box_bootstrap.yml

---
- hosts: www
  gather_facts: False

  pre_tasks:
    - debug: msg="Pre tasks section"

    - name: ANSIBLE PYTHON | install python 2
      raw: test -e /usr/bin/python || (apt -qqy update && apt install -qy python-minimal)
      become: yes

    - name:  UNPRIVILEGED USERS | Get acl dependency (ansible unprivileged user operations magic)
      apt: pkg="acl"
      become: yes

    - name: gather facts
      setup:

  vars_files:
    - ./box_vars.yml
  roles:
     - {
         role: "sa-box-bootstrap",
         deploy_user: "{{my_deploy_user}}",
         deploy_user_authorized_keys: "{{my_deploy_authorized_keys}}",
         ufw_rules_allow: "{{custom_ports_allow}}",
         ufw_rules_allow_from_hosts: "{{custom_ufw_rules_allow_from_hosts}}"
       }
     - {
        role: "sa-vpn-pptp",
        pptp_vpn_users: "{{custom_pptp_vpn_users}}",
        firewall_used: "ufw",
        when: option_jumpbox_pptp
       }
     - {
        role: "sa-vpn-openvpn",
        openvpn_vpn_users: "{{custom_openvpn_vpn_users}}",
        firewall_used: "ufw",
        when: option_jumpbox_openvpn
       }
     - {
         role: "sa-vpn-softether",
         softether_vpn_users: "{{custom_softether_vpn_users}}",
         softether_ipsec_presharedkey: "{{custom_softether_ipsec_presharedkey}}",
         firewall_used: "ufw",         
         when: option_jumpbox_softether
       }
     - {
         role: "sa-port-knock",
         knock_ports: "{{custom_knock_ports}}",
         when: option_jumpbox_port_knock
       }