OpenSource
/
vpn-install
mirror of https://github.com/bedefaced/vpn-install.git
1
0
Fork 0
Code Releases Wiki Activity

CentOS support; copying (adduser) bugfixes; adduser continuation fix

Browse Source
master
root 8 years ago committed by bedefaced
parent f2e6b6728d
commit e215363946
14 changed files with 127 additions and 18 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 15
      ipsec/adduser.sh
  2. 16
      ipsec/env.sh
  3. 8
      ipsec/install.sh
  4. 9
      ipsec/iptables-setup.sh
  5. 7
      ipsec/sysctl.sh
  6. 15
      openvpn/env.sh
  7. 16
      openvpn/install.sh
  8. 11
      openvpn/iptables-setup.sh
  9. 7
      openvpn/sysctl.sh
  10. 5
      pptp/adduser.sh
  11. 11
      pptp/env.sh
  12. 8
      pptp/install.sh
  13. 9
      pptp/iptables-setup.sh
  14. 8
      pptp/sysctl.sh

15
ipsec/adduser.sh
Unescape View File

@ -45,6 +45,9 @@ do
if [[ $# -gt 0 ]]; then
# exit, if script is called with params
ANSUSER=$NOTADDUSER
else
read -p "Would you want to add another user? [no] " ANSUSER
: ${ANSUSER:=$NOTADDUSER}
fi
continue
else
@ -65,28 +68,28 @@ do
mkdir -p "$STARTDIR/$LOGIN"
DISTFILE=$STARTDIR/$LOGIN/setup.sh
cp -rf setup.sh.dist "$DISTFILE"
cp -rf $DIR/setup.sh.dist "$DISTFILE"
sed -i -e "s@_PSK_@$PSK@g" "$DISTFILE"
sed -i -e "s@_SERVERLOCALIP_@$LOCALPREFIX.0.1@g" "$DISTFILE"
DISTFILE=$STARTDIR/$LOGIN/ipsec.conf
cp -rf ipsec.conf.dist "$DISTFILE"
cp -rf $DIR/ipsec.conf.dist "$DISTFILE"
sed -i -e "s@LEFTIP@%any@g" "$DISTFILE"
sed -i -e "s@LEFTPORT@%any@g" "$DISTFILE"
sed -i -e "s@RIGHTIP@$IP@g" "$DISTFILE"
sed -i -e "s@RIGHTPORT@1701@g" "$DISTFILE"
DISTFILE=$STARTDIR/$LOGIN/xl2tpd.conf
cp -rf client-xl2tpd.conf.dist "$DISTFILE"
cp -rf $DIR/client-xl2tpd.conf.dist "$DISTFILE"
sed -i -e "s@REMOTEIP@$IP@g" "$DISTFILE"
DISTFILE=$STARTDIR/$LOGIN/options.xl2tpd
cp -rf client-options.xl2tpd.dist "$DISTFILE"
cp -rf $DIR/client-options.xl2tpd.dist "$DISTFILE"
sed -i -e "s@_LOGIN_@$LOGIN@g" "$DISTFILE"
sed -i -e "s@_PASSWORD_@$PASSWORD@g" "$DISTFILE"
cp -rf connect.sh.dist "$STARTDIR/$LOGIN/connect.sh"
cp -rf disconnect.sh.dist "$STARTDIR/$LOGIN/disconnect.sh"
cp -rf $DIR/connect.sh.dist "$STARTDIR/$LOGIN/connect.sh"
cp -rf $DIR/disconnect.sh.dist "$STARTDIR/$LOGIN/disconnect.sh"
chmod +x "$STARTDIR/$LOGIN/setup.sh" "$STARTDIR/$LOGIN/connect.sh" "$STARTDIR/$LOGIN/disconnect.sh"

16
ipsec/env.sh
Unescape View File

@ -1,5 +1,16 @@
#!/usr/bin/env bash
DEBIANPLATFORM="DEBIAN"
CENTOSPLATFORM="CENTOS"
if [[ -e /etc/version ]]; then
PLATFORM=$DEBIANPLATFORM
fi
if [[ -e /etc/issue ]]; then
PLATFORM=$CENTOSPLATFORM
fi
SYSCTLCONFIG=/etc/sysctl.conf
IPSECCONFIG=/etc/ipsec.conf
XL2TPDCONFIG=/etc/xl2tpd/xl2tpd.conf
@ -9,6 +20,11 @@ IPTABLES=/etc/iptables.rules
SECRETSFILE=/etc/ipsec.secrets
CHECKSERVER=/etc/xl2tpd/checkserver.sh
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
SECRETSFILE=/etc/strongswan/ipsec.secrets
IPSECCONFIG=/etc/strongswan/ipsec.conf
fi
LOCALPREFIX="172.18"
LOCALIP="$LOCALPREFIX.0.0"
LOCALMASK="/24"

8
ipsec/install.sh
Unescape View File

@ -10,7 +10,13 @@ fi
echo
echo "Installing strongSwan and xl2tp server..."
apt-get -y install strongswan xl2tpd cron iptables procps net-tools
if [ "$PLATFORM" == "$DEBIANPLATFORM" ]; then
apt-get -y install strongswan xl2tpd cron iptables procps net-tools
fi
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
yum -y install epel-release
yum -y install strongswan xl2tpd cronie iptables-services procps net-tools
fi
echo
echo "Configuring routing..."

9
ipsec/iptables-setup.sh
Unescape View File

@ -3,6 +3,13 @@
DIR=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
source $DIR/env.sh
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
systemctl enable iptables
systemctl stop firewalld
systemctl disable firewalld
systemctl start iptables
fi
COMMENT=" -m comment --comment \"IPSEC\""
if [[ ! -e $IPTABLES ]]; then
@ -28,7 +35,7 @@ done
# detect default gateway interface
echo "Found next network interfaces:"
ifconfig -a | sed 's/[ \t].*//;/^\(lo\|\)$/d'
ifconfig -a | sed 's/[: \t].*//;/^\(lo\|\)$/d'
echo
GATE=$(route | grep '^default' | grep -o '[^ ]*$')
read -p "Enter your external network interface: " -i $GATE -e GATE

7
ipsec/sysctl.sh
Unescape View File

@ -30,4 +30,9 @@ sed -i -e "/net.ipv4.icmp_ignore_bogus_error_responses/d" $SYSCTLCONFIG
echo "net.ipv4.icmp_ignore_bogus_error_responses=1" >> $SYSCTLCONFIG
sysctl -p
service procps restart
if [ "$PLATFORM" == "$DEBIANPLATFORM" ]; then
service procps restart
fi
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
service network restart
fi

15
openvpn/env.sh
Unescape View File

@ -1,5 +1,16 @@
#!/usr/bin/env bash
DEBIANPLATFORM="DEBIAN"
CENTOSPLATFORM="CENTOS"
if [[ -e /etc/version ]]; then
PLATFORM=$DEBIANPLATFORM
fi
if [[ -e /etc/issue ]]; then
PLATFORM=$CENTOSPLATFORM
fi
SYSCTLCONFIG=/etc/sysctl.conf
OPENVPNDIR=/etc/openvpn
OPENVPNCONFIG=$OPENVPNDIR/openvpn-server.conf
@ -8,6 +19,10 @@ IPTABLES=/etc/iptables.rules
NOBODYGROUP=nogroup
CHECKSERVER=$OPENVPNDIR/checkserver.sh
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
NOBODYGROUP=nobody
fi
LOCALPREFIX="172.20"
LOCALIP="$LOCALPREFIX.0.0"
LOCALMASK="/24"

16
openvpn/install.sh
Unescape View File

@ -12,7 +12,13 @@ fi
echo
echo "Installing OpenVPN..."
apt-get -y install openvpn easy-rsa cron iptables procps net-tools
if [ "$PLATFORM" == "$DEBIANPLATFORM" ]; then
apt-get -y install openvpn easy-rsa cron iptables procps net-tools
fi
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
yum -y install epel-release
yum -y install openvpn easy-rsa cronie iptables-services procps net-tools
fi
echo
echo "Configuring routing..."
@ -40,7 +46,13 @@ cp -n /etc/openvpn/easy-rsa/openssl-1.0.0.cnf /etc/openvpn/easy-rsa/openssl.cnf
echo
echo "Creating server keys..."
make-cadir $CADIR
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
mkdir -p "$CADIR/keys"
cp -rf /usr/share/easy-rsa/2.0/* $CADIR
fi
if [ "$PLATFORM" == "$DEBIANPLATFORM" ]; then
make-cadir $CADIR
fi
cd $CADIR
source ./vars
./clean-all

11
openvpn/iptables-setup.sh
Unescape View File

@ -1,8 +1,15 @@
#!/usr/bin/env bash
DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
DIR=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
source $DIR/env.sh
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
systemctl enable iptables
systemctl stop firewalld
systemctl disable firewalld
systemctl start iptables
fi
COMMENT=" -m comment --comment \"OPENVPN\""
if [[ ! -e $IPTABLES ]]; then
@ -28,7 +35,7 @@ done
# detect default gateway interface
echo "Found next network interfaces:"
ifconfig -a | sed 's/[ \t].*//;/^\(lo\|\)$/d'
ifconfig -a | sed 's/[: \t].*//;/^\(lo\|\)$/d'
echo
GATE=$(route | grep '^default' | grep -o '[^ ]*$')
read -p "Enter your external network interface: " -i $GATE -e GATE

7
openvpn/sysctl.sh
Unescape View File

@ -30,4 +30,9 @@ sed -i -e "/net.ipv4.icmp_ignore_bogus_error_responses/d" $SYSCTLCONFIG
echo "net.ipv4.icmp_ignore_bogus_error_responses=1" >> $SYSCTLCONFIG
sysctl -p
service procps restart
if [ "$PLATFORM" == "$DEBIANPLATFORM" ]; then
service procps restart
fi
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
service network restart
fi

5
pptp/adduser.sh
Unescape View File

@ -45,6 +45,9 @@ do
if [[ $# -gt 0 ]]; then
# exit, if script is called with params
ANSUSER=$NOTADDUSER
else
read -p "Would you want to add another user? [no] " ANSUSER
: ${ANSUSER:=$NOTADDUSER}
fi
continue
else
@ -63,7 +66,7 @@ do
mkdir -p "$STARTDIR/$LOGIN"
DISTFILE=$STARTDIR/$LOGIN/setup.sh
cp -rf setup.sh.dist "$DISTFILE"
cp -rf $DIR/setup.sh.dist "$DISTFILE"
sed -i -e "s@_LOGIN_@$LOGIN@g" "$DISTFILE"
sed -i -e "s@_PASSWORD_@$PASSWORD@g" "$DISTFILE"
sed -i -e "s@_REMOTEIP_@$IP@g" "$DISTFILE"

11
pptp/env.sh
Unescape View File

@ -1,5 +1,16 @@
#!/usr/bin/env bash
DEBIANPLATFORM="DEBIAN"
CENTOSPLATFORM="CENTOS"
if [[ -e /etc/version ]]; then
PLATFORM=$DEBIANPLATFORM
fi
if [[ -e /etc/issue ]]; then
PLATFORM=$CENTOSPLATFORM
fi
SYSCTLCONFIG=/etc/sysctl.conf
PPTPDCONFIG=/etc/pptpd.conf
PPTPOPTIONS=/etc/ppp/options.pptp

8
pptp/install.sh
Unescape View File

@ -10,7 +10,13 @@ fi
echo
echo "Installing PPTP server..."
apt-get -y install pptpd cron iptables procps net-tools
if [ "$PLATFORM" == "$DEBIANPLATFORM" ]; then
apt-get -y install pptpd cron iptables procps net-tools
fi
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
yum -y install epel-release
yum -y install ppp pptpd cronie iptables-services procps net-tools
fi
ADDUSER="no"
ANSUSER="yes"

9
pptp/iptables-setup.sh
Unescape View File

@ -3,6 +3,13 @@
DIR=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
source $DIR/env.sh
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
systemctl enable iptables
systemctl stop firewalld
systemctl disable firewalld
systemctl start iptables
fi
COMMENT=" -m comment --comment \"PPTP\""
if [[ ! -e $IPTABLES ]]; then
@ -28,7 +35,7 @@ done
# detect default gateway interface
echo "Found next network interfaces:"
ifconfig -a | sed 's/[ \t].*//;/^\(lo\|\)$/d'
ifconfig -a | sed 's/[: \t].*//;/^\(lo\|\)$/d'
echo
GATE=$(route | grep '^default' | grep -o '[^ ]*$')
read -p "Enter your external network interface: " -i $GATE -e GATE

8
pptp/sysctl.sh
Unescape View File

@ -30,4 +30,10 @@ sed -i -e "/net.ipv4.icmp_ignore_bogus_error_responses/d" $SYSCTLCONFIG
echo "net.ipv4.icmp_ignore_bogus_error_responses=1" >> $SYSCTLCONFIG
sysctl -p
service procps restart
if [ "$PLATFORM" == "$DEBIANPLATFORM" ]; then
service procps restart
fi
if [ "$PLATFORM" == "$CENTOSPLATFORM" ]; then
service network restart
fi

Write Preview
Loading…
Cancel
Save