From 76b152deff53ab2cea86192202695c4130931ef3 Mon Sep 17 00:00:00 2001 From: "root@culturestrings" Date: Mon, 18 May 2020 06:50:11 +0000 Subject: openvpn: added current configuration (ipv4/ipv6). --- public/fs/etc/openvpn/culturestrings-conf.sh | 7 +++++ public/fs/etc/openvpn/culturestrings.conf.in | 40 ++++++++++++++++++++++++++++ 2 files changed, 47 insertions(+) create mode 100755 public/fs/etc/openvpn/culturestrings-conf.sh create mode 100644 public/fs/etc/openvpn/culturestrings.conf.in (limited to 'public/fs/etc') diff --git a/public/fs/etc/openvpn/culturestrings-conf.sh b/public/fs/etc/openvpn/culturestrings-conf.sh new file mode 100755 index 0000000..71b887b --- /dev/null +++ b/public/fs/etc/openvpn/culturestrings-conf.sh @@ -0,0 +1,7 @@ +#!/bin/sh + +set -eu + +source /root/config/private/fs/etc/server.ports + +sed -e 's/@vpn_port@/'${vpn_port}'/g' "$1" diff --git a/public/fs/etc/openvpn/culturestrings.conf.in b/public/fs/etc/openvpn/culturestrings.conf.in new file mode 100644 index 0000000..9598f5d --- /dev/null +++ b/public/fs/etc/openvpn/culturestrings.conf.in @@ -0,0 +1,40 @@ +port @vpn_port@ +proto udp + +dev tun0 +topology subnet + +cipher AES-256-CBC + +ca /etc/easy-rsa/pki/ca.crt +cert /etc/easy-rsa/pki/issued/culturestrings.crt + +askpass /home/webroot/openvpn/culturestrings.pass +key /etc/easy-rsa/pki/private/culturestrings.key +dh /etc/easy-rsa/pki/dh.pem + +status /var/log/openvpn/openvpn-status.log +log-append /var/log/openvpn/openvpn.log + +server 10.8.0.0 255.255.255.0 +server-ipv6 2a01:4f9:2b:20f0:8000::/65 + +push "route-ipv6 2000::/3" +push "route-ipv6 2a01:4f9:2b:20f0::/64" + +push "block-outside-dns" +push "redirect-gateway def1" +push "route 192.168.0.0 255.255.255.0" +push "dhcp-option DNS 10.8.0.1" + +duplicate-cn +client-to-client + +daemon +auth-nocache + +persist-key +persist-tun + +verb 3 +keepalive 20 60 -- cgit v1.2.3