docs/modules/howtos/pages/add_external_hardware_to_vpn.adoc

1. In the Fedora Infra Ansible repo edit the file roles/batcave/files/allows. Under the correct section add require ip <server_ip>

2. When this change is pushed run the batcave ansible playbook on the batcave. You will need sysadmin-main access for this

3. Create openvpn certificates for the new server. This requires sysadmin main access

4. generate_openvpn_keys.html

5. In the dns repo on batcave edit the file master/168.192.in-addr.arpa Add the new host to one of the unused adresses. Ensure the hostname ends in .vpn.fedoraproject.org. Don’t forget to update the serial before saving.

6. Also edit the master/vpn.fedoraproject.org file to add the server with the new 192.168.. address created in the previous step to the required section Don’t forget to update the serial before saving.

7. When the above edits are done follow the instructions in the DNS sysadmin sop about signing and pushing new dns chnages.

8. infra:sysadmin_sops:dns.html

9. Finally in the Fedora Infra Ansible repo add a new file roles/openvpn/server/files/ccd/<server_name> with the new 192.168.. address. View one of the existing files in the repo for a sample of formatting. This change will be run when the server is provisioned.