cheshire/hscloud
1
0
Fork 0
forked from hswaw/hscloud
Code Pull requests Activity

personal/implr: more vpn

Browse source 
Change-Id: I4918a7b7fbae3da71e61a23e7f5fbe37e5db61f8
This commit is contained in:
implr 2021-04-30 20:07:51 +02:00
parent 101747d1df
commit 474e0d1c2c
1 changed files with 23 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
personal/implr/vpn/vpn.jsonnet
View file

@ -19,7 +19,27 @@ local vpn = import "vpn.libsonnet";
keepalive 10 60
persist-tun
persist-key
compress lz4
cipher AES-256-CBC
dh none
ca /mnt/pki/ca.crt
cert /mnt/pki/tls.crt
key /mnt/pki/tls.key
|||
}
},
curssys: vpn.Server("openvpn-implr-curssys", 11224, top.tls) {
cfg+: {
namespace: "implr-vpn",
configFile: |||
dev tun
tmp-dir /dev/shm/
proto udp
port 11224
topology subnet
server 172.20.1.0 255.255.255.0
keepalive 10 60
persist-tun
persist-key
cipher AES-256-CBC
dh none
ca /mnt/pki/ca.crt
@ -33,5 +53,7 @@ local vpn = import "vpn.libsonnet";
kektop: vpn.Client("kektop", top.servers.praisethesun),
admin1: vpn.Client("admin1", top.servers.praisethesun),
desk1: vpn.Client("desk1", top.servers.praisethesun),
desk2: vpn.Client("desk2", top.servers.curssys),
thonk: vpn.Client("thonk", top.servers.curssys),
}
}