Bob Mottram 7 年之前
父節點
當前提交
62854406f1
共有 1 個檔案被更改,包括 9 行新增4 行删除
  1. 9
    4
      src/freedombone-app-vpn

+ 9
- 4
src/freedombone-app-vpn 查看文件

140
             shred -zu /home/$USERNAME/$OPENVPN_KEY_FILENAME
140
             shred -zu /home/$USERNAME/$OPENVPN_KEY_FILENAME
141
         fi
141
         fi
142
     done
142
     done
143
+    userdel -f vpn
144
+    groupdel -f vpn
143
 }
145
 }
144
 
146
 
145
 function create_user_vpn_key {
147
 function create_user_vpn_key {
196
 
198
 
197
     cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf $user_vpn_cert_file
199
     cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf $user_vpn_cert_file
198
     sed -i "s|remote .*|remote $DEFAULT_DOMAIN_NAME 1194|g" $user_vpn_cert_file
200
     sed -i "s|remote .*|remote $DEFAULT_DOMAIN_NAME 1194|g" $user_vpn_cert_file
199
-    sed -i 's|;user nobody|user nobody|g' $user_vpn_cert_file
200
-    sed -i 's|;group nogroup|group nobody|g' $user_vpn_cert_file
201
+    sed -i 's|;user no.*|user vpn|g' $user_vpn_cert_file
202
+    sed -i 's|;group no.*|group vpn|g' $user_vpn_cert_file
201
 
203
 
202
     sed -i 's|ca ca.crt|;ca ca.crt|g' $user_vpn_cert_file
204
     sed -i 's|ca ca.crt|;ca ca.crt|g' $user_vpn_cert_file
203
     sed -i 's|cert client.crt|;cert client.crt|g' $user_vpn_cert_file
205
     sed -i 's|cert client.crt|;cert client.crt|g' $user_vpn_cert_file
244
         exit 783953
246
         exit 783953
245
     fi
247
     fi
246
 
248
 
249
+    groupadd vpn
250
+    useradd -r -s /bin/false -g vpn vpn
251
+
247
     # server configuration
252
     # server configuration
248
     gunzip -c /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz > /etc/openvpn/server.conf
253
     gunzip -c /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz > /etc/openvpn/server.conf
249
     sed -i "s|;push \"redirect-gateway|push \"redirect-gateway|g" /etc/openvpn/server.conf
254
     sed -i "s|;push \"redirect-gateway|push \"redirect-gateway|g" /etc/openvpn/server.conf
250
     sed -i 's|;push "dhcp-option|push "dhcp-option|g' /etc/openvpn/server.conf
255
     sed -i 's|;push "dhcp-option|push "dhcp-option|g' /etc/openvpn/server.conf
251
-    sed -i 's|;user nobody|user nobody|g' /etc/openvpn/server.conf
252
-    sed -i 's|;group nogroup|group nobody|g' /etc/openvpn/server.conf
256
+    sed -i 's|;user no.*|user vpn|g' /etc/openvpn/server.conf
257
+    sed -i 's|;group no.*|group vpn|g' /etc/openvpn/server.conf
253
     sed -i 's|;max-clients.*|max-clients 2|g' /etc/openvpn/server.conf
258
     sed -i 's|;max-clients.*|max-clients 2|g' /etc/openvpn/server.conf
254
 
259
 
255
     echo 1 > /proc/sys/net/ipv4/ip_forward
260
     echo 1 > /proc/sys/net/ipv4/ip_forward