rattydave/alpine-vpn-pptp repository overview

⁠VPN (PPTP) for Docker

This is a docker image with simple VPN (PPTP) server with chap-secrets authentication.

PPTP uses /etc/ppp/chap-secrets file to authenticate VPN users. You need to create this file on your own and link it to docker when starting a container.

Example of chap-secrets file:

# Secrets for authentication using PAP
# client    server      secret      acceptable local IP addresses
username    *           password    *

⁠Use Local DNS

To user the DNS SERVER on the local host machine set the environment variable "LOCALDNS=1".

⁠Starting VPN server

To start VPN server as a docker container run:

docker run -d \
           --name VPN \
           --restart unless-stopped \
           --privileged \
           --net=host \
           -v {local_path_to_chap_secrets}:/etc/ppp/chap-secrets \
           rattydave/alpine-vpn-pptp

Edit your local chap-secrets file, to add or modify VPN users whenever you need. When adding new users to chap-secrets file, you don't need to restart Docker container.

⁠Connecting to VPN service

You can use any VPN (PPTP) client to connect to the service. To authenticate use credentials provided in chap-secrets file.

Note: Before starting container in --net=host mode, please read how networking in host mode works in Docker: https://docs.docker.com/engine/reference/run/#network-host⁠

⁠Auto Update

To automatically update I recomend using watchtower.

docker run -d \
    --name watchtower \
    -v /var/run/docker.sock:/var/run/docker.sock \
    containrrr/watchtower

⁠Using with adblocker

⁠VPN with AD BLOCKER

This will is oznu/dns-ad-blocker as the DNS ad blocker. Then run the VPN with the local DNS setting.

docker run -d \
           --restart unless-stopped \
           --name DNS-AD-BLOCK \
           -p 127.0.0.1:53:53/tcp -p 127.0.0.1:53:53/udp \
           -e DNSCRYPT=1 -e DNS_CRYPT_SERVERS=adguard-dns \
           oznu/dns-ad-blocker

echo "user * password *" > /root/chap-secrets

docker run -d \
           --restart unless-stopped \
           --privileged \
           --name VPN \
           --net=host \
           -v /root/chap-secrets:/etc/ppp/chap-secrets \
           -e "LOCALDNS=1" \
           rattydave/alpine-vpn-pptp

⁠Notes for RANCHEROS

If you are using rancheros you need the kernel-extras service enabled and running. This will enable the drivers that are required.

sudo ros service enable kernel-extras
sudo ros service up kernel-extras