rc/servers
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: rc:6e7298786372fca3a12122f8aff3bdb521ca3a5a
Branches Tags
rc:master
..
compare: rc:d44294097597a22a61e5e20e3fb157e3eb8226ae
Branches Tags
rc:master

2 commits
6e72987863 ... d442940975

Author SHA1 Message Date
Timotej Lazar
d442940975 ocserv: use numeric ID instead of arbitrary USERNAME for nft chain name 
Putting a @ in a name is a bad.
 2025-05-16 14:26:39 +02:00
Timotej Lazar
245b4a0dcd ocserv: support UDP 2025-05-16 14:26:26 +02:00
2 changed files with 3 additions and 2 deletions
Show stats Expand all files Collapse all files

4
roles/ocserv/files/ocserv-script
View file

@ -3,10 +3,10 @@
set -x set -x
[ -n "$DEVICE" ] || exit 1 [ -n "$DEVICE" ] || exit 1
[ -n "$USERNAME" ] || exit 2 [ -n "$ID" ] || exit 2
[ -n "$IP_REMOTE" ] || exit 3 [ -n "$IP_REMOTE" ] || exit 3
chain="inet ocserv client-${USERNAME}" chain="inet ocserv client-${ID}"
remote_ip="${IP_REMOTE%/*}" remote_ip="${IP_REMOTE%/*}"
case "${REASON}" in case "${REASON}" in

1
roles/ocserv/templates/ocserv.conf.j2
View file

@ -1,5 +1,6 @@
listen-host = {{ dns_name }} listen-host = {{ dns_name }}
tcp-port = 443 tcp-port = 443
udp-port = 443
server-cert = /etc/letsencrypt/live/{{ dns_name }}/fullchain.pem server-cert = /etc/letsencrypt/live/{{ dns_name }}/fullchain.pem
server-key = /etc/letsencrypt/live/{{ dns_name }}/privkey.pem server-key = /etc/letsencrypt/live/{{ dns_name }}/privkey.pem