slawek
7cb2f1b8dd
Add platform = none as the shipped default so installing the package changes nothing on the machine until a platform is chosen. Add a mode setting (manual/interfaces/auto) controlling how much of the network configuration is supplied versus detected from the system. Manage /etc/vpn-router/vpn-router.conf with ucf instead of writing it once, so dpkg-reconfigure can safely reapply debconf answers without clobbering local edits. Extend NAT/forward rules to all local subnets, not just the first.
41 lines
1.5 KiB
Plaintext
41 lines
1.5 KiB
Plaintext
Source: vpn-router
|
|
Section: net
|
|
Priority: optional
|
|
Maintainer: Sławomir Koszewski <slawek@koszewscy.waw.pl>
|
|
Build-Depends: debhelper-compat (= 13)
|
|
Standards-Version: 4.6.2
|
|
Rules-Requires-Root: no
|
|
|
|
Package: vpn-router
|
|
Architecture: all
|
|
Depends: ${misc:Depends},
|
|
strongswan-swanctl,
|
|
charon-systemd,
|
|
libstrongswan-extra-plugins,
|
|
libcharon-extra-plugins,
|
|
wireguard-tools,
|
|
ufw,
|
|
debconf,
|
|
ucf,
|
|
openssl,
|
|
python3,
|
|
python3-jinja2,
|
|
iproute2,
|
|
systemd-resolved
|
|
Description: Linux VPN router with IPSec, road-warrior and WireGuard support
|
|
Configures a Linux host or virtual machine as a VPN router: site-to-site
|
|
IKEv2 IPSec (strongSwan swanctl), optional road-warrior access using EAP-TLS,
|
|
optional WireGuard, and the routing, NAT, MSS clamping and firewall rules a
|
|
router needs. Nothing in the package is specific to a cloud provider.
|
|
.
|
|
Settings live in /etc/vpn-router/vpn-router.conf, which is created on first
|
|
install and owned by the administrator afterwards. Editing it and restarting
|
|
vpn-router-setup applies the change; the same service reconciles the system
|
|
at every boot. It is built on two inputs, the external and internal interface
|
|
names; the addresses on them are read from the system rather than configured
|
|
again, and nothing is auto-detected.
|
|
.
|
|
Platform-specific additions are provided by modules under
|
|
/usr/lib/vpn-router, selected explicitly by the platform setting. Modules for
|
|
Azure and GCP are included.
|