From 98a96ef58c1b95dca83c67202ee1f4922d45b4dd Mon Sep 17 00:00:00 2001
From: Jack Ivanov <e601809@gmail.com>
Date: Wed, 17 May 2017 16:47:00 +0200
Subject: [PATCH] add html helper #280

move to the new local schema

fix a typo
---
 docs/client-android.md                     |  9 +++++++++
 roles/vpn/tasks/client_configs.yml         | 12 +++++++++++-
 roles/vpn/templates/android_html_helper.j2 |  1 +
 3 files changed, 21 insertions(+), 1 deletion(-)
 create mode 100644 roles/vpn/templates/android_html_helper.j2

diff --git a/docs/client-android.md b/docs/client-android.md
index bd71dddb..643e85e6 100644
--- a/docs/client-android.md
+++ b/docs/client-android.md
@@ -1,5 +1,14 @@
 # Android client setup
 
+## Installation via profiles
+
+1. [Install the strongSwan VPN Client](https://play.google.com/store/apps/details?id=org.strongswan.android) (Android 4+)
+2. Copy your `android_{username}.sswan` and `android_{username}_helper.html` to your phone's internal storage
+3. Open the helper file in a browser (Google Chrome works well)
+4. Click on the link. It opens the StrongSwan app in order to import the certificates and configure VPN.
+
+## Manual installation
+
 **NOTE:** If you are a Project Fi user, you must disable WiFi Assistant before continuing. See the [strongSwan documentation](https://wiki.strongswan.org/projects/strongswan/wiki/AndroidVPNClient) for details.
 
 | Instruction | Screenshot(s) |
diff --git a/roles/vpn/tasks/client_configs.yml b/roles/vpn/tasks/client_configs.yml
index 227a2a1a..ac92f822 100644
--- a/roles/vpn/tasks/client_configs.yml
+++ b/roles/vpn/tasks/client_configs.yml
@@ -27,7 +27,7 @@
 - name: Build the strongswan app android config
   template:
     src: sswan.j2
-    dest: configs/{{ IP_subject_alt_name }}/{{ item.0 }}.sswan
+    dest: configs/{{ IP_subject_alt_name }}/android_{{ item.0 }}.sswan
     mode: 0600
   become: no
   with_together:
@@ -35,6 +35,16 @@
     - "{{ PayloadContent.results }}"
   no_log: True
 
+- name: Build the android helper html
+  template:
+    src: android_html_helper.j2
+    dest: configs/{{ IP_subject_alt_name }}/android_{{ item.0 }}_helper.html
+    mode: 0600
+  become: no
+  with_together:
+    - "{{ users }}"
+  no_log: True
+
 - name: Build the client ipsec config file
   template:
     src: client_ipsec.conf.j2
diff --git a/roles/vpn/templates/android_html_helper.j2 b/roles/vpn/templates/android_html_helper.j2
new file mode 100644
index 00000000..d27528aa
--- /dev/null
+++ b/roles/vpn/templates/android_html_helper.j2
@@ -0,0 +1 @@
+<a href="android_{{ item.0 }}.sswan" type="application/vnd.strongswan.profile">{{ item.0 }}</a>