discover · compare · collections · requirements · contribute · feed · watching · stats · help with your tokens
hwdsl2/openvpn-install · source
Snapshot 0 · 2026-11-04T12:47:27Z · Shell · MIT
Content fingerprint
0b24a2ca0bf12f6eb0e107eec91c990422be4ff811229f61b673abb45c0409ebGitHub description at capture
OpenVPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE, Amazon Linux and Raspberry Pi OS. Includes interactive setup and client management.
README at capture
[English](README.md) | [简体中文](README-zh.md) | [繁體中文](README-zh-Hant.md) | [Русский](README-ru.md) | [Video en Español](https://www.youtube.com/watch?v=99qtaJU2E2k) # OpenVPN Server Auto Setup Script [](https://github.com/hwdsl2/openvpn-install/actions/workflows/main.yml) [](https://github.com/hwdsl2/openvpn-install/stargazers) [](https://opensource.org/licenses/MIT) OpenVPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE, Amazon Linux and Raspberry Pi OS. This script will let you set up your own VPN server in just a few minutes, even if you haven't used OpenVPN before. [OpenVPN](https://openvpn.net/community-resources/reference-manual-for-openvpn-2-6/) is an open-source, robust and highly flexible VPN protocol. **Features:** - Fully automated OpenVPN server setup, no user input needed - Supports interactive install using custom options - Generates VPN profiles to auto-configure Windows, macOS, iOS and Android devices - Supports managing OpenVPN users and certificates - Optimizes `sysctl` settings for improved VPN performance - Dual-stack IPv4 and IPv6 support for VPN clients **Also available:** - **Docker VPN:** [WireGuard](https://github.com/hwdsl2/docker-wireguard), [OpenVPN](https://github.com/hwdsl2/docker-openvpn), [IPsec VPN](https://github.com/hwdsl2/docker-ipsec-vpn-server), [Headscale](https://github.com/hwdsl2/docker-headscale) - **AI:** [Self-Hosted AI Stack](https://github.com/hwdsl2/self-hosted-ai-stack) for local LLMs, chat, RAG, voice and AI tools > 📘 Interested in self-hosted AI? **The Self-Hosted AI Builder’s Guide** ([ebook](https://books2read.com/aiguide?store=amazon) · [paperback](https://books2read.com/aiguide?store=amazon-paperback&format=PAPERBACK)) is a practical guide to building, securing, and operating your own private AI stack. ## Installation First, download the script on your Linux server\*: ```bash wget -O openvpn.sh https://get.vpnsetup.net/ovpn ``` \* A cloud server, virtual private server (VPS) or dedicated server. **Option 1:** Auto install OpenVPN using default options. ```bash sudo bash openvpn.sh --auto ``` <details> <summary> See the script in action (terminal recording). </summary> **Note:** This recording is for demo purposes only. <p align="center"><img src="docs/images/demo1.svg"></p> </details> **Tip:** Optionally install [WireGuard](https://github.com/hwdsl2/wireguard-install), [IPsec VPN](https://github.com/hwdsl2/setup-ipsec-vpn) and/or [Headscale](https://github.com/hwdsl2/headscale-install) on the same server. For servers with an external firewall (e.g. [EC2](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-security-groups.html)/[GCE](https://cloud.google.com/firewall/docs/firewalls)), open UDP port 1194 for the VPN. **Option 2:** Interactive install using custom options. ```bash sudo bash openvpn.sh ``` You can customize the following options: VPN server's DNS name, protocol (TCP/UDP) and port, DNS server for VPN clients and name of the first client. For servers with an external firewall, open your selected TCP or UDP port for the VPN. <details> <summary> Click here if you are unable to download. </summary> You may also use `curl` to download: ```bash curl -fL -o openvpn.sh https://get.vpnsetup.net/ovpn ``` Then follow the instructions above to install. Alternative setup URLs: ```bash https://github.com/hwdsl2/openvpn-install/raw/master/openvpn-install.sh https://gitlab.com/hwdsl2/openvpn-install/-/raw/master/openvpn-install.sh ``` If you are unable to download, open [openvpn-install.sh](openvpn-install.sh), then click the `Raw` button on the right. Press `Ctrl/Cmd+A` to select all, `Ctrl/Cmd+C` to copy, then paste into your favorite editor. </details> <details> <summary> Advanced: Auto install using custom options. </summary> Advanced users can auto install OpenVPN using custom options, by specifying command-line options when running the script. For more details, see the next section "view usage information for the OpenVPN script". Alternatively, you may provide a Bash "here document" as input to the setup script. This method can also be used to provide input to manage users after install. First, install OpenVPN interactively using custom options, and write down all your inputs to the script. ```bash sudo bash openvpn.sh ``` If you need to remove OpenVPN, run the script again and select the appropriate option. Next, create the custom install command using your inputs. Example: ```bash sudo bash openvpn.sh <<ANSWERS n 1 1194 2 client y ANSWERS ``` **Note:** The install options may change in future versions of the script. </details> <details> <summary> View usage information for the OpenVPN script. </summary> ``` Usage: bash openvpn.sh [options] Options: --addclient [client name] add a new client --exportclient [client name] export configuration for an existing client --listclients list the names of existing clients --revokeclient [client name] revoke an existing client --uninstall remove OpenVPN and delete all configuration -y, --yes assume "yes" as answer to prompts when revoking a client or removing OpenVPN -h, --help show this help message and exit Install options (optional): --auto auto install OpenVPN using default or custom options --listenaddr [IPv4 address] IPv4 address that OpenVPN should listen on for requests --serveraddr [DNS name or IP] server address, must be a fully qualified domain name (FQDN) or an IPv4 address --proto [TCP or UDP] protocol for OpenVPN (TCP or UDP, default: UDP) --port [number] port for OpenVPN (1-65535, default: 1194) --clientname [client name] name for the first OpenVPN client (default: client) --dns1 [DNS server IP] primary DNS server for clients (default: Google Public DNS) --dns2 [DNS server IP] secondary DNS server for clients To customize options, you may also run this script without arguments. ``` </details> ## Community - 📬 [Get project updates and free deployment guides](https://selfhostedstack.beehiiv.com/subscribe?utm_campaign=vpn) (1–2 emails/month) - 💬 Join the [r/selfhostedstack](https://www.reddit.com/r/selfhostedstack/) community for discussions - ⭐ Star the repository if you find it useful — it helps others discover it ## Next steps After setup, you can run the script again to manage users or uninstall OpenVPN. Get your computer or device to use the VPN. Please refer to: **[Configure OpenVPN Clients](docs/clients.md)** **Read [📘 VPN book](docs/vpn-book.md) to access [extra content](https://ko-fi.com/post/Support-this-project-and-get-access-to-supporter-o-O5O7FVF8J).** Enjoy your very own VPN! :sparkles::tada::rocket::sparkles: ## Credits This script is based on the great work of [Nyr and contributors](https://github.com/Nyr/openvpn-install), with enhancements and changes for compatibility with the [Setup IPsec VPN](https://github.com/hwdsl2/setup-ipsec-vpn) project. <details> <summary> List of enhancements over Nyr/openvpn-install. </summary> - Improved compatibility with Setup IPsec VPN - Improved script reliability, user input and output - Supports auto install using default or custom options - Supports using a DNS name as server address - Added support for openSUSE Linux - Added support for Amazon Linux 2023 - Supports exporting configuration for an existing VPN client - Supports listing existing VPN clients - Supports custom DNS server(s) for VPN clients - Supports command-line options for managing VPN clients - Optimizes `sysctl` settings for improved VPN performance - Improved creation of client config files when using `sudo` ...and more! </details> ## License MIT