proxy-vpn
Features
- Supports CONNECT method and forwarding of HTTPS connections
- Supports TLS operation mode (HTTP(S) proxy over TLS)
- Supports client authentication with client TLS certificates
- Supports HTTP/2
Usage
For run OpenVPN prepare 2 files
- login/password file: auth
- client VPN config: client.ovpn
Example auth file
login
pasword
Example client.ovpn file
client
dev tun
reneg-sec 0
persist-tun
persist-key
ping 5
nobind
allow-compression no
remote-random
remote-cert-tls server
auth-nocache
route-metric 1
cipher AES-256-CBC
auth sha512
<ca>
-----BEGIN CERTIFICATE-----
.......................
.......................
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
.......................
.......................
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
.......................
.......................
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
.......................
.......................
-----END PRIVATE KEY-----
</key>
remote server.example.com
proto udp
port 1194
Exmaple compose.yaml file
services:
proxy:
image: ghcr.io/rooty/proxy-vpn:latest
restart: always
privileged: true
devices:
- /dev/net/tun
dns:
- 8.8.8.8
volumes:
- '/path/to/file.ovpn':/etc/openvpn/client.ovpn:ro
- '/path/to/file.auth':/etc/openvpn/auth:ro
ports:
- 127.0.0.1:8888:8888
healthcheck:
test: ["CMD", "check"]
interval: 2s
timeout: 60s
retries: 20
networks:
- vpn-net