ovpn admin下载ovpn admin源代码下载

ovpn admin

其他源码

v.2.0.2

下载

OVPN-ADMIN

简单的Web UI来管理OpenVPN用户，其证书和Linux路线。当后端写入GO时，Frontend基于Vue.js。

免责声明！该项目是为经验丰富的用户（系统管理员）和私人（例如，受网络策略保护）环境创建的。因此，它没有考虑到安全性（例如，它并不严格检查用户传递的所有参数等）。它也很大程度上依赖文件，如果需要的文件，则失败。

特征

添加，删除OpenVPN用户（为其生成证书）；
撤销/还原/旋转用户证书；
生成现成的用户配置文件；
为普罗米修斯提供指标，包括证书到期日期，（连接/总数）用户的数量，有关连接用户的信息；
（选项）为每个用户指定CCD（ client-config-dir ）；
（选项）以主/从模式（与其他服务器同步证书和CCD同步）操作；
（选项）在OpenVPN中指定/更改密码以进行其他授权；
（选择）指定kubernetes loadBalancer如果在OpenVPN服务器的前面使用（以获取client.conf.tpl Template中自动定义的remote ）。
（选择）将证书和其他文件存储在Kubernetes Secrets中（注意，此功能是实验性的！ ）。

屏幕截图

在OVPN-ADMIN中管理用户：

使用OVPN-ADMIN指标制作的仪表板的示例：

安装

1。码头

有一个现成的docker-compose.yaml，因此您可以更改/添加所需的值，然后使用start.sh启动它。

要求：您需要安装的Docker和Docker-Compose。

命令执行：

git clone https://github.com/palark/ovpn-admin.git
cd ovpn-admin
./start.sh

1.1

Docker Hub上可用的Ready Docker图像。标签很简单： $VERSION或latest的OVPN-ADMIN和openvpn-$VERSION或openvpn-latest用于OpenVPN-Server

2。从来源建造

要求。您需要安装以下组件的Linux：

戈兰
Packr2
nodejs/npm

Commands to execute:

git clone https://github.com/palark/ovpn-admin.git
cd ovpn-admin
./bootstrap.sh
./build.sh
./ovpn-admin

(Please don't forget to configure all needed params in advance.)

3. Prebuilt binary

You can also download and use prebuilt binaries from the releases page — just choose a relevant tar.gz file.

笔记

this tool uses external calls for bash , coreutils and easy-rsa , thus Linux systems only are supported at the moment.
to enable additional password authentication provide --auth and --auth.db="/etc/easyrsa/pki/users.db " flags and install openvpn-user. This tool should be available in your $PATH and its binary should be executable ( +x ).
master-replica synchronization does not work with --storage.backend=kubernetes.secrets - WIP
additional password authentication does not work with --storage.backend=kubernetes.secrets - WIP
如果您使用--ccd and --ccd.path="/etc/openvpn/ccd" ABD计划使用静态地址设置为用户使用--ovpn.network="172.16.100.0/24" openvpn-server network
tested only with Openvpn-server versions 2.4 and 2.5 with only tls-auth mode
not tested with EasyRsa version > 3.0.8
用户连接状态每28秒更新一次（无需询问为什么=） ）

用法

 usage: ovpn-admin [<flags>]

Flags:
  --help                       show context-sensitive help (try also --help-long and --help-man)

  --listen.host="0.0.0.0"      host for ovpn-admin
  (or OVPN_LISTEN_HOST)

  --listen.port="8080"         port for ovpn-admin
  (or OVPN_LISTEN_PORT)

  --listen.base-url="/"        base URL for ovpn-admin web files
  (or $OVPN_LISTEN_BASE_URL)

  --role="master"              server role, master or slave
  (or OVPN_ROLE)

  --master.host="http://127.0.0.1"  
  (or OVPN_MASTER_HOST)       URL for the master server

  --master.basic-auth.user=""  user for master server's Basic Auth
  (or OVPN_MASTER_USER)
 
  --master.basic-auth.password=""  
  (or OVPN_MASTER_PASSWORD)   password for master server's Basic Auth

  --master.sync-frequency=600  master host data sync frequency in seconds
  (or OVPN_MASTER_SYNC_FREQUENCY)

  --master.sync-token=TOKEN    master host data sync security token
  (or OVPN_MASTER_TOKEN)

  --ovpn.network="172.16.100.0/24"  
  (or OVPN_NETWORK)           NETWORK/MASK_PREFIX for OpenVPN server

  --ovpn.server=HOST:PORT:PROTOCOL ...  
  (or OVPN_SERVER)            HOST:PORT:PROTOCOL for OpenVPN server
                               can have multiple values

  --ovpn.server.behindLB       enable if your OpenVPN server is behind Kubernetes
  (or OVPN_LB)                Service having the LoadBalancer type

  --ovpn.service="openvpn-external"  
  (or OVPN_LB_SERVICE)        the name of Kubernetes Service having the LoadBalancer
                               type if your OpenVPN server is behind it

  --mgmt=main=127.0.0.1:8989 ...  
  (or OVPN_MGMT)              ALIAS=HOST:PORT for OpenVPN server mgmt interface;
                               can have multiple values

  --metrics.path="/metrics"    URL path for exposing collected metrics
  (or OVPN_METRICS_PATH)

  --easyrsa.path="./easyrsa/"  path to easyrsa dir
  (or EASYRSA_PATH)

  --easyrsa.index-path="./easyrsa/pki/index.txt"  
  (or OVPN_INDEX_PATH)        path to easyrsa index file

  --ccd                        enable client-config-dir
  (or OVPN_CCD)

  --ccd.path="./ccd"           path to client-config-dir
  (or OVPN_CCD_PATH)

  --templates.clientconfig-path=""  
  (or OVPN_TEMPLATES_CC_PATH) path to custom client.conf.tpl

  --templates.ccd-path=""      path to custom ccd.tpl
  (or OVPN_TEMPLATES_CCD_PATH)

  --auth.password              enable additional password authorization
  (or OVPN_AUTH)

  --auth.db="./easyrsa/pki/users.db"
  (or OVPN_AUTH_DB_PATH)      database path for password authorization
  
  --log.level                  set log level: trace, debug, info, warn, error (default info)
  (or LOG_LEVEL)
  
  --log.format                 set log format: text, json (default text)
  (or LOG_FORMAT)
  
  --storage.backend            storage backend: filesystem, kubernetes.secrets (default filesystem)
  (or STORAGE_BACKEND)
 
  --version                    show application version