allanger/container-openvpn
1
0
Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Activity
60671e6819
container-openvpn/bin/ovpn_genconfig

58 lines
1.1 KiB
Plaintext
Raw Normal View History

ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible.
2014-07-01 05:43:00 +00:00
#!/bin/bash
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
#
# Generate OpenVPN configs
#
set -ex
ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible.
2014-07-01 05:43:00 +00:00
server_url=$1
[ -z "$server_url" ] && server_url=$(cat "$OPENVPN/server_url" 2> /dev/null)
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible.
2014-07-01 05:43:00 +00:00
if [[ "$server_url" =~ ^((udp|tcp)://)?([0-9a-zA-Z\.]+)(:([0-9]+))?$ ]]; then
proto=${BASH_REMATCH[2]};
port=${BASH_REMATCH[5]};
else
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
echo "Common name not specified"
exit 1
fi
ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible.
2014-07-01 05:43:00 +00:00
# Apply defaults
[ -z "$proto" ] && proto=1194
[ -z "$port" ] && port=udp
ovpn: Remove reference to udp/1194 * Remove references to udp/1194. * Works better with non-standard ports and tcp.
2014-07-01 05:56:26 +00:00
conf=$OPENVPN/openvpn.conf
genconfig: Backup old config file * Backup previous config file before overwriting.
2014-06-30 06:09:18 +00:00
if [ -f "$conf" ]; then
bak=$conf.$(date +%s).bak
echo "Backing up $conf -> $bak"
mv "$conf" "$bak"
fi
cat > "$conf" <<EOF
genconfig: Expand the subnet * Use a larger subnet (2x the size) to allow for more hard-coded configurations.
2014-06-30 05:45:30 +00:00
server 192.168.255.0 255.255.255.0
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
verb 3
#duplicate-cn
key $EASYRSA_PKI/private/$cn.key
ca $EASYRSA_PKI/ca.crt
cert $EASYRSA_PKI/issued/$cn.crt
dh $EASYRSA_PKI/dh.pem
tls-auth $EASYRSA_PKI/ta.key
key-direction 0
keepalive 10 60
persist-key
persist-tun
push "dhcp-option DNS 8.8.4.4"
push "dhcp-option DNS 8.8.8.8"
clients: Add support for static subnet * Allow static clients to be placed on 192.168.254.0/24 subnet.
2014-06-30 07:10:52 +00:00
genconfig: Add client-config-dir * Add client config directory for client specific configuration options such as IP addresses.
2014-06-30 05:44:05 +00:00
client-config-dir $OPENVPN/ccd
clients: Add support for static subnet * Allow static clients to be placed on 192.168.254.0/24 subnet.
2014-06-30 07:10:52 +00:00
route 192.168.254.0 255.255.255.0
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible.
2014-07-01 05:43:00 +00:00
proto $proto
port $port
ovpn: Remove reference to udp/1194 * Remove references to udp/1194. * Works better with non-standard ports and tcp.
2014-07-01 05:56:26 +00:00
dev tun0
status /tmp/openvpn-status.log
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
EOF
genconfig: Delete backup if configs are identical * Avoid accumulating noise.
2014-07-01 15:30:28 +00:00
# Clean-up duplicate configs
diff -q "$bak" "$conf" && rm "$bak"
Reference in New Issue Copy Permalink