sovereign/roles/vpn/templates/rc.local_ansible_openvpn

#!/bin/sh -e
# {{ ansible_managed }}
#
# This script should be included in your rc.local
#

iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o {{ ansible_default_ipv4.interface }} -j MASQUERADE

systemctl restart dnsmasq

exit 0