Public » Linux

NAME=server; DIR=/usr/src/openvpn; \
apt-get install -y openvpn easy-rsa; \
make-cadir /${DIR}/${NAME}; \
nano /${DIR}/${NAME}/vars;

cd /${DIR}/${NAME}/; \
./easyrsa init-pki; \
./easyrsa build-ca nopass; \
./easyrsa build-server-full server nopass; \
./easyrsa gen-dh; \
mkdir -p /var/log/openvpn/${NAME}/; \
\
rsync -avz -e ssh jadmin@deploy.justnet.pl:storage/baseconfig/openvpn/ /; \
\
mv /etc/openvpn/server/server /etc/openvpn/server/${NAME} ; \
mv /etc/openvpn/server/server.conf /etc/openvpn/server/${NAME}.conf; \
cp /${DIR}/${NAME}/pki/{ca.crt,dh.pem,issued/server.crt,private/server.key} /etc/openvpn/server/${NAME}/pki/; \
echo "config ${NAME}/routes.conf" >> /etc/openvpn/server/${NAME}.conf; \
sed -i "s/_LOCAL_IP_/`hostname`/" /etc/openvpn/server/${NAME}.conf; \
sed -i "s/_SERVER_/${NAME}/" /etc/openvpn/server/${NAME}.conf; \
systemctl enable openvpn-server@${NAME}; \

1. Plik pobierany przez rsync z deploy.justnet.pl załącza openvpn.tar.gz.
2. Pamiętać poprawić klasę adresową IP dla VPN w plikach:
   1. /etc/openvpn/server/${NAME}.conf;
   2. /etc/network/interfaces.d/tun16
3. Certyfikaty klienckie generujemy poleceniem

   ./easyrsa build-client-full imie.nazwisko nopass