diff --git a/.github/vpn/config.ovpn b/.github/vpn/config.ovpn new file mode 100644 index 0000000..85139b0 --- /dev/null +++ b/.github/vpn/config.ovpn @@ -0,0 +1,25 @@ +# Client +client +tls-client +dev tun +# this will connect with whatever proto DNS tells us (https://community.openvpn.net/openvpn/ticket/934) +proto tcp +remote vpn.4gl.io 7494 +resolv-retry infinite +cipher AES-256-CBC +auth SHA256 +script-security 2 +keepalive 10 120 +remote-cert-tls server + +# Keys +ca ca.crt +cert user.crt +key user.key +tls-auth tls.key 1 + +# Security +nobind +persist-key +persist-tun +verb 3 diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml index 1eca8be..5f73b61 100644 --- a/.github/workflows/run-tests.yml +++ b/.github/workflows/run-tests.yml @@ -21,6 +21,29 @@ jobs: with: node-version: ${{ matrix.node-version }} + - name: Write VPN Files + run: | + echo "$CA_CRT" > .github/vpn/ca.crt + echo "$USER_CRT" > .github/vpn/user.crt + echo "$USER_KEY" > .github/vpn/user.key + echo "$TLS_KEY" > .github/vpn/tls.key + shell: bash + env: + CA_CRT: ${{ secrets.CA_CRT}} + USER_CRT: ${{ secrets.USER_CRT }} + USER_KEY: ${{ secrets.USER_KEY }} + TLS_KEY: ${{ secrets.TLS_KEY }} + + - name: Install Open VPN + run: | + sudo apt install apt-transport-https + sudo wget https://swupdate.openvpn.net/repos/openvpn-repo-pkg-key.pub + sudo apt-key add openvpn-repo-pkg-key.pub + sudo wget -O /etc/apt/sources.list.d/openvpn3.list https://swupdate.openvpn.net/community/openvpn3/repos/openvpn3-focal.list + sudo apt update + sudo apt install openvpn3=16~beta+focal + - name: Start Open VPN 3 + run: openvpn3 session-start --config .github/vpn/config.ovpn - name: Install Doxygen run: sudo apt-get install doxygen