Source: vpn-router
Section: net
Priority: optional
Maintainer: Sławomir Koszewski <slawek@koszewscy.waw.pl>
Build-Depends: debhelper-compat (= 13)
Standards-Version: 4.6.2
Rules-Requires-Root: no

Package: vpn-router
Architecture: all
Depends: ${misc:Depends},
         strongswan-swanctl (>= 5.0),
         charon-systemd (>= 5.0),
         libstrongswan-extra-plugins,
         libcharon-extra-plugins,
         wireguard-tools,
         ufw,
         debconf,
         ucf,
         openssl,
         python3,
         python3-jinja2,
         python3-ldap,
         python3-pyotp,
         slapd,
         openvpn,
         openvpn-auth-ldap,
         iproute2,
         systemd-resolved
Description: Linux VPN router with IPSec, road-warrior, OpenVPN and WireGuard support
 Configures a Linux host or virtual machine as a VPN router: site-to-site
 IKEv2 IPSec (strongSwan swanctl), optional road-warrior access using EAP-TLS,
 optional OpenVPN with a certificate and a password per user, kept in a local
 LDAP directory, optional WireGuard, and the routing, NAT, MSS clamping and
 firewall rules a router needs. Nothing in the package is specific to a cloud
 provider.
 .
 Settings live in /etc/vpn-router/vpn-router.json, which is created on first
 install and owned by the administrator afterwards. Editing it and restarting
 vpn-router-setup applies the change; the same service reconciles the system
 at every boot. It is built on two inputs, the external and internal interface
 names; the addresses on them are read from the system rather than configured
 again, and nothing is auto-detected.
 .
 Platform-specific additions are provided by modules under
 /usr/lib/vpn-router, selected explicitly by the platform setting. Modules for
 Azure and GCP are included.