andrew-naish / docker-openvpn-proxy Goto Github PK

I like what alturismo has here.

I accidentally provided wrong authentication details. Checked for my public IP via curl (using the proxy) and found out that my public IP was being used.

Here is the output of docker logs:

2021-01-12 10:59:43.104 7f81ea130b48 Info: Listening on port 8080 on IP address 0.0.0.0
Tue Jan 12 10:59:43 2021 AUTH: Received control message: AUTH_FAILED
2021-01-12 10:59:44.643 7f81ea01cb20 Request: icanhazip.com/
Tue Jan 12 10:59:45 2021 AUTH: Received control message: AUTH_FAILED

I wonder if Privoxy should listen to a specific IP tied to openvpn rather than 0.0.0.0?

Check for / Add the following line to targeted VPN config.

auth-user-pass /app/ovpn/config/credentials.txt

These actions should be done within /app/ovpn/run.

• For the check - echo something to stdout if the line isn't found.
• For the fix - copy the ovpn file within the container to a new location, adding the line and using that ovpn file to connect. I don't want to enforce write permissions to the volume.

Currently it's set to 1 which logs all requests and sends to docker stderr and 4096 which shows a start-up banner.
I think we should have these by default: 1024, 4096 and 8192 and provide an option to enable 1.

docs here: https://www.privoxy.org/user-manual/config.html
(section 7.3.1)

Use cron instead of while sleep

It's what cron is made for after all.
There is already a baked in 15min interval, I can use that.
https://devopsheaven.com/cron/docker/alpine/linux/2017/10/30/run-cron-docker-alpine.html

Replace ONLINECHECK_DELAY with ONLINECHECK_QUERYURL

I think I should remove the option to easily set the delay and instead add the option to configure the query URL.
After switching to cron this will be harder to set anyway.
The default is and will remain https://www.google.co.uk if unset.

I should have the ability to define the ovpn path as a volume instead of defining as a variable.

This makes the container much easier to use:

1. You can store ovpn file anywhere.
2. You can change config more easily.