一键部署openvpn服务端和客户端（已写成脚本）

openvpn

容器安装

需要有docker-compse和docker

#docker和docker-compse一键脚本

#!/bin/bash
#添加DNS
echo $MASTER_IP $HOSTNAME >> /etc/hosts
DNS=`cat /etc/resolv.conf |grep 114`
DNS_LET=${#DNS}
if [[ ${DNS_LET} -eq 0 ]];then
  echo "INFO:添加DNS114.114.114.114"
  echo "nameserver 114.114.114.114 " >> /etc/resolv.conf
else
  echo ""
fi

#安装软件包
yum install -y wget yum-utils
yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
sudo sed -i 's+download.docker.com+mirrors.tuna.tsinghua.edu.cn/docker-ce+' /etc/yum.repos.d/docker-ce.repo

sudo yum install -y epel-release
sudo yum install -y conntrack ipvsadm ipset jq sysstat curl iptables libseccomp
# 调整系统 TimeZone
sudo timedatectl set-timezone Asia/Shanghai

# 将当前的 UTC 时间写入硬件时钟
sudo timedatectl set-local-rtc 0

# 重启依赖于系统时间的服务
sudo systemctl restart rsyslog
sudo systemctl restart crond
#时间同步
yum install ntpdate -y
ntpdate cn.pool.ntp.org
service crond restart
chronyc sources -v
#docker
yum install docker-ce docker-ce-cli docker-compse -y

sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": ["https://XXXXX.mirror.aliyuncs.com","https://dockerhub.azk8s.cn","http://hub-mirror.c.163.com"],
  "exec-opts": ["native.cgroupdriver=systemd"]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

openvpn安装

1.安装服务端

vim start.sh
1

#!/bin/bash
echo "输入服务端IP或者域名"
read NODE_HOST
echo "配置文件目录/绝对路径"
read CONF_PWD

#生成配置文件和私钥文件
docker run -v $CONF_PWD:/etc/openvpn --rm kylemanna/openvpn ovpn_genconfig -u tcp://$NODE_HOST
docker run -v $CONF_PWD:/etc/openvpn --rm -it kylemanna/openvpn ovpn_initpki
#启动
cat <<EOF > ./docker-compose.yaml
version: "3"
services:
  openvpn:
    image: kylemanna/openvpn
    container_name: openvpn
    volumes:
      - $CONF_PWD:/etc/openvpn
    ports:
      - "1194:1194"
    cap_add:
      - NET_ADMIN
EOF

docker-compose up -d
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

sh start.sh
#第一个选项是输入密码
#第二个是重复输入密码
#第三个任意
#第四个是输入第一次的密码
#第五个是输入第一次的密码
1
2
3
4
5
6

2.创建用户

vim create_user.sh
1

#!/bin/bash
#创建用户
echo "输入创建的用户名"
read USER
echo "输入配置文件地址/绝对路径"
read CONF_PWD
docker run -v $CONF_PWD:/etc/openvpn --rm -it kylemanna/openvpn easyrsa build-client-full $USER nopass
docker run -v $CONF_PWD:/etc/openvpn --rm kylemanna/openvpn ovpn_getclient $USER > ./$USER.ovpn
#添加链接配置
echo 'comp-lzo no' >> ./$USER.ovpn
1
2
3
4
5
6
7
8
9
10

3.客户端

客户端下载链接
http://47.109.97.22:81/shell/openvpn/OpenVPN-2.6.3-I003-amd64.msi
1
2

将生成的$USER.ovpn 放入 C:\软件\openvpn\config #根据自己安装目录
启动客户端，直接右键任务栏小图标就有选项进行连接
1
2

下载打包好的

wget -r -np -nH --cut-dirs=1 http://47.109.97.22:81/shell/openvpn/
1