简易的openvpn安装

# 安装教程

- 仅限debian和Ubuntu系统

1. 使用 `wget https://git.io/vpn -O openvpn-install.sh && bash openvpn-install.sh` 安装和卸载openvpn
2. 使用 `git clone https://github.com/Jonnyan404/ovclient` 来安装Google二次认证并管理用户

- 服务端分流配置参考

```bash
local 172.28.86.88
port 1111
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-crypt tc.key
topology subnet
server 10.8.0.0 255.255.255.0

#push "redirect-gateway def1 bypass-dhcp"
#push "route-nopull"

push "route 1.1.1.1 255.255.255.255 vpn_gateway"
push "route 2.2.2.2 255.255.255.255 vpn_gateway"
push "route x.x.x.x 255.255.255.0 vpn_gateway"

ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.4.4"
push "dhcp-option DNS 8.8.8.8"
#push "block-outside-dns"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
management localhost 5555
verb 3
crl-verify crl.pem
reneg-sec 36000
plugin /usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so /etc/pam.d/openvpn
```

- 访问服务端所在内网

```bash
echo "net.ipv4.ip_forward = 1" >>/etc/sysctl.conf && sysctl -p
iptables -t nat -A POSTROUTING -s 10.8.0.1/24 -o ens192 -j SNAT --to-source 服务端机器内网IP
```

# 流量统计
- openvpn-manager
显示用户流量,可以下线用户,支持用户名密码验证登录,中文支持

```bash

#vim docker-compose.yml
version: '3.3'
services:
    openvpn-manager:
        network_mode: host
        container_name: openvpn-manager
          #volumes:
          # - './psw-file:/etc/openvpn/server/psw-file:ro'
        #ports:
          #  - '9090:9090'
        image: 'curiouser/openvpn-manager:v1'
        command: '-host 127.0.0.1  -port 5555  -admin-passwd 123456 -psw-file /etc/openvpn/server/psw-file'
```

- web访问地址: `http://ip:9090`
- 用户名: admin
- 密码: 123456

```hr red
```

- openvpn-monitor
显示用户流量,可以下线用户,显示机器总流量,显示登录用户所在城市,支持多个openvpn配置.

```yaml
version: '3.3'
services:
    openvpn-monitor:
        container_name: openvpn-monitor
        ports:
            - '8999:8999'
        volumes:
            - '/opt/openvpn/conf:/app/conf'
        environment:
            - LISTEN_PORT=8999
        image: jonnyan404/openvpn-monitor
```

```hr red
```

# Reference Link

- https://github.com/furlongm/openvpn-monitor
- https://github.com/RationalMonster/openvpn-manager

- https://github.com/flant/ovpn-admin
- https://github.com/siailya/openvpnstats
- https://github.com/hjelev/OpenVPN-Stats