Choice to use a self-hosted resolver with Unbound (supports already existing Unbound installations).Variety of DNS resolvers to be pushed to the clients.OpenVPN 2.4 features, mainly encryption improvements (see Security and Encryption below).Customisable encryption settings, enhanced default settings (see Security and Encryption below).If needed, the script can cleanly remove OpenVPN, including configuration and iptables rules.Iptables rules and forwarding managed in a seamless way.Installs and configures a ready-to-use OpenVPN server.#!/bin/bash export MENU_OPTION= '1 ' export CLIENT= 'foo ' export PASS= '1 ' The following Bash script adds a new user foo to an existing OpenVPN configuration Here, the key is to provide the (string) value of the MENU_OPTION variable along with the remaining mandatory variables before invoking the script. It's also possible to automate the addition of a new user. It will recreate all local config and re-generate the client file on each headless run. It will only install and regenerate the Easy-RSA PKI if it doesn't already exist, and it will only install OpenVPN and other upstream dependencies if OpenVPN isn't already installed. by a state provisioner like Ansible/Terraform/Salt/Chef/Puppet.

The headless install is more-or-less idempotent, in that it has been made safe to run multiple times with the same parameters, e.g. Password-protected clients are not supported by the headless installation method since user input is expected by Easy-RSA. You can search for them in the installQuestions() function of the script. Other variables can be set depending on your choice (encryption, compression). If the endpoint is the public IP address which it is behind, you can use ENDPOINT=$(curl -4 ) (the script will default to this). If the server is behind NAT, you can specify its endpoint with the ENDPOINT variable. If you want to customise your installation, you can export them or specify them on the same line, as shown above. without waiting for user input, in an automated manner.Ī default set of variables will then be set, by passing the need for user input. It's also possible to run the script headless, e.g. My time is not available for free just for you, you're not special. Other people may be able to help and in the future, other users may also run into the same issue as you. The only place to get help is the issues. PLEASE do not send me emails or private messages asking for help. Please read everything before opening an issue.

If you have any question, head to the FAQ first. Download them from your server and connect using your favorite OpenVPN client. These are the client configuration files. When OpenVPN is installed, you can run the script again, and you will get the choice to: The first time you run it, you'll have to follow the assistant and answer a few questions to setup your VPN server. You need to run the script as root and have the TUN module enabled.

Ubuntu 16 install git