Oracle Linux/Obfuscation - Revision history

R00t: /* Create VPN Management Service */

2021-04-22T20:42:57Z

‎Create VPN Management Service

R00t: /* Create VPN Management Service */

2021-04-22T19:24:51Z

‎Create VPN Management Service

R00t: /* Create VPN Management Service */

2021-04-22T18:29:01Z

‎Create VPN Management Service

R00t at 18:27, 22 April 2021

2021-04-22T18:27:50Z

R00t at 18:26, 22 April 2021

2021-04-22T18:26:19Z

R00t: /* Create VPN Service */

2021-04-22T18:00:25Z

‎Create VPN Service

R00t at 17:59, 22 April 2021

2021-04-22T17:59:16Z

R00t at 17:50, 22 April 2021

2021-04-22T17:50:33Z

R00t at 17:37, 22 April 2021

2021-04-22T17:37:52Z

R00t at 17:35, 22 April 2021

2021-04-22T17:35:00Z

@@ Line 50: / Line 50: @@
 #!/bin/bash
-dyndns="r00tedvw.duckdns.org"
+dyndns="dyndns.tld"
 logfile="/var/log/vpnmanager/vpnmanager.log"
-slackwebhookurl="https://hooks.slack.com/services/<webhookUUID>"
+enableslack=true
 limit=10
@@ Line 79: / Line 80: @@
 function slacksend {
-         curl -X POST -H 'Content-type: application/json' --data '{"text":"'"$1"'"}' $slackwebhookurl
+         if [ "$enableslack" = true ]; then
+}
@@ Line 97: / Line 100: @@
                      msg="$(date +%F"|"%R:%S) -- ERROR:: Unable to determine internet IP address."
                      echo "$msg" >> $logfile
-                     slacksend "$msg"
+                     if [[ $health -ge 3 ]]; then
                  fi
              fi
@@ Line 109: / Line 114: @@
          msg="$(date +%F"|"%R:%S) -- ERROR:: VPN is down!!"
          echo "$msg" >> $logfile
-         slacksend "$msg"
+         if [[ $health -ge 3 ]]; then
          trap exit 1 SIGINT
          sleep 2
          msg="$(date +%F"|"%R:%S) -- Restarting VPN..."
          echo "$msg" >> $logfile
-         slacksend "$msg"
+         if [[ $health -ge 3 ]]; then
          systemctl restart vpn.service
          sleep 10
          limit=10
          compareip
      else
@@ Line 125: / Line 134: @@
                  echo "$msg" >> $logfile
                  unset limit
-                 if [[ $status -eq 0 ]]; then
+                 if [[ $health -ge 3 ]]; then
                          slacksend "$msg"
                  fi
          else
@@ Line 134: / Line 142: @@
          trap exit 1 SIGINT
          sleep 10
-         unset ipaddr
+         unset ipaddr health
          compareip
      fi

@@ Line 50: / Line 50: @@
 #!/bin/bash
-dyndns="dyndns.tld"
+dyndns="r00tedvw.duckdns.org"
 logfile="/var/log/vpnmanager/vpnmanager.log"
 limit=10
@@ Line 76: / Line 77: @@
 dyndnsip=$(dig -t a +short $dyndns)
 function checkip {
@@ Line 90: / Line 95: @@
                      ipaddr=$(curl --max-time 10 --max-filesize 1000 --no-buffer --silent ident.me)
                  else
-                     echo "ERROR:: Unable to determine internet IP address." >> $logfile
+                     msg="$(date +%F"|"%R:%S) -- ERROR:: Unable to determine internet IP address."
                  fi
              fi
@@ Line 100: / Line 107: @@
      checkip
      if [ -z $ipaddr ] || [ $dyndnsip = $ipaddr ]; then
-         echo "ERROR:: VPN is down!!" >> $logfile
+         msg="$(date +%F"|"%R:%S) -- ERROR:: VPN is down!!"
          trap exit 1 SIGINT
          sleep 2
-         echo "Restarting VPN..." >> $logfile
+         msg="$(date +%F"|"%R:%S) -- Restarting VPN..."
          systemctl restart vpn.service
          sleep 10
          limit=10
@@ Line 110: / Line 122: @@
      else
          if [[ $limit -eq 10 ]]; then
-                 echo "$(date +%F"|"%R:%S) -- VPN appears up.  VPN IP: $ipaddr is not equal to dyndns IP: $dyndnsip" >> $logfile
+                 msg="$(date +%F"|"%R:%S) -- VPN appears up.  VPN IP: $ipaddr is not equal to dyndns IP: $dyndnsip"
                  unset limit
          else
                  ((limit++))

@@ Line 139: / Line 139: @@
 [Install]
 WantedBy=multi-user.target </nowiki>
   <nowiki>~$ sudo systemctl daemon-reload
 ~$ sudo systemctl start vpnmanager.service</nowiki>

@@ Line 2: / Line 2: @@
 =OpenVPN with ProtonVPN=
-Go to [[protonvpn.com protonvpn.com]], create an account, select the free plan, goto downloads and select linux, tcp, and the free server configs.<br>
+Go to [https://protonvpn.com https://protonvpn.com], create an account, select the free plan, goto downloads and select linux, tcp, and the free server configs.<br>
 Download one of the configuration files and share it with your server (scp).<br>
 Create a file with the username and password on first two lines.

@@ Line 2: / Line 2: @@
 =OpenVPN with ProtonVPN=
-Go to [protonvpn.com protonvpn.com], create an account, select the free plan, goto downloads and select linux, tcp, and the free server configs.<br>
+Go to [[protonvpn.com protonvpn.com]], create an account, select the free plan, goto downloads and select linux, tcp, and the free server configs.<br>
 Download one of the configuration files and share it with your server (scp).<br>
 Create a file with the username and password on first two lines.

@@ Line 20: / Line 20: @@
 vpnconfig=/opt/vpn/nl-free-01.protonvpn.com.tcp.ovpn
-openvpn --config $vpnconfig --auth-user-pass $vpnauth
+openvpn --config $vpnconfig --auth-user-pass $vpnauth </nowiki>
-~$ sudo touch /etc/systemd/system/vpn.service
+ <nowiki>~$ sudo touch /etc/systemd/system/vpn.service
 ~$ sudo chown root:root /etc/systemd/system/vpn.service
-~$ sudo chmod 750 /etc/systemd/system/vpn.service
+~$ sudo chmod 750 /etc/systemd/system/vpn.service </nowiki>
-~$ sudo vim /etc/systemd/system/vpn.service
+ <nowiki>~$ sudo vim /etc/systemd/system/vpn.service
 [Unit]
 Description=VPN

@@ Line 13: / Line 13: @@
 ~$ sudo touch /opt/vpn/vpn.sh
 ~$ sudo chown root:root /opt/vpn/vpn.sh
-~$ sudo chmod 750 /opt/vpn/vpn.sh
+~$ sudo chmod 750 /opt/vpn/vpn.sh</nowiki>
 ~$ sudo vim /opt/vpn/vpn.sh
 #!/bin/bash
 vpnauth=/opt/vpn/login.conf
@@ Line 34: / Line 35: @@
 [Install]
-WantedBy=multi-user.target
+WantedBy=multi-user.target</nowiki>
 ~$ sudo systemctl daemon-reload
 ~$ sudo systemctl start vpn.service</nowiki>
@@ Line 43: / Line 45: @@
   <nowiki>~$ sudo touch /opt/vpn/vpnmanager.sh
 ~$ sudo chown root:root /opt/vpn/vpnmanager.sh
-~$ sudo chmod 750 /opt/vpn/vpnmanager.sh
+~$ sudo chmod 750 /opt/vpn/vpnmanager.sh</nowiki>
 ~$ sudo vim /opt/vpn/vpnmanager.sh
 #!/bin/bash
@@ Line 119: / Line 122: @@
+}
-compareip
+compareip</nowiki>
-~$ sudo touch /etc/systemd/system/vpnmanager.service
+ <nowiki>~$ sudo touch /etc/systemd/system/vpnmanager.service
 ~$ sudo chown root:root /etc/systemd/system/vpnmanager.service
-~$ sudo chmod 750 /etc/systemd/system/vpnmanager.service
+~$ sudo chmod 750 /etc/systemd/system/vpnmanager.service</nowiki>
 ~$ sudo vim /etc/systemd/system/vpnmanager.service
 [Unit]
 Description=VPN Manager
@@ Line 134: / Line 138: @@
 [Install]
-WantedBy=multi-user.target
+WantedBy=multi-user.target </nowiki>
-~$ sudo systemctl daemon-reload
+ <nowiki>~$ sudo systemctl daemon-reload
 ~$ sudo systemctl start vpnmanager.service</nowiki>

@@ Line 41: / Line 41: @@
 We also want a management service to make sure the VPN is always connected and if not, stop any reliant services.<br>
 The OpenVPN service may not die when the connection is terminated from the host end, as such I cant depend on the service state so I've opted to rely on the exposed IP address and compare it to a dynamic dns entry.
-  <nowiki>~$ sudo touch /opt/vpn/vpnmanagement.sh
+  <nowiki>~$ sudo touch /opt/vpn/vpnmanager.sh
-~$ sudo chown root:root /opt/vpn/vpnmanagement.sh
+~$ sudo chown root:root /opt/vpn/vpnmanager.sh
-~$ sudo chmod 750 /opt/vpn/vpnmanagement.sh
+~$ sudo chmod 750 /opt/vpn/vpnmanager.sh
-~$ sudo vim /opt/vpn/vpnmanagement.sh
+~$ sudo vim /opt/vpn/vpnmanager.sh
 #!/bin/bash
@@ Line 121: / Line 121: @@
 compareip
-~$ sudo touch /etc/systemd/system/vpnmanagement.service
+~$ sudo touch /etc/systemd/system/vpnmanager.service
-~$ sudo chown root:root /etc/systemd/system/vpnmanagement.service
+~$ sudo chown root:root /etc/systemd/system/vpnmanager.service
-~$ sudo chmod 750 /etc/systemd/system/vpnmanagement.service
+~$ sudo chmod 750 /etc/systemd/system/vpnmanager.service
-~$ sudo vim /etc/systemd/system/vpnmanagement.service
+~$ sudo vim /etc/systemd/system/vpnmanager.service
 [Unit]
-Description=VPN Management
+Description=VPN Manager
 [Service]
 Type=simple
-ExecStart=/opt/vpn/vpnmanagement.sh
+ExecStart=/opt/vpn/vpnmanager.sh
 User=root
@@ Line 136: / Line 136: @@
 WantedBy=multi-user.target
 ~$ sudo systemctl daemon-reload
-~$ sudo systemctl start vpnmanagement.service</nowiki>
+~$ sudo systemctl start vpnmanager.service</nowiki>

← Older revision		Revision as of 17:35, 22 April 2021
Line 8:		Line 8:
	Connect to the VPN		Connect to the VPN
	<nowiki>~$ openvpn --auth-user-pass login.conf --config ./nl-free-01.protonvpn.com.tcp.ovpn</nowiki>		<nowiki>~$ openvpn --auth-user-pass login.conf --config ./nl-free-01.protonvpn.com.tcp.ovpn</nowiki>
		+	==Create VPN Service==
		+	Since this is a long running application, we should create a service to manage it.
		+	<nowiki>~$ sudo mkdir /opt/vpn
		+	~$ sudo touch /opt/vpn/vpn.sh
		+	~$ sudo chown root:root /opt/vpn/vpn.sh
		+	~$ sudo chmod 750 /opt/vpn/vpn.sh
		+	~$ sudo vim /opt/vpn/vpn.sh
		+	#!/bin/bash
		+	vpnauth=/opt/vpn/login.conf
		+	vpnconfig=/opt/vpn/nl-free-01.protonvpn.com.tcp.ovpn
		+
		+	openvpn --config $vpnconfig --auth-user-pass $vpnauth
		+
		+	~$ sudo touch /etc/systemd/system/vpn.service
		+	~$ sudo chown root:root /etc/systemd/system/vpn.service
		+	~$ sudo chmod 750 /etc/systemd/system/vpn.service
		+	~$ sudo vim /etc/systemd/system/vpn.service
		+	[Unit]
		+	Description=VPN
		+
		+	[Service]
		+	Type=simple
		+	ExecStart=/opt/vpn/vpn.sh
		+	User=root
		+
		+	[Install]
		+	WantedBy=multi-user.target
		+	~$ sudo systemctl daemon-reload
		+	~$ sudo systemctl start vpn.service</nowiki>
		+
		+	==Create VPN Management Service==
		+	We also want a management service to make sure the VPN is always connected and if not, stop any reliant services.<br>
		+	The OpenVPN service may not die when the connection is terminated from the host end, as such I cant depend on the service state so I've opted to rely on the exposed IP address and compare it to a dynamic dns entry.
		+	<nowiki>~$ sudo touch /opt/vpn/vpnmanagement.sh
		+	~$ sudo chown root:root /opt/vpn/vpnmanagement.sh
		+	~$ sudo chmod 750 /opt/vpn/vpnmanagement.sh
		+	~$ sudo vim /opt/vpn/vpnmanagement.sh
		+	#!/bin/bash
		+
		+	dyndns="dyndns.tld"
		+	logfile="/var/log/vpnmanager/vpnmanager.log"
		+	limit=10
		+
		+	if [ ! -d $(dirname $logfile) ]; then
		+	mkdir $(dirname $logfile)
		+	fi
		+	if (( $? != 0 )); then
		+	echo "ERROR:: Unable to create log directory"
		+	exit 1
		+	fi
		+	if ( ! touch $logfile ); then
		+	echo "ERROR:: Unable to write log file"
		+	exit 1
		+	else
		+	touch $logfile
		+	fi
		+
		+	#exec 3>&1 4>&2
		+	#trap 'exec 2>&4 1>&3' 0 1 2 3
		+	#exec 1>>$logfile 2>&1
		+	# Everything below will go to the file $logfile :
		+
		+	printf "\n\n$(date)\n----------------------------\n" >> $logfile
		+
		+	dyndnsip=$(dig -t a +short $dyndns)
		+
		+	function checkip {
		+	if [[ $(curl --max-time 10 --max-filesize 1000 --no-buffer --silent checkip.amazonaws.com) =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
		+	ipaddr=$(curl --max-time 10 --max-filesize 1000 --no-buffer --silent checkip.amazonaws.com)
		+	else
		+	if [[ $(curl --max-time 10 --max-filesize 1000 --no-buffer --silent ifconfig.me) =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
		+	ipaddr=$(curl --max-time 10 --max-filesize 1000 --no-buffer --silent ifconfig.me)
		+	else
		+	if [[ $(curl --max-time 10 --max-filesize 1000 --no-buffer --silent ipinfo.io/ip) =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
		+	ipaddr=$(curl --max-time 10 --max-filesize 1000 --no-buffer --silent ipinfo.io/ip)
		+	else
		+	if [[ $(curl --max-time 10 --max-filesize 1000 --no-buffer --silent ident.me) =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
		+	ipaddr=$(curl --max-time 10 --max-filesize 1000 --no-buffer --silent ident.me)
		+	else
		+	echo "ERROR:: Unable to determine internet IP address." >> $logfile
		+	fi
		+	fi
		+	fi
		+	fi
		+	}
		+
		+	function compareip {
		+	checkip
		+	if [ -z $ipaddr ] \|\| [ $dyndnsip = $ipaddr ]; then
		+	echo "ERROR:: VPN is down!!" >> $logfile
		+	trap exit 1 SIGINT
		+	sleep 2
		+	echo "Restarting VPN..." >> $logfile
		+	systemctl restart vpn.service
		+	sleep 10
		+	limit=10
		+	compareip
		+	else
		+	if [[ $limit -eq 10 ]]; then
		+	echo "$(date +%F"\|"%R:%S) -- VPN appears up. VPN IP: $ipaddr is not equal to dyndns IP: $dyndnsip" >> $logfile
		+	unset limit
		+	else
		+	((limit++))
		+	fi
		+	trap exit 1 SIGINT
		+	sleep 10
		+	unset ipaddr
		+	compareip
		+	fi
		+	}
		+
		+	compareip
		+
		+	~$ sudo touch /etc/systemd/system/vpnmanagement.service
		+	~$ sudo chown root:root /etc/systemd/system/vpnmanagement.service
		+	~$ sudo chmod 750 /etc/systemd/system/vpnmanagement.service
		+	~$ sudo vim /etc/systemd/system/vpnmanagement.service
		+	[Unit]
		+	Description=VPN Management
		+
		+	[Service]
		+	Type=simple
		+	ExecStart=/opt/vpn/vpnmanagement.sh
		+	User=root
		+
		+	[Install]
		+	WantedBy=multi-user.target
		+	~$ sudo systemctl daemon-reload
		+	~$ sudo systemctl start vpn.service</nowiki>