summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--content/posts/openbsd-vpn-gateway/index.org12
1 files changed, 12 insertions, 0 deletions
diff --git a/content/posts/openbsd-vpn-gateway/index.org b/content/posts/openbsd-vpn-gateway/index.org
index 2f6e784..0a1c542 100644
--- a/content/posts/openbsd-vpn-gateway/index.org
+++ b/content/posts/openbsd-vpn-gateway/index.org
@@ -68,6 +68,7 @@
[[https://www.openbsd.org/faq/faq4.html#Download][ installation guide]], which goes over the process in detail.
* Configuring a Static IP
+
The most important thing is to set a static IP, so it can be set as
the gateway for client machines. We'll set this first.
@@ -108,3 +109,14 @@
Note: The =--mbedtls= is required to get the =mbedtls= flavour of
the =openvpn= package.
+
+ Let's assume the VPN profile we've downloaded from our provider
+ exists in =/root/profile.ovpn=. This could have been downloaded
+ using [[https://man.openbsd.org/man1/ftp.1][=ftp(1)=]] or transferred on using [[https://man.openbsd.org/man1/sftp.1][=sftp(1)=]]. It also requires a
+ username and password supplied by the user. Let's say that username
+ is =user@example.com= and the password is =password=.
+
+ To allow OpenVPN to login to the VPN without the us having to enter
+ our password, we can add the =auth-user-pass= configuration option
+ to our =ovpn= file. This will allow us run OpenVPN as a daemon, and
+ restart it without having to type our username and password in.