docker安装openvpn

新建docker-compose.yml文件

新建目录:openvpn-data/conf

version: '2'
services:
  openvpn:
    cap_add:
     - NET_ADMIN
    image: kylemanna/openvpn
    container_name: openvpn
    ports:
     - "1194:1194/udp"
    restart: always
    volumes:
     - ./openvpn-data/conf:/etc/openvpn

生成配置文件

docker-compose run --rm openvpn ovpn_genconfig -u udp://192.168.1.8

192.168.1.8可以换成自己的外网IP或域名

初始化证书

docker-compose run --rm openvpn ovpn_initpki

Enter New CA Key Passphrase: 123456
Common Name (eg: your user, host, or server name) [Easy-RSA CA]: 输入 hlooc
Enter pass phrase for /etc/openvpn/pki/private/ca.key: 123456

启动服务端服务

docker-compose up -d openvpn

注册用户

docker-compose run --rm openvpn easyrsa build-client-full hlooc

Enter PEM pass phrase: 234567
Verifying - Enter PEM pass phrase:234567
Enter pass phrase for /etc/openvpn/pki/private/ca.key: 123456(注意要与服务端密码一致)

导出ovpn文件

docker-compose run --rm openvpn ovpn_getclient hlooc > hlooc.ovpn

注销用户

docker-compose run --rm openvpn ovpn_revokeclient hlooc