Skip to content

Latest commit

 

History

History
52 lines (37 loc) · 1.51 KB

README.rst

File metadata and controls

52 lines (37 loc) · 1.51 KB
Raw

Pi OpenVPN

Ansible playbook to install OpenVPN on a Raspberry Pi

Quick instructions

  1. Download Raspbian Jessie lite from raspberrypi.org and install it on your Raspberry Pi

  2. Clone this repository:

    $ git clone git@github.com:beenje/pi_openvpn.git

  3. Build the Diffie-Hellman key:

    $ wget https://github.com/OpenVPN/easy-rsa/releases/download/v3.0.6/EasyRSA-unix-v3.0.6.tgz
$ tar xfz EasyRSA-unix-v3.0.6.tgz
$ cd EasyRSA-v3.0.6
$ ./easyrsa init-pki
$ ./easyrsa gen-dh

  4. The generated key is EasyRSA-v3.0.6/pki/dh.pem

  5. Update the variables in host_vars/raspberry. You should at least define:

    # Static Internet hostname
openvpn_server: my.raspberry.example.org
# List of client configurations to create
openvpn_clients:
  - client1
  - client2
# List of subnets behind the server you want to access
# You probably want to put your internal LAN
private_subnets:
  - 192.168.10.0 255.255.255.0
# Full path of the Diffie-Hellman key generated locally
openvpn_dh: /path/to/dh.pem

  6. Run the playbook:

    $ ansible-playbook -i hosts openvpn.yml

  7. Get the clients configuration files from the Raspberry Pi:

    $ scp pi@raspberry:openvpn/clientside/files/*.ovpn .

  8. Don't leave all the generated keys on your Pi! Even the CA is created with no password. Anyone accessing it could sign new requests! You can copy the openvpn directory to a USB stick before to remove it.