refactoring
This commit is contained in:
6
VPN/openvpn/readme.md
Normal file
6
VPN/openvpn/readme.md
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
# Setup OpenVPN
|
||||||
|
|
||||||
|
OpenVPN is used for the connection between the home-server and the home network.
|
||||||
|
|
||||||
|
It can be easily set up using [this link](https://pivpn.io/)
|
||||||
|
|
||||||
@@ -1,14 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
echo "Connecting to VPN..."
|
|
||||||
|
|
||||||
echo "c HOMESERVER" > /var/run/xl2tpd/l2tp-control
|
|
||||||
|
|
||||||
sleep 10
|
|
||||||
|
|
||||||
# To have all internet traffic routed through the VPN uncomment:
|
|
||||||
#ip route add default dev ppp0
|
|
||||||
|
|
||||||
# To only have a remote subnet routed through the VPN uncomment
|
|
||||||
# (this line assumes the remote subnet you want routed is 192.168.0.0/24 and the remote VPN end is 10.11.0.1:
|
|
||||||
ip route add 192.168.2.0/24 via <YOUR-IP-ADDRESS> dev ppp0 onlink
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
ip route del default dev ppp0
|
|
||||||
ip route del 192.168.2.0/24 dev ppp0
|
|
||||||
|
|
||||||
echo "d HOMESERVER" > /var/run/xl2tpd/l2tp-control
|
|
||||||
service xl2tpd restart
|
|
||||||
@@ -1,111 +0,0 @@
|
|||||||
# VPN setup
|
|
||||||
|
|
||||||
## Intro
|
|
||||||
|
|
||||||
This is a manual to set up the Unify VPN server on an ubuntu machine. Note that this is quite difficult to set up, and I was not able to complete the set up on my VPN. This is why I still use a WireGuard VPN next to this one.
|
|
||||||
|
|
||||||
The advantages of this VPN however are that Ubiquity has quite a nice app (android/iOS/windows) to connect to the local network. That is why the main use of this VPN will be to connect to the home network from the outside.
|
|
||||||
|
|
||||||
## Installation on linux
|
|
||||||
|
|
||||||
See [this github thread](https://gist.github.com/nahall/6b23603ce9df2500a4053b280071d1ad)
|
|
||||||
|
|
||||||
- In Debian install the "xl2tpd" and "strongswan" packages.
|
|
||||||
|
|
||||||
- Edit /etc/ipsec.conf to add the connection:
|
|
||||||
|
|
||||||
conn YOURVPNCONNECTIONNAME
|
|
||||||
authby=secret
|
|
||||||
pfs=no
|
|
||||||
auto=start
|
|
||||||
keyexchange=ikev1
|
|
||||||
keyingtries=3
|
|
||||||
dpddelay=15
|
|
||||||
dpdtimeout=45
|
|
||||||
dpdaction=clear
|
|
||||||
rekey=no
|
|
||||||
ikelifetime=3600
|
|
||||||
keylife=3600
|
|
||||||
type=transport
|
|
||||||
left=%defaultroute
|
|
||||||
leftprotoport=17/1701
|
|
||||||
# Replace IP address with your VPN server's IP
|
|
||||||
right=IPADDRESSOFVPNSERVER
|
|
||||||
rightprotoport=17/%any
|
|
||||||
ike=aes128-sha1-modp2048,aes256-sha1-modp4096,aes128-sha1-modp1536,aes256-sha1-modp2048,aes128-sha1-modp1024,aes256-sha1-modp1536,aes256-sha1-modp1024,3des-sha1-modp1024!
|
|
||||||
esp=aes128-sha1-modp2048,aes256-sha1-modp4096,aes128-sha1-modp1536,aes256-sha1-modp2048,aes128-sha1-modp1024,aes256-sha1-modp1536,aes256-sha1-modp1024!
|
|
||||||
|
|
||||||
|
|
||||||
- Edit /etc/ipsec.secrets to add the secret key for this connection:
|
|
||||||
|
|
||||||
IPADDRESSOFVPNSERVER : PSK "SECRETPRESHAREDKEY"
|
|
||||||
|
|
||||||
|
|
||||||
- Edit /etc/xl2tpd/xl2tpd.conf to add this connection:
|
|
||||||
|
|
||||||
[lac YOURVPNCONNECTIONNAME]
|
|
||||||
lns = IPADDRESSOFVPNSERVER
|
|
||||||
ppp debug = yes
|
|
||||||
pppoptfile = /etc/ppp/options.l2tpd.client-YOURVPNCONNECTIONNAME
|
|
||||||
length bit = yes
|
|
||||||
|
|
||||||
|
|
||||||
- Create the file /etc/ppp/options.l2tpd.client-YOURVPNCONNECTIONNAME:
|
|
||||||
|
|
||||||
ipcp-accept-local
|
|
||||||
ipcp-accept-remote
|
|
||||||
noccp
|
|
||||||
refuse-eap
|
|
||||||
refuse-chap
|
|
||||||
noauth
|
|
||||||
idle 1800
|
|
||||||
mtu 1410
|
|
||||||
mru 1410
|
|
||||||
defaultroute
|
|
||||||
|
|
||||||
# Uncomment if you want to use the DNS servers of the VPN host:
|
|
||||||
#usepeerdns
|
|
||||||
|
|
||||||
debug
|
|
||||||
logfile /var/log/xl2tpd.log
|
|
||||||
connect-delay 5000
|
|
||||||
proxyarp
|
|
||||||
name VPNUSERNAME
|
|
||||||
password "VPNPASSWORD"
|
|
||||||
|
|
||||||
|
|
||||||
- Now to connect to the VPN create a script:
|
|
||||||
|
|
||||||
#!/bin/bash
|
|
||||||
|
|
||||||
echo "Connecting to VPN..."
|
|
||||||
|
|
||||||
echo "c YOURVPNCONNECTIONNAME" > /var/run/xl2tpd/l2tp-control
|
|
||||||
|
|
||||||
sleep 10
|
|
||||||
|
|
||||||
# To have all internet traffic routed through the VPN uncomment:
|
|
||||||
#ip route add default dev ppp0
|
|
||||||
|
|
||||||
# To only have a remote subnet routed through the VPN uncomment
|
|
||||||
# (this line assumes the remote subnet you want routed is 192.168.0.0/24 and the remote VPN end is 10.11.0.1:
|
|
||||||
ip route add 192.168.0.0/24 via 10.11.0.1 dev ppp0 uplink
|
|
||||||
|
|
||||||
> Script above didn't work exacly. I had to add `onlink` at the end
|
|
||||||
|
|
||||||
```bash
|
|
||||||
/etc/init.d/ipsec restart
|
|
||||||
/etc/init.d/xl2tpd restart
|
|
||||||
```
|
|
||||||
|
|
||||||
|
|
||||||
- And to disconnect to the VPN create a script:
|
|
||||||
|
|
||||||
#!/bin/bash
|
|
||||||
|
|
||||||
ip route del default dev ppp0
|
|
||||||
ip route del 192.168.0.0/24 dev ppp0
|
|
||||||
|
|
||||||
echo "d YOURVPNCONNECTIONNAME" > /var/run/xl2tpd/l2tp-control
|
|
||||||
service xl2tpd restart
|
|
||||||
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
# WireGuard VPN
|
|
||||||
|
|
||||||
## Intro
|
|
||||||
|
|
||||||
This VPN is meant to connect the VPS with the home network. This folder also contains a docker-compose with a traefik setup. This traefik setup connects the home network with the VPS.
|
|
||||||
Binary file not shown.
@@ -1,11 +1,5 @@
|
|||||||
version: "3.9"
|
version: "3.9"
|
||||||
services:
|
services:
|
||||||
rabbitmq:
|
|
||||||
image: "registry.willemserruys.com/rabbitmq:latest"
|
|
||||||
ports:
|
|
||||||
- 10.55.8.3:1883:1883
|
|
||||||
- 10.55.8.3:15672:15672
|
|
||||||
restart: unless-stopped
|
|
||||||
homeassistant:
|
homeassistant:
|
||||||
image: "ghcr.io/home-assistant/home-assistant:stable"
|
image: "ghcr.io/home-assistant/home-assistant:stable"
|
||||||
ports:
|
ports:
|
||||||
|
|||||||
@@ -1,2 +0,0 @@
|
|||||||
FROM rabbitmq:management
|
|
||||||
RUN rabbitmq-plugins enable --offline rabbitmq_mqtt
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
docker build -t registry.willemserruys.com/rabbitmq .
|
|
||||||
docker push registry.willemserruys.com/rabbitmq:latest
|
|
||||||
Reference in New Issue
Block a user