Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content

VPN

73 Topics 554 Posts
Everything related to the PHP CVE and eMudhra Cert Please read our Security issue thread - PHP and eMudhra cert compromise.
  • VPN - Package Updates

    Pinned Locked
    63
    0 Votes
    63 Posts
    28k Views
    Package UpdatesP
    [2.27.0] Update vpn to 68baf3b security: fix eMudhra cert compromise
  • VPN Protection overlay icon

    1
    3 Votes
    1 Posts
    27 Views
    No one has replied
  • Enhancing Cloudron's VPN application

    vpn censorship amneziawg sing-box hysteria2
    10
    8 Votes
    10 Posts
    989 Views
    B
    I too very much in favour of adding support for proper obfuscation / DPI defeating VPNs.
  • Adding new devices isn’t working - createKey exited with error 1 signal null

    Solved
    9
    1
    0 Votes
    9 Posts
    251 Views
    J
    @bazinga a Cloudron update is usually not needed. In this case, VPN package depends on some feature in 10.1.x
  • VPN – no DNS assigned to profiles, no option to set it

    3
    1
    1 Votes
    3 Posts
    155 Views
    matix131997M
    Fixed it! The problem was the domain assigned to the VPN app: I was using the root domain domain.tld (with my.domain.tld connected to Cloudron). That was only a temporary setup while the app was blocked. Once I switched to a dedicated subdomain, vpn.domain.tld, everything worked.
  • HELP - OpenVPN 2.5.9

    Moved Solved
    5
    0 Votes
    5 Posts
    254 Views
    L
    Hello, Cloudron version 10.0.5 OpenVPN 2.13.0 I stuck with this version because updating to the next one really messed up my VPN connections.
  • Is there a log that shows user connections?

    3
    3 Votes
    3 Posts
    250 Views
    girishG
    I have added a connection log.
  • AdGuard with VPN protection possible?

    3
    1 Votes
    3 Posts
    364 Views
    jamesJ
    Hello @sponch I need some feedback. Your idea is that when enabling the VPN protection for the AdGuard app the following applies: ports 53, 853, 53 only accessible via the VPN VPN app configurable to use the AdGuard DNS as global configuration Did I get this right?
  • Been using the vpn infrequently

    2
    3 Votes
    2 Posts
    303 Views
    J
    Yes, that tick box was added recently .
  • Self-hosted VPN server made EASY!

    17
    9 Votes
    17 Posts
    5k Views
    svtxS
    It also does Wireguard AND OpenVPN simultaneously, which is hella convenient
  • Add last connection time

    3
    1 Votes
    3 Posts
    568 Views
    sponchS
    great, working. Thank you
  • Using OpenVPN on Cloudron as a client for other VPN services?

    14
    1 Votes
    14 Posts
    6k Views
    jamesJ
    Hello @nottheend @nottheend said: "route all traffic to the cloudron VPN endpoint via a third party VPN? The idea would be to only allow access to configured apps through the Cloudron VPN app or a custom VPN you can configure.
  • Wireguard: "Patching" AllowedIps and interface PostUp

    14
    1 Votes
    14 Posts
    2k Views
    S
    Thank you, @girish, for the very quick implementation! I just upgraded and so far things appear to be working as expected. I'll test a bit more and report back with any issues I might come across... Thanks again and cheers from Germany!
  • Custom DNS per user/config

    1
    0 Votes
    1 Posts
    392 Views
    No one has replied
  • List certs and remove users

    Solved
    9
    0 Votes
    9 Posts
    2k Views
    nebulonN
    I've added the ability for admins in the VPN app now to see clients from all users and also be able to revoke on behalf of them. New package including this feature was just released.
  • Restart loop - `Bad argument `eth0'`

    vpn troubleshooting ipv6
    6
    1 Votes
    6 Posts
    2k Views
    BrutalBirdieB
    IMO having a backwards compatibility is nice but to what extent? Just checking network6 var and if empty return a useful error would suffice for me.
  • Separate IP addresses for OpenVPN

    Solved
    7
    0 Votes
    7 Posts
    4k Views
    jamesJ
    Closed due to inactivity
  • Running cloudron locally

    Moved
    4
    1
    0 Votes
    4 Posts
    2k Views
    R
    Thank you. I am still getting familiar with the code and missed the develop.sh file.
  • 1 Votes
    3 Posts
    2k Views
    R
    Regarding this issue, I looked into this and currently, when a user creates a device/client connection through the portal, the device is registered under the username of the creator and is not visible to other users (screenshot below). [image: image.png] After reviewing the app’s code, this appears to be the current functionality, as seen in the following code snippet: https://git.cloudron.io/apps/openvpn-app/-/blob/master/src/openvpn.js?ref_type=heads#L133 Would it be possible for the Cloudron team to modify this functionality so that the portal returns a list of all clients created under the current OpenVPN app instead? To make this request clearer, I have outlined a feature request below: Feature Request: Display All Device Keys in OpenVPN portal Summary As a user, I would like to display all device keys created by any Cloudron user, excluding specific keys (ca.key and cloudron.key) , so that I can view all devices associated with the app and verify their connection status. Description Currently, the application only lists .key files in the private directory associated with the logged-in user. To enhance usability, we propose displaying all device keys created under the OpenVPN app. Acceptance Criteria The application should filter out ca.key and cloudron.key from the list of .key files. The application should correctly extract and display the username and device name from the remaining .key files and display that in the portal. Implementation Details Filter Key Files: Modify the code to filter out ca.key and cloudron.key from the list of .key files. https://git.cloudron.io/apps/openvpn-app/-/blob/master/src/openvpn.js?ref_type=heads#L133 Extract Username and Device Name: Update the code to correctly extract the username and device name from the remaining .key files. If you require to maintain the current functionality, you could make this feature configurable in the settings for the OpenVPN app. I have attached a snapshot of the code change that would be required. [image: image.png]
  • sorting users

    3
    1 Votes
    3 Posts
    2k Views
    R
    Thanks for the quick fix!