X-Git-Url: https://iankelling.org/git/?p=vpn-setup;a=blobdiff_plain;f=vpn-server-setup;fp=vpn-server-setup;h=4dcb2158c721f709dff01a5bc977e515e8a31f0a;hp=8d25c1f4c62918ade08c916ec35c2fa5a3918b51;hb=380c0bb2981093bb23d85eeca29e5b214de5e14a;hpb=e1e49f58b89db5ea637f2671bf8c1ce35af68e5f

diff --git a/vpn-server-setup b/vpn-server-setup
index 8d25c1f..4dcb215 100755
--- a/vpn-server-setup
+++ b/vpn-server-setup
@@ -83,7 +83,11 @@ teeu /etc/openvpn/server.conf <<'EOF'
 cipher aes-256-cbc
 # Be the default gateway for clients.
 push "redirect-gateway def1"
+# just sets up the ability to have client specific configs
+client-config-dir /etc/openvpn/client-config
 EOF
+mkdir -p /etc/openvpn/client-config
+
 
 if $dns; then
     # Be the dns server for clients
@@ -101,7 +105,7 @@ EOF
 
 gw=$(ip route | sed -rn 's/^default via .* dev (\S+).*/\1/p')
 
-sudo dd of=/etc/systemd/system/mynat.service <<EOF
+sudo dd of=/etc/systemd/system/vpnnat.service <<EOF
 [Unit]
 Description=Turns on nat iptables setting
 
@@ -112,10 +116,10 @@ ExecStart=/sbin/iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o $gw -j MASQUERA
 ExecStop=/sbin/iptables -t nat -D POSTROUTING -s 10.8.0.0/24 -o $gw -j MASQUERADE
 
 [Install]
-WantedBy=multi-user.target
+WantedBy=openvpn.service
 EOF
 systemctl daemon-reload # needed if the file was already there
-systemctl enable mynat.service
-systemctl start mynat.service
+systemctl enable vpnnat.service
+systemctl start vpnnat.service
 
 systemctl restart openvpn@server