{ "componentChunkName": "component---src-templates-issues-tsx", "path": "/issues/124", "result": {"data":{"issuesJson":{"id":"a0d540ff-6776-5c14-bd53-a617897189ca","title":"dockovpn/dockovpn: 一个开箱即用、无状态、无需持久存储的 VPN服务器 Docker 镜像，可以在几秒钟内启动。","number":124,"bodyHTML":"

\n

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Repos	dockovpn/dockovpn
Views	$\"views\"$
Stars	$\"stars\"$
Forks	$\"forks\"$
License	$\"license\"$
UpdatedAt	$\"last-commit\"$
CreatedAt	$\"create-at\"$

\n\n

\n

\n

\n

\n

\n[English]\n[Русский]\n[中国人]\n
\n

$\"Build$
\n $\"Build$
\n $\"Tests$
\n $\"Build$
\n $\"Docker$
\n $\"Gitter$
\n $\"GitHub\"$

\n

🔐DockOvpn

\n

\n

Out of the box stateless VPN server docker image which starts in just a few seconds and doesn't require persistent storage. To get it running, just copy & paste the snippet below and follow instructions in your terminal:

\n

docker run -it --rm --cap-add=NET_ADMIN \\\n-p 1194:1194/udp -p 80:8080/tcp \\\n--name dockovpn alekslitvinenk/openvpn

\n

To get more detailed information, go to Quick Start tutorial or watch video.

\n

Supporting Dockovpn

\n

Dockovpn is a team of cybersecurity experts developing leading edge projects in Networking, VPN, DevOPS and SecOPS domains. Project is supported entirely by volonteers.
\nIf you'd like to help support the future of the project, please consider:

\n

Giving developer time (see Contrubition Guidelines)!
Giving funds by becoming a sponsor on GitHub or OpenCollective!

\n

Content

\n

Resources
\nContainer properties
\nVideo Guide
\nQuick Start
\nPersisting configuration
\nAlternative way. Run with docker-compose
\nOther resources

\n

Resources

\n

Real-time Chat

\n

Slack (registration)

\n

Website

\n

https://dockovpn.io

\n

Social media

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Name	URL
LinkedIn	https://www.linkedin.com/company/dockovpn
Facebook	https://www.facebook.com/dockovpn

\n

Repos

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Name	URL
GitHub	https://github.com/dockovpn/dockovpn
Docker Hub	https://hub.docker.com/r/alekslitvinenk/openvpn

\n

Container properties

\n

\n

Docker Tags

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Tag	Description
`latest`	This tag is added to every newly built version be that `v#.#.#` or `v#.#.#-regen-dh`
`v#.#.#`	Standard fixed release version, where {1} is major version, {2} - minor and {3} is a patch. For instance, `v1.1.0`
`v#.#.#-regen-dh`	Release version with newly generated Deffie Hellman security file. In order to keep security high this version is generated every hour. Tag example - `v1.1.0-regen-dh`
`dev`	Development build which contains the most recent changes from the active development branch (master)

\n

Environment variables

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Variable	Description	Default value
NET_ADAPTER	Network adapter to use on the host machine	eth0
HOST_ADDR	Host address override if the resolved address doesn't work	localhost
HOST_TUN_PORT	Tunnel port to advertise in the client config file	1194
HOST_TUN_PROTOCOL	Tunnel protocol (`tcp` or `udp`)	udp
HOST_CONF_PORT	HTTP port on the host machine to download the client config file	80
CRL_DAYS	CRL days until expiration, i.e. invalid for revocation checking	3650

\n

⚠️ Note: In the provided code snippet we advertise the configuration suitable for the most users. We don't recommend setting custom
\nNET_ADAPTER and HOST_ADDR unless you absolutely have to. Now host address is resolved automatically when container starts..
\nMore often you'd like to customize HOST_TUN_PORT, HOST_CONF_PORT or HOST_TUN_PROTOCOL. If this is the case, use the snippet below (dont forget to replace <custom port> and <custom protocol> with your values):

\n

DOCKOVPN_CONFIG_PORT=<custom port>\nDOCKOVPN_TUNNEL_PORT=<custom port>\nDOCKOVPN_TUNNEL_PROTOCOL=<custom protocol>\ndocker run -it --rm --cap-add=NET_ADMIN \\\n-p $DOCKOVPN_TUNNEL_PORT:1194/$DOCKOVPN_TUNNEL_PROTOCOL -p $DOCKOVPN_CONFIG_PORT:8080/tcp \\\n-e HOST_CONF_PORT=\"$DOCKOVPN_CONFIG_PORT\" \\\n-e HOST_TUN_PORT=\"$DOCKOVPN_TUNNEL_PORT\" \\\n-e HOST_TUN_PROTOCOL=\"$DOCKOVPN_TUNNEL_PROTOCOL\" \\\n--name dockovpn alekslitvinenk/openvpn

\n

Container options

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Short name	Long name	Description
`-r`	`--regenerate`	Regenerates PKI and DH file
`-n`	`--noop`	Initialise container, but don's start VPN server
`-q`	`--quit`	Quit after container was initialized
`-s`	`--skip`	Skip client generation on first start

\n

⚠️ Note: We strongly recommend always run your container with -r option, even though it will take container a bit longer to start. In future releases we will apply this option by default:

\n

docker run -it --rm --cap-add=NET_ADMIN \\\n-p 1194:1194/udp -p 80:8080/tcp \\\n--name dockovpn alekslitvinenk/openvpn -r

\n

Container commands

\n

After container was run using docker run command, it's possible to execute additional commands using docker exec command. For example, docker exec <container id> ./version.sh. See table below to get the full list of supported commands.

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Command	Description	Parameters	Example
`./version.sh`	Outputs full container version, i.e `Dockovpn v1.2.0`		`docker exec dockovpn ./version.sh`
`./genclient.sh`	Generates new client configuration	`z` — Optional. Puts newly generated client.ovpn file into client.zip archive. `zp paswd` — Optional. Puts newly generated client.ovpn file into client.zip archive with password `pswd` `o` — Optional. Prints cert to the output. `oz` — Optional. Prints zipped cert to the output. Use with output redirection. `ozp paswd` — Optional. Prints encrypted zipped cert to the output. Use with output redirection. `n profile_name` — Optional. Use specified profile_name parameter instead of random id. Prints client.ovpn to the output `np profile_name` — Optional. Use specified profile_name parameter instead of random id and protects by password asked by stdin. Password refers to the connection and it will be asked during connection stage. Prints client.ovpn to the output	`docker exec dockovpn ./genclient.sh` `docker exec dockovpn ./genclient.sh z` `docker exec dockovpn ./genclient.sh zp 123` `docker exec dockovpn ./genclient.sh o > client.ovpn` `docker exec dockovpn ./genclient.sh oz > client.zip` `docker exec dockovpn ./genclient.sh ozp paswd > client.zip` `docker exec dockovpn ./genclient.sh n profile_name` `docker exec -ti dockovpn ./genclient.sh np profile_name`
`./rmclient.sh`	Revokes client certificate thus making him/her anable to connect to given Dockovpn server.	Client Id, i.e `vFOoQ3Hngz4H790IpRo6JgKR6cMR3YAp`	`docker exec dockovpn ./rmclient.sh vFOoQ3Hngz4H790IpRo6JgKR6cMR3YAp`
`./listconfigs.sh`	List all generated available config IDs		`docker exec dockovpn ./listconfigs.sh`
`./getconfig.sh`	Return previously generated config by client ID	Client Id, i.e `vFOoQ3Hngz4H790IpRo6JgKR6cMR3YAp`	`docker exec dockovpn./getconfig.sh vFOoQ3Hngz4H790IpRo6JgKR6cMR3YAp`

\n

⚠️ Note: If you generated a new client configuration with custom name e.g dockovpn exec ./genclient.sh n customname and then chose to remove this config using dockovpn exec ./rmclient.sh customname, the client certificate is revoked permanently in this server, therefore, you cannot create client configuration with the same name again. Doing so will result in error Sat Oct 28 10:05:17 2023 Client with this id [customname] already exists.

\n

📺 Video Guide

\n

\n

🚀 Quick Start

\n

Prerequisites

\n

Any hardware or vps/vds server running Linux. You should have administrative rights on this machine.
Docker installation on your server.
Public ip address assigned to your server.

\n

1. Run dockovpn

\n

Copy & paste the following command to run docker-openvpn:

\n

docker run -it --rm --cap-add=NET_ADMIN \\\n-p 1194:1194/udp -p 80:8080/tcp \\\n--name dockovpn alekslitvinenk/openvpn

\n

⚠️ Note: This snippet runs Dockovpn in attached mode, which means if you close your terminal window, container will be stopped.
\nTo prevent this from happening, you first need to detach container from ssh session. Type Ctrl+P Ctrl+Q.

\n

If everything went well, you should be able to see the following output in your console:

\n

Sun Jun  9 08:56:11 2019 Initialization Sequence Completed\nSun Jun  9 08:56:12 2019 Client.ovpn file has been generated\nSun Jun  9 08:56:12 2019 Config server started, download your client.ovpn config at http://example.com:8080/\nSun Jun  9 08:56:12 2019 NOTE: After you download you client config, http server will be shut down!

\n

2. Get client configuration

\n

Now, when your dockovpn is up and running you can go to <your_host_public_ip>:8080 on your device and download ovpn client configuration.
\nAs soon as you have your config file downloaded, you will see the following output in the console:

\n

Sun Jun  9 09:01:15 2019 Config http server has been shut down

\n

Import client.ovpn into your favourite openvpn client. In most cases it should be enough to just doubleclick or tap on that file.

\n

3. Connect to your docker-openvpn container

\n

You should be able to see your newly added client configuration in the list of available configurations. Click on it, connection process should initiate and be established within few seconds.

\n

Congratulations, now you're all set and can safely browse the internet.

\n

Persisting configuration

\n

There's a possibility to persist generated files in volume storage. Run docker with

\n

-v openvpn_conf:/opt/Dockovpn_data

\n

Alternative way. Run with docker-compose

\n

Sometimes it is more convenient to use docker-compose.

\n

To run dockvpn with docker-compose run:

\n

docker-compose up -d && \\\ndocker-compose exec -d dockovpn wget -O /opt/Dockovpn/client.ovpn localhost:8080

\n

After run this command you can find your client.ovpn inside openvpn_conf folder.

\n

Other resources

\n

Privacy Policy
\nContrubition Guidelines
\nCode Of Conduct
\nRelease Guideline
\nLicense Agreement

","updatedAt":"2025-05-21T15:54:57Z","upvoteCount":null,"author":{"login":"eryajf","avatarUrl":"https://avatars.githubusercontent.com/u/33259379?u=e4a4090a38ac2473aaed4ef9945233636776c6c3&v=4","url":"https://github.com/eryajf"},"category":null,"labels":{"edges":[{"node":{"name":"更多","color":"25B472"}},{"node":{"name":"VPN","color":"da3863"}},{"node":{"name":"dockovpn","color":"6fd91f"}}]},"comments":{"edges":[]}}},"pageContext":{"number":124,"previous":{"title":"geek-fun/dockit: 一个用于连接管理 elasticsearch，opensearch 的客户端软件，支持 Mac，Windows，Linux 多平台。","number":123},"next":{"title":"docmost/docmost: 一款开源的协作 Wiki 和文档软件。它是 Confluence 和 Notion 的开源替代品。","number":125}}}, "staticQueryHashes": ["151096407","2861350382"]}