mirror of
https://github.com/vimagick/dockerfiles
synced 2024-06-28 09:41:20 +00:00
96 lines
1.8 KiB
Markdown
96 lines
1.8 KiB
Markdown
OpenVPN
|
|
=======
|
|
|
|
[OpenVPN][1] is blocked in China. You need to connect vpn via secure tunnel.
|
|
|
|
Instead of using [fteproxy][2] as bridge, you can also use [stunnel][3].
|
|
|
|
- server: vpn.easypi.info
|
|
- bridge: bridge.easypi.info
|
|
- client: localhost
|
|
|
|
## docker-compose.yml (server)
|
|
|
|
```yaml
|
|
openvpn:
|
|
image: vimagick/openvpn
|
|
ports:
|
|
- "1194:1194"
|
|
volumes:
|
|
- ./data:/etc/openvpn
|
|
cap_add:
|
|
- NET_ADMIN
|
|
restart: always
|
|
|
|
fteproxy:
|
|
image: vimagick/fteproxy
|
|
ports:
|
|
- "4911:4911"
|
|
links:
|
|
- openvpn
|
|
environment:
|
|
- MODE=server
|
|
- SERVER_IP=0.0.0.0
|
|
- SERVER_PORT=4911
|
|
- PROXY_IP=openvpn
|
|
- PROXY_PORT=1194
|
|
- KEY=CB2FBA2BC70490526E749E01BB050F6B555964290DFF58CF24785B4A093F7B18
|
|
restart: always
|
|
```
|
|
|
|
## docker-compose.yml (bridge)
|
|
|
|
```yaml
|
|
fteproxy:
|
|
image: vimagick/fteproxy
|
|
ports:
|
|
- "1194:1194"
|
|
environment:
|
|
- MODE=client
|
|
- SERVER_IP=vpn.easypi.info
|
|
- SERVER_PORT=4911
|
|
- CLIENT_IP=0.0.0.0
|
|
- CLIENT_PORT=1194
|
|
- KEY=CB2FBA2BC70490526E749E01BB050F6B555964290DFF58CF24785B4A093F7B18
|
|
restart: always
|
|
```
|
|
|
|
## Server Setup
|
|
|
|
```bash
|
|
$ ./setup.sh
|
|
1) server ...... (Step 1)
|
|
2) client ...... (Step 2)
|
|
3) revoke
|
|
4) quit ...... (Step 3)
|
|
|
|
$ docker-compose up -d
|
|
```
|
|
|
|
## Bridge Setup
|
|
|
|
```bash
|
|
$ docker-compose up -d
|
|
```
|
|
|
|
## Client Setup
|
|
|
|
```bash
|
|
$ cat /etc/openvpn/client.conf
|
|
...
|
|
remote bridge.easypi.info 1194 tcp
|
|
route 192.168.1.0 255.255.255.0 net_gateway
|
|
...
|
|
$ systemctl start openvpn@client
|
|
$ systemctl enable openvpn@client
|
|
```
|
|
|
|
## References
|
|
|
|
- <https://community.openvpn.net/openvpn/wiki>
|
|
- <https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-16-04>
|
|
|
|
[1]: https://openvpn.net/index.php/open-source.html
|
|
[2]: https://github.com/vimagick/dockerfiles/tree/master/fteproxy
|
|
[3]: https://github.com/vimagick/dockerfiles/tree/master/stunnel
|