cutemeli/server
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

removed /etc and /opt

Browse Source
This commit is contained in:
cutemeli
2025-12-22 10:48:14 +00:00
parent 5ce7ca2c5d
commit 10d1afbb17
32559 changed files with 0 additions and 6756692 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
opt/openvpn/config/crl.pem
View File

@@ -1,12 +0,0 @@
-----BEGIN X509 CRL-----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-----END X509 CRL-----

30
opt/openvpn/config/openvpn.conf
View File

@@ -1,30 +0,0 @@
server 192.168.255.0 255.255.255.0
verb 3
key /etc/openvpn/pki/private/vpn.cutemeli.com.key
ca /etc/openvpn/pki/ca.crt
cert /etc/openvpn/pki/issued/vpn.cutemeli.com.crt
dh /etc/openvpn/pki/dh.pem
tls-auth /etc/openvpn/pki/ta.key
key-direction 0
keepalive 10 60
persist-key
persist-tun
proto udp
# Rely on Docker to do port mapping, internally always 1194
port 1194
dev tun0
status /tmp/openvpn-status.log
user nobody
group nogroup
comp-lzo no
### Route Configurations Below
route 192.168.254.0 255.255.255.0
### Push Configurations Below
push "block-outside-dns"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "comp-lzo no"

25
opt/openvpn/config/ovpn_env.sh
View File

@@ -1,25 +0,0 @@
declare -x OVPN_AUTH=
declare -x OVPN_CIPHER=
declare -x OVPN_CLIENT_TO_CLIENT=
declare -x OVPN_CN=vpn.cutemeli.com
declare -x OVPN_COMP_LZO=0
declare -x OVPN_DEFROUTE=1
declare -x OVPN_DEVICE=tun
declare -x OVPN_DEVICEN=0
declare -x OVPN_DISABLE_PUSH_BLOCK_DNS=0
declare -x OVPN_DNS=1
declare -x OVPN_DNS_SERVERS=([0]="8.8.8.8" [1]="8.8.4.4")
declare -x OVPN_ENV=/etc/openvpn/ovpn_env.sh
declare -x OVPN_EXTRA_CLIENT_CONFIG=()
declare -x OVPN_EXTRA_SERVER_CONFIG=()
declare -x OVPN_FRAGMENT=
declare -x OVPN_KEEPALIVE='10 60'
declare -x OVPN_MTU=
declare -x OVPN_NAT=0
declare -x OVPN_PORT=1194
declare -x OVPN_PROTO=udp
declare -x OVPN_PUSH=()
declare -x OVPN_ROUTES=([0]="192.168.254.0/24")
declare -x OVPN_SERVER=192.168.255.0/24
declare -x OVPN_SERVER_URL=udp://vpn.cutemeli.com
declare -x OVPN_TLS_CIPHER=

20
opt/openvpn/config/pki/ca.crt
View File

@@ -1,20 +0,0 @@
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

87
opt/openvpn/config/pki/certs_by_serial/4F5371A9C8997997FDBD2666E47FC36E.pem
View File

@@ -1,87 +0,0 @@
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:53:71:a9:c8:99:79:97:fd:bd:26:66:e4:7f:c3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=vpn.cutemeli.com
Validity
Not Before: Oct 5 19:05:34 2025 GMT
Not After : Jan 8 19:05:34 2028 GMT
Subject: CN=vpn.cutemeli.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:64:3d:5a:11:d8:4b:0d:df:e5:24:d3:db:3f:
74:af:0f:fd:67:27:72:74:fc:c4:ce:f5:4b:e8:89:
c1:f5:b8:77:3c:52:4f:9a:2a:e4:84:c7:1e:e5:3c:
37:c5:36:6a:b1:92:52:5a:e2:3e:fe:2e:b2:ef:ad:
78:7a:16:0c:19:a3:43:95:7f:28:d5:7d:78:d7:7a:
17:51:25:4b:ab:8b:6a:aa:1d:93:11:6d:11:4f:f6:
ab:5c:62:4a:f4:f6:89:40:c0:52:3c:da:c8:a6:49:
59:be:3b:f8:dd:8c:5e:7a:a7:eb:3f:99:a9:f0:09:
0f:c7:f0:b5:53:57:94:1f:33:bd:ca:ab:70:0c:ec:
dc:13:46:64:ef:60:d9:28:43:f3:29:cf:62:40:fc:
5e:4d:d3:96:79:df:e0:c0:6d:94:fb:ea:f4:c2:c4:
2c:02:dd:5e:96:c7:5f:95:d5:4b:87:fd:46:24:e6:
76:bc:19:61:f4:74:bd:61:ed:f3:c8:43:f1:6d:70:
d0:87:18:7b:6f:3a:f1:ad:63:64:92:80:21:c8:99:
95:fd:b1:d9:4a:9b:c0:66:cf:c9:57:da:f7:e8:8c:
85:a1:61:57:d9:a3:3d:47:3b:f2:41:19:2a:80:fd:
f8:bc:12:0b:59:90:f7:e1:31:c7:ad:a6:17:1c:35:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
27:9C:FF:28:4F:C7:B2:CC:32:22:F6:A7:B4:A7:F9:59:14:7A:94:3D
X509v3 Authority Key Identifier:
keyid:9F:C1:86:61:DB:21:6D:CF:5C:85:07:C9:2A:7C:2C:E4:84:EC:AF:69
DirName:/CN=vpn.cutemeli.com
serial:1C:9E:BC:0F:3C:EE:92:9A:15:73:24:73:F7:90:0E:69:15:F0:E1:FE
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Digital Signature, Key Encipherment
X509v3 Subject Alternative Name:
DNS:vpn.cutemeli.com
Signature Algorithm: sha256WithRSAEncryption
76:ad:b7:b3:8e:c9:4e:41:65:71:9c:a1:74:c2:0e:f9:ae:a0:
a0:43:3f:3c:2c:55:3c:56:37:85:e5:c3:49:ff:17:e0:ad:33:
b3:57:a1:32:e5:ac:4e:58:03:04:09:d5:81:47:b2:41:c3:35:
de:72:53:5d:5f:8b:97:e3:5e:4c:18:87:f0:f7:c5:8e:7b:e1:
71:e8:75:d6:53:8e:ac:1c:d8:4b:5f:54:90:26:78:a6:8b:bf:
af:e9:c0:bd:27:83:41:84:45:28:83:cc:ed:ef:ed:9e:5b:44:
30:53:b3:d2:10:46:bc:41:c9:65:81:c3:11:e8:e8:5c:98:6e:
5c:53:55:e8:8f:d4:a0:dc:31:a8:1e:1b:41:b2:0c:bb:17:5c:
c5:6b:7e:6f:a2:d5:31:15:c6:b2:05:3d:a6:8e:6a:bc:4a:a7:
25:56:bc:62:73:72:d4:22:de:fe:44:b4:25:a5:74:35:92:ab:
e3:06:9e:70:cf:06:3b:5f:d7:ac:ca:7a:ba:c6:44:2b:d4:dd:
8d:d4:59:26:aa:7d:a0:f5:75:9a:93:2c:6f:e4:36:78:03:ab:
12:15:d1:dc:90:29:55:93:f9:1e:24:9f:81:6a:36:d7:c7:06:
e1:b0:ab:16:60:69:9a:92:1e:66:a2:4b:14:dd:06:58:c4:43:
f7:c2:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

12
opt/openvpn/config/pki/crl.pem
View File

@@ -1,12 +0,0 @@
-----BEGIN X509 CRL-----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-----END X509 CRL-----

8
opt/openvpn/config/pki/dh.pem
View File

@@ -1,8 +0,0 @@
-----BEGIN DH PARAMETERS-----
MIIBCAKCAQEApWV1jUjSfUslaYk7ZDHdZ9sMRmEuyq3nOXDFq7xABOQdss+rYa7P
3qE3rLF7Qo+TQJD1eW9vj4h76QN0w4HTdlOQaOv0qkAbI5+DJWK7hY0m00rc02gh
JQu9tEinCpdCr9q7GGYmHMQNuWQ+jCxWPzlob8mpZzt9JB0JUCmEdKAl4zINtGbt
m959vPWbajtSgWbI8MiyXVL4iEH2EOHgEynfxsKdVAbd6fp/YXVsxHn7SPObe8Et
vKsEksNu8kGCKDos09/FYXzrOIpIyjqJFGT6Yct5u1eKvfKvd66D02FavPsd8zZc
AD4R4bbx9qCJsN5MiTprA4R9aXPfqi02IwIBAg==
-----END DH PARAMETERS-----

1
opt/openvpn/config/pki/index.txt
View File

@@ -1 +0,0 @@
V 280108190534Z 4F5371A9C8997997FDBD2666E47FC36E unknown /CN=vpn.cutemeli.com

1
opt/openvpn/config/pki/index.txt.attr
View File

@@ -1 +0,0 @@
unique_subject = no

0
opt/openvpn/config/pki/index.txt.attr.old
View File

0
opt/openvpn/config/pki/index.txt.old
View File

87
opt/openvpn/config/pki/issued/vpn.cutemeli.com.crt
View File

@@ -1,87 +0,0 @@
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:53:71:a9:c8:99:79:97:fd:bd:26:66:e4:7f:c3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=vpn.cutemeli.com
Validity
Not Before: Oct 5 19:05:34 2025 GMT
Not After : Jan 8 19:05:34 2028 GMT
Subject: CN=vpn.cutemeli.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:64:3d:5a:11:d8:4b:0d:df:e5:24:d3:db:3f:
74:af:0f:fd:67:27:72:74:fc:c4:ce:f5:4b:e8:89:
c1:f5:b8:77:3c:52:4f:9a:2a:e4:84:c7:1e:e5:3c:
37:c5:36:6a:b1:92:52:5a:e2:3e:fe:2e:b2:ef:ad:
78:7a:16:0c:19:a3:43:95:7f:28:d5:7d:78:d7:7a:
17:51:25:4b:ab:8b:6a:aa:1d:93:11:6d:11:4f:f6:
ab:5c:62:4a:f4:f6:89:40:c0:52:3c:da:c8:a6:49:
59:be:3b:f8:dd:8c:5e:7a:a7:eb:3f:99:a9:f0:09:
0f:c7:f0:b5:53:57:94:1f:33:bd:ca:ab:70:0c:ec:
dc:13:46:64:ef:60:d9:28:43:f3:29:cf:62:40:fc:
5e:4d:d3:96:79:df:e0:c0:6d:94:fb:ea:f4:c2:c4:
2c:02:dd:5e:96:c7:5f:95:d5:4b:87:fd:46:24:e6:
76:bc:19:61:f4:74:bd:61:ed:f3:c8:43:f1:6d:70:
d0:87:18:7b:6f:3a:f1:ad:63:64:92:80:21:c8:99:
95:fd:b1:d9:4a:9b:c0:66:cf:c9:57:da:f7:e8:8c:
85:a1:61:57:d9:a3:3d:47:3b:f2:41:19:2a:80:fd:
f8:bc:12:0b:59:90:f7:e1:31:c7:ad:a6:17:1c:35:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
27:9C:FF:28:4F:C7:B2:CC:32:22:F6:A7:B4:A7:F9:59:14:7A:94:3D
X509v3 Authority Key Identifier:
keyid:9F:C1:86:61:DB:21:6D:CF:5C:85:07:C9:2A:7C:2C:E4:84:EC:AF:69
DirName:/CN=vpn.cutemeli.com
serial:1C:9E:BC:0F:3C:EE:92:9A:15:73:24:73:F7:90:0E:69:15:F0:E1:FE
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Digital Signature, Key Encipherment
X509v3 Subject Alternative Name:
DNS:vpn.cutemeli.com
Signature Algorithm: sha256WithRSAEncryption
76:ad:b7:b3:8e:c9:4e:41:65:71:9c:a1:74:c2:0e:f9:ae:a0:
a0:43:3f:3c:2c:55:3c:56:37:85:e5:c3:49:ff:17:e0:ad:33:
b3:57:a1:32:e5:ac:4e:58:03:04:09:d5:81:47:b2:41:c3:35:
de:72:53:5d:5f:8b:97:e3:5e:4c:18:87:f0:f7:c5:8e:7b:e1:
71:e8:75:d6:53:8e:ac:1c:d8:4b:5f:54:90:26:78:a6:8b:bf:
af:e9:c0:bd:27:83:41:84:45:28:83:cc:ed:ef:ed:9e:5b:44:
30:53:b3:d2:10:46:bc:41:c9:65:81:c3:11:e8:e8:5c:98:6e:
5c:53:55:e8:8f:d4:a0:dc:31:a8:1e:1b:41:b2:0c:bb:17:5c:
c5:6b:7e:6f:a2:d5:31:15:c6:b2:05:3d:a6:8e:6a:bc:4a:a7:
25:56:bc:62:73:72:d4:22:de:fe:44:b4:25:a5:74:35:92:ab:
e3:06:9e:70:cf:06:3b:5f:d7:ac:ca:7a:ba:c6:44:2b:d4:dd:
8d:d4:59:26:aa:7d:a0:f5:75:9a:93:2c:6f:e4:36:78:03:ab:
12:15:d1:dc:90:29:55:93:f9:1e:24:9f:81:6a:36:d7:c7:06:
e1:b0:ab:16:60:69:9a:92:1e:66:a2:4b:14:dd:06:58:c4:43:
f7:c2:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

138
opt/openvpn/config/pki/openssl-easyrsa.cnf
View File

@@ -1,138 +0,0 @@
# For use with Easy-RSA 3.0+ and OpenSSL or LibreSSL
####################################################################
[ ca ]
default_ca = CA_default # The default ca section
####################################################################
[ CA_default ]
dir = $ENV::EASYRSA_PKI # Where everything is kept
certs = $dir # Where the issued certs are kept
crl_dir = $dir # Where the issued crl are kept
database = $dir/index.txt # database index file.
new_certs_dir = $dir/certs_by_serial # default place for new certs.
certificate = $dir/ca.crt # The CA certificate
serial = $dir/serial # The current serial number
crl = $dir/crl.pem # The current CRL
private_key = $dir/private/ca.key # The private key
RANDFILE = $dir/.rand # private random number file
x509_extensions = basic_exts # The extensions to add to the cert
# This allows a V2 CRL. Ancient browsers don't like it, but anything Easy-RSA
# is designed for will. In return, we get the Issuer attached to CRLs.
crl_extensions = crl_ext
default_days = $ENV::EASYRSA_CERT_EXPIRE # how long to certify for
default_crl_days= $ENV::EASYRSA_CRL_DAYS # how long before next CRL
default_md = $ENV::EASYRSA_DIGEST # use public key default MD
preserve = no # keep passed DN ordering
# This allows to renew certificates which have not been revoked
unique_subject = no
# A few different ways of specifying how similar the request should look
# For type CA, the listed attributes must be the same, and the optional
# and supplied fields are just that :-)
policy = policy_anything
# For the 'anything' policy, which defines allowed DN fields
[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
name = optional
emailAddress = optional
####################################################################
# Easy-RSA request handling
# We key off $DN_MODE to determine how to format the DN
[ req ]
default_bits = $ENV::EASYRSA_KEY_SIZE
default_keyfile = privkey.pem
default_md = $ENV::EASYRSA_DIGEST
distinguished_name = $ENV::EASYRSA_DN
x509_extensions = easyrsa_ca # The extensions to add to the self signed cert
# A placeholder to handle the $EXTRA_EXTS feature:
#%EXTRA_EXTS% # Do NOT remove or change this line as $EXTRA_EXTS support requires it
####################################################################
# Easy-RSA DN (Subject) handling
# Easy-RSA DN for cn_only support:
[ cn_only ]
commonName = Common Name (eg: your user, host, or server name)
commonName_max = 64
commonName_default = $ENV::EASYRSA_REQ_CN
# Easy-RSA DN for org support:
[ org ]
countryName = Country Name (2 letter code)
countryName_default = $ENV::EASYRSA_REQ_COUNTRY
countryName_min = 2
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = $ENV::EASYRSA_REQ_PROVINCE
localityName = Locality Name (eg, city)
localityName_default = $ENV::EASYRSA_REQ_CITY
0.organizationName = Organization Name (eg, company)
0.organizationName_default = $ENV::EASYRSA_REQ_ORG
organizationalUnitName = Organizational Unit Name (eg, section)
organizationalUnitName_default = $ENV::EASYRSA_REQ_OU
commonName = Common Name (eg: your user, host, or server name)
commonName_max = 64
commonName_default = $ENV::EASYRSA_REQ_CN
emailAddress = Email Address
emailAddress_default = $ENV::EASYRSA_REQ_EMAIL
emailAddress_max = 64
####################################################################
# Easy-RSA cert extension handling
# This section is effectively unused as the main script sets extensions
# dynamically. This core section is left to support the odd usecase where
# a user calls openssl directly.
[ basic_exts ]
basicConstraints = CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer:always
# The Easy-RSA CA extensions
[ easyrsa_ca ]
# PKIX recommendations:
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
# This could be marked critical, but it's nice to support reading by any
# broken clients who attempt to do so.
basicConstraints = CA:true
# Limit key usage to CA tasks. If you really want to use the generated pair as
# a self-signed cert, comment this out.
keyUsage = cRLSign, keyCertSign
# nsCertType omitted by default. Let's try to let the deprecated stuff die.
# nsCertType = sslCA
# CRL extensions.
[ crl_ext ]
# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
# issuerAltName=issuer:copy
authorityKeyIdentifier=keyid:always,issuer:always

30
opt/openvpn/config/pki/private/ca.key
View File

@@ -1,30 +0,0 @@
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: AES-256-CBC,A84031940768F462BF0933B3127F7EB6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-----END RSA PRIVATE KEY-----

28
opt/openvpn/config/pki/private/vpn.cutemeli.com.key
View File

@@ -1,28 +0,0 @@
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

15
opt/openvpn/config/pki/reqs/vpn.cutemeli.com.req
View File

@@ -1,15 +0,0 @@
-----BEGIN CERTIFICATE REQUEST-----
MIICYDCCAUgCAQAwGzEZMBcGA1UEAwwQdnBuLmN1dGVtZWxpLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAPJkPVoR2EsN3+Uk09s/dK8P/WcncnT8
xM71S+iJwfW4dzxST5oq5ITHHuU8N8U2arGSUlriPv4usu+teHoWDBmjQ5V/KNV9
eNd6F1ElS6uLaqodkxFtEU/2q1xiSvT2iUDAUjzayKZJWb47+N2MXnqn6z+ZqfAJ
D8fwtVNXlB8zvcqrcAzs3BNGZO9g2ShD8ynPYkD8Xk3Tlnnf4MBtlPvq9MLELALd
XpbHX5XVS4f9RiTmdrwZYfR0vWHt88hD8W1w0IcYe2868a1jZJKAIciZlf2x2Uqb
wGbPyVfa9+iMhaFhV9mjPUc78kEZKoD9+LwSC1mQ9+Exx62mFxw1Eu8CAwEAAaAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCCL7mdRd5JY4iLI8MLBrnxxUrCEF7mJVara6nh
PMGEthOQMKnvdxtaf/onuCsliSZybMtxCtog50pPQnBSf8tAVsowYf3778veUWuG
IPQbJzzmy5bqWJPQs+bm8bI0G/WEBn2veZnwgLwZpNC/6OKNv0vHPZsrE/D9jxOc
ffUSn41LJHseIOIfANJR7ddCOfB5OZVp3lJiejoKQ6F7hm1qkMO7UGUxmdeebA6t
OA+3jQ6VoJ31LyWwpo4qZNNqx7xEX4J4kac4ZTwNLVSgrS78uQq536AtIWmEQHKt
C2cEn9x5sshKY09vQKqLP+P3e0cHgdGzmGcBNOkrbNmUuZxG
-----END CERTIFICATE REQUEST-----

138
opt/openvpn/config/pki/safessl-easyrsa.cnf
View File

@@ -1,138 +0,0 @@
# For use with Easy-RSA 3.0+ and OpenSSL or LibreSSL
####################################################################
[ ca ]
default_ca = CA_default # The default ca section
####################################################################
[ CA_default ]
dir = /etc/openvpn/pki # Where everything is kept
certs = /etc/openvpn/pki # Where the issued certs are kept
crl_dir = /etc/openvpn/pki # Where the issued crl are kept
database = /etc/openvpn/pki/index.txt # database index file.
new_certs_dir = /etc/openvpn/pki/certs_by_serial # default place for new certs.
certificate = /etc/openvpn/pki/ca.crt # The CA certificate
serial = /etc/openvpn/pki/serial # The current serial number
crl = /etc/openvpn/pki/crl.pem # The current CRL
private_key = /etc/openvpn/pki/private/ca.key # The private key
RANDFILE = /etc/openvpn/pki/.rand # private random number file
x509_extensions = basic_exts # The extensions to add to the cert
# This allows a V2 CRL. Ancient browsers don't like it, but anything Easy-RSA
# is designed for will. In return, we get the Issuer attached to CRLs.
crl_extensions = crl_ext
default_days = 825 # how long to certify for
default_crl_days= 3650 # how long before next CRL
default_md = sha256 # use public key default MD
preserve = no # keep passed DN ordering
# This allows to renew certificates which have not been revoked
unique_subject = no
# A few different ways of specifying how similar the request should look
# For type CA, the listed attributes must be the same, and the optional
# and supplied fields are just that :-)
policy = policy_anything
# For the 'anything' policy, which defines allowed DN fields
[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
name = optional
emailAddress = optional
####################################################################
# Easy-RSA request handling
# We key off $DN_MODE to determine how to format the DN
[ req ]
default_bits = 2048
default_keyfile = privkey.pem
default_md = sha256
distinguished_name = cn_only
x509_extensions = easyrsa_ca # The extensions to add to the self signed cert
# A placeholder to handle the $EXTRA_EXTS feature:
#%EXTRA_EXTS% # Do NOT remove or change this line as $EXTRA_EXTS support requires it
####################################################################
# Easy-RSA DN (Subject) handling
# Easy-RSA DN for cn_only support:
[ cn_only ]
commonName = Common Name (eg: your user, host, or server name)
commonName_max = 64
commonName_default = ChangeMe
# Easy-RSA DN for org support:
[ org ]
countryName = Country Name (2 letter code)
countryName_default = US
countryName_min = 2
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = California
localityName = Locality Name (eg, city)
localityName_default = San Francisco
0.organizationName = Organization Name (eg, company)
0.organizationName_default = Copyleft Certificate Co
organizationalUnitName = Organizational Unit Name (eg, section)
organizationalUnitName_default = My Organizational Unit
commonName = Common Name (eg: your user, host, or server name)
commonName_max = 64
commonName_default = ChangeMe
emailAddress = Email Address
emailAddress_default = me@example.net
emailAddress_max = 64
####################################################################
# Easy-RSA cert extension handling
# This section is effectively unused as the main script sets extensions
# dynamically. This core section is left to support the odd usecase where
# a user calls openssl directly.
[ basic_exts ]
basicConstraints = CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer:always
# The Easy-RSA CA extensions
[ easyrsa_ca ]
# PKIX recommendations:
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
# This could be marked critical, but it's nice to support reading by any
# broken clients who attempt to do so.
basicConstraints = CA:true
# Limit key usage to CA tasks. If you really want to use the generated pair as
# a self-signed cert, comment this out.
keyUsage = cRLSign, keyCertSign
# nsCertType omitted by default. Let's try to let the deprecated stuff die.
# nsCertType = sslCA
# CRL extensions.
[ crl_ext ]
# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
# issuerAltName=issuer:copy
authorityKeyIdentifier=keyid:always,issuer:always

1
opt/openvpn/config/pki/serial
View File

@@ -1 +0,0 @@
4F5371A9C8997997FDBD2666E47FC36F

1
opt/openvpn/config/pki/serial.old
View File

@@ -1 +0,0 @@
4f5371a9c8997997fdbd2666e47fc36e

21
opt/openvpn/config/pki/ta.key
View File

@@ -1,21 +0,0 @@
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
759e4d9b39c18c08fe66e548ec3adcba
827885907fba2c3c0cc5e89990fde840
c05e68294f9b7086df4e26d6b2a0b6af
7b148ea9c35e7de69989dedc016147fe
7660e1b4e7fc7c5cc0f7643d587d01fb
ffe28361dfb5ecfba7edcd8a9ba76d22
b8d7cd52afead1eed9346bfbd0aaad51
e669b3328b51e1a200a6f00f84bd0f63
ba0032e82d82f019d170bc2273e3ecfc
ec20e46af3621fd84ddb9c00fd314f70
36d59c814840b2c65f36c04eabf27b7c
913fd885820cdbdbc2eea7ed53fcde25
359f9dc3523613a6a8d0a7682cb2c324
24c6c8edcd8922a8d8ff77868279868c
931f8fc2bf6e36bff55ee04411b03f8a
e7b57d05e9465169235b0d17d76a4e6e
-----END OpenVPN Static key V1-----

28
opt/openvpn/docker-compose.yml
View File

@@ -1,28 +0,0 @@
version: '3.8'
services:
openvpn:
image: kylemanna/openvpn
container_name: openvpn
cap_add:
- NET_ADMIN
restart: unless-stopped
ports:
- "1194:1194/udp"
volumes:
- /opt/openvpn/config:/etc/openvpn
environment:
- TZ=Europe/Berlin
ovpn-admin:
image: flant/ovpn-admin
container_name: ovpn-admin
restart: unless-stopped
ports:
- "8082:8080"
environment:
- OVPN_ADMIN_LOG_LEVEL=info
- EASYRSA_PATH=/etc/openvpn/pki
- OVPN_SERVER_URL=udp://vpn.cutemeli.com:1194
volumes:
- /opt/openvpn/config:/etc/openvpn