Sign inSign up

houselabs/strongswan

By houselabs

•Updated over 9 years ago

strongswan server on AlpineLinux

Image
7

4.5K

houselabs/strongswan repository overview

⁠Usage

First use houselabs/strongswan-buildconf⁠ to build config files

docker pull houselabs/strongswan-buildconf
docker run -i -v /data/strongswan:/data \
  -e VPN_DOMAIN=yourvpndomain.com \
  -e VPN_DNS=192.168.0.1 \
  -e VPN_SUBNET=192.168.1.0/24 \
  -e VPN_PSK=sdasdas \
  -e VPN_USERNAME=ohsc \
  -e VPN_PASSWORD=pppsssswwwddd \
  -e VPN_P12_PASSWORD=lock \
  houselabs/strongswan-buildconf

The builder will save all config files in /data/strongswan

Then run the strongswan

docker pull houselabs/strongswan
docker run -d --name=strongswan \
  --privileged=true \
  --net=host \
  --cap-add=ALL \
  -e VPN_SUBNET=192.168.1.0/24 \
  -v /lib/modules:/lib/modules \
  -v /data/strongswan/ipsec.conf:/etc/ipsec.conf \
  -v /data/strongswan/ipsec.d:/etc/ipsec.d \
  -v /data/strongswan/ipsec.secrets:/etc/ipsec.secrets \
  -v /data/strongswan/strongswan.conf:/etc/strongswan.conf \
  -v /data/strongswan/strongswan.d:/etc/strongswan.d \
  -v /data/strongswan/strongswan/log/charon.log:/var/log/charon.log \
  -v /etc/localtime:/etc/localtime \
  houselabs/strongswan

To inspect strongSwan daemon logs:

docker exec -it strongswan bash

and inside the container:

tail -f /var/log/charon.log

Or you may also use the systemd unit file strongswan.service. Remember modify the VPN_SUBNET value in the unit file before start.

Finally, all certs for client are generated in /data/strongswan/ssl. You may copy them to your client. And a mobileconfig for iOS/Mac is generated. You can install to your iOS / Mac directly.

Tag summary

Content type

Image

Digest

Size

6.2 MB

Last updated

over 9 years ago

docker pull houselabs/strongswan