Difference between revisions of "VPN"

Latest revision as of 13:21, 21 September 2025

Older articles:

@@ Line 1: / Line 1: @@
-{{{!}} class="wikitable" style="float: right; width: 322px;" border="2"
-{{!}}+ Proven on:
-{{!}}- <!-- Debian -->
-{{!}} style="text-align: center; width: 60px;" {{!}} [[File:Logo Debian.png{{!}}60px{{!}}link=https://www.debian.org/{{!}}center{{!}}middle{{!}}frameless]]
-{{!}} style="text-align: center; width: 40px;" {{!}} 13 (trixie)
-{{!}}
-{{!}}}
-{{{!}} class="wikitable" style="border-collapse: collapse; width: 33%; left;"
-{{!}}- style="text-align: center;"
-! style="width: 50%;" colspan="2" {{!}} As always...
-{{!}}-
-{{!}} {{!}}
-Start with:
-{{!}} {{!}}
-*<code>sudo apt update</code>
-*<code>sudo apt upgrade</code>
-{{!}}}
-= Setting Up OpenVPN & PIA as a client =
+* [[Setting Up OpenVPN & PIA as a client]]
+* [[TailScale]]
+* [[Building a VPN tunnel from scratch]]
+* [[a VPN monitoring Script{{!}}a VPN monitoring Script]]
-(In actual fact...  This set of steps is applicable to pretty much any Debian-derived system if you skip the first step...)
+Older articles:
-== A note about doing this on an LXC ==
+* [[Setup a VPN]]
-Something you may have noticed if you've been playing about with LXCs for a bit...  Sometimes, to do tricks, you have to jump through a hoop or two.
+* [[VPN Setup]]
-'''On the PVE host:'''
-(Replace '''VMID''' with the actual VMID of the container you're working on, of course...)
-* <code>vi /etc/pve/lxc/'''''VMID'''''.conf</code>
-Add these 2 lines to the containers configuration
- lxc.cgroup2.devices.allow: c 10:200 rwm
- lxc.mount.entry: /dev/net dev/net none bind,create=dir
-Reboot the container
-==install openvpn & the PIA files (On the LXC container)==
-* sudo apt install openvpn unzip whois
-* sudo mkdir /etc/openvpn/PIA
-* cd /etc/openvpn/PIA
-* sudo wget <nowiki>https://www.privateinternetaccess.com/openvpn/openvpn.zip</nowiki>
-* sudo unzip openvpn.zip
-== Configure openvpn (On the LXC container) ==
-* cd /etc/openvpn
-** Copy the exit point you like from inside PIA here & change the extension to .conf
-*** <span style="color: rgb(22, 145, 121);" >sudo cp PIA/ukraine.ovpn ./ukraine.conf # an example...</span>
-** Edit the .conf file and remove the '''<nowiki><crl-verify></nowiki>''' block. (For some reason openvpn thinks PIAs CRL blocks are ALWAYS malformed...)
-** Add '''/etc/openvpn/auth.txt''' to the line: '''auth-user-pass'''
-*** <span style="color: rgb(22, 145, 121);" >auth-user-pass /etc/openvpn/auth.txt # like this...</span>
-* sudo vi auth.txt
-** copy your PIA username & password into this file (on 2 lines...)
-*** <span style="color: rgb(22, 145, 121);" >Bob</span>
-*** <span style="color: rgb(22, 145, 121);" >SecretSquirrel!</span>
-* sudo vi /etc/default/openvpn
-** uncomment the '''#AUTOSTART="all"''' line
-* sudo service openvpn start
-From this point on, accessing the internet from the LXC will go through your chosen PIA exit point.
-It may take a moment or two to initialise fully. And, startup of the LXC may seem a little slow. But patience is a virtue...
-== Testing ==
-* wget <nowiki>http://ipinfo.io/ip</nowiki> -qO -
-Should give you an IP address that does NOT match your actual external IP
-* whois `wget <nowiki>http://ipinfo.io/ip</nowiki> -qO -`
-Will give you a wall-o-text.  In that wall-o-text, you'll find the country code of where ipinfo.io thinks you are.  (This, of course, should match your chosen exit point...)

Difference between revisions of "VPN"

Latest revision as of 13:21, 21 September 2025

Navigation menu

Search