allow to disable exit traffic for gateway

host_vars/gw05.yml

@@ -10,8 +10,10 @@ dhcpd_start: 10.130.32.1
 dhcpd_end: 10.130.39.255
 exit_iface: enp1s0
 
-masked_services:
-  - radvd.service
+# meshvpn
+exit_traffic: no
+# masked_services:
+#   - radvd.service
 
 mesh_gwvpn_secret: !vault |
       $ANSIBLE_VAULT;1.1;AES256

host_vars/kaisertor.yml

@@ -54,6 +54,7 @@ mesh_vpn_instances:
 
 # the out-interface for NAT
 exit_iface: ens3
+exit_traffic: yes
 
 # ICVPN variables
 icvpn_name: luebeck2

roles/meshvpn/tasks/dhcpd.yml

@@ -12,6 +12,15 @@
     line: INTERFACESv4="ffhl"
 
 - name: restart dhcpd
+  when: exit_traffic == false
   systemd:
+    enabled: no
+    state: stopped
+    name: isc-dhcp-server.service
+
+- name: restart dhcpd
+  when: exit_traffic
+  systemd:
+    enabled: yes
     state: restarted
     name: isc-dhcp-server.service

roles/meshvpn/tasks/radvd.yml

@@ -5,7 +5,16 @@
     dest: /etc/radvd.conf
 
 - name: restart radvd
+  when: exit_traffic
   systemd:
     state: restarted
     enabled: yes
     name: radvd
+
+
+- name: restart radvd
+  when: exit_traffic == false
+  systemd:
+    state: stopped
+    enabled: no
+    name: radvd