【开源项目】内网穿透系列十五：Docker 部署 OpenVPN 攻略，集成 Web UI，实现一键式异地组网

git clone https://github.com/d3vilh/openvpn-server.git

version: "3.5"
services:
    openvpn:
       container_name: openvpn
       # If you want to build your own image with docker-compose, uncomment the next line, comment the "image:" line and run "docker-compose build" following by "docker-compose up -d"
       # build: .
       image: d3vilh/openvpn-server:latest
       privileged: true
       ports: 
          - "1194:1194/udp"   # openvpn UDP port
          - "1194:1194/tcp"   # openvpn TCP port
         # - "2080:2080/tcp"  # management port. uncomment if you would like to share it with the host
       environment:
           TRUST_SUB: "10.0.70.0/24"
           GUEST_SUB: "10.0.71.0/24"  
           HOME_SUB: "192.168.88.0/24"
       volumes:
           - ./pki:/etc/openvpn/pki
           - ./clients:/etc/openvpn/clients
           - ./config:/etc/openvpn/config
           - ./staticclients:/etc/openvpn/staticclients
           - ./log:/var/log/openvpn
           - ./fw-rules.sh:/opt/app/fw-rules.sh
           - ./checkpsw.sh:/opt/app/checkpsw.sh
           - ./server.conf:/etc/openvpn/server.conf
       cap_add:
           - NET_ADMIN
       restart: always
       depends_on:
           - "openvpn-ui"
    openvpn-ui:
       container_name: openvpn-ui
       image: d3vilh/openvpn-ui:latest
       environment:
           - OPENVPN_ADMIN_USERNAME=admin  #web ui登录账号，必须调整成复杂的
           - OPENVPN_ADMIN_PASSWORD=gagaZush  #web ui登录密码，必须调整成复杂的
       privileged: true
       ports:
           - "18080:8080/tcp" #web ui的端口，根据需要调整外部端口
       volumes:
           - ./:/etc/openvpn
           - ./db:/opt/openvpn-ui/db
           - ./pki:/usr/share/easy-rsa/pki
           - /var/run/docker.sock:/var/run/docker.sock:ro
       restart: always

docker-compose up -d

成功启动截图

version: '3'
services:
  openvpn-client:
    image: dperson/openvpn-client
    restart: always
    cap_add:
      - NET_ADMIN  # 需要此权限来修改网络设置
    volumes:
      - ./vpn:/vpn  # 将配置文件挂载到容器内
    network_mode: host

把新增的客户端配置文件复制到./vpn目录内，然后一键启动

docker-compose up -d