rd"
|
|
wlan_eap_ca:
|
|
C: "DE"
|
|
ST: "Baden-Wuerttemberg"
|
|
L: "Reutlingen"
|
|
O: "Linuxschule"
|
|
emailAddress: "admin@example.com"
|
|
CN: "Radius Certificate Authority"
|
|
password: "OtherVerySecurePassw0rd"
|