- Notifications
You must be signed in to change notification settings - Fork1
This is a OpenVPN CLI-frontend, which makes it easy to setup and manage a OpenVPN server.
License
denialofsandwich/very-easy-rsa
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
This is a OpenVPN frontend, which makes it ridiculously easy to setup and manage a OpenVPN server.
IMPORTANT I tested it on Debian 9 only.
To install this script, clone the repository:
git clone https://github.com/denialofsandwich/very-easy-rsa.git
Executesetup.sh
and edit the new configuration located in/etc/versa/config.sh
If everything is properly configured, install OpenVPN with:
versa install
This process is completely automated and should take some time.After that, you should restart your session to take advantage of the bash-completion feature.
Adding a new user is fairly easy:
versa useradd peter
Just enter a password, an optional IP and the permissions that should be granted to the user.Take the following groups if the user should be an admin:gateway,admin
//Note that there are no whitespaces in between!And just takegateway
if it is a standard user.
To remove an existing user:
versa userdel peter
versa can handle VLAN and custom vpn-configs via a groupsystem.You can define your own groups in your configuration file.
Access-groups grant permissions to a user.Example: If a user is in the access-groupgateway
, it now has permissions to access the internet via the VPN.
The following default access-groups are available:
- gateway (Grants permissions to reach the internet via VPN)
- admin (Grants permissions to reach everything in the VPN (excluding the gateway))
- server (Grants permissions to reach everything on the vpn-server)
- gaming (Everyone who is in the access-group gaming, can reach every client who is in the target-group gaming)
- infrastructure (same as gaming)
Target-groups are used to mark a collective of clients.Example:
User | Access | Target |
---|---|---|
Tom | gaming | gaming |
James | gaming | |
Paul | gaming |
- Tom can reach Paul
- James can reach Tom and Paul
- Paul cannot reach anyone
Just typeversa
in the terminal to get a list of all available commands.