<p><span style="font-size:1rem;">참고 :&nbsp; </span><a href="https://hvy.kr/post/773" target="_blank"><span style="font-size:1rem;">https://hvy.kr/post/773</span></a><br>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><h3>docker-compose up -d</h3><div style="background-color:rgb(30, 30, 30);color:rgb(212, 212, 212);font-family:D2Coding, Consolas, &quot;Courier New&quot;, monospace, Consolas, &quot;Courier New&quot;, monospace;font-size:13px;line-height:18px;white-space:pre;"><div><span style="color:#ce9178;">cat &lt;&lt;EOF &gt; docker-compose.yml</span></div><p><br>&nbsp;</p><div><span style="color:#569cd6;">version</span>: <span style="color:#ce9178;">"3.7"</span></div><div><span style="color:#569cd6;">services</span>:</div><div>&nbsp; <span style="color:#569cd6;">openvpn</span>:</div><div>&nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">container_name</span>: <span style="color:#ce9178;">openvpn</span></div><div>&nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">image</span>: <span style="color:#ce9178;">wheelybird/openvpn-ldap-otp:v1.4</span></div><div>&nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">environment</span>:</div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#6a9955;"># 필요에 따라 변경할 수 있는 부분, 실제 구축시에 적은 값이 크게 필요치 않은 것 같다.</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#6a9955;"># 구축할 때는 dns를 넣고 접속할 때 사용하는 ovpn 파일에는 ip를 넣어도 잘 동작한다.</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">OVPN_SERVER_CN</span>: <span style="color:#ce9178;">"vpn.domain.com"</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">OVPN_ENABLE_COMPRESSION</span>: <span style="color:#ce9178;">"false"</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#6a9955;"># openvpn에서 사용할 대역(시놀로지 대역과 겹치지 않는 사설대역이면 된다.)</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">OVPN_NETWORK</span>: <span style="color:#ce9178;">"172.29.0.0 255.255.255.0"</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#6a9955;"># 앞에는 openvpn에서 사용할 대역이고, 뒤에는 시놀로지에서 사용하는 대역을 넣어서 라우팅 할 수 있게 해준다.</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">OVPN_ROUTES</span>: <span style="color:#ce9178;">"172.29.0.0 255.255.250.0, 192.168.0.0 255.255.255.0"</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">OVPN_NAT</span>: <span style="color:#ce9178;">"true"</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">OVPN_DNS_SERVERS</span>: <span style="color:#ce9178;">"192.168.0.1"</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">OVPN_REGISTER_DNS</span>: <span style="color:#ce9178;">"false"</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">USE_CLIENT_CERTIFICATE</span>: <span style="color:#ce9178;">"true"</span></div><div>&nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">cap_add</span>:</div><div>&nbsp; &nbsp; - <span style="color:#ce9178;">NET_ADMIN</span></div><div>&nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">volumes</span>:</div><div>&nbsp; &nbsp; - <span style="color:#ce9178;">openvpn-data:/etc/openvpn</span></div><div>&nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">ports</span>:</div><div>&nbsp; &nbsp; - <span style="color:#ce9178;">"1194:1194/udp"</span></div><div>&nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">networks</span>:</div><div>&nbsp; &nbsp; - <span style="color:#ce9178;">openvpn</span></div><div>&nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">logging</span>:</div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">driver</span>: <span style="color:#ce9178;">"json-file"</span></div><div>&nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">options</span>:</div><div>&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">max-size</span>: <span style="color:#ce9178;">"8m"</span></div><div>&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">max-file</span>: <span style="color:#ce9178;">"10"</span></div><div>&nbsp; &nbsp;&nbsp;<span style="color:#569cd6;">restart</span>: <span style="color:#ce9178;">unless-stopped</span></div><p><br>&nbsp;</p><div><span style="color:#569cd6;">networks</span>:</div><div>&nbsp; <span style="color:#569cd6;">openvpn</span>: {}</div><div><span style="color:#569cd6;">volumes</span>:</div><div>&nbsp; <span style="color:#569cd6;">openvpn-data</span>: {}</div><p><br>&nbsp;</p><div><span style="color:#ce9178;">EOF</span></div><p><br><br>&nbsp;</p></div><p>&nbsp;</p><p>&nbsp;</p><h3>docker exec -it openvpn show-client-config</h3><p>위 명령어에서 나오는 인증서 값을 *.ovpn 으로 저장하자.</p><p>단, 아래 remote 부분은 접속 방법에 따라 수정해도 된다.&nbsp;</p><div style="background-color:rgb(30, 30, 30);font-family:D2Coding, Consolas, &quot;Courier New&quot;, monospace, Consolas, &quot;Courier New&quot;, monospace;font-size:13px;line-height:18px;white-space:pre;"><div style="color:rgb(212, 212, 212);"><span style="color:#808080;">&lt;</span><span style="color:#569cd6;">connection</span><span style="color:#808080;">&gt;</span></div><div><span style="color:#d4d4d4;">remote</span><span style="color:#ffff00;"> <span style="font-size:18px;"><strong>vpn.domain.com 1194 udp</strong></span></span></div><div style="color:rgb(212, 212, 212);">float</div><div style="color:rgb(212, 212, 212);">nobind</div><div style="color:rgb(212, 212, 212);"><span style="color:#808080;">&lt;/</span><span style="color:#569cd6;">connection</span><span style="color:#808080;">&gt;</span></div></div><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><h3>client download</h3><p>아래 클라이언트로 접속</p><p>&nbsp;</p><p>&nbsp;</p><p><a class="file-link" href="/api/file/0JX8TR55V88KN" target="_blank"><span>openvpn-connect-3.3.2.4125_signed.dmg</span></a></p><p><a class="file-link" href="/api/file/0JX8TR54388QX" target="_blank"><span>openvpn-connect-3.3.4.2600_signed.msi</span></a></p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p>

[Synology] 도커로 OpenVPN 설치해서 vpn 사용하기