container-openvpn/bin/ovpn_genconfig

#!/bin/bash

#
# Generate OpenVPN configs
#

set -ex

server_url=$1
[ -z "$server_url" ] && server_url=$(cat "$OPENVPN/server_url" 2> /dev/null)

if [[ "$server_url" =~ ^((udp|tcp)://)?([0-9a-zA-Z\.]+)(:([0-9]+))?$ ]]; then
    proto=${BASH_REMATCH[2]};
    port=${BASH_REMATCH[5]};
else
    echo "Common name not specified"
    exit 1
fi

# Apply defaults
[ -z "$proto" ] && proto=1194
[ -z "$port" ] && port=udp

conf=$OPENVPN/udp1194.conf
if [ -f "$conf" ]; then
    bak=$conf.$(date +%s).bak
    echo "Backing up $conf -> $bak"
    mv "$conf" "$bak"
fi

cat > "$conf" <<EOF
server 192.168.255.0 255.255.255.0
verb 3
#duplicate-cn
key $EASYRSA_PKI/private/$cn.key
ca $EASYRSA_PKI/ca.crt
cert $EASYRSA_PKI/issued/$cn.crt
dh $EASYRSA_PKI/dh.pem
tls-auth $EASYRSA_PKI/ta.key
key-direction 0
keepalive 10 60
persist-key
persist-tun
push "dhcp-option DNS 8.8.4.4"
push "dhcp-option DNS 8.8.8.8"

client-config-dir $OPENVPN/ccd
route 192.168.254.0 255.255.255.0

proto $proto
port $port
dev tun1194
status /tmp/openvpn-status-1194.log
EOF
ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible. 2014-07-01 05:43:00 +00:00			`#!/bin/bash`
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup. 2014-06-04 23:49:13 +00:00
			`#`
			`# Generate OpenVPN configs`
			`#`

			`set -ex`

ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible. 2014-07-01 05:43:00 +00:00			`server_url=$1`
			`[ -z "$server_url" ] && server_url=$(cat "$OPENVPN/server_url" 2> /dev/null)`
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup. 2014-06-04 23:49:13 +00:00
ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible. 2014-07-01 05:43:00 +00:00			`if [[ "$server_url" =~ ^((udp\|tcp)://)?([0-9a-zA-Z\.]+)(:([0-9]+))?$ ]]; then`
			`proto=${BASH_REMATCH[2]};`
			`port=${BASH_REMATCH[5]};`
			`else`
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup. 2014-06-04 23:49:13 +00:00			`echo "Common name not specified"`
			`exit 1`
			`fi`

ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible. 2014-07-01 05:43:00 +00:00			`# Apply defaults`
			`[ -z "$proto" ] && proto=1194`
			`[ -z "$port" ] && port=udp`

genconfig: Backup old config file * Backup previous config file before overwriting. 2014-06-30 06:09:18 +00:00			`conf=$OPENVPN/udp1194.conf`
			`if [ -f "$conf" ]; then`
			`bak=$conf.$(date +%s).bak`
			`echo "Backing up $conf -> $bak"`
			`mv "$conf" "$bak"`
			`fi`

			`cat > "$conf" <<EOF`
genconfig: Expand the subnet * Use a larger subnet (2x the size) to allow for more hard-coded configurations. 2014-06-30 05:45:30 +00:00			`server 192.168.255.0 255.255.255.0`
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup. 2014-06-04 23:49:13 +00:00			`verb 3`
			`#duplicate-cn`
			`key $EASYRSA_PKI/private/$cn.key`
			`ca $EASYRSA_PKI/ca.crt`
			`cert $EASYRSA_PKI/issued/$cn.crt`
			`dh $EASYRSA_PKI/dh.pem`
			`tls-auth $EASYRSA_PKI/ta.key`
			`key-direction 0`
			`keepalive 10 60`
			`persist-key`
			`persist-tun`
			`push "dhcp-option DNS 8.8.4.4"`
			`push "dhcp-option DNS 8.8.8.8"`
clients: Add support for static subnet * Allow static clients to be placed on 192.168.254.0/24 subnet. 2014-06-30 07:10:52 +00:00
genconfig: Add client-config-dir * Add client config directory for client specific configuration options such as IP addresses. 2014-06-30 05:44:05 +00:00			`client-config-dir $OPENVPN/ccd`
clients: Add support for static subnet * Allow static clients to be placed on 192.168.254.0/24 subnet. 2014-06-30 07:10:52 +00:00			`route 192.168.254.0 255.255.255.0`
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup. 2014-06-04 23:49:13 +00:00
ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible. 2014-07-01 05:43:00 +00:00			`proto $proto`
			`port $port`
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup. 2014-06-04 23:49:13 +00:00			`dev tun1194`
			`status /tmp/openvpn-status-1194.log`
			`EOF`