mirror of
https://github.com/qdm12/gluetun.git
synced 2025-12-11 04:38:54 -06:00
85890520ab
- New option: `HEALTH_ICMP_TARGET_IP` defaults to `0.0.0.0` meaning use the VPN server public IP address. - Options removed: `HEALTH_VPN_INITIAL_DURATION` and `HEALTH_VPN_ADDITIONAL_DURATION` - times and retries are handpicked and hardcoded. - Less aggressive checks and less false positive detection
53 lines
1.8 KiB
Go
53 lines
1.8 KiB
Go
package vpn
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
"github.com/qdm12/gluetun/internal/configuration/settings"
|
|
"github.com/qdm12/gluetun/internal/models"
|
|
"github.com/qdm12/gluetun/internal/openvpn"
|
|
"github.com/qdm12/gluetun/internal/provider"
|
|
)
|
|
|
|
// setupOpenVPN sets OpenVPN up using the configurators and settings given.
|
|
// It returns a serverName for port forwarding (PIA) and an error if it fails.
|
|
func setupOpenVPN(ctx context.Context, fw Firewall,
|
|
openvpnConf OpenVPN, providerConf provider.Provider,
|
|
settings settings.VPN, ipv6Supported bool, starter CmdStarter,
|
|
logger openvpn.Logger) (runner *openvpn.Runner, connection models.Connection, err error,
|
|
) {
|
|
connection, err = providerConf.GetConnection(settings.Provider.ServerSelection, ipv6Supported)
|
|
if err != nil {
|
|
return nil, models.Connection{}, fmt.Errorf("finding a valid server connection: %w", err)
|
|
}
|
|
|
|
lines := providerConf.OpenVPNConfig(connection, settings.OpenVPN, ipv6Supported)
|
|
|
|
if err := openvpnConf.WriteConfig(lines); err != nil {
|
|
return nil, models.Connection{}, fmt.Errorf("writing configuration to file: %w", err)
|
|
}
|
|
|
|
if *settings.OpenVPN.User != "" {
|
|
err := openvpnConf.WriteAuthFile(*settings.OpenVPN.User, *settings.OpenVPN.Password)
|
|
if err != nil {
|
|
return nil, models.Connection{}, fmt.Errorf("writing auth to file: %w", err)
|
|
}
|
|
}
|
|
|
|
if *settings.OpenVPN.KeyPassphrase != "" {
|
|
err := openvpnConf.WriteAskPassFile(*settings.OpenVPN.KeyPassphrase)
|
|
if err != nil {
|
|
return nil, models.Connection{}, fmt.Errorf("writing askpass file: %w", err)
|
|
}
|
|
}
|
|
|
|
if err := fw.SetVPNConnection(ctx, connection, settings.OpenVPN.Interface); err != nil {
|
|
return nil, models.Connection{}, fmt.Errorf("allowing VPN connection through firewall: %w", err)
|
|
}
|
|
|
|
runner = openvpn.NewRunner(settings.OpenVPN, starter, logger)
|
|
|
|
return runner, connection, nil
|
|
}
|