hwdsl2/setup-ipsec-vpn

Maintainer? Show your league in your README

Card: your league's emblem, from Copper to Legendary

[![bestofgithub](https://bestofgithub.dev/badge/hwdsl2/setup-ipsec-vpn.svg?style=card)](https://bestofgithub.dev/repo/hwdsl2/setup-ipsec-vpn)

Flat: fits beside your other badges

[![bestofgithub](https://bestofgithub.dev/badge/hwdsl2/setup-ipsec-vpn.svg)](https://bestofgithub.dev/repo/hwdsl2/setup-ipsec-vpn)

Loading README…

Provider	Primary DNS	Secondary DNS	Notes
Google Public DNS	8.8.8.8	8.8.4.4	Default in this project
Cloudflare	1.1.1.1	1.0.0.1	See also: Cloudflare for families
Quad9	9.9.9.9	149.112.112.112	Blocks malicious domains
OpenDNS	208.67.222.222	208.67.220.220	Blocks phishing domains, configurable.
CleanBrowsing	185.228.168.9	185.228.169.9	Domain filters available
NextDNS	Varies	Varies	Ad blocking, free tier available. Learn more.
Control D	Varies	Varies	Ad blocking, configurable. Learn more.

IKEv1 parameter*	Default value	Customize (env variable)**
Server address (DNS name)	-	No, but you can connect using a DNS name
Server address (public IP)	Auto detect	VPN_PUBLIC_IP
IPsec pre-shared key	Auto generate	VPN_IPSEC_PSK
VPN username	vpnuser	VPN_USER
VPN password	Auto generate	VPN_PASSWORD
DNS servers for clients	Google Public DNS	VPN_DNS_SRV1, VPN_DNS_SRV2
Skip IKEv2 setup	no	VPN_SKIP_IKEV2=yes

IKEv2 parameter*	Default value	Customize (env variable)**	Customize (interactive)***
Server address (DNS name)	-	VPN_DNS_NAME	✅
Server address (public IP)	Auto detect	VPN_PUBLIC_IP	✅
Name of first client	vpnclient	VPN_CLIENT_NAME	✅
DNS servers for clients	Google Public DNS	VPN_DNS_SRV1, VPN_DNS_SRV2	✅
Protect client config files	no	VPN_PROTECT_CONFIG=yes	✅
Enable/Disable MOBIKE	Enable if supported	❌	✅
Client cert validity	10 years (120 months)	VPN_CLIENT_VALIDITY****	✅
CA & server cert validity	10 years (120 months)	❌	❌
CA certificate name	IKEv2 VPN CA	❌	❌
Certificate key size	3072 bits	❌	❌

IPsec VPN Server Auto Setup Scripts