pivpn/pivpn
Pivpn
PiVPN is an automated VPN deployer and server manager designed to establish secure gateways for remote network access. It provides a command-line tool for the installation and configuration of WireGuard and OpenVPN servers on Linux systems, with specific optimizations for single-board computers like the Raspberry Pi.
The project distinguishes itself through a wrapper-based management interface that abstracts complex server commands into simplified operations. This includes automated handling of firewall rules, port forwarding, and package installation, as well as the ability to export client connection profiles via QR codes for mobile devices.
The software covers a broad range of administrative capabilities, including client profile provisioning, certificate lifecycle management, and the revocation of access for specific users. It also manages network traffic through split-tunneling configuration, DNS routing, and static IP assignment, while supporting system maintenance via configuration backups and setup diagnostics.
Deployment is handled through shell-based installation scripts, with support for unattended setups using configuration files and automated deployment on cloud instances.
Features
- Script-Based Command Wrappers - Provides a high-level command-line interface that wraps complex server commands into simple user operations.
- VPN Installers - Includes automated scripts for the end-to-end deployment and configuration of VPN server software on Linux.
- OpenVPN Deployments - Provides automated installation and configuration of OpenVPN servers with customized encryption and ports.
- VPN Deployment Automation - Automates the provisioning of VPN servers including firewall rule configuration and package installation.
- Remote Access - Provides a secure gateway to allow remote access to local network resources from external locations.
- VPN Client Configuration Generators - Generates protocol-specific configuration files and profiles to onboard clients to the VPN.
- WireGuard VPN Orchestrators - Automates WireGuard tunnel deployment and the generation of client configuration profiles.
- Client Certificate Generators - Generates password-protected or password-less configuration files and certificates for client connectivity.
- Certificate-Based Authentication - Implements identity verification using public key infrastructure and digital certificates to secure VPN connections.
- Network Encryption Configurations - Sets up network security using public keys and certificates to encrypt data between clients and the server.
- Certificate Revocation - Invalidates specific client certificates to prevent compromised devices or unauthorized users from connecting.
- Client Profile Tracking - Manages the creation, removal, and tracking of client connection profiles and associated keys.
- VPN Server Managers - Provides a management interface for creating client profiles, managing certificates, and revoking access.
- VPN Configuration QR Codes - Transforms connection profiles into scannable QR codes for rapid import into mobile VPN applications.
- Automated Server Installations - Automates server software installation using configuration files to bypass interactive prompts for headless deployments.
- Configuration-Driven Deployments - Uses structured configuration files to automate the parameterization and deployment of the VPN server.
- Shell Bootstrapping Scripts - Executes a series of bash scripts to automate the deployment and configuration of network software on Linux.
- Linux Deployment Utilities - Installs and configures VPN software on Linux systems, including firewall adjustments for traffic forwarding.
- Single-Board Computer Network Tools - Provides optimized deployment scripts for establishing secure network gateways on Raspberry Pi hardware.
- DNS Forwarding Routing - Directs clients to use specific DNS servers for name resolution, such as local ad-blocking instances.
- Local Network Only Routing - Configures the server to grant clients access to the local network while blocking general internet traffic.
- Split Tunneling - Defines allowed IP ranges in client configurations to selectively route traffic through the secure connection.
- Server Network Configurations - Defines server ports, communication protocols, and DNS settings during the initial installation process.
