You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
94 lines
4.5 KiB
94 lines
4.5 KiB
#!/bin/bash |
|
|
|
printf "\n################## Server informations ##################\n" |
|
|
|
[ ! -z "$VPN_LOCAL" ] && echo "VPN_LOCAL=$VPN_LOCAL" |
|
[ -z "$VPN_LOCAL" ] && read -p "Server local Hostname/IP (can be empty): " VPN_LOCAL |
|
[ -z "$VPN_LOCAL" ] && VPN_LOCAL="" |
|
|
|
[ ! -z "$VPN_LOCAL_PORT" ] && echo "VPN_LOCAL_PORT=$VPN_LOCAL_PORT" |
|
[ -z "$VPN_LOCAL_PORT" ] && read -p "OpenVPN local port [1194]: " VPN_LOCAL_PORT |
|
[ -z "$VPN_LOCAL_PORT" ] && VPN_LOCAL_PORT="1194" |
|
|
|
[ ! -z "$VPN_REMOTE" ] && echo "VPN_REMOTE=$VPN_REMOTE" |
|
[ -z "$VPN_REMOTE" ] && read -p "Server remote Hostname/IP: " VPN_REMOTE |
|
[ -z "$VPN_REMOTE" ] && print_error "Server remote address is required!" |
|
|
|
[ ! -z "$VPN_REMOTE_PORT" ] && echo "VPN_REMOTE_PORT=$VPN_REMOTE_PORT" |
|
[ -z "$VPN_REMOTE_PORT" ] && read -p "OpenVPN remote port [443]: " VPN_REMOTE_PORT |
|
[ -z "$VPN_REMOTE_PORT" ] && VPN_REMOTE_PORT="443" |
|
|
|
[ ! -z "$VPN_PROTO" ] && echo "VPN_PROTO=$VPN_PROTO" |
|
[ -z "$VPN_PROTO" ] && read -p "OpenVPN protocol (tcp or udp) [tcp]: " VPN_PROTO |
|
[ -z "$VPN_PROTO" ] && VPN_PROTO="tcp" |
|
|
|
[ ! -z "$VPN_USER" ] && echo "VPN_USER=$VPN_USER" |
|
[ -z "$VPN_USER" ] && read -p "OpenVPN user [nobody]: " VPN_USER |
|
[ -z "$VPN_USER" ] && VPN_USER="nobody" |
|
|
|
[ ! -z "$VPN_GROUP" ] && echo "VPN_GROUP=$VPN_GROUP" |
|
[ -z "$VPN_GROUP" ] && read -p "OpenVPN group [nogroup]: " VPN_GROUP |
|
[ -z "$VPN_GROUP" ] && VPN_GROUP="nogroup" |
|
|
|
[ ! -z "$VPN_DEV" ] && echo "VPN_DEV=$VPN_DEV" |
|
[ -z "$VPN_DEV" ] && read -p "OpenVPN tunnel interface [tun0]: " VPN_DEV |
|
[ -z "$VPN_DEV" ] && VPN_DEV="tun0" |
|
|
|
[ ! -z "$VPN_IF" ] && echo "VPN_IF=$VPN_IF" |
|
[ -z "$VPN_IF" ] && read -p "OpenVPN physical interface [eth0]: " VPN_IF |
|
[ -z "$VPN_IF" ] && VPN_IF="eth0" |
|
|
|
[ ! -z "$VPN_NET" ] && echo "VPN_NET=$VPN_NET" |
|
[ -z "$VPN_NET" ] && read -p "OpenVPN clients subnet [10.8.0.0/24]: " VPN_NET |
|
[ -z "$VPN_NET" ] && VPN_NET="10.8.0.0/24" |
|
|
|
printf "\n################## Application informations ##################\n" |
|
|
|
[ ! -z "$APP_PATH" ] && echo "APP_PATH=$APP_PATH" |
|
[ -z "$APP_PATH" ] && read -p "Web application root folder [/var/www/html]: " APP_PATH |
|
[ -z "$APP_PATH" ] && APP_PATH="/var/www/html" |
|
|
|
[ ! -z "$SCRIPTS_PATH" ] && echo "SCRIPTS_PATH=$SCRIPTS_PATH" |
|
[ -z "$SCRIPTS_PATH" ] && read -p "Folder with scripts for OpenVPN [$APP_PATH/scripts/auth-bash]: " SCRIPTS_PATH |
|
[ -z "$SCRIPTS_PATH" ] && SCRIPTS_PATH="$APP_PATH/scripts/auth-bash" |
|
|
|
SCRIPTS_LOGIN="$SCRIPTS_PATH/login.sh" |
|
[ ! -z "$SCRIPTS_LOGIN" ] && echo "SCRIPTS_LOGIN=$SCRIPTS_LOGIN" |
|
|
|
SCRIPTS_CONNECT="$SCRIPTS_PATH/connect.sh" |
|
[ ! -z "$SCRIPTS_CONNECT" ] && echo "SCRIPTS_CONNECT=$SCRIPTS_CONNECT" |
|
|
|
SCRIPTS_DISCONNECT="$SCRIPTS_PATH/disconnect.sh" |
|
[ ! -z "$SCRIPTS_DISCONNECT" ] && echo "SCRIPTS_DISCONNECT=$SCRIPTS_DISCONNECT" |
|
|
|
printf "\n################## Certificates informations ##################\n" |
|
|
|
[ ! -z "$EASYRSA_KEY_SIZE" ] && echo "EASYRSA_KEY_SIZE=$EASYRSA_KEY_SIZE" |
|
[ -z "$EASYRSA_KEY_SIZE" ] && read -p "Key size (1024, 2048 or 4096) [2048]: " EASYRSA_KEY_SIZE |
|
|
|
[ ! -z "$EASYRSA_CA_EXPIRE" ] && echo "EASYRSA_CA_EXPIRE=$EASYRSA_CA_EXPIRE" |
|
[ -z "$EASYRSA_CA_EXPIRE" ] && read -p "Root certificate expiration (in days) [3650]: " EASYRSA_CA_EXPIRE |
|
|
|
[ ! -z "$EASYRSA_CERT_EXPIRE" ] && echo "EASYRSA_CERT_EXPIRE=$EASYRSA_CERT_EXPIRE" |
|
[ -z "$EASYRSA_CERT_EXPIRE" ] && read -p "Certificate expiration (in days) [3650]: " EASYRSA_CERT_EXPIRE |
|
|
|
[ ! -z "$EASYRSA_REQ_COUNTRY" ] && echo "EASYRSA_REQ_COUNTRY=$EASYRSA_REQ_COUNTRY" |
|
[ -z "$EASYRSA_REQ_COUNTRY" ] && read -p "Country Name (2 letter code) [US]: " EASYRSA_REQ_COUNTRY |
|
|
|
[ ! -z "$EASYRSA_REQ_PROVINCE" ] && echo "EASYRSA_REQ_PROVINCE=$EASYRSA_REQ_PROVINCE" |
|
[ -z "$EASYRSA_REQ_PROVINCE" ] && read -p "State or Province Name (full name) [California]: " EASYRSA_REQ_PROVINCE |
|
|
|
[ ! -z "$EASYRSA_REQ_CITY" ] && echo "EASYRSA_REQ_CITY=$EASYRSA_REQ_CITY" |
|
[ -z "$EASYRSA_REQ_CITY" ] && read -p "Locality Name (eg, city) [San Francisco]: " EASYRSA_REQ_CITY |
|
|
|
[ ! -z "$EASYRSA_REQ_ORG" ] && echo "EASYRSA_REQ_ORG=$EASYRSA_REQ_ORG" |
|
[ -z "$EASYRSA_REQ_ORG" ] && read -p "Organization Name (eg, company) [Copyleft Certificate Co]: " EASYRSA_REQ_ORG |
|
|
|
[ ! -z "$EASYRSA_REQ_OU" ] && echo "EASYRSA_REQ_OU=$EASYRSA_REQ_OU" |
|
[ -z "$EASYRSA_REQ_OU" ] && read -p "Organizational Unit Name (eg, section) [My Organizational Unit]: " EASYRSA_REQ_OU |
|
|
|
[ ! -z "$EASYRSA_REQ_EMAIL" ] && echo "EASYRSA_REQ_EMAIL=$EASYRSA_REQ_EMAIL" |
|
[ -z "$EASYRSA_REQ_EMAIL" ] && read -p "Email Address [[email protected]]: " EASYRSA_REQ_EMAIL |
|
|
|
[ ! -z "$EASYRSA_REQ_CN" ] && echo "EASYRSA_REQ_CN=$EASYRSA_REQ_CN" |
|
[ -z "$EASYRSA_REQ_CN" ] && read -p "Common Name (eg, your name or your server's hostname) [ChangeMe]: " EASYRSA_REQ_CN
|
|
|