It will recreate all local config and re-generate the client file on each headless run. It will only install and regenerate the Easy-RSA PKI if it doesn't already exist, and it will only install OpenVPN and other upstream dependencies if OpenVPN isn't already installed. by a state provisioner like Ansible/Terraform/Salt/Chef/Puppet. The headless install is more-or-less idempotent, in that it has been made safe to run multiple times with the same parameters, e.g.
Password-protected clients are not supported by the headless installation method since user input is expected by Easy-RSA. You can search for them in the installQuestions() function of the script. Other variables can be set depending on your choice (encryption, compression). If the endpoint is the public IP address which it is behind, you can use ENDPOINT=$(curl -4 ) (the script will default to this). If the server is behind NAT, you can specify its endpoint with the ENDPOINT variable. If you want to customise your installation, you can export them or specify them on the same line, as shown above. without waiting for user input, in an automated manner.Ī default set of variables will then be set, by passing the need for user input. It's also possible to run the script headless, e.g. My time is not available for free just for you, you're not special. Other people may be able to help and in the future, other users may also run into the same issue as you. The only place to get help is the issues. PLEASE do not send me emails or private messages asking for help. Please read everything before opening an issue.
If you have any question, head to the FAQ first. Download them from your server and connect using your favorite OpenVPN client. These are the client configuration files. When OpenVPN is installed, you can run the script again, and you will get the choice to: The first time you run it, you'll have to follow the assistant and answer a few questions to setup your VPN server. You need to run the script as root and have the TUN module enabled.
0 kommentar(er)
