Simple web UI to manage OpenVPN users.
Go to file
Dmitry Shurupov e7eb841805
Adding Features & small fixes
2021-03-17 16:27:08 +07:00
.github/workflows Renaming to ovpn-admin 2021-03-17 16:05:37 +07:00
frontend Renaming to ovpn-admin 2021-03-17 16:05:37 +07:00
setup bugfix for opvn status date layout 2021-02-20 18:46:30 +03:00
templates Refactoring; docs; embeded frontend; fixes 2021-02-26 15:11:13 +03:00
.dockerignore Renaming to ovpn-admin 2021-03-17 16:05:37 +07:00
.gitignore Renaming to ovpn-admin 2021-03-17 16:05:37 +07:00
Dockerfile Renaming to ovpn-admin 2021-03-17 16:05:37 +07:00
Dockerfile.openvpn Additional password auth; Multiple mgmt interface usgae; Fixes; style changes; 2021-02-20 15:48:41 +03:00
LICENSE Initial commit 2020-05-15 02:09:31 +03:00
README.md Adding Features & small fixes 2021-03-17 16:27:08 +07:00
bootstrap.sh Refactoring; docs; embeded frontend; fixes 2021-02-26 15:11:13 +03:00
build.sh Renaming to ovpn-admin 2021-03-17 16:05:37 +07:00
docker-compose-slave.yaml Renaming to ovpn-admin 2021-03-17 16:05:37 +07:00
docker-compose.yaml Renaming to ovpn-admin 2021-03-17 16:05:37 +07:00
go.mod Renaming to ovpn-admin 2021-03-17 16:05:37 +07:00
go.sum Refactoring; docs; embeded frontend; fixes 2021-02-26 15:11:13 +03:00
helpers.go Code refactoring to singleton; Added metrics 2020-11-27 10:23:59 +03:00
main.go Renaming to ovpn-admin 2021-03-17 16:05:37 +07:00
start-with-slave.sh Addded master-slave mode for openvpn-admin 2020-11-17 20:48:26 +03:00
start.sh Addded master-slave mode for openvpn-admin 2020-11-17 20:48:26 +03:00
werf.yaml Renaming to ovpn-admin 2021-03-17 16:05:37 +07:00

README.md

ovpn-admin

Simple Web UI to manage OpenVPN users, their certificates & routes.

Features

  • Adding users (generating certificates for them);
  • Revoking/restoring users certificates;
  • Generating ready-to-user config files;
  • Providing metrics for Prometheus, including certifications expiration date, number of (connected/total) users, information about connected users;
  • (optionally) Specifying CCD (client-config-dir) for each user;
  • (optionally) Operating in a master/slave mode (syncing certs & CCD with other server);
  • (optionally) Specifying/changing password for additional authorization in OpenVPN.

Install

Disclaimer

This tool uses external calls for bash, core-utils and easyrsa, thus Linux systems only are supported at the moment.

Docker

There is a ready-to-use docker-compose.yaml, so you can just change/add values you need and start it with start.sh.

Requirements. You need Docker and docker-compose installed.

Commands to execute:

git clone https://github.com/flant/ovpn-admin.git
cd ovpn-admin
./start.sh

Building from source

Requirements. You need Linux with the following components installed:

Commands to execute:

git clone https://github.com/flant/ovpn-admin.git
cd ovpn-admin
./bootstrap.sh
./build.sh
 ./ovpn-admin 

(Please don't forgot to configure all needed params in advance.)

Prebuilt binary (WIP)

You can also use prebuilt binary from releases page — just download a tar.gz file.

Usage

usage: ovpn-admin [<flags>]

Flags:
  --help                       Show context-sensitive help (also try --help-long and --help-man).
  --listen.host="0.0.0.0"      host for ovpn-admin
  --listen.port="8080"         port for ovpn-admin
  --role="master"              server role master or slave
  --master.host="http://127.0.0.1"  
                               url for master server
  --master.basic-auth.user=""  user for basic auth on master server url
  --master.basic-auth.password=""  
                               password for basic auth on master server url
  --master.sync-frequency=600  master host data sync frequency in seconds.
  --master.sync-token=TOKEN    master host data sync security token
  --ovpn.network="172.16.100.0/24"  
                               network for openvpn server
  --ovpn.server=HOST:PORT:PROTOCOL ...  
                               comma separated addresses for openvpn servers
  --mgmt=main=127.0.0.1:8989 ...  
                               comma separated (alias=address) for openvpn servers mgmt interfaces
  --metrics.path="/metrics"    URL path for surfacing collected metrics
  --easyrsa.path="./easyrsa/"  path to easyrsa dir
  --easyrsa.index-path="./easyrsa/pki/index.txt"  
                               path to easyrsa index file.
  --ccd                        Enable client-config-dir.
  --ccd.path="./ccd"           path to client-config-dir
  --auth.password              Enable additional password authorization.
  --auth.db="./easyrsa/pki/users.db"  
                               Database path fort password authorization.
  --debug                      Enable debug mode.
  --verbose                    Enable verbose mode.
  --version                    Show application version.

Further information

Please feel free to use issues and discussions to get help from maintainers & community.