dbadovsky/openvpn_infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Дмитрий Бадовский
2026-05-26 13:12:56 +00:00
parent 4e8aed8a50
commit 183fce0c82
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
README.md
View File

@@ -59,6 +59,10 @@ easyrsa --batch build-server-full server nopass
``` ```
cp pki/ca.crt pki/issued/server.crt pki/private/server.key /usr/local/etc/openvpn/ cp pki/ca.crt pki/issued/server.crt pki/private/server.key /usr/local/etc/openvpn/
``` ```
И создадим tls-ключ для шифрования хендшейка:
```
openvpn --genkey secret /usr/local/etc/openvpn/tls-crypt.key
```
## Настройка сервера ## Настройка сервера
Создаём конфиг сервера: Создаём конфиг сервера:
``` ```
@@ -78,6 +82,7 @@ data-ciphers AES-128-GCM
ca /usr/local/etc/openvpn/ca.crt ca /usr/local/etc/openvpn/ca.crt
cert /usr/local/etc/openvpn/server.crt cert /usr/local/etc/openvpn/server.crt
key /usr/local/etc/openvpn/server.key key /usr/local/etc/openvpn/server.key
tls-crypt /usr/local/etc/openvpn/tls-crypt.key
dh none dh none
keepalive 10 120 keepalive 10 120
explicit-exit-notify 1 explicit-exit-notify 1