.git broken, restart
This commit is contained in:
dangerboot
@@ -0,0 +1,2 @@
|
||||
https://dl-cdn.alpinelinux.org/alpine/edge/main
|
||||
https://dl-cdn.alpinelinux.org/alpine/edge/community
|
||||
+24
@@ -0,0 +1,24 @@
|
||||
SKEL=svr
|
||||
MACHINE=$SKEL
|
||||
MACHINE_PATH=/$MACHINE
|
||||
MACHINE_DIR=/$MACHINE
|
||||
HOMESKEL_DIR=$MACHINE_DIR/usr/home
|
||||
INSTALL_DIR=$MACHINE_DIR/install
|
||||
|
||||
NETWORK_DIR=$MACHINE_DIR/net
|
||||
BLACKLIST=$NETWORK_DIR/blacklist.txt
|
||||
WHITELIST=$NETWORK_DIR/whitelist.txt
|
||||
NFT_RESET=$NETWORK_DIR/nft_setup.sh
|
||||
LOG_CONN_DIR=/var/log/tcpd
|
||||
LOG_CONN=$LOG_CONN_DIR/lasts.log
|
||||
NET_STATUS=/tmp/status.txt
|
||||
SSH=177
|
||||
|
||||
JOURNAL_DIR=$HOME/journal
|
||||
PERSO_DIR=$HOME/perso
|
||||
LOCAL_JOURNAL_DIR=$JOURNAL_DIR/$HOST
|
||||
|
||||
BIN=$MACHINE_DIR/usr/bin
|
||||
SBIN_DIR=$MACHINE_DIR/usr/sbin
|
||||
BIN_DIR=$BIN
|
||||
PY_ENV=$BIN/py-env
|
||||
@@ -0,0 +1,2 @@
|
||||
[General]
|
||||
EnableNetworkConfiguration=true
|
||||
@@ -0,0 +1,123 @@
|
||||
# ==============================================================================
|
||||
# Copyright (c) 2023 Proton AG (Switzerland)
|
||||
# Email: contact@protonvpn.com
|
||||
#
|
||||
# The MIT License (MIT)
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
# of this software and associated documentation files (the "Software"), to deal
|
||||
# in the Software without restriction, including without limitation the rights
|
||||
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
# copies of the Software, and to permit persons to whom the Software is
|
||||
# furnished to do so, subject to the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be included in all
|
||||
# copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR # OTHERWISE, ARISING
|
||||
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
|
||||
# IN THE SOFTWARE.
|
||||
# ==============================================================================
|
||||
|
||||
# The server you are connecting to is using a circuit in order to separate entry IP from exit IP
|
||||
# The same entry IP allows to connect to multiple exit IPs in the same data center.
|
||||
|
||||
# If you want to explicitly select the exit IP corresponding to server CA-FREE#4 you need to
|
||||
# append a special suffix to your OpenVPN username.
|
||||
# Please use "Gtd5u0nRC3vf1oRt+b:0" in order to enforce exiting through CA-FREE#4.
|
||||
|
||||
# If you are a paying user you can also enable the ProtonVPN ad blocker (NetShield) or Moderate NAT:
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f1" to enable anti-malware filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f2" to additionally enable ad-blocking filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+nr" to enable Moderate NAT
|
||||
# Note that you can combine the "+nr" suffix with other suffixes.
|
||||
|
||||
client
|
||||
dev tun
|
||||
proto tcp
|
||||
|
||||
remote 149.88.97.97 7770
|
||||
remote 149.88.97.97 8443
|
||||
remote 149.88.97.97 443
|
||||
|
||||
remote-random
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
|
||||
cipher AES-256-GCM
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
tun-mtu 1500
|
||||
mssfix 0
|
||||
persist-key
|
||||
persist-tun
|
||||
|
||||
reneg-sec 0
|
||||
|
||||
remote-cert-tls server
|
||||
auth-user-pass
|
||||
|
||||
script-security 2
|
||||
up /etc/openvpn/update-resolv-conf
|
||||
down /etc/openvpn/update-resolv-conf
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIFnTCCA4WgAwIBAgIUCI574SM3Lyh47GyNl0WAOYrqb5QwDQYJKoZIhvcNAQEL
|
||||
BQAwXjELMAkGA1UEBhMCQ0gxHzAdBgNVBAoMFlByb3RvbiBUZWNobm9sb2dpZXMg
|
||||
QUcxEjAQBgNVBAsMCVByb3RvblZQTjEaMBgGA1UEAwwRUHJvdG9uVlBOIFJvb3Qg
|
||||
Q0EwHhcNMTkxMDE3MDgwNjQxWhcNMzkxMDEyMDgwNjQxWjBeMQswCQYDVQQGEwJD
|
||||
SDEfMB0GA1UECgwWUHJvdG9uIFRlY2hub2xvZ2llcyBBRzESMBAGA1UECwwJUHJv
|
||||
dG9uVlBOMRowGAYDVQQDDBFQcm90b25WUE4gUm9vdCBDQTCCAiIwDQYJKoZIhvcN
|
||||
AQEBBQADggIPADCCAgoCggIBAMkUT7zMUS5C+NjQ7YoGpVFlfbN9HFgG4JiKfHB8
|
||||
QxnPPRgyTi0zVOAj1ImsRilauY8Ddm5dQtd8qcApoz6oCx5cFiiSQG2uyhS/59Zl
|
||||
5wqIkw1o+CgwZgeWkq04lcrxhhfPgJZRFjrYVezy/Z2Ssd18s3/FFNQ+2iV1KC2K
|
||||
z8eSPr50u+l9vEKsKiNGkJTdlWjoDKZM2C15i/h8Smi+PdJlx7WMTtYoVC1Fzq0r
|
||||
aCPDQl18kspu11b6d8ECPWghKcDIIKuA0r0nGqF1GvH1AmbC/xUaNrKgz9AfioZL
|
||||
MP/l22tVG3KKM1ku0eYHX7NzNHgkM2JKnBBannImQQBGTAcvvUlnfF3AHx4vzx7H
|
||||
ahpBz8ebThx2uv+vzu8lCVEcKjQObGwLbAONJN2enug8hwSSZQv7tz7onDQWlYh0
|
||||
El5fnkrEQGbukNnSyOqTwfobvBllIPzBqdO38eZFA0YTlH9plYjIjPjGl931lFAA
|
||||
3G9t0x7nxAauLXN5QVp1yoF1tzXc5kN0SFAasM9VtVEOSMaGHLKhF+IMyVX8h5Iu
|
||||
IRC8u5O672r7cHS+Dtx87LjxypqNhmbf1TWyLJSoh0qYhMr+BbO7+N6zKRIZPI5b
|
||||
MXc8Be2pQwbSA4ZrDvSjFC9yDXmSuZTyVo6Bqi/KCUZeaXKof68oNxVYeGowNeQd
|
||||
g/znAgMBAAGjUzBRMB0GA1UdDgQWBBR44WtTuEKCaPPUltYEHZoyhJo+4TAfBgNV
|
||||
HSMEGDAWgBR44WtTuEKCaPPUltYEHZoyhJo+4TAPBgNVHRMBAf8EBTADAQH/MA0G
|
||||
CSqGSIb3DQEBCwUAA4ICAQBBmzCQlHxOJ6izys3TVpaze+rUkA9GejgsB2DZXIcm
|
||||
4Lj/SNzQsPlZRu4S0IZV253dbE1DoWlHanw5lnXwx8iU82X7jdm/5uZOwj2NqSqT
|
||||
bTn0WLAC6khEKKe5bPTf18UOcwN82Le3AnkwcNAaBO5/TzFQVgnVedXr2g6rmpp9
|
||||
gdedeEl9acB7xqfYfkrmijqYMm+xeG2rXaanch3HjweMDuZdT/Ub5G6oir0Kowft
|
||||
lA1ytjXRg+X+yWymTpF/zGLYfSodWWjMKhpzZtRJZ+9B0pWXUyY7SuCj5T5SMIAu
|
||||
x3NQQ46wSbHRolIlwh7zD7kBgkyLe7ByLvGFKa2Vw4PuWjqYwrRbFjb2+EKAwPu6
|
||||
VTWz/QQTU8oJewGFipw94Bi61zuaPvF1qZCHgYhVojRy6KcqncX2Hx9hjfVxspBZ
|
||||
DrVH6uofCmd99GmVu+qizybWQTrPaubfc/a2jJIbXc2bRQjYj/qmjE3hTlmO3k7V
|
||||
EP6i8CLhEl+dX75aZw9StkqjdpIApYwX6XNDqVuGzfeTXXclk4N4aDPwPFM/Yo/e
|
||||
KnvlNlKbljWdMYkfx8r37aOHpchH34cv0Jb5Im+1H07ywnshXNfUhRazOpubJRHn
|
||||
bjDuBwWS1/Vwp5AJ+QHsPXhJdl3qHc1szJZVJb3VyAWvG/bWApKfFuZX18tiI4N0
|
||||
EA==
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
<tls-crypt>
|
||||
-----BEGIN OpenVPN Static key V1-----
|
||||
6acef03f62675b4b1bbd03e53b187727
|
||||
423cea742242106cb2916a8a4c829756
|
||||
3d22c7e5cef430b1103c6f66eb1fc5b3
|
||||
75a672f158e2e2e936c3faa48b035a6d
|
||||
e17beaac23b5f03b10b868d53d03521d
|
||||
8ba115059da777a60cbfd7b2c9c57472
|
||||
78a15b8f6e68a3ef7fd583ec9f398c8b
|
||||
d4735dab40cbd1e3c62a822e97489186
|
||||
c30a0b48c7c38ea32ceb056d3fa5a710
|
||||
e10ccc7a0ddb363b08c3d2777a3395e1
|
||||
0c0b6080f56309192ab5aacd4b45f55d
|
||||
a61fc77af39bd81a19218a79762c3386
|
||||
2df55785075f37d8c71dc8a42097ee43
|
||||
344739a0dd48d03025b0450cf1fb5e8c
|
||||
aeb893d9a96d1f15519bb3c4dcb40ee3
|
||||
16672ea16c012664f8a9f11255518deb
|
||||
-----END OpenVPN Static key V1-----
|
||||
</tls-crypt>
|
||||
@@ -0,0 +1,123 @@
|
||||
# ==============================================================================
|
||||
# Copyright (c) 2023 Proton AG (Switzerland)
|
||||
# Email: contact@protonvpn.com
|
||||
#
|
||||
# The MIT License (MIT)
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
# of this software and associated documentation files (the "Software"), to deal
|
||||
# in the Software without restriction, including without limitation the rights
|
||||
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
# copies of the Software, and to permit persons to whom the Software is
|
||||
# furnished to do so, subject to the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be included in all
|
||||
# copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR # OTHERWISE, ARISING
|
||||
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
|
||||
# IN THE SOFTWARE.
|
||||
# ==============================================================================
|
||||
|
||||
# The server you are connecting to is using a circuit in order to separate entry IP from exit IP
|
||||
# The same entry IP allows to connect to multiple exit IPs in the same data center.
|
||||
|
||||
# If you want to explicitly select the exit IP corresponding to server CH-FREE#2 you need to
|
||||
# append a special suffix to your OpenVPN username.
|
||||
# Please use "Gtd5u0nRC3vf1oRt+b:0" in order to enforce exiting through CH-FREE#2.
|
||||
|
||||
# If you are a paying user you can also enable the ProtonVPN ad blocker (NetShield) or Moderate NAT:
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f1" to enable anti-malware filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f2" to additionally enable ad-blocking filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+nr" to enable Moderate NAT
|
||||
# Note that you can combine the "+nr" suffix with other suffixes.
|
||||
|
||||
client
|
||||
dev tun
|
||||
proto tcp
|
||||
|
||||
remote 138.199.6.177 7770
|
||||
remote 138.199.6.177 443
|
||||
remote 138.199.6.177 8443
|
||||
|
||||
remote-random
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
|
||||
cipher AES-256-GCM
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
tun-mtu 1500
|
||||
mssfix 0
|
||||
persist-key
|
||||
persist-tun
|
||||
|
||||
reneg-sec 0
|
||||
|
||||
remote-cert-tls server
|
||||
auth-user-pass
|
||||
|
||||
script-security 2
|
||||
up /etc/openvpn/update-resolv-conf
|
||||
down /etc/openvpn/update-resolv-conf
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIFnTCCA4WgAwIBAgIUCI574SM3Lyh47GyNl0WAOYrqb5QwDQYJKoZIhvcNAQEL
|
||||
BQAwXjELMAkGA1UEBhMCQ0gxHzAdBgNVBAoMFlByb3RvbiBUZWNobm9sb2dpZXMg
|
||||
QUcxEjAQBgNVBAsMCVByb3RvblZQTjEaMBgGA1UEAwwRUHJvdG9uVlBOIFJvb3Qg
|
||||
Q0EwHhcNMTkxMDE3MDgwNjQxWhcNMzkxMDEyMDgwNjQxWjBeMQswCQYDVQQGEwJD
|
||||
SDEfMB0GA1UECgwWUHJvdG9uIFRlY2hub2xvZ2llcyBBRzESMBAGA1UECwwJUHJv
|
||||
dG9uVlBOMRowGAYDVQQDDBFQcm90b25WUE4gUm9vdCBDQTCCAiIwDQYJKoZIhvcN
|
||||
AQEBBQADggIPADCCAgoCggIBAMkUT7zMUS5C+NjQ7YoGpVFlfbN9HFgG4JiKfHB8
|
||||
QxnPPRgyTi0zVOAj1ImsRilauY8Ddm5dQtd8qcApoz6oCx5cFiiSQG2uyhS/59Zl
|
||||
5wqIkw1o+CgwZgeWkq04lcrxhhfPgJZRFjrYVezy/Z2Ssd18s3/FFNQ+2iV1KC2K
|
||||
z8eSPr50u+l9vEKsKiNGkJTdlWjoDKZM2C15i/h8Smi+PdJlx7WMTtYoVC1Fzq0r
|
||||
aCPDQl18kspu11b6d8ECPWghKcDIIKuA0r0nGqF1GvH1AmbC/xUaNrKgz9AfioZL
|
||||
MP/l22tVG3KKM1ku0eYHX7NzNHgkM2JKnBBannImQQBGTAcvvUlnfF3AHx4vzx7H
|
||||
ahpBz8ebThx2uv+vzu8lCVEcKjQObGwLbAONJN2enug8hwSSZQv7tz7onDQWlYh0
|
||||
El5fnkrEQGbukNnSyOqTwfobvBllIPzBqdO38eZFA0YTlH9plYjIjPjGl931lFAA
|
||||
3G9t0x7nxAauLXN5QVp1yoF1tzXc5kN0SFAasM9VtVEOSMaGHLKhF+IMyVX8h5Iu
|
||||
IRC8u5O672r7cHS+Dtx87LjxypqNhmbf1TWyLJSoh0qYhMr+BbO7+N6zKRIZPI5b
|
||||
MXc8Be2pQwbSA4ZrDvSjFC9yDXmSuZTyVo6Bqi/KCUZeaXKof68oNxVYeGowNeQd
|
||||
g/znAgMBAAGjUzBRMB0GA1UdDgQWBBR44WtTuEKCaPPUltYEHZoyhJo+4TAfBgNV
|
||||
HSMEGDAWgBR44WtTuEKCaPPUltYEHZoyhJo+4TAPBgNVHRMBAf8EBTADAQH/MA0G
|
||||
CSqGSIb3DQEBCwUAA4ICAQBBmzCQlHxOJ6izys3TVpaze+rUkA9GejgsB2DZXIcm
|
||||
4Lj/SNzQsPlZRu4S0IZV253dbE1DoWlHanw5lnXwx8iU82X7jdm/5uZOwj2NqSqT
|
||||
bTn0WLAC6khEKKe5bPTf18UOcwN82Le3AnkwcNAaBO5/TzFQVgnVedXr2g6rmpp9
|
||||
gdedeEl9acB7xqfYfkrmijqYMm+xeG2rXaanch3HjweMDuZdT/Ub5G6oir0Kowft
|
||||
lA1ytjXRg+X+yWymTpF/zGLYfSodWWjMKhpzZtRJZ+9B0pWXUyY7SuCj5T5SMIAu
|
||||
x3NQQ46wSbHRolIlwh7zD7kBgkyLe7ByLvGFKa2Vw4PuWjqYwrRbFjb2+EKAwPu6
|
||||
VTWz/QQTU8oJewGFipw94Bi61zuaPvF1qZCHgYhVojRy6KcqncX2Hx9hjfVxspBZ
|
||||
DrVH6uofCmd99GmVu+qizybWQTrPaubfc/a2jJIbXc2bRQjYj/qmjE3hTlmO3k7V
|
||||
EP6i8CLhEl+dX75aZw9StkqjdpIApYwX6XNDqVuGzfeTXXclk4N4aDPwPFM/Yo/e
|
||||
KnvlNlKbljWdMYkfx8r37aOHpchH34cv0Jb5Im+1H07ywnshXNfUhRazOpubJRHn
|
||||
bjDuBwWS1/Vwp5AJ+QHsPXhJdl3qHc1szJZVJb3VyAWvG/bWApKfFuZX18tiI4N0
|
||||
EA==
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
<tls-crypt>
|
||||
-----BEGIN OpenVPN Static key V1-----
|
||||
6acef03f62675b4b1bbd03e53b187727
|
||||
423cea742242106cb2916a8a4c829756
|
||||
3d22c7e5cef430b1103c6f66eb1fc5b3
|
||||
75a672f158e2e2e936c3faa48b035a6d
|
||||
e17beaac23b5f03b10b868d53d03521d
|
||||
8ba115059da777a60cbfd7b2c9c57472
|
||||
78a15b8f6e68a3ef7fd583ec9f398c8b
|
||||
d4735dab40cbd1e3c62a822e97489186
|
||||
c30a0b48c7c38ea32ceb056d3fa5a710
|
||||
e10ccc7a0ddb363b08c3d2777a3395e1
|
||||
0c0b6080f56309192ab5aacd4b45f55d
|
||||
a61fc77af39bd81a19218a79762c3386
|
||||
2df55785075f37d8c71dc8a42097ee43
|
||||
344739a0dd48d03025b0450cf1fb5e8c
|
||||
aeb893d9a96d1f15519bb3c4dcb40ee3
|
||||
16672ea16c012664f8a9f11255518deb
|
||||
-----END OpenVPN Static key V1-----
|
||||
</tls-crypt>
|
||||
@@ -0,0 +1,123 @@
|
||||
# ==============================================================================
|
||||
# Copyright (c) 2023 Proton AG (Switzerland)
|
||||
# Email: contact@protonvpn.com
|
||||
#
|
||||
# The MIT License (MIT)
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
# of this software and associated documentation files (the "Software"), to deal
|
||||
# in the Software without restriction, including without limitation the rights
|
||||
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
# copies of the Software, and to permit persons to whom the Software is
|
||||
# furnished to do so, subject to the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be included in all
|
||||
# copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR # OTHERWISE, ARISING
|
||||
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
|
||||
# IN THE SOFTWARE.
|
||||
# ==============================================================================
|
||||
|
||||
# The server you are connecting to is using a circuit in order to separate entry IP from exit IP
|
||||
# The same entry IP allows to connect to multiple exit IPs in the same data center.
|
||||
|
||||
# If you want to explicitly select the exit IP corresponding to server CH-FREE#6 you need to
|
||||
# append a special suffix to your OpenVPN username.
|
||||
# Please use "Gtd5u0nRC3vf1oRt+b:0" in order to enforce exiting through CH-FREE#6.
|
||||
|
||||
# If you are a paying user you can also enable the ProtonVPN ad blocker (NetShield) or Moderate NAT:
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f1" to enable anti-malware filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f2" to additionally enable ad-blocking filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+nr" to enable Moderate NAT
|
||||
# Note that you can combine the "+nr" suffix with other suffixes.
|
||||
|
||||
client
|
||||
dev tun
|
||||
proto tcp
|
||||
|
||||
remote 149.88.27.232 7770
|
||||
remote 149.88.27.232 8443
|
||||
remote 149.88.27.232 443
|
||||
|
||||
remote-random
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
|
||||
cipher AES-256-GCM
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
tun-mtu 1500
|
||||
mssfix 0
|
||||
persist-key
|
||||
persist-tun
|
||||
|
||||
reneg-sec 0
|
||||
|
||||
remote-cert-tls server
|
||||
auth-user-pass
|
||||
|
||||
script-security 2
|
||||
up /etc/openvpn/update-resolv-conf
|
||||
down /etc/openvpn/update-resolv-conf
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIFnTCCA4WgAwIBAgIUCI574SM3Lyh47GyNl0WAOYrqb5QwDQYJKoZIhvcNAQEL
|
||||
BQAwXjELMAkGA1UEBhMCQ0gxHzAdBgNVBAoMFlByb3RvbiBUZWNobm9sb2dpZXMg
|
||||
QUcxEjAQBgNVBAsMCVByb3RvblZQTjEaMBgGA1UEAwwRUHJvdG9uVlBOIFJvb3Qg
|
||||
Q0EwHhcNMTkxMDE3MDgwNjQxWhcNMzkxMDEyMDgwNjQxWjBeMQswCQYDVQQGEwJD
|
||||
SDEfMB0GA1UECgwWUHJvdG9uIFRlY2hub2xvZ2llcyBBRzESMBAGA1UECwwJUHJv
|
||||
dG9uVlBOMRowGAYDVQQDDBFQcm90b25WUE4gUm9vdCBDQTCCAiIwDQYJKoZIhvcN
|
||||
AQEBBQADggIPADCCAgoCggIBAMkUT7zMUS5C+NjQ7YoGpVFlfbN9HFgG4JiKfHB8
|
||||
QxnPPRgyTi0zVOAj1ImsRilauY8Ddm5dQtd8qcApoz6oCx5cFiiSQG2uyhS/59Zl
|
||||
5wqIkw1o+CgwZgeWkq04lcrxhhfPgJZRFjrYVezy/Z2Ssd18s3/FFNQ+2iV1KC2K
|
||||
z8eSPr50u+l9vEKsKiNGkJTdlWjoDKZM2C15i/h8Smi+PdJlx7WMTtYoVC1Fzq0r
|
||||
aCPDQl18kspu11b6d8ECPWghKcDIIKuA0r0nGqF1GvH1AmbC/xUaNrKgz9AfioZL
|
||||
MP/l22tVG3KKM1ku0eYHX7NzNHgkM2JKnBBannImQQBGTAcvvUlnfF3AHx4vzx7H
|
||||
ahpBz8ebThx2uv+vzu8lCVEcKjQObGwLbAONJN2enug8hwSSZQv7tz7onDQWlYh0
|
||||
El5fnkrEQGbukNnSyOqTwfobvBllIPzBqdO38eZFA0YTlH9plYjIjPjGl931lFAA
|
||||
3G9t0x7nxAauLXN5QVp1yoF1tzXc5kN0SFAasM9VtVEOSMaGHLKhF+IMyVX8h5Iu
|
||||
IRC8u5O672r7cHS+Dtx87LjxypqNhmbf1TWyLJSoh0qYhMr+BbO7+N6zKRIZPI5b
|
||||
MXc8Be2pQwbSA4ZrDvSjFC9yDXmSuZTyVo6Bqi/KCUZeaXKof68oNxVYeGowNeQd
|
||||
g/znAgMBAAGjUzBRMB0GA1UdDgQWBBR44WtTuEKCaPPUltYEHZoyhJo+4TAfBgNV
|
||||
HSMEGDAWgBR44WtTuEKCaPPUltYEHZoyhJo+4TAPBgNVHRMBAf8EBTADAQH/MA0G
|
||||
CSqGSIb3DQEBCwUAA4ICAQBBmzCQlHxOJ6izys3TVpaze+rUkA9GejgsB2DZXIcm
|
||||
4Lj/SNzQsPlZRu4S0IZV253dbE1DoWlHanw5lnXwx8iU82X7jdm/5uZOwj2NqSqT
|
||||
bTn0WLAC6khEKKe5bPTf18UOcwN82Le3AnkwcNAaBO5/TzFQVgnVedXr2g6rmpp9
|
||||
gdedeEl9acB7xqfYfkrmijqYMm+xeG2rXaanch3HjweMDuZdT/Ub5G6oir0Kowft
|
||||
lA1ytjXRg+X+yWymTpF/zGLYfSodWWjMKhpzZtRJZ+9B0pWXUyY7SuCj5T5SMIAu
|
||||
x3NQQ46wSbHRolIlwh7zD7kBgkyLe7ByLvGFKa2Vw4PuWjqYwrRbFjb2+EKAwPu6
|
||||
VTWz/QQTU8oJewGFipw94Bi61zuaPvF1qZCHgYhVojRy6KcqncX2Hx9hjfVxspBZ
|
||||
DrVH6uofCmd99GmVu+qizybWQTrPaubfc/a2jJIbXc2bRQjYj/qmjE3hTlmO3k7V
|
||||
EP6i8CLhEl+dX75aZw9StkqjdpIApYwX6XNDqVuGzfeTXXclk4N4aDPwPFM/Yo/e
|
||||
KnvlNlKbljWdMYkfx8r37aOHpchH34cv0Jb5Im+1H07ywnshXNfUhRazOpubJRHn
|
||||
bjDuBwWS1/Vwp5AJ+QHsPXhJdl3qHc1szJZVJb3VyAWvG/bWApKfFuZX18tiI4N0
|
||||
EA==
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
<tls-crypt>
|
||||
-----BEGIN OpenVPN Static key V1-----
|
||||
6acef03f62675b4b1bbd03e53b187727
|
||||
423cea742242106cb2916a8a4c829756
|
||||
3d22c7e5cef430b1103c6f66eb1fc5b3
|
||||
75a672f158e2e2e936c3faa48b035a6d
|
||||
e17beaac23b5f03b10b868d53d03521d
|
||||
8ba115059da777a60cbfd7b2c9c57472
|
||||
78a15b8f6e68a3ef7fd583ec9f398c8b
|
||||
d4735dab40cbd1e3c62a822e97489186
|
||||
c30a0b48c7c38ea32ceb056d3fa5a710
|
||||
e10ccc7a0ddb363b08c3d2777a3395e1
|
||||
0c0b6080f56309192ab5aacd4b45f55d
|
||||
a61fc77af39bd81a19218a79762c3386
|
||||
2df55785075f37d8c71dc8a42097ee43
|
||||
344739a0dd48d03025b0450cf1fb5e8c
|
||||
aeb893d9a96d1f15519bb3c4dcb40ee3
|
||||
16672ea16c012664f8a9f11255518deb
|
||||
-----END OpenVPN Static key V1-----
|
||||
</tls-crypt>
|
||||
@@ -0,0 +1,10 @@
|
||||
client
|
||||
remote example.com 1194 udp
|
||||
|
||||
script-security 2
|
||||
setenv PATH /usr/bin
|
||||
up /etc/openvpn/scripts/update-systemd-resolved
|
||||
down /etc/openvpn/scripts/update-systemd-resolved
|
||||
down-pre
|
||||
|
||||
dhcp-option DOMAIN-ROUTE .
|
||||
@@ -0,0 +1,123 @@
|
||||
# ==============================================================================
|
||||
# Copyright (c) 2023 Proton AG (Switzerland)
|
||||
# Email: contact@protonvpn.com
|
||||
#
|
||||
# The MIT License (MIT)
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
# of this software and associated documentation files (the "Software"), to deal
|
||||
# in the Software without restriction, including without limitation the rights
|
||||
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
# copies of the Software, and to permit persons to whom the Software is
|
||||
# furnished to do so, subject to the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be included in all
|
||||
# copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR # OTHERWISE, ARISING
|
||||
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
|
||||
# IN THE SOFTWARE.
|
||||
# ==============================================================================
|
||||
|
||||
# The server you are connecting to is using a circuit in order to separate entry IP from exit IP
|
||||
# The same entry IP allows to connect to multiple exit IPs in the same data center.
|
||||
|
||||
# If you want to explicitly select the exit IP corresponding to server JP-FREE#33 you need to
|
||||
# append a special suffix to your OpenVPN username.
|
||||
# Please use "Gtd5u0nRC3vf1oRt+b:0" in order to enforce exiting through JP-FREE#33.
|
||||
|
||||
# If you are a paying user you can also enable the ProtonVPN ad blocker (NetShield) or Moderate NAT:
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f1" to enable anti-malware filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f2" to additionally enable ad-blocking filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+nr" to enable Moderate NAT
|
||||
# Note that you can combine the "+nr" suffix with other suffixes.
|
||||
|
||||
client
|
||||
dev tun
|
||||
proto tcp
|
||||
|
||||
remote 149.88.103.161 7770
|
||||
remote 149.88.103.161 8443
|
||||
remote 149.88.103.161 443
|
||||
|
||||
remote-random
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
|
||||
cipher AES-256-GCM
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
tun-mtu 1500
|
||||
mssfix 0
|
||||
persist-key
|
||||
persist-tun
|
||||
|
||||
reneg-sec 0
|
||||
|
||||
remote-cert-tls server
|
||||
auth-user-pass
|
||||
|
||||
script-security 2
|
||||
up /etc/openvpn/update-resolv-conf
|
||||
down /etc/openvpn/update-resolv-conf
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIFnTCCA4WgAwIBAgIUCI574SM3Lyh47GyNl0WAOYrqb5QwDQYJKoZIhvcNAQEL
|
||||
BQAwXjELMAkGA1UEBhMCQ0gxHzAdBgNVBAoMFlByb3RvbiBUZWNobm9sb2dpZXMg
|
||||
QUcxEjAQBgNVBAsMCVByb3RvblZQTjEaMBgGA1UEAwwRUHJvdG9uVlBOIFJvb3Qg
|
||||
Q0EwHhcNMTkxMDE3MDgwNjQxWhcNMzkxMDEyMDgwNjQxWjBeMQswCQYDVQQGEwJD
|
||||
SDEfMB0GA1UECgwWUHJvdG9uIFRlY2hub2xvZ2llcyBBRzESMBAGA1UECwwJUHJv
|
||||
dG9uVlBOMRowGAYDVQQDDBFQcm90b25WUE4gUm9vdCBDQTCCAiIwDQYJKoZIhvcN
|
||||
AQEBBQADggIPADCCAgoCggIBAMkUT7zMUS5C+NjQ7YoGpVFlfbN9HFgG4JiKfHB8
|
||||
QxnPPRgyTi0zVOAj1ImsRilauY8Ddm5dQtd8qcApoz6oCx5cFiiSQG2uyhS/59Zl
|
||||
5wqIkw1o+CgwZgeWkq04lcrxhhfPgJZRFjrYVezy/Z2Ssd18s3/FFNQ+2iV1KC2K
|
||||
z8eSPr50u+l9vEKsKiNGkJTdlWjoDKZM2C15i/h8Smi+PdJlx7WMTtYoVC1Fzq0r
|
||||
aCPDQl18kspu11b6d8ECPWghKcDIIKuA0r0nGqF1GvH1AmbC/xUaNrKgz9AfioZL
|
||||
MP/l22tVG3KKM1ku0eYHX7NzNHgkM2JKnBBannImQQBGTAcvvUlnfF3AHx4vzx7H
|
||||
ahpBz8ebThx2uv+vzu8lCVEcKjQObGwLbAONJN2enug8hwSSZQv7tz7onDQWlYh0
|
||||
El5fnkrEQGbukNnSyOqTwfobvBllIPzBqdO38eZFA0YTlH9plYjIjPjGl931lFAA
|
||||
3G9t0x7nxAauLXN5QVp1yoF1tzXc5kN0SFAasM9VtVEOSMaGHLKhF+IMyVX8h5Iu
|
||||
IRC8u5O672r7cHS+Dtx87LjxypqNhmbf1TWyLJSoh0qYhMr+BbO7+N6zKRIZPI5b
|
||||
MXc8Be2pQwbSA4ZrDvSjFC9yDXmSuZTyVo6Bqi/KCUZeaXKof68oNxVYeGowNeQd
|
||||
g/znAgMBAAGjUzBRMB0GA1UdDgQWBBR44WtTuEKCaPPUltYEHZoyhJo+4TAfBgNV
|
||||
HSMEGDAWgBR44WtTuEKCaPPUltYEHZoyhJo+4TAPBgNVHRMBAf8EBTADAQH/MA0G
|
||||
CSqGSIb3DQEBCwUAA4ICAQBBmzCQlHxOJ6izys3TVpaze+rUkA9GejgsB2DZXIcm
|
||||
4Lj/SNzQsPlZRu4S0IZV253dbE1DoWlHanw5lnXwx8iU82X7jdm/5uZOwj2NqSqT
|
||||
bTn0WLAC6khEKKe5bPTf18UOcwN82Le3AnkwcNAaBO5/TzFQVgnVedXr2g6rmpp9
|
||||
gdedeEl9acB7xqfYfkrmijqYMm+xeG2rXaanch3HjweMDuZdT/Ub5G6oir0Kowft
|
||||
lA1ytjXRg+X+yWymTpF/zGLYfSodWWjMKhpzZtRJZ+9B0pWXUyY7SuCj5T5SMIAu
|
||||
x3NQQ46wSbHRolIlwh7zD7kBgkyLe7ByLvGFKa2Vw4PuWjqYwrRbFjb2+EKAwPu6
|
||||
VTWz/QQTU8oJewGFipw94Bi61zuaPvF1qZCHgYhVojRy6KcqncX2Hx9hjfVxspBZ
|
||||
DrVH6uofCmd99GmVu+qizybWQTrPaubfc/a2jJIbXc2bRQjYj/qmjE3hTlmO3k7V
|
||||
EP6i8CLhEl+dX75aZw9StkqjdpIApYwX6XNDqVuGzfeTXXclk4N4aDPwPFM/Yo/e
|
||||
KnvlNlKbljWdMYkfx8r37aOHpchH34cv0Jb5Im+1H07ywnshXNfUhRazOpubJRHn
|
||||
bjDuBwWS1/Vwp5AJ+QHsPXhJdl3qHc1szJZVJb3VyAWvG/bWApKfFuZX18tiI4N0
|
||||
EA==
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
<tls-crypt>
|
||||
-----BEGIN OpenVPN Static key V1-----
|
||||
6acef03f62675b4b1bbd03e53b187727
|
||||
423cea742242106cb2916a8a4c829756
|
||||
3d22c7e5cef430b1103c6f66eb1fc5b3
|
||||
75a672f158e2e2e936c3faa48b035a6d
|
||||
e17beaac23b5f03b10b868d53d03521d
|
||||
8ba115059da777a60cbfd7b2c9c57472
|
||||
78a15b8f6e68a3ef7fd583ec9f398c8b
|
||||
d4735dab40cbd1e3c62a822e97489186
|
||||
c30a0b48c7c38ea32ceb056d3fa5a710
|
||||
e10ccc7a0ddb363b08c3d2777a3395e1
|
||||
0c0b6080f56309192ab5aacd4b45f55d
|
||||
a61fc77af39bd81a19218a79762c3386
|
||||
2df55785075f37d8c71dc8a42097ee43
|
||||
344739a0dd48d03025b0450cf1fb5e8c
|
||||
aeb893d9a96d1f15519bb3c4dcb40ee3
|
||||
16672ea16c012664f8a9f11255518deb
|
||||
-----END OpenVPN Static key V1-----
|
||||
</tls-crypt>
|
||||
@@ -0,0 +1,123 @@
|
||||
# ==============================================================================
|
||||
# Copyright (c) 2023 Proton AG (Switzerland)
|
||||
# Email: contact@protonvpn.com
|
||||
#
|
||||
# The MIT License (MIT)
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
# of this software and associated documentation files (the "Software"), to deal
|
||||
# in the Software without restriction, including without limitation the rights
|
||||
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
# copies of the Software, and to permit persons to whom the Software is
|
||||
# furnished to do so, subject to the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be included in all
|
||||
# copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR # OTHERWISE, ARISING
|
||||
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
|
||||
# IN THE SOFTWARE.
|
||||
# ==============================================================================
|
||||
|
||||
# The server you are connecting to is using a circuit in order to separate entry IP from exit IP
|
||||
# The same entry IP allows to connect to multiple exit IPs in the same data center.
|
||||
|
||||
# If you want to explicitly select the exit IP corresponding to server NO-FREE#4 you need to
|
||||
# append a special suffix to your OpenVPN username.
|
||||
# Please use "Gtd5u0nRC3vf1oRt+b:0" in order to enforce exiting through NO-FREE#4.
|
||||
|
||||
# If you are a paying user you can also enable the ProtonVPN ad blocker (NetShield) or Moderate NAT:
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f1" to enable anti-malware filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f2" to additionally enable ad-blocking filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+nr" to enable Moderate NAT
|
||||
# Note that you can combine the "+nr" suffix with other suffixes.
|
||||
|
||||
client
|
||||
dev tun
|
||||
proto tcp
|
||||
|
||||
remote 95.173.205.164 8443
|
||||
remote 95.173.205.164 7770
|
||||
remote 95.173.205.164 443
|
||||
|
||||
remote-random
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
|
||||
cipher AES-256-GCM
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
tun-mtu 1500
|
||||
mssfix 0
|
||||
persist-key
|
||||
persist-tun
|
||||
|
||||
reneg-sec 0
|
||||
|
||||
remote-cert-tls server
|
||||
auth-user-pass
|
||||
|
||||
script-security 2
|
||||
up /etc/openvpn/update-resolv-conf
|
||||
down /etc/openvpn/update-resolv-conf
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIFnTCCA4WgAwIBAgIUCI574SM3Lyh47GyNl0WAOYrqb5QwDQYJKoZIhvcNAQEL
|
||||
BQAwXjELMAkGA1UEBhMCQ0gxHzAdBgNVBAoMFlByb3RvbiBUZWNobm9sb2dpZXMg
|
||||
QUcxEjAQBgNVBAsMCVByb3RvblZQTjEaMBgGA1UEAwwRUHJvdG9uVlBOIFJvb3Qg
|
||||
Q0EwHhcNMTkxMDE3MDgwNjQxWhcNMzkxMDEyMDgwNjQxWjBeMQswCQYDVQQGEwJD
|
||||
SDEfMB0GA1UECgwWUHJvdG9uIFRlY2hub2xvZ2llcyBBRzESMBAGA1UECwwJUHJv
|
||||
dG9uVlBOMRowGAYDVQQDDBFQcm90b25WUE4gUm9vdCBDQTCCAiIwDQYJKoZIhvcN
|
||||
AQEBBQADggIPADCCAgoCggIBAMkUT7zMUS5C+NjQ7YoGpVFlfbN9HFgG4JiKfHB8
|
||||
QxnPPRgyTi0zVOAj1ImsRilauY8Ddm5dQtd8qcApoz6oCx5cFiiSQG2uyhS/59Zl
|
||||
5wqIkw1o+CgwZgeWkq04lcrxhhfPgJZRFjrYVezy/Z2Ssd18s3/FFNQ+2iV1KC2K
|
||||
z8eSPr50u+l9vEKsKiNGkJTdlWjoDKZM2C15i/h8Smi+PdJlx7WMTtYoVC1Fzq0r
|
||||
aCPDQl18kspu11b6d8ECPWghKcDIIKuA0r0nGqF1GvH1AmbC/xUaNrKgz9AfioZL
|
||||
MP/l22tVG3KKM1ku0eYHX7NzNHgkM2JKnBBannImQQBGTAcvvUlnfF3AHx4vzx7H
|
||||
ahpBz8ebThx2uv+vzu8lCVEcKjQObGwLbAONJN2enug8hwSSZQv7tz7onDQWlYh0
|
||||
El5fnkrEQGbukNnSyOqTwfobvBllIPzBqdO38eZFA0YTlH9plYjIjPjGl931lFAA
|
||||
3G9t0x7nxAauLXN5QVp1yoF1tzXc5kN0SFAasM9VtVEOSMaGHLKhF+IMyVX8h5Iu
|
||||
IRC8u5O672r7cHS+Dtx87LjxypqNhmbf1TWyLJSoh0qYhMr+BbO7+N6zKRIZPI5b
|
||||
MXc8Be2pQwbSA4ZrDvSjFC9yDXmSuZTyVo6Bqi/KCUZeaXKof68oNxVYeGowNeQd
|
||||
g/znAgMBAAGjUzBRMB0GA1UdDgQWBBR44WtTuEKCaPPUltYEHZoyhJo+4TAfBgNV
|
||||
HSMEGDAWgBR44WtTuEKCaPPUltYEHZoyhJo+4TAPBgNVHRMBAf8EBTADAQH/MA0G
|
||||
CSqGSIb3DQEBCwUAA4ICAQBBmzCQlHxOJ6izys3TVpaze+rUkA9GejgsB2DZXIcm
|
||||
4Lj/SNzQsPlZRu4S0IZV253dbE1DoWlHanw5lnXwx8iU82X7jdm/5uZOwj2NqSqT
|
||||
bTn0WLAC6khEKKe5bPTf18UOcwN82Le3AnkwcNAaBO5/TzFQVgnVedXr2g6rmpp9
|
||||
gdedeEl9acB7xqfYfkrmijqYMm+xeG2rXaanch3HjweMDuZdT/Ub5G6oir0Kowft
|
||||
lA1ytjXRg+X+yWymTpF/zGLYfSodWWjMKhpzZtRJZ+9B0pWXUyY7SuCj5T5SMIAu
|
||||
x3NQQ46wSbHRolIlwh7zD7kBgkyLe7ByLvGFKa2Vw4PuWjqYwrRbFjb2+EKAwPu6
|
||||
VTWz/QQTU8oJewGFipw94Bi61zuaPvF1qZCHgYhVojRy6KcqncX2Hx9hjfVxspBZ
|
||||
DrVH6uofCmd99GmVu+qizybWQTrPaubfc/a2jJIbXc2bRQjYj/qmjE3hTlmO3k7V
|
||||
EP6i8CLhEl+dX75aZw9StkqjdpIApYwX6XNDqVuGzfeTXXclk4N4aDPwPFM/Yo/e
|
||||
KnvlNlKbljWdMYkfx8r37aOHpchH34cv0Jb5Im+1H07ywnshXNfUhRazOpubJRHn
|
||||
bjDuBwWS1/Vwp5AJ+QHsPXhJdl3qHc1szJZVJb3VyAWvG/bWApKfFuZX18tiI4N0
|
||||
EA==
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
<tls-crypt>
|
||||
-----BEGIN OpenVPN Static key V1-----
|
||||
6acef03f62675b4b1bbd03e53b187727
|
||||
423cea742242106cb2916a8a4c829756
|
||||
3d22c7e5cef430b1103c6f66eb1fc5b3
|
||||
75a672f158e2e2e936c3faa48b035a6d
|
||||
e17beaac23b5f03b10b868d53d03521d
|
||||
8ba115059da777a60cbfd7b2c9c57472
|
||||
78a15b8f6e68a3ef7fd583ec9f398c8b
|
||||
d4735dab40cbd1e3c62a822e97489186
|
||||
c30a0b48c7c38ea32ceb056d3fa5a710
|
||||
e10ccc7a0ddb363b08c3d2777a3395e1
|
||||
0c0b6080f56309192ab5aacd4b45f55d
|
||||
a61fc77af39bd81a19218a79762c3386
|
||||
2df55785075f37d8c71dc8a42097ee43
|
||||
344739a0dd48d03025b0450cf1fb5e8c
|
||||
aeb893d9a96d1f15519bb3c4dcb40ee3
|
||||
16672ea16c012664f8a9f11255518deb
|
||||
-----END OpenVPN Static key V1-----
|
||||
</tls-crypt>
|
||||
@@ -0,0 +1,123 @@
|
||||
# ==============================================================================
|
||||
# Copyright (c) 2023 Proton AG (Switzerland)
|
||||
# Email: contact@protonvpn.com
|
||||
#
|
||||
# The MIT License (MIT)
|
||||
#
|
||||
# Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
# of this software and associated documentation files (the "Software"), to deal
|
||||
# in the Software without restriction, including without limitation the rights
|
||||
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
# copies of the Software, and to permit persons to whom the Software is
|
||||
# furnished to do so, subject to the following conditions:
|
||||
#
|
||||
# The above copyright notice and this permission notice shall be included in all
|
||||
# copies or substantial portions of the Software.
|
||||
#
|
||||
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR # OTHERWISE, ARISING
|
||||
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
|
||||
# IN THE SOFTWARE.
|
||||
# ==============================================================================
|
||||
|
||||
# The server you are connecting to is using a circuit in order to separate entry IP from exit IP
|
||||
# The same entry IP allows to connect to multiple exit IPs in the same data center.
|
||||
|
||||
# If you want to explicitly select the exit IP corresponding to server US-FREE#74 you need to
|
||||
# append a special suffix to your OpenVPN username.
|
||||
# Please use "Gtd5u0nRC3vf1oRt+b:0" in order to enforce exiting through US-FREE#74.
|
||||
|
||||
# If you are a paying user you can also enable the ProtonVPN ad blocker (NetShield) or Moderate NAT:
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f1" to enable anti-malware filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+f2" to additionally enable ad-blocking filtering
|
||||
# Use: "Gtd5u0nRC3vf1oRt+b:0+nr" to enable Moderate NAT
|
||||
# Note that you can combine the "+nr" suffix with other suffixes.
|
||||
|
||||
client
|
||||
dev tun
|
||||
proto tcp
|
||||
|
||||
remote 151.243.141.162 443
|
||||
remote 151.243.141.162 8443
|
||||
remote 151.243.141.162 7770
|
||||
|
||||
remote-random
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
|
||||
cipher AES-256-GCM
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
tun-mtu 1500
|
||||
mssfix 0
|
||||
persist-key
|
||||
persist-tun
|
||||
|
||||
reneg-sec 0
|
||||
|
||||
remote-cert-tls server
|
||||
auth-user-pass
|
||||
|
||||
script-security 2
|
||||
up /etc/openvpn/update-resolv-conf
|
||||
down /etc/openvpn/update-resolv-conf
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIFnTCCA4WgAwIBAgIUCI574SM3Lyh47GyNl0WAOYrqb5QwDQYJKoZIhvcNAQEL
|
||||
BQAwXjELMAkGA1UEBhMCQ0gxHzAdBgNVBAoMFlByb3RvbiBUZWNobm9sb2dpZXMg
|
||||
QUcxEjAQBgNVBAsMCVByb3RvblZQTjEaMBgGA1UEAwwRUHJvdG9uVlBOIFJvb3Qg
|
||||
Q0EwHhcNMTkxMDE3MDgwNjQxWhcNMzkxMDEyMDgwNjQxWjBeMQswCQYDVQQGEwJD
|
||||
SDEfMB0GA1UECgwWUHJvdG9uIFRlY2hub2xvZ2llcyBBRzESMBAGA1UECwwJUHJv
|
||||
dG9uVlBOMRowGAYDVQQDDBFQcm90b25WUE4gUm9vdCBDQTCCAiIwDQYJKoZIhvcN
|
||||
AQEBBQADggIPADCCAgoCggIBAMkUT7zMUS5C+NjQ7YoGpVFlfbN9HFgG4JiKfHB8
|
||||
QxnPPRgyTi0zVOAj1ImsRilauY8Ddm5dQtd8qcApoz6oCx5cFiiSQG2uyhS/59Zl
|
||||
5wqIkw1o+CgwZgeWkq04lcrxhhfPgJZRFjrYVezy/Z2Ssd18s3/FFNQ+2iV1KC2K
|
||||
z8eSPr50u+l9vEKsKiNGkJTdlWjoDKZM2C15i/h8Smi+PdJlx7WMTtYoVC1Fzq0r
|
||||
aCPDQl18kspu11b6d8ECPWghKcDIIKuA0r0nGqF1GvH1AmbC/xUaNrKgz9AfioZL
|
||||
MP/l22tVG3KKM1ku0eYHX7NzNHgkM2JKnBBannImQQBGTAcvvUlnfF3AHx4vzx7H
|
||||
ahpBz8ebThx2uv+vzu8lCVEcKjQObGwLbAONJN2enug8hwSSZQv7tz7onDQWlYh0
|
||||
El5fnkrEQGbukNnSyOqTwfobvBllIPzBqdO38eZFA0YTlH9plYjIjPjGl931lFAA
|
||||
3G9t0x7nxAauLXN5QVp1yoF1tzXc5kN0SFAasM9VtVEOSMaGHLKhF+IMyVX8h5Iu
|
||||
IRC8u5O672r7cHS+Dtx87LjxypqNhmbf1TWyLJSoh0qYhMr+BbO7+N6zKRIZPI5b
|
||||
MXc8Be2pQwbSA4ZrDvSjFC9yDXmSuZTyVo6Bqi/KCUZeaXKof68oNxVYeGowNeQd
|
||||
g/znAgMBAAGjUzBRMB0GA1UdDgQWBBR44WtTuEKCaPPUltYEHZoyhJo+4TAfBgNV
|
||||
HSMEGDAWgBR44WtTuEKCaPPUltYEHZoyhJo+4TAPBgNVHRMBAf8EBTADAQH/MA0G
|
||||
CSqGSIb3DQEBCwUAA4ICAQBBmzCQlHxOJ6izys3TVpaze+rUkA9GejgsB2DZXIcm
|
||||
4Lj/SNzQsPlZRu4S0IZV253dbE1DoWlHanw5lnXwx8iU82X7jdm/5uZOwj2NqSqT
|
||||
bTn0WLAC6khEKKe5bPTf18UOcwN82Le3AnkwcNAaBO5/TzFQVgnVedXr2g6rmpp9
|
||||
gdedeEl9acB7xqfYfkrmijqYMm+xeG2rXaanch3HjweMDuZdT/Ub5G6oir0Kowft
|
||||
lA1ytjXRg+X+yWymTpF/zGLYfSodWWjMKhpzZtRJZ+9B0pWXUyY7SuCj5T5SMIAu
|
||||
x3NQQ46wSbHRolIlwh7zD7kBgkyLe7ByLvGFKa2Vw4PuWjqYwrRbFjb2+EKAwPu6
|
||||
VTWz/QQTU8oJewGFipw94Bi61zuaPvF1qZCHgYhVojRy6KcqncX2Hx9hjfVxspBZ
|
||||
DrVH6uofCmd99GmVu+qizybWQTrPaubfc/a2jJIbXc2bRQjYj/qmjE3hTlmO3k7V
|
||||
EP6i8CLhEl+dX75aZw9StkqjdpIApYwX6XNDqVuGzfeTXXclk4N4aDPwPFM/Yo/e
|
||||
KnvlNlKbljWdMYkfx8r37aOHpchH34cv0Jb5Im+1H07ywnshXNfUhRazOpubJRHn
|
||||
bjDuBwWS1/Vwp5AJ+QHsPXhJdl3qHc1szJZVJb3VyAWvG/bWApKfFuZX18tiI4N0
|
||||
EA==
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
<tls-crypt>
|
||||
-----BEGIN OpenVPN Static key V1-----
|
||||
6acef03f62675b4b1bbd03e53b187727
|
||||
423cea742242106cb2916a8a4c829756
|
||||
3d22c7e5cef430b1103c6f66eb1fc5b3
|
||||
75a672f158e2e2e936c3faa48b035a6d
|
||||
e17beaac23b5f03b10b868d53d03521d
|
||||
8ba115059da777a60cbfd7b2c9c57472
|
||||
78a15b8f6e68a3ef7fd583ec9f398c8b
|
||||
d4735dab40cbd1e3c62a822e97489186
|
||||
c30a0b48c7c38ea32ceb056d3fa5a710
|
||||
e10ccc7a0ddb363b08c3d2777a3395e1
|
||||
0c0b6080f56309192ab5aacd4b45f55d
|
||||
a61fc77af39bd81a19218a79762c3386
|
||||
2df55785075f37d8c71dc8a42097ee43
|
||||
344739a0dd48d03025b0450cf1fb5e8c
|
||||
aeb893d9a96d1f15519bb3c4dcb40ee3
|
||||
16672ea16c012664f8a9f11255518deb
|
||||
-----END OpenVPN Static key V1-----
|
||||
</tls-crypt>
|
||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,71 @@
|
||||
#!/usr/bin/env bash
|
||||
#
|
||||
# Parses DHCP options from openvpn to update resolv.conf
|
||||
# To use set as 'up' and 'down' script in your openvpn *.conf:
|
||||
# up /etc/openvpn/update-resolv-conf
|
||||
# down /etc/openvpn/update-resolv-conf
|
||||
#
|
||||
# Used snippets of resolvconf script by Thomas Hood <jdthood@yahoo.co.uk>
|
||||
# and Chris Hanson
|
||||
# Licensed under the GNU GPL. See /usr/share/common-licenses/GPL.
|
||||
# 07/2013 colin@daedrum.net Fixed intet name
|
||||
# 05/2006 chlauber@bnc.ch
|
||||
#
|
||||
# Example envs set from openvpn:
|
||||
# foreign_option_1='dhcp-option DNS 193.43.27.132'
|
||||
# foreign_option_2='dhcp-option DNS 193.43.27.133'
|
||||
# foreign_option_3='dhcp-option DOMAIN be.bnc.ch'
|
||||
# foreign_option_4='dhcp-option DOMAIN-SEARCH bnc.local'
|
||||
|
||||
## The 'type' builtins will look for file in $PATH variable, so we set the
|
||||
## PATH below. You might need to directly set the path to 'resolvconf'
|
||||
## manually if it still doesn't work, i.e.
|
||||
## RESOLVCONF=/usr/sbin/resolvconf
|
||||
export PATH=$PATH:/sbin:/usr/sbin:/bin:/usr/bin
|
||||
RESOLVCONF=$(type -p resolvconf)
|
||||
|
||||
case $script_type in
|
||||
|
||||
up)
|
||||
for optionname in ${!foreign_option_*} ; do
|
||||
option="${!optionname}"
|
||||
echo $option
|
||||
part1=$(echo "$option" | cut -d " " -f 1)
|
||||
if [ "$part1" == "dhcp-option" ] ; then
|
||||
part2=$(echo "$option" | cut -d " " -f 2)
|
||||
part3=$(echo "$option" | cut -d " " -f 3)
|
||||
if [ "$part2" == "DNS" ] ; then
|
||||
IF_DNS_NAMESERVERS="$IF_DNS_NAMESERVERS $part3"
|
||||
fi
|
||||
if [[ "$part2" == "DOMAIN" || "$part2" == "DOMAIN-SEARCH" ]] ; then
|
||||
IF_DNS_SEARCH="$IF_DNS_SEARCH $part3"
|
||||
fi
|
||||
fi
|
||||
done
|
||||
R=""
|
||||
if [ "$IF_DNS_SEARCH" ]; then
|
||||
R="search "
|
||||
for DS in $IF_DNS_SEARCH ; do
|
||||
R="${R} $DS"
|
||||
done
|
||||
R="${R}
|
||||
"
|
||||
fi
|
||||
|
||||
for NS in $IF_DNS_NAMESERVERS ; do
|
||||
R="${R}nameserver $NS
|
||||
"
|
||||
done
|
||||
#echo -n "$R" | $RESOLVCONF -x -p -a "${dev}"
|
||||
echo -n "$R" | $RESOLVCONF -x -a "${dev}.inet"
|
||||
;;
|
||||
down)
|
||||
$RESOLVCONF -d "${dev}.inet"
|
||||
;;
|
||||
esac
|
||||
|
||||
# Workaround / jm@epiclabs.io
|
||||
# force exit with no errors. Due to an apparent conflict with the Network Manager
|
||||
# $RESOLVCONF sometimes exits with error code 6 even though it has performed the
|
||||
# action correctly and OpenVPN shuts down.
|
||||
exit 0
|
||||
@@ -0,0 +1,4 @@
|
||||
nameserver 1.1.1.1
|
||||
nameserver 8.26.56.26
|
||||
nameserver 208.67.222.222
|
||||
nameserver 209.244.0.3
|
||||
@@ -0,0 +1,44 @@
|
||||
# This file is part of systemd. -> systemctl enable --now systemd-resolved
|
||||
#
|
||||
# systemd is free software; you can redistribute it and/or modify it under the
|
||||
# terms of the GNU Lesser General Public License as published by the Free
|
||||
# Software Foundation; either version 2.1 of the License, or (at your option)
|
||||
# any later version.
|
||||
#
|
||||
# Entries in this file show the compile time defaults. Local configuration
|
||||
# should be created by either modifying this file (or a copy of it placed in
|
||||
# /etc/ if the original file is shipped in /usr/), or by creating "drop-ins" in
|
||||
# the /etc/systemd/resolved.conf.d/ directory. The latter is generally
|
||||
# recommended. Defaults can be restored by simply deleting the main
|
||||
# configuration file and all drop-ins located in /etc/.
|
||||
#
|
||||
# Use 'systemd-analyze cat-config systemd/resolved.conf' to display the full config.
|
||||
#
|
||||
# See resolved.conf(5) for details.
|
||||
|
||||
[Resolve]
|
||||
# Some examples of DNS servers which may be used for DNS= and FallbackDNS=:
|
||||
DNS=1.1.1.1 1.0.0.1 2606:4700:4700::1111 2606:4700:4700::1001 #cloudflare-dns.com
|
||||
# Quad9: 9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net
|
||||
FallbackDNS=193.110.81.0 185.253.5.0 2a0f:fc80:: 2a0f:fc81:: #dns0.eu
|
||||
#
|
||||
# Using DNS= configures global DNS servers and does not suppress link-specific
|
||||
# configuration. Parallel requests will be sent to per-link DNS servers
|
||||
# configured automatically by systemd-networkd.service(8), NetworkManager(8), or
|
||||
# similar management services, or configured manually via resolvectl(1). See
|
||||
# resolved.conf(5) and systemd-resolved(8) for more details.
|
||||
#DNS=
|
||||
#FallbackDNS=9.9.9.9#dns.quad9.net 2620:fe::9#dns.quad9.net 1.1.1.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 8.8.8.8#dns.google 2001:4860:4860::8888#dns.google
|
||||
#Domains=
|
||||
DNSSEC=yes
|
||||
DNSOverTLS=yes
|
||||
MulticastDNS=yes
|
||||
LLMNR=yes
|
||||
Cache=yes
|
||||
CacheFromLocalhost=no
|
||||
DNSStubListener=yes
|
||||
#DNSStubListenerExtra=
|
||||
ReadEtcHosts=yes
|
||||
#ResolveUnicastSingleLabel=no
|
||||
#StaleRetentionSec=0
|
||||
#RefuseRecordTypes=
|
||||
@@ -0,0 +1,12 @@
|
||||
[Unit]
|
||||
Description=watch connections
|
||||
After=network-online.target
|
||||
|
||||
[Service]
|
||||
ExecStart=/bin/bash /etc/systemd/system/tcpd.sh
|
||||
After=tcpd-bkup.service
|
||||
Type=simple
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
||||
Executable
+10
@@ -0,0 +1,10 @@
|
||||
#!/usr/bin/bash
|
||||
|
||||
. /etc/env
|
||||
|
||||
mkdir -p $LOG_CONN_DIR
|
||||
tcpdump -n -l > $LOG_CONN
|
||||
|
||||
exit 0
|
||||
|
||||
|
||||
Executable
+21
@@ -0,0 +1,21 @@
|
||||
#!/usr/bin/bash
|
||||
#run from crontab
|
||||
|
||||
. /home/.bashrc
|
||||
|
||||
. refresh_time
|
||||
|
||||
STATUS=ronron
|
||||
if [ -f $NET_STATUS ] ; then
|
||||
STATUS=$(cat $NET_STATUS)
|
||||
fi
|
||||
|
||||
DIR=$LOG_CONN_DIR/$STATUS
|
||||
mkdir -p $DIR
|
||||
grepip $LOG_CONN > $DIR/${DATE}_${TIME}.conn
|
||||
mv -f $LOG_CONN $LOG_CONN_DIR/prev.log
|
||||
systemctl restart tcpd
|
||||
|
||||
exit 0
|
||||
|
||||
|
||||
Reference in New Issue
Block a user