Commit Graph

290 Commits

Author SHA1 Message Date
hwdsl2
a9ae4090bb Update docs 2023-09-11 23:25:56 -05:00
hwdsl2
174408f479 Update tests 2023-09-11 22:59:17 -05:00
hwdsl2
a207d315f2 Add support for DNS names
- NEW: Add support for using DNS names (e.g. vpn.example.com) as
  the OpenVPN server's address. Users can now select this option
  during interactive install (sudo bash openvpn.sh).
- Example use case: With this new feature, when using a DNS name as
  the server address, users can take a snapshot of the server and
  restore it to a new server with a different IP, then update the
  DNS name to point to the new IP. After that, they can expect the
  VPN to continue to work.
2023-09-11 22:11:20 -05:00
hwdsl2
dca27f7d0e Update docs 2023-09-03 01:42:39 -05:00
hwdsl2
3e538a7110 Cleanup 2023-09-03 01:38:55 -05:00
hwdsl2
ee3c3dd3d8 Add support for openSUSE 2023-09-03 01:32:41 -05:00
hwdsl2
44aac272ac Update docs 2023-08-25 23:36:40 -05:00
hwdsl2
f89a394013 Update docs 2023-08-20 00:20:57 -05:00
hwdsl2
7b6104f3bc Update docs 2023-08-10 23:15:34 -05:00
hwdsl2
2537d32d96 Improve IPv6 handling
- When the server does not have a public IPv6 address, push the
  "block-ipv6" option to the client to help prevent IPv6 leaks
  on dual-stacked clients. This option is supported in OpenVPN
  client versions 2.5.x and newer.
  Ref: https://build.openvpn.net/man/openvpn-2.6/openvpn.8.html
- Closes #13. Thanks @do02fw for the suggestion.
2023-07-11 00:35:50 -05:00
hwdsl2
c3eb5b8344 Improve VPN ciphers
- Switch to the faster AES-128-GCM cipher and SHA256.
  Thanks @do02fw for the suggestion in #12.
2023-07-04 22:48:23 -05:00
hwdsl2
cf856186cd Update docs 2023-07-01 16:57:27 -05:00
hwdsl2
d0687a74b7 Update tests 2023-06-15 00:13:31 -05:00
hwdsl2
40b26321e7 Update to easy-rsa 3.1.5 2023-06-15 00:12:32 -05:00
hwdsl2
53c9a34b4b Update OS check 2023-06-15 00:11:56 -05:00
hwdsl2
96e081379a Update tests 2023-06-12 08:39:34 -05:00
hwdsl2
bb5ec3839e Update docs 2023-06-06 20:18:08 -05:00
hwdsl2
3667015a89 Update to easy-rsa 3.1.4 2023-05-25 22:52:40 -05:00
hwdsl2
ecfeff89f1 Update docs 2023-05-22 23:02:13 -05:00
hwdsl2
8e60af5fc2 Update OS check
- Update OS check to detect Amazon Linux 2023, which is not currently
  supported for use with this project.
2023-05-21 22:21:31 -05:00
hwdsl2
d186054e2e Update docs 2023-05-07 00:24:34 -05:00
hwdsl2
bac6cdd690 Update docs 2023-04-23 23:54:32 -05:00
hwdsl2
1e57943623 Update docs 2023-04-09 17:33:15 -05:00
hwdsl2
13b09bf61d Update tests 2023-03-25 23:56:48 -05:00
hwdsl2
682e5184bd Update docs 2023-01-30 23:38:41 -06:00
hwdsl2
55edd78836 Update to easy-rsa v3.1.2 2023-01-27 05:30:49 -06:00
hwdsl2
020dcc34f5 Update docs 2023-01-13 00:16:32 -06:00
hwdsl2
750246beed Update tests 2023-01-04 20:57:52 -06:00
hwdsl2
d63e46e671 Update docs 2023-01-04 19:47:57 -06:00
hwdsl2
deddaa0572 Update docs 2023-01-04 01:41:59 -06:00
hwdsl2
095ad8b1aa Update docs 2022-12-23 20:58:33 -06:00
hwdsl2
f05bf31083 Improve sysctl settings
- For enabling TCP BBR congestion control, add a check to make sure
  tcp_congestion_control exists.
2022-11-20 15:05:02 -06:00
hwdsl2
0a76ae48f8 Update docs 2022-11-19 10:23:48 -06:00
hwdsl2
d394509c7e Bugfix
- Fixed an issue with IPTables rules not persisting after a reboot,
  if both IPsec VPN and OpenVPN are installed on the same server.
  We restart the openvpn-iptables.service in /etc/rc.local to make
  sure the rules are added.
  Ref: https://github.com/hwdsl2/wireguard-install/issues/2
2022-11-17 08:50:54 -06:00
hwdsl2
5dc64ce424 Update docs 2022-11-14 03:08:55 -06:00
hwdsl2
16dcef19e7 Update docs 2022-11-10 03:15:35 -06:00
hwdsl2
f86bc01ba3 Update docs 2022-11-01 23:51:47 -05:00
hwdsl2
824d59772e Improve setup
- Refactor setup script into functions for better readability and
  easier maintenance.
2022-11-01 01:19:16 -05:00
hwdsl2
6bdb4cc635 Improve sysctl settings 2022-10-31 01:30:18 -05:00
hwdsl2
6c1d25897f Cleanup 2022-10-28 08:59:09 -05:00
hwdsl2
5e8fa9ec3c Update docs 2022-10-25 00:20:56 -05:00
hwdsl2
9d7f285447 Add templates 2022-10-17 22:46:47 -05:00
hwdsl2
dfc71f7cae Update docs 2022-10-16 16:08:17 -05:00
hwdsl2
ccac14693c Update docs 2022-10-14 22:07:21 -05:00
hwdsl2
45b9732428 Update tests 2022-10-14 01:26:11 -05:00
hwdsl2
c1e9ebd446 Update to easy-rsa v3.1.1
- Apply upstream change Nyr/openvpn-install commit f943387,
  with enhancements.
- --no-install-recommends is now required for Debian.
- Cleanup
2022-10-13 22:46:16 -05:00
hwdsl2
b9c2ff1719 Change "block-outside-dns" placement
- Apply upstream change Nyr/openvpn-install commit f2c44de.
- This is mainly to work around a bug in Viscosity for macOS.
2022-10-13 22:35:22 -05:00
hwdsl2
6a5e5959d1 Update docs 2022-10-11 01:31:40 -05:00
hwdsl2
14695679ec Update docs 2022-10-09 22:21:37 -05:00
hwdsl2
dab8eaebcf Cleanup 2022-10-09 16:16:34 -05:00