openvpn is an application to securely tunnel IP networks over a single UDP or TCP port. OpenVPN uses all of the encryption, authentication, and certification features provided by the OpenSSL library (any cipher, key size, or HMAC digest).
This image is based on openvpn builds for debian and it is built on top of the clover/common.
| Name | Default value | Description |
|---|---|---|
PUID | 50 | Desired UID of the process owner * |
PGID | primary group id of the UID user (50) | Desired GID of the process owner * |
CRON | not set | Will start cron inside the container if set to 1 |
TIMEZONE | UTC | Desired container timezone |
| Port | Description |
|---|---|
| 1194 | Default OpenVPN TCP and UDP port |
| Location | Description |
|---|---|
/etc/openvpnn/config.ovpn | Main openvpn configuration file (symlink to server.ovpn) |
/etc/openvpnn/server.ovpn | Example of openvpn server configuration |
/etc/openvpnn/client.ovpn | Example of openvpn client configuration |
/etc/openvpnn/certificates | Sample openvpn certificates and keys (don't use) |
linux/amd64;linux/386;linux/arm/v7;linux/arm64/v8;linux/ppc64le;linux/s390x;openssl genpkey -algorithm RSA -out ca.key
openssl req -x509 -new -key ca.key -out ca.crt -days 3650 -subj "/CN=ca"
openssl genpkey -algorithm RSA -out server.key
openssl req -new -key server.key -out server.csr -subj "/CN=server"
openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 3650
openssl genpkey -algorithm RSA -out client.key
openssl req -new -key client.key -out client.csr -subj "/CN=client"
openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -days 3650
openvpn --genkey secret ta.key
dockerdocker run -it --rm -eTERM --device=/dev/net/tun --cap-add=NET_ADMIN clover/openvpn
composeservices:
vpn:
image: "clover/openvpn"
cap_add:
- "NET_ADMIN"
devices:
- "/dev/net/tun"
Content type
Image
Digest
sha256:96c4ea0f7…
Size
16.8 MB
Last updated
5 months ago
docker pull clover/openvpn