1
0
Fork 0
mirror of synced 2024-11-17 22:45:34 -05:00
ovpn-admin/.werffiles/configure.sh

34 lines
920 B
Bash
Raw Normal View History

2020-10-15 12:12:31 -04:00
#!/bin/bash
2020-10-29 06:50:19 -04:00
set -x
2020-10-15 12:12:31 -04:00
EASY_RSA_LOC="/etc/openvpn/easyrsa"
SERVER_CERT="${EASY_RSA_LOC}/pki/issued/server.crt"
cd $EASY_RSA_LOC
if [ -e "$SERVER_CERT" ]; then
echo "found existing certs - reusing"
else
easyrsa init-pki
2020-10-29 06:50:19 -04:00
cp -R /usr/share/easy-rsa/* $EASY_RSA_LOC/pki
echo "ca" | easyrsa build-ca nopass
2020-10-15 12:12:31 -04:00
easyrsa build-server-full server nopass
easyrsa gen-dh
openvpn --genkey --secret ./pki/ta.key
fi
easyrsa gen-crl
iptables -t nat -A POSTROUTING -s 172.16.100.0/255.255.255.0 ! -d 172.16.100.0/255.255.255.0 -j MASQUERADE
mkdir -p /dev/net
if [ ! -c /dev/net/tun ]; then
mknod /dev/net/tun c 10 200
fi
cp -f /etc/openvpn/setup/openvpn.conf /etc/openvpn/openvpn.conf
[ -d $EASY_RSA_LOC/pki ] && chmod 755 $EASY_RSA_LOC/pki
[ -f $EASY_RSA_LOC/pki/crl.pem ] && chmod 644 $EASY_RSA_LOC/pki/crl.pem
2020-10-15 12:12:31 -04:00
2020-10-29 06:50:19 -04:00
mkdir -p /etc/openvpn/ccd
2020-10-15 12:12:31 -04:00
openvpn --config /etc/openvpn/openvpn.conf --client-config-dir /etc/openvpn/ccd