From 9a1e586d2d0aa59de300f71246f25307cbef89e8 Mon Sep 17 00:00:00 2001 From: PanagiotisKlironomos <73659518+PanagiotisKlironomos@users.noreply.github.com> Date: Fri, 22 Jan 2021 17:18:06 +0200 Subject: [PATCH] Add files via upload --- 4)VPN/connect.sh | 1 + 4)VPN/create-user.sh | 6 ++++++ 4)VPN/create-vpn.sh | 47 ++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 54 insertions(+) create mode 100644 4)VPN/connect.sh create mode 100644 4)VPN/create-user.sh create mode 100644 4)VPN/create-vpn.sh diff --git a/4)VPN/connect.sh b/4)VPN/connect.sh new file mode 100644 index 0000000..3d90024 --- /dev/null +++ b/4)VPN/connect.sh @@ -0,0 +1 @@ +sudo openvpn --config PanosSwarmUser.ovpn \ No newline at end of file diff --git a/4)VPN/create-user.sh b/4)VPN/create-user.sh new file mode 100644 index 0000000..4953df7 --- /dev/null +++ b/4)VPN/create-user.sh @@ -0,0 +1,6 @@ +USERNAME=PanosSwarmUser +vpn_data=$PWD/openvpn-services/ +docker=registry.vlabs.uniwa.gr:5080/myownvpn + +docker run -v $vpn_data:/etc/openvpn --rm -it $docker easyrsa build-client-full $USERNAME nopass +docker run -v $vpn_data:/etc/openvpn --log-driver=none --rm $docker ovpn_getclient $USERNAME > $USERNAME.ovpn \ No newline at end of file diff --git a/4)VPN/create-vpn.sh b/4)VPN/create-vpn.sh new file mode 100644 index 0000000..ae35b2d --- /dev/null +++ b/4)VPN/create-vpn.sh @@ -0,0 +1,47 @@ +#!/bin/bash +IP=127.0.0.1 # Server IP +P=1194 # Server Port +OVPN_SERVER='10.80.0.0/16' # VPN Network + +#vpn_data=/var/lib/swarmlab/openvpn/openvpn-services/ # Dir to save data ** this must exist ** +vpn_data=$PWD/openvpn-services/ +if [ ! -d $vpn_data ]; then + mkdir -p $vpn_data +fi + +NAME=panos-vpn-services # name of docker service +DOCKERnetwork=panos-vpn-services-network # docker network +docker=registry.vlabs.uniwa.gr:5080/myownvpn # docker image + +docker stop $NAME #stop container +sleep 1 +docker container rm $NAME #rm container + +# rm config files +rm -f $vpn_data/openvpn.conf.*.bak +rm -f $vpn_data/openvpn.conf +rm -f $vpn_data/ovpn_env.sh.*.bak +rm -f $vpn_data/ovpn_env.sh + +# create network +sleep 1 +docker network create --attachable=true --driver=bridge --subnet=172.50.0.0/16 --gateway=172.50.0.1 $DOCKERnetwork + +#run container see ovpn_genconfig +docker run --net=none -it -v $vpn_data:/etc/openvpn -p 1194:1194 --rm $docker ovpn_genconfig -u udp://$IP:1194 \ +-N -d -c -p "route 172.50.20.0 255.255.255.0" -e "topology subnet" -s $OVPN_SERVER + +# create pki see ovpn_initpki +docker run --net=none -v $vpn_data:/etc/openvpn --rm -it $docker ovpn_initpki + +# see ovpn_copy_server_files +#docker run --net=none -v $vpn_data:/etc/openvpn --rm $docker ovpn_copy_server_files + +#create vpn see --cap-add=NET_ADMIN +sleep 1 +docker run --detach --name $NAME -v $vpn_data:/etc/openvpn --net=$DOCKERnetwork --ip=172.50.0.2 -p $P:1194/udp --cap-add=NET_ADMIN $docker + +sudo sysctl -w net.ipv4.ip_forward=1 + +#show created +docker ps \ No newline at end of file