差異處
這裏顯示兩個版本的差異處。
| 兩邊的前次修訂版 前次修改 下次修改 | 前次修改 | ||
| tech:ovpn-admin [2024/06/25 16:39] – [想修改 Openvpn 為 UDP 模式] jonathan | tech:ovpn-admin [2025/01/20 10:03] (目前版本) – alpine 2.21 需要加上 /dev/net/tun jonathan | ||
|---|---|---|---|
| 行 3: | 行 3: | ||
| * 安裝環境 | * 安裝環境 | ||
| * VM : 2 vCore, 2G RAM, 32G SSD | * VM : 2 vCore, 2G RAM, 32G SSD | ||
| - | * OS : Alpine 3.19 + Docker Compose | + | * OS : Alpine 3.21 + Docker Compose |
| * 規劃環境 | * 規劃環境 | ||
| * OpenVPN 內部網路 : 10.16.0.0/ | * OpenVPN 內部網路 : 10.16.0.0/ | ||
| 行 9: | 行 9: | ||
| ===== 安裝設定 ===== | ===== 安裝設定 ===== | ||
| - | - Alpine 3.19 Kernel 啟用 ip_tables< | + | - Alpine 3.21 Kernel 啟用 ip_tables< |
| modprobe ip_tables | modprobe ip_tables | ||
| echo ' | echo ' | ||
| reboot | reboot | ||
| + | </ | ||
| + | - 加上 tun device <cli> | ||
| + | mkdir -p /dev/net | ||
| + | mknod / | ||
| + | chmod 666 / | ||
| + | # 檢查模組是否已載入 | ||
| + | lsmod | grep tun | ||
| + | # 如果沒有載入, | ||
| + | modprobe tun | ||
| + | echo " | ||
| </ | </ | ||
| - 編輯 docker-compose.yml < | - 編輯 docker-compose.yml < | ||
| 行 18: | 行 28: | ||
| openvpn: | openvpn: | ||
| container_name: | container_name: | ||
| + | restart: unless-stopped | ||
| image: flant/ | image: flant/ | ||
| command: / | command: / | ||
| 行 26: | 行 37: | ||
| cap_add: | cap_add: | ||
| - NET_ADMIN | - NET_ADMIN | ||
| + | devices: | ||
| + | - / | ||
| ports: | ports: | ||
| - 443:1194 # for openvpn | - 443:1194 # for openvpn | ||
| 行 35: | 行 48: | ||
| ovpn-admin: | ovpn-admin: | ||
| container_name: | container_name: | ||
| + | restart: unless-stopped | ||
| image: flant/ | image: flant/ | ||
| command: / | command: / | ||
| 行 55: | 行 69: | ||
| openvpn-monitor: | openvpn-monitor: | ||
| container_name: | container_name: | ||
| + | restart: unless-stopped | ||
| image: ruimarinho/ | image: ruimarinho/ | ||
| environment: | environment: | ||
| 行 72: | 行 87: | ||
| nginx: | nginx: | ||
| container_name: | container_name: | ||
| + | restart: unless-stopped | ||
| image: nginx: | image: nginx: | ||
| ports: | ports: | ||
| 行 100: | 行 116: | ||
| htpasswd -c .htpasswd jonathan | htpasswd -c .htpasswd jonathan | ||
| cat .htpasswd | cat .htpasswd | ||
| - | </ | + | </ |
| + | 如果要驗證 htpasswd 設定的密碼是否正確, | ||
| + | ovpn-admin-246: | ||
| + | Password for user everstar correct. | ||
| + | </ | ||
| + | </ | ||
| - 啟動 ovpn-admin 服務 <cli> | - 啟動 ovpn-admin 服務 <cli> | ||
| mkdir -p Dockovpn | mkdir -p Dockovpn | ||