open VPN ports

Trivadis · Mar 9, 2022 · 8388321 · 8388321
1 parent 88bbb9e
commit 8388321
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/cloudinit/bastion_host.yaml b/cloudinit/bastion_host.yaml
@@ -87,7 +87,9 @@ runcmd:
   - firewall-offline-cmd --add-service=http
   - firewall-offline-cmd --add-service=https 
   - firewall-offline-cmd --add-service=ssh 
+  - firewall-offline-cmd --add-service=openvpn
   - firewall-offline-cmd --add-port=60001/udp
+  - firewall-offline-cmd --add-port=1194/udp
   - firewall-offline-cmd --list-all
   - systemctl enable firewalld 
   - systemctl restart firewalld 

diff --git a/etc/fail2ban.template.conf b/etc/fail2ban.template.conf
@@ -29,6 +29,15 @@ port    = ssh
 logpath = %(sshd_log)s
 backend = %(sshd_backend)s
 
+# OpenVPN server
+[openvpn]
+enabled  = true
+port     = 1194
+protocol = udp
+filter   = openvpn
+logpath  = /var/log/openvpn.log
+maxretry = 3
+
 # nginx HTTP server
 [nginx-http-auth]
 enabled = true