Commit Graph

464 Commits

Author SHA1 Message Date
Kyle Manna
88c76c787e genconfig: Turn off exit on error at end
* Need to check return status of diff, but don't want a false return
  code to exit the script.
* Fixes #35
2015-03-09 09:19:38 -07:00
Robin Schneider
3d2d839d0b
Wrote script to copy only the needed files to the docker host which runs the docker openvpn server.
* For the truly paranoid users, never keep any keys (i.e. client and
  certificate authority) in the docker container to begin with :).
2015-03-08 22:40:08 +01:00
Kyle Manna
8d8f19d951 genconfig: Describe backup conf deletion
* Handle back-up configuration deletion better by informing the user
  why the back-up vanished and why.
* Closes #33
2015-03-07 16:35:08 -08:00
Kyle Manna
96ffed0984 Merge pull request #32 from omriiluz/master
Disable default bash xtrace and fix but in variables
2015-03-01 22:50:35 -08:00
omriiluz
43ae3eb61d properly clone arrays 2015-02-28 03:22:08 -08:00
omriiluz
6b23cf8d88 do not accumulate routes and push directives from default if new directives were defined 2015-02-28 03:01:00 -08:00
omriiluz
e9d1022eb4 Disable bash debug (xtrace) by default, re-enable with -e DEBUG=1 2015-02-28 02:45:31 -08:00
Kyle Manna
42d95bd77a Merge pull request #31 from nuimk/master
Return correct exit status in ovpn_getclient script
2015-02-23 16:52:38 -08:00
Nui Narongwet
e959dca048 Return correct exit status 2015-02-21 02:46:50 +07:00
Kyle Manna
862aa19017 README: Add missing newline
* Fixes rendering issue on Docker Hub.
* If only all the Markdown renders worked the same...
2015-02-10 08:48:28 -08:00
Kyle Manna
5eb8c4b054 docs: Add FAQs document
* Place to put questions rather then the README
2015-02-07 15:10:24 -08:00
Kyle Manna
1940434447 README: Add links to upstream
* Link back to upstream to make it simpler to hop around.
2015-02-07 15:00:19 -08:00
Kyle Manna
4cd6f89a5a README: Add Benefits section
* Write-up the benefits from a comment on the DO tutorial.
2015-02-07 15:00:19 -08:00
Kyle Manna
7f2ae880d5 README: Add link to DO Tutorial
* Add a link to the Digital Ocean tutorial I wrote up some time ago.
2015-02-07 15:00:19 -08:00
Kyle Manna
06aee5bc37 Merge pull request #28 from omriiluz/master
Include optional configuration options
2015-01-17 18:14:35 -08:00
omriiluz
1cb38ce146 Support client mtu push 2015-01-17 01:07:52 -08:00
Omri Iluz
3eeee022fd Create NAT if OVPN_NAT is set (flag -N) 2015-01-17 01:00:18 -08:00
Omri Iluz
1e2418ae37 Control external NAT creation 2015-01-17 00:56:46 -08:00
Omri Iluz
97f231b4e7 Control default DNS push with -D flag 2015-01-17 00:56:21 -08:00
Omri Iluz
bf50da4ee2 Remove hard coded DNS push.
TODO: control with cmdline option
2015-01-16 03:36:47 -08:00
Kyle Manna
f6b177df4e README: Update DO link to $5/mo page
* Update DO link to $5/mo pricing page.  Makes it easier to compare to
  standalone VPN providers.
2015-01-13 14:43:59 -08:00
Kyle Manna
b8de403958 README: Remove port on genconfig line
* The internal port is always 1194 in the container since f1e85c959
* Users wanting to operate on a different public port should change the
  `ovpn_run` line to do the the appropriate thing with `-p` argument.
2015-01-13 14:27:24 -08:00
Jimmy Wong
31a8584685 Run daemon as nobody 2015-01-01 22:57:28 -08:00
Kyle Manna
384beb888a README: Miscellaneous Fixes
* Fix typo and grammar
2015-01-01 22:57:19 -08:00
Kyle Manna
52725702e2 init: Add upstart init file
* Add an Upstart init file to reliably start and stop the container.
2014-12-15 16:01:07 -08:00
Kyle Manna
8cd45f1139 Merge pull request #22 from ZackAdams/master
Fixed SIGTERM handling
2014-12-10 08:22:37 -08:00
Zack Adams
73c206d14a Fixed SIGTERM handling 2014-12-10 10:36:00 -05:00
Kyle Manna
bfb896f716 Merge pull request #21 from flecno/master
no connection block in client config
2014-12-08 13:33:48 -08:00
Timo Zingel
f2148d99ae no connection block in client config 2014-12-08 21:07:46 +01:00
Kyle Manna
473671a4d0 Dockerfile: Shallow clone EasyRSA v3
* Do a shallow clone for a smaller checkout
* Condense multiple run lines to a single RUN line for a flatter image.
2014-12-05 14:07:00 -08:00
Kyle Manna
19f4c5cde4 Dockerfile: Clean-up after apt operations
* Delete old files to keep the image lean.
2014-12-05 13:55:53 -08:00
Kyle Manna
17ef8cebfc docs: advanced: Fix typo
* ... and feed the grammar Nazi
2014-11-16 10:06:04 -08:00
Kyle Manna
f07e4ad531 README: Remove mention of only UDP support
* This was fixed a while ago
  * 9951ca6ca2
* Closes #15
2014-11-16 10:01:59 -08:00
Kyle Manna
656be240b6 README: Add Digital Ocean reference
* Include promo code, because why not?
2014-10-29 08:06:31 -07:00
Kyle Manna
b06631099f Merge pull request #12 from compressed/dup_iptables
avoid dup iptables rules
2014-10-23 09:55:08 -07:00
Christopher Brickley
be22048a2b avoid dup iptables rules 2014-10-23 09:16:51 -04:00
Kyle Manna
f05de3eb84 README: Fix Markdown indent
* Indent to get pre-formatted code box.
2014-10-06 22:34:27 -07:00
Kyle Manna
543292e124 Merge pull request #10 from adrianolek/patch-1
Use --cap-add=NET_ADMIN instead of --privileged
2014-10-06 22:22:30 -07:00
Adrian Olek
8c7d020074 Use --cap-add=NET_ADMIN instead of --privileged
Ovpn doesn't need all the capabilities.
https://docs.docker.com/reference/run/#runtime-privilege-linux-capabilities-and-lxc-configuration says:
For interacting with the network stack, instead of using --privileged they should use --cap-add=NET_ADMIN to modify the network interfaces.
2014-10-06 20:09:23 +02:00
Kyle Manna
a69ca8d65e Merge pull request #8 from disassembler/master
fixing regexp to allow dashes in OVPN_SERVER_URL
2014-08-17 12:53:31 -07:00
Samuel Leathers
f1616f7196 fixing regexp to allow dashes in OVPN_SERVER_URL 2014-08-16 22:32:16 -04:00
Kyle Manna
d36bb7ecba getclient: Do not autogenerate key
* Do not autogenerate a key if it does not exist.  Instead fail.
* Requires users to explicitly generate keys and prevents generating
  erroneous keys in the event of a typo.
2014-07-10 09:55:06 -07:00
Kyle Manna
76a230b3be Merge branch 'docs' 2014-07-09 12:24:30 -07:00
Kyle Manna
5fd47763d7 README: Add --rm to init steps
* Don't need these containers to stick around polluting docker.
2014-07-09 12:23:48 -07:00
Kyle Manna
37f86037d8 advanced: Add advanced configs
* Copy paste stuff for using host mounted volumes
2014-07-09 12:21:50 -07:00
Kyle Manna
e9c5108a8f debug: Add mention of shells
* Very useful for getting in a running container or fix a data volume.
2014-07-09 12:21:38 -07:00
Kyle Manna
816eff9af6 docs: openvpn-data -> $OVPN_DATA
* Easier to work with.
2014-07-09 12:09:27 -07:00
Kyle Manna
c38b412dc6 Merge branch 'private_subnet'
Closes #5
2014-07-09 11:10:54 -07:00
Kyle Manna
b9cc5b347a genconfig: Convert OVPN_ROUTES to array
* Convert to an array to simplify the code.
* This breaks running `ovpn_genconfig` multiple times with the same
  route argument as the array will just grow.  This needs to be fixed in
  the future.
* Recommended way to work around this is to remove ovpn_env.sh.
2014-07-09 11:06:02 -07:00
Kyle Manna
20be0f90a5 genconfig: Add push support
* Add ability to specify push commands with `-p` argument.
2014-07-09 10:55:02 -07:00