allanger/container-openvpn
1
0
Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Activity
852d404c12
container-openvpn/bin/ovpn_genconfig

76 lines
1.6 KiB
Plaintext
Raw Normal View History

ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible.
2014-07-01 05:43:00 +00:00
#!/bin/bash
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
#
# Generate OpenVPN configs
#
set -ex
env: Re-work environment code * Instead of storing just a server_url which was necessary to regenerate the OpenVPN configs, instead store an env file. * Move all the env parsing to `ovpn_genconfig` so that it can be re-run from genconfig instead of from `ovpn_init`. * Remove all the parsing and env defaults except for genconfig. NOTE: This breaks the older config method, uesrs will need to re-run genconfig with an arg[1] as the previous server_url, this will create the necessary env file the rest of the tools expect. Example recovery for legacy users: host$ docker run --rm -it kylemanna/openvpn bash -l container# ovpn_genconfig $(cat /etc/openvpn/server_url)
2014-07-06 01:51:58 +00:00
OVPN_ENV=$OPENVPN/ovpn_env.sh
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
env: Re-work environment code * Instead of storing just a server_url which was necessary to regenerate the OpenVPN configs, instead store an env file. * Move all the env parsing to `ovpn_genconfig` so that it can be re-run from genconfig instead of from `ovpn_init`. * Remove all the parsing and env defaults except for genconfig. NOTE: This breaks the older config method, uesrs will need to re-run genconfig with an arg[1] as the previous server_url, this will create the necessary env file the rest of the tools expect. Example recovery for legacy users: host$ docker run --rm -it kylemanna/openvpn bash -l container# ovpn_genconfig $(cat /etc/openvpn/server_url)
2014-07-06 01:51:58 +00:00
# Import defaults if present
[ -r "$OVPN_ENV" ] && source "$OVPN_ENV"
# Override config if set
[ -n "$1" ] && OVPN_SERVER_URL="$1"
# Server name is in the form "udp://vpn.example.com:1194"
if [[ "$OVPN_SERVER_URL" =~ ^((udp|tcp)://)?([0-9a-zA-Z\.]+)(:([0-9]+))?$ ]]; then
OVPN_PROTO=${BASH_REMATCH[2]};
OVPN_CN=${BASH_REMATCH[3]};
OVPN_PORT=${BASH_REMATCH[5]};
ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible.
2014-07-01 05:43:00 +00:00
else
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
echo "Common name not specified"
exit 1
fi
ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible.
2014-07-01 05:43:00 +00:00
# Apply defaults
env: Re-work environment code * Instead of storing just a server_url which was necessary to regenerate the OpenVPN configs, instead store an env file. * Move all the env parsing to `ovpn_genconfig` so that it can be re-run from genconfig instead of from `ovpn_init`. * Remove all the parsing and env defaults except for genconfig. NOTE: This breaks the older config method, uesrs will need to re-run genconfig with an arg[1] as the previous server_url, this will create the necessary env file the rest of the tools expect. Example recovery for legacy users: host$ docker run --rm -it kylemanna/openvpn bash -l container# ovpn_genconfig $(cat /etc/openvpn/server_url)
2014-07-06 01:51:58 +00:00
[ -z "$OVPN_PROTO" ] && OVPN_PROTO=udp
[ -z "$OVPN_PORT" ] && OVPN_PORT=1194
# Preserve config
if [ -f "$OVPN_ENV" ]; then
bak_env=$OVPN_ENV.$(date +%s).bak
echo "Backing up $OVPN_ENV -> $bak_env"
mv "$OVPN_ENV" "$bak_env"
fi
export OVPN_SERVER_URL OVPN_ENV OVPN_PROTO OVPN_CN OVPN_PORT
env | grep ^OVPN_ > "$OVPN_ENV"
ovpn: Convert from servername -> server_url * Previously the server name cached the common name generated during init and assumed always 1194/udp. * The new configuration allows for users to pass in a url in a new form that allows the protocol to be specified as well as the port. * Example: udp://vpn.example.com:1194 * Try to be backwards compatible.
2014-07-01 05:43:00 +00:00
ovpn: Remove reference to udp/1194 * Remove references to udp/1194. * Works better with non-standard ports and tcp.
2014-07-01 05:56:26 +00:00
conf=$OPENVPN/openvpn.conf
genconfig: Backup old config file * Backup previous config file before overwriting.
2014-06-30 06:09:18 +00:00
if [ -f "$conf" ]; then
bak=$conf.$(date +%s).bak
echo "Backing up $conf -> $bak"
mv "$conf" "$bak"
fi
cat > "$conf" <<EOF
genconfig: Expand the subnet * Use a larger subnet (2x the size) to allow for more hard-coded configurations.
2014-06-30 05:45:30 +00:00
server 192.168.255.0 255.255.255.0
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
verb 3
#duplicate-cn
env: Re-work environment code * Instead of storing just a server_url which was necessary to regenerate the OpenVPN configs, instead store an env file. * Move all the env parsing to `ovpn_genconfig` so that it can be re-run from genconfig instead of from `ovpn_init`. * Remove all the parsing and env defaults except for genconfig. NOTE: This breaks the older config method, uesrs will need to re-run genconfig with an arg[1] as the previous server_url, this will create the necessary env file the rest of the tools expect. Example recovery for legacy users: host$ docker run --rm -it kylemanna/openvpn bash -l container# ovpn_genconfig $(cat /etc/openvpn/server_url)
2014-07-06 01:51:58 +00:00
key $EASYRSA_PKI/private/$OVPN_CN.key
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
ca $EASYRSA_PKI/ca.crt
env: Re-work environment code * Instead of storing just a server_url which was necessary to regenerate the OpenVPN configs, instead store an env file. * Move all the env parsing to `ovpn_genconfig` so that it can be re-run from genconfig instead of from `ovpn_init`. * Remove all the parsing and env defaults except for genconfig. NOTE: This breaks the older config method, uesrs will need to re-run genconfig with an arg[1] as the previous server_url, this will create the necessary env file the rest of the tools expect. Example recovery for legacy users: host$ docker run --rm -it kylemanna/openvpn bash -l container# ovpn_genconfig $(cat /etc/openvpn/server_url)
2014-07-06 01:51:58 +00:00
cert $EASYRSA_PKI/issued/$OVPN_CN.crt
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
dh $EASYRSA_PKI/dh.pem
tls-auth $EASYRSA_PKI/ta.key
key-direction 0
keepalive 10 60
persist-key
persist-tun
push "dhcp-option DNS 8.8.4.4"
push "dhcp-option DNS 8.8.8.8"
clients: Add support for static subnet * Allow static clients to be placed on 192.168.254.0/24 subnet.
2014-06-30 07:10:52 +00:00
genconfig: Add client-config-dir * Add client config directory for client specific configuration options such as IP addresses.
2014-06-30 05:44:05 +00:00
client-config-dir $OPENVPN/ccd
clients: Add support for static subnet * Allow static clients to be placed on 192.168.254.0/24 subnet.
2014-06-30 07:10:52 +00:00
route 192.168.254.0 255.255.255.0
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
env: Re-work environment code * Instead of storing just a server_url which was necessary to regenerate the OpenVPN configs, instead store an env file. * Move all the env parsing to `ovpn_genconfig` so that it can be re-run from genconfig instead of from `ovpn_init`. * Remove all the parsing and env defaults except for genconfig. NOTE: This breaks the older config method, uesrs will need to re-run genconfig with an arg[1] as the previous server_url, this will create the necessary env file the rest of the tools expect. Example recovery for legacy users: host$ docker run --rm -it kylemanna/openvpn bash -l container# ovpn_genconfig $(cat /etc/openvpn/server_url)
2014-07-06 01:51:58 +00:00
proto $OVPN_PROTO
port $OVPN_PORT
ovpn: Remove reference to udp/1194 * Remove references to udp/1194. * Works better with non-standard ports and tcp.
2014-07-01 05:56:26 +00:00
dev tun0
status /tmp/openvpn-status.log
ovpn_genconfig: Add generate config script * Create a generate config script so that the new docker containers can regenerate the OpenVPN configuration without clobbering the PKI setup.
2014-06-04 23:49:13 +00:00
EOF
genconfig: Delete backup if configs are identical * Avoid accumulating noise.
2014-07-01 15:30:28 +00:00
env: Re-work environment code * Instead of storing just a server_url which was necessary to regenerate the OpenVPN configs, instead store an env file. * Move all the env parsing to `ovpn_genconfig` so that it can be re-run from genconfig instead of from `ovpn_init`. * Remove all the parsing and env defaults except for genconfig. NOTE: This breaks the older config method, uesrs will need to re-run genconfig with an arg[1] as the previous server_url, this will create the necessary env file the rest of the tools expect. Example recovery for legacy users: host$ docker run --rm -it kylemanna/openvpn bash -l container# ovpn_genconfig $(cat /etc/openvpn/server_url)
2014-07-06 01:51:58 +00:00
# Clean-up duplicate configs (always return success)
diff -q "$bak_env" "$OVPN_ENV" 2> /dev/null && rm "$bak_env" || true
diff -q "$bak" "$conf" 2> /dev/null && rm "$bak" || true
Reference in New Issue Copy Permalink