|
@@ -0,0 +1,64 @@
|
|
|
|
+#
|
|
|
|
+# Configuring VPN server on Raspberry Pi
|
|
|
|
+#
|
|
|
|
+
|
|
|
|
+# 2022-09-07 + merged with installation logic in general
|
|
|
|
+
|
|
|
|
+
|
|
|
|
+# source https://docs.pivpn.io/install/
|
|
|
|
+
|
|
|
|
+# download recent Raspberry Pi OS Lite image and burn it to flash card [link]
|
|
|
|
+
|
|
|
|
+# install recent Raspberry Pi Lite (without GUI interface) [link]
|
|
|
|
+
|
|
|
|
+# configure firstboot [RPi/install_firstboot]
|
|
|
|
+
|
|
|
|
+# configure manual IP address [link] (for port forwarding from router to VPN server)
|
|
|
|
+
|
|
|
|
+# configure Dynamic DNS to ensure that VPN server is reachable, in case IP address changes [link]
|
|
|
|
+
|
|
|
|
+# download PiVPN installer and execute
|
|
|
|
+```
|
|
|
|
+sudo su
|
|
|
|
+curl -L https://install.pivpn.io > installer.sh
|
|
|
|
+chmod +x installer.sh
|
|
|
|
+./installer.sh
|
|
|
|
+```
|
|
|
|
+
|
|
|
|
+
|
|
|
|
+# unattended updates
|
|
|
|
+Good idea, if system will stay long time alone.
|
|
|
|
+Not so good idea, because of lack of control (inspection), which packages will be updated
|
|
|
|
+
|
|
|
|
+reboot
|
|
|
|
+
|
|
|
|
+login into local user, which is holding pivpn configuration files
|
|
|
|
+
|
|
|
|
+# VPN Clients
|
|
|
|
+list and add
|
|
|
|
+```
|
|
|
|
+pivpn list
|
|
|
|
+pivpn add
|
|
|
|
+ Name: (client)
|
|
|
|
+ How many days should the certificate last? [1080]
|
|
|
|
+ Password: (pass)
|
|
|
|
+```
|
|
|
|
+now new user should be in the list and opvn config generated and can be found
|
|
|
|
+```
|
|
|
|
+ls -la /home/(config user)/ovpns/
|
|
|
|
+(client).ovpn
|
|
|
|
+```
|
|
|
|
+
|
|
|
|
+# Config files
|
|
|
|
+You can copy config file in any desired way (scp probably is the best).
|
|
|
|
+
|
|
|
|
+Or generate QR-code for WireGuard Android's application
|
|
|
|
+```
|
|
|
|
+pivpn -qr
|
|
|
|
+```
|
|
|
|
+
|
|
|
|
+
|
|
|
|
+
|
|
|
|
+
|
|
|
|
+Books:
|
|
|
|
+- [Anton's bookshelf](https://og2k.com/books/)
|