Fabio/openvpn-install
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix unbound setup for existing installations

Browse source
This commit is contained in:
angristan 2018-09-15 18:51:23 +02:00
parent d496ed9f5c
commit 09f89cd3d8
1 changed files with 8 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
openvpn-install.sh
View file

@ -176,27 +176,26 @@ private-address: ::ffff:0:0/96" >> /etc/unbound/unbound.conf
else
echo ""
echo "Unbound is already installed."
echo "You can allow the script to configure it automatically for OpenVPN integration:"
echo "an 'include:' statement will be added to 'unbound.conf' with the necessary changes in a separate 'openvpn-server.conf' file."
echo "No other changes are made to the current configuration."
echo "You can allow the script to configure it in order to use it from your OpenVPN clients"
echo "We will simply add a second server to /etc/unbound/unbound.conf for the OpenVPN subnet."
echo "No changes are made to the current configuration."
while [[ $CONTINUE != "y" && $CONTINUE != "n" ]]; do
read -rp "Apply configuration changes? [y/n]: " -e CONTINUE
done
if [[ $CONTINUE = "y" ]]; then
# Add include: statement
awk '{ print } !flag && /server:/ { print " include: /etc/unbound/openvpn-server.conf"; flag = 1 }' /etc/unbound/unbound.conf > /etc/unbound/unbound.conf
# Add OpenVPN integration
echo 'interface: 10.8.0.1
access-control: 10.8.0.1/24 allow' > /etc/unbound/openvpn-server.conf
echo 'server:
interface: 10.8.0.1
access-control: 10.8.0.1/24 allow' >> /etc/unbound/unbound.conf
# Restart the service
systemctl restart unbound
else
echo "OpenVPN will be configured to use 10.8.0.1 IP for clients DNS"
echo "You need to manually configure Unbound to listen on this interface and accept connections from the subnet"
echo "OpenVPN clients will be configured to use 10.8.0.1 as DNS resolver."
echo "You need to manually configure Unbound to listen on this interface and accept connections from the subnet."
fi
fi
}