openvpn-installer

Welcome to the OpenVPN Installer – Your one-stop solution for quick and secure OpenVPN server deployment.

It performs the following tasks:

1. Set the server TimeZone to Europe/Berlin.

2. Update, Upgrade, and Clean the server:

   • Update
   • Upgrade
   • Dist-Upgrade
   • AutoRemove
   • AutoClean
   • Clean

3. Install Useful Packages:

   apt-transport-https apt-utils autoconf automake bash-completion bc binutils binutils-common binutils-x86-64-linux-gnu build-essential busybox ca-certificates cron curl dialog epel-release gnupg2 git haveged htop iptables iptables-persistent jq keyring libssl-dev libsqlite3-dev libtool locales lsb-release make nano net-tools nftables packagekit preload python3 python3-pip qrencode socat screen software-properties-common ufw unzip vim wget zip

4. Enable Packages at Server Boot.

5. Create & Enable SWAP File:

   • Swap Path: "/swapfile"
   • Swap Size: 2Gb

6. Enable IPv6 Support.

7. Optimize the SYSCTL Configs.

   • Optimize SWAP.
   • Optimize Network Settings.
   • Activate BBR.
   • Optimize the Kernel.

   Original file is backed up at /etc/sysctl.conf.bak.

8. Optimize SSH:

   • Back up the original sshd_config file.
   • Disable DNS lookups for connecting clients.
   • Remove less efficient encryption ciphers.
   • Enable and Configure TCP keep-alive messages.
   • Allow agent & TCP forwarding.
   • Enable gateway ports, Tunneling & Compression.
   • Enable X11 Forwarding.

   Original file is backed up at /etc/ssh/sshd_config.bak.

9. Optimize the System Limits:

   • ulimit -c -d -f -i -n -q -u -v -x -s -l optimizations.
   • Soft & Hard nproc limits.
   • Soft & Hard nofile limits.

10. Optimize UFW & Open Common Ports.

    • Open Port 22.
    • With IPv6, TCP & UDP.

Reboot at the end is Recommended.

Pre-Run

Packages wget and sudo must be installed.

• Ubuntu & Debian:

apt install -y sudo wget

• CentOS & Fedora:

dnf install -y sudo wget

Run

Tested on: Ubuntu 18+, Debian 11+

Root Access is Required. If the user is not root, first run:

sudo -i

Then:

wget "https://raw.githubusercontent.com/DanielNoohi/openvpn-installer/main/open-installer.sh" -O open-installer.sh && chmod +x open-installer.sh && bash open-installer.sh

Menu Image

Disclaimer

This script is provided as-is, without any warranty or guarantee. Use it at your own risk.

License

This script is licensed under the MIT License.