33 lines
985 B
YAML
33 lines
985 B
YAML
|
version: "3"
|
||
|
|
|
||
|
|
|
||
|
|
services:
|
||
|
|
ocserv:
|
||
|
|
image: quay.io/aminvakil/ocserv
|
||
|
|
container_name: ocserv
|
||
|
|
sysctls:
|
||
|
|
- net.ipv4.ip_forward=1
|
||
|
|
cap_add:
|
||
|
|
- NET_ADMIN
|
||
|
|
security_opt:
|
||
|
|
- no-new-privileges
|
||
|
|
ports:
|
||
|
|
- "443:443"
|
||
|
|
- "443:443/udp"
|
||
|
|
environment:
|
||
|
|
- SRV_CN=${LETSENCRYPT_DOMAIN}
|
||
|
|
- CA_DAYS=${LETSENCRYPT_RENEW}
|
||
|
|
- CAMOUFLAGE_SECRET=${CAMOUFLAGE_SECRET}
|
||
|
|
- OCSERV_USER=${OCSERV_USER}
|
||
|
|
- OCSERV_PASS=${OCSERV_PASS}
|
||
|
|
volumes:
|
||
|
|
- /app/openconnect/config:/etc/ocserv
|
||
|
|
- /app/certbot/ssl/:/ssl
|
||
|
|
restart: unless-stopped
|
||
|
|
command: bash -c "
|
||
|
|
sed -i '/^camouflage = /{s/false/true/}' /etc/ocserv/ocserv.conf &&
|
||
|
|
sed -i '/^camouflage_secret = /{s/mysecretkey/${CAMOUFLAGE_SECRET}/}' /etc/ocserv/ocserv.conf &&
|
||
|
|
echo -e '${OCSERV_PASS}\n${OCSERV_PASS}' | ocpasswd -c /etc/ocserv/ocpasswd ${OCSERV_USER} &&
|
||
|
|
ocpasswd -c /etc/ocserv/ocpasswd -d test &&
|
||
|
|
ocserv -f -c /etc/ocserv/ocserv.conf"
|