OpenVPN Rapid Installer - Revision history

Admin at 14:34, 27 October 2025

2025-10-27T14:34:41Z

← Older revision		Revision as of 14:34, 27 October 2025
Line 21:		Line 21:
	*Automatically installation (-a)		*Automatically installation (-a)
	#Copy&Paste		#Copy&Paste
	wget -q https://coolscript.~~org~~/download/scripts/openvpn/openvpn-install.sh -O \		wget -q https://coolscript.net/download/scripts/openvpn/openvpn-install.sh -O \
	/tmp/openvpn-install.sh && bash \		/tmp/openvpn-install.sh && bash \
	/tmp/openvpn-install.sh -a		/tmp/openvpn-install.sh -a
Line 32:		Line 32:
	*Reinstallation if a previous setup exists (-r)		*Reinstallation if a previous setup exists (-r)
	#Copy&Paste		#Copy&Paste
	wget -q https://coolscript.~~org~~/download/scripts/openvpn/openvpn-install.sh -O \		wget -q https://coolscript.net/download/scripts/openvpn/openvpn-install.sh -O \
	/tmp/openvpn-install.sh && bash \		/tmp/openvpn-install.sh && bash \
	/tmp/openvpn-install.sh -a -r \		/tmp/openvpn-install.sh -a -r \
Line 49:		Line 49:
	*Enable journaling (-j)		*Enable journaling (-j)
	#Copy&Paste		#Copy&Paste
	wget -q https://coolscript.~~org~~/download/scripts/openvpn/openvpn-install.sh -O \		wget -q https://coolscript.net/download/scripts/openvpn/openvpn-install.sh -O \
	/tmp/openvpn-install.sh && bash \		/tmp/openvpn-install.sh && bash \
	/tmp/openvpn-install.sh -a -r -u -j		/tmp/openvpn-install.sh -a -r -u -j

Admin at 14:09, 5 October 2023

2023-10-05T14:09:41Z

← Older revision		Revision as of 14:09, 5 October 2023
Line 1:		Line 1:
	<span style="font-size:180%">''Install and configure OpenVPN including certificates in less than one minute''</span>		<span style="font-size:180%">''Install and configure OpenVPN including certificates in less than one minute''</span>

	*Express installation and configuration of [https://community.openvpn.net OpenVPN], this has been tested on any recent '''Debian, Ubuntu or Raspian''' releases.		*Express installation and configuration of [https://community.openvpn.net OpenVPN], this has been tested on any recent '''Debian, Ubuntu or Raspian''' releases.
	*Enjoy the wide range of supported [https://community.openvpn.net OpenVPN] Clients, with this Script you may quickly establish a VPN connection, compatible with '''Windows, Linux, Mac OS, Android and iOS'''<br>		*Enjoy the wide range of supported [https://community.openvpn.net OpenVPN] Clients, with this Script you may quickly establish a VPN connection, compatible with '''Windows, Linux, Mac OS, Android and iOS'''<br>

Admin: /* ovpnreport */

2022-05-13T18:39:36Z

ovpnreport

← Older revision		Revision as of 18:39, 13 May 2022
Line 89:		Line 89:
	Use ovpnreprot to see the connection history. Ovpnreport is using a sqlite database which gets the data by the tool ovpntrack.<br>		Use ovpnreprot to see the connection history. Ovpnreport is using a sqlite database which gets the data by the tool ovpntrack.<br>
	Sample:		Sample:
	ovpnreport~~.pl~~ Print all data, max 5000 records, can be overwritten by the limit arg		ovpnreport Print all data, max 5000 records, can be overwritten by the limit arg
	ovpnreport~~.pl~~ -c Print current connections		ovpnreport -c Print current connections
	ovpnreport~~.pl~~ -ip 1.2.3.4 -limit 10 Search for 1.2.3.4 and limit to max 10 records		ovpnreport -ip 1.2.3.4 -limit 10 Search for 1.2.3.4 and limit to max 10 records
	ovpnreport~~.pl~~ -cname demo -time 5 Search for the cname demo and show connection by min. 5 minutes		ovpnreport -cname demo -time 5 Search for the cname demo and show connection by min. 5 minutes
	ovpnreport~~.pl~~ -d 90 -v Delete data older than 90 days, vacuum database after		ovpnreport -d 90 -v Delete data older than 90 days, vacuum database after

	Arguments:		Arguments:

Admin: /* ovpncert */

2022-05-13T18:39:20Z

ovpncert

← Older revision		Revision as of 18:39, 13 May 2022
Line 69:		Line 69:
	Use ovpncert to create, revoke and printing OpenVPN profiles		Use ovpncert to create, revoke and printing OpenVPN profiles
	Samples:		Samples:
	ovpncert~~.pl~~ -cn mycert -c -> Create the OpenVPN certificate using the client name mycert		ovpncert -cn mycert -c -> Create the OpenVPN certificate using the client name mycert
	ovpncert~~.pl~~ -cn mycert -c -d 30 -> Same as above but valid for 30 days		ovpncert -cn mycert -c -d 30 -> Same as above but valid for 30 days
	ovpncert~~.pl~~ -cn mycert -p -> Print the OpenVPN certificate to STDOUT using the client name mycert		ovpncert -cn mycert -p -> Print the OpenVPN certificate to STDOUT using the client name mycert
	ovpncert~~.pl~~ -cn mycert -r -> Revoke the OpenVPN certificate using the client name mycert		ovpncert -cn mycert -r -> Revoke the OpenVPN certificate using the client name mycert
	ovpncert~~.pl~~ -l -> List certificates including the current online status		ovpncert -l -> List certificates including the current online status

	Arguments:		Arguments:

Admin at 20:26, 4 April 2022

2022-04-04T20:26:49Z

← Older revision		Revision as of 20:26, 4 April 2022
Line 114:		Line 114:
	client-connect "/etc/openvpn/scripts/ovpntrack.pl -d"		client-connect "/etc/openvpn/scripts/ovpntrack.pl -d"
	client-disconnect "/etc/openvpn/scripts/ovpntrack.pl -d"		client-disconnect "/etc/openvpn/scripts/ovpntrack.pl -d"


			=Routing and Masquerading=
			Please note that your OpenVPN Client will not be able to access the internet for various reasons, in most cases the routing does not allow the traffic.<br>
			There are many ways to establish the access and here is a very simple way of how this could work.
			*Install nftables
			apt-get install nftables
			*Enable the service at startup
			systemctl enable nftables
			*Add a new table to nftables
			nft add table ip nat
			*Add the postrouting chain to nftables
			nft 'add chain nat postrouting { type nat hook postrouting priority 100 ; policy accept; }'
			*Masq the entire traffic to eht0, please note that eth0 can vary
			nft add rule ip nat postrouting oif eth0 counter masquerade comment \"Masquerade all traffic to eth0\"
			*List the new table:
			nft list table ip nat
			table ip nat {
			chain postrouting {
			type nat hook postrouting priority srcnat; policy accept;
			oif "eth0" counter packets 0 bytes 1 masquerade comment "Masquerade all traffic to eth0"
			}
			}
			*Write back the configuration to make the change permanent
			nft list table ip nat >> /etc/nftables.conf

			*Either reboot the machine or reload to configuration to test:
			systemctl restart nftables



			Reference:
			*https://wiki.nftables.org/wiki-nftables/index.php/Performing_Network_Address_Translation_(NAT)

Admin at 17:39, 4 April 2022

2022-04-04T17:39:15Z

@@ Line 1: / Line 1: @@
 <span style="font-size:180%">''Install and configure OpenVPN including certificates in less than one minute''</span>
-*Express installation and configuration of [https://community.openvpn.net OpenVPN], this has been tested on any recent '''Debian, Ubuntu and Raspian''' releases.
+*Express installation and configuration of [https://community.openvpn.net OpenVPN], this has been tested on any recent '''Debian, Ubuntu or Raspian''' releases.
 *Enjoy the wide range of supported [https://community.openvpn.net OpenVPN] Clients, with this Script you may quickly establish a VPN connection, compatible with '''Windows, Linux, Mac OS, Android and iOS'''<br>
 *Install and configure [https://community.openvpn.net OpenVPN] together with a [https://en.wikipedia.org/wiki/Certificate_authority Certification Authority] and X509 Client Certificates with one single command, <br>
@@ Line 15: / Line 15: @@
 =<span style="font-size:120%">''Installation Samples''</span>=
-==Basic with no options==
+==Basic installation with no options==
 Install and configure OpenVPN with Easy-RSA
 *Default udp port 1194
@@ Line 64: / Line 64: @@
   -r Optional Flag, Re-Install application
   -u Optional Flag, enforce additional user authentication through local PAM

Admin: /* Recommend - Support local users and journaling */

2022-04-02T20:51:01Z

Recommend - Support local users and journaling

← Older revision		Revision as of 20:51, 2 April 2022
Line 40:		Line 40:
	-m 24		-m 24

	==~~Recommend~~ - Support local users and journaling==		==Recommended Setup - Support local users and journaling==
	Install and configure OpenVPN with Easy-RSA		Install and configure OpenVPN with Easy-RSA
	*Default udp port 1194		*Default udp port 1194

Admin: Created page with "''Install and configure OpenVPN including certificates in less than one minute'' *Express installation and configuration of [https://commu..."

2022-04-02T20:49:17Z

Created page with "''Install and configure OpenVPN including certificates in less than one minute'' *Express installation and configuration of [https://commu..."

New page

''Install and configure OpenVPN including certificates in less than one minute''

*Express installation and configuration of [https://community.openvpn.net OpenVPN], this has been tested on any recent '''Debian, Ubuntu and Raspian''' releases.
*Enjoy the wide range of supported [https://community.openvpn.net OpenVPN] Clients, with this Script you may quickly establish a VPN connection, compatible with '''Windows, Linux, Mac OS, Android and iOS''' 
*Install and configure [https://community.openvpn.net OpenVPN] together with a [https://en.wikipedia.org/wiki/Certificate_authority Certification Authority] and X509 Client Certificates with one single command, 
*Optional journaling
'''Additional Tools''' 
*'''ovpncert'''
**Create new ovpn profiles and certificates on the fly
**Revoke ovpn certificates on the fly
*'''ovpnreport'''
**Search the journal for login activity, users or ip-addresses
**List current connections

=''Installation Samples''=

==Basic with no options==
Install and configure OpenVPN with Easy-RSA
*Default udp port 1194
*Default network 10.8.0.0/24
*Automatically installation (-a)
#Copy&Paste
wget -q https://coolscript.org/download/scripts/openvpn/openvpn-install.sh -O \
/tmp/openvpn-install.sh && bash \
/tmp/openvpn-install.sh -a

==Custom Network Installation==
Install and configure OpenVPN with Easy-RSA
*Use tcp port 1194 (-o and -p)
*Use your custom network 192.168.200.0/24 (-n and -m)
*Automatically installation (-a)
*Reinstallation if a previous setup exists (-r)
#Copy&Paste
wget -q https://coolscript.org/download/scripts/openvpn/openvpn-install.sh -O \
/tmp/openvpn-install.sh && bash \
/tmp/openvpn-install.sh -a -r \
-o 1194 \
-p tcp \
-n 192.168.200.0 \
-m 24

==Recommend - Support local users and journaling==
Install and configure OpenVPN with Easy-RSA
*Default udp port 1194
*Default network 10.8.0.0/24
*Automatically installation (-a)
*Reinstallation if a previous setup exists (-r)
*Enable additional authentication using local user (-u)
*Enable journaling (-j)
#Copy&Paste
wget -q https://coolscript.org/download/scripts/openvpn/openvpn-install.sh -O \
/tmp/openvpn-install.sh && bash \
/tmp/openvpn-install.sh -a -r -u -j

=''Available Arguments''=
openvpn-install.sh -h
-a Mandatory Flag, Automatic installation, otherwise do nothing than STDOUT
-h Optional Flag, help and exit
-j Optional Flag, Enable jthe journaling
-m Optional String, Network mask set in decimal format, default is $defCIDR bit
-n Optional String, Network Address, default is $defNET
-o Optional String, port, default is $defPort
-p Optional String, protocol (tcp or udp), default is $defProto
-r Optional Flag, Re-Install application
-u Optional Flag, enforce additional user authentication through local PAM