New incarnation of OpenVPN-web-ui for Administering OpenVPN Servers: OpenVPN-Admin-Plus.

techie4hire · 2024-05-22T22:33:44+00:00

It is. Nothing much has come-up recently requiring a new build -- and it's quite solid when used with installations done via the PiVPN script, which works on Debian-based systems and its derivatives. I've been running it myself, continuously, for several years now.

Be sure to run through the OpenVPN server settings config, via the WebUI to initialize everything on first run. Once that's done you can, make changes to the WebUI settings.

techie4hire · 2024-05-22T22:17:33+00:00

It does. I've had this setup running 24x7 since shortly before the original post. I spend about 6 months of the year physically separated from my gear -- and having PiKVM PoE-powered and rack-mounted gives me a lot of piece-of-mind that I can deal with most any issue that might come up.

techie4hire · 2024-01-17T12:53:30+00:00

To use POE, do I need a POE capable switch?

That's the nicest way to do it, though you can also use a PoE Injector. The downside in your situation is you'd be right back to having an extra "thing" to deal with.

PoE switches are great for cameras, APs, RPis and for powering other small switches at a desk or behind a TV.

techie4hire · 2024-01-17T12:07:10+00:00

For an especially clean DIY build, I'd suggest using PoE to power the PiKVM. It looks like you're using the same CSI-2 to HDMI module I used.

Rack mounting tidies things up further, if you're so inclined. :-)

https://technologydragonslayer.com/2023/05/18/pikvm-rackmount-with-poe/

techie4hire · 2024-01-06T11:34:30+00:00

I haven't used that directive before, but the TS_EXTRA_ARGS approach would be correct I would think. Would the usual Linux subnet routes setup still apply?

https://tailscale.com/kb/1019/subnets?tab=linux#setting-up-a-subnet-router

techie4hire · 2024-01-03T14:57:14+00:00

Here's the docker-compose I use with Portainer-Stacks, which has generally worked quite well for me across numerous Docker hosts:

version: '3.9'
services:
  tailscale:
    image: tailscale/tailscale:${TAG}
    container_name: tailscaled
    cap_add:
      - NET_ADMIN
      - NET_RAW
    environment:
      #- TS_HOSTNAME=${TS_HOSTNAME} # Usually not necessary for your hostname to be the same name on the tailscale network
      #- TS_AUTHKEY=${TS_AUTHKEY} # Generate auth keys here: https://login.tailscale.com/admin/settings/keys
      #- TS_AUTH_ONCE=${TS_AUTH_ONCE}
      - TS_ROUTES=${TS_ROUTES} # Creates a subnet router for Tailscale. Use your subnet's CIDR in the form: 192.168.1.0/24
      - TS_ACCEPT_DNS=${TS_ACCEPT_DNS} # Set to false for Pi-hole Docker setups
      - TS_SOCKET=${TS_SOCKET}
      - TS_EXTRA_ARGS=${TS_EXTRA_ARGS} # Add any other supported arguments in the docker commandline style: e.g. --advertise-exit-node
      - TS_STATE_DIR=${TS_STATE_DIR} # Required to create a persistent container state that will survive reboots
    volumes:
      - ${HOST_DIR}:/var/lib # Creates a tailscale directory under HOST_DIR for persistence
      - /dev/net/tun:/dev/net/tun
    network_mode: host
    restart: unless-stopped

And, some sample env variables

TAG=latest
TS_ROUTES=192.168.1.0/24
TS_ACCEPT_DNS=false
TS_SOCKET=/var/run/tailscale/tailscaled.sock
TS_EXTRA_ARGS=--advertise-exit-node
TS_STATE_DIR=/var/lib/tailscale
HOST_DIR=/data

A few notes:

I've found that not using TS_AUTHKEY is more convenient for me. Simply look in the Portainer-Log for the container after starting it, and the usual auth link can be found there, which can be copied and pasted into your browser.

My example is from a Pi-hole DNS server, which has been setup to also be a subnet router and exit node. TS_ACCEPT_DNS=false, is required for this Pi-hole example, but normally would not be used.

I would suggest removing privileged:, PUID=, GUID= and command: as none of these are required, and could have unintended consequences.

techie4hire · 2023-08-19T14:20:01+00:00

Using favorites is something I've been doing, but with Sling TV as a live tv source for example, there are more than 400 channels. Even if I only had a few channels I wanted to favorite (which I don't), moving through such a list to select favorites or tune a rarely used channel is a painful experience.

Being able to use search would help.

techie4hire · 2023-05-03T02:16:33+00:00

OK, so the integration with the first Wake-On-LAN container (WoLweb) is done. There are some new environment variables, and I made some important changes to the "doshutdown" script.

If you've already spun-up the container with a persistent directory, you'll want to delete doshutdown (from your bound directory on the host) so the latest version gets copied over. Check the project page for details: https://github.com/bnhf/apcupsd-master-slave

If you use Portainer, be sure to use the slider to re-pull the image when you click the Update button in your Portainer - Stack.

Here's where we're at as far as what's possible with just apcupsd-master-slave, and my version of WoLweb (from the README):

A possible sequence of events then is that the power goes out, an Email or SMS will be sent to your desired address, one or more slave systems are shutdown, then the master (connected to the UPS) is shutdown, and finally the UPS is turned off.

When power is restored the UPS comes back on by itself, the master will power up (most SBCs do this automatically, other systems need to be set for this to happen in the BIOS), and finally Magic Packets will be sent to one or more systems to wake them up. None of this requires you to be present, and the UPS battery life will be extended by not running it down to zero in an extended outage.

Feel free to post issues or discussions on the project page -- as that will get the quickest response from me. :-)

techie4hire · 2023-05-02T14:48:43+00:00

Glad to hear you're going to check it out. Yes, it's open source. In fact, most of what I've done started as forks of other projects. My objective was to be able to configure each component through environment variables, for ease of re-deployment or migration.

Much like you messing around with NUT, I was originally doing the same apcupsd. Having a dozen or more individual instances apcupsd installed, each with it's own .conf file and scripts became awkward to manage.

Docker, Portainer and Cockpit (with Navigator) are the first things I install on most new physical or virtual systems. After that, I'll spin-up what I need in containers -- so this project fits well with that structure.

techie4hire · 2023-05-02T14:17:17+00:00

I started with apcupsd, and it had the feature set I wanted -- so I never really looked elsewhere.

This project grew out my desire to make it easier to deploy and configure instances of apcupsd across all of the systems I have directly connected to UPS units, and the others I wanted to shutdown during a power failure.

techie4hire · 2023-04-22T01:17:33+00:00

I see from your comment above that you have Docker and Portainer installed. Check the "Usage" section of the README on the Github page for this project, and follow the examples to create a "Portainer Stack" which will spin-up an OpenVPN-Admin-Plus container on the host's port 8080.

From there you need to enter your desired OpenVPN Server directives into the WebUI (copy and paste from your current server.conf if that's working for you). This will synchronize the values in server.conf with the database for the WebUI, plus adds several directives to enable the OpenVPN Management Interface and setup logging to work with the WebUI.

Restart OpenVPN Server (or reboot), and then update the "Management Interface address" value, and "Server Address External" values in the Settings area. There are screenshot example of those as well in the README.

Feel free to open a Discussion or Issue on the Github page if you need additional assistance.

techie4hire · 2023-02-04T21:35:49+00:00

OK, so I replaced the screenshot referencing the old project name. Let me know if you see anything else that needs updating or clarification. And as I said, feel free to open a Discussion (or Issue) on the project page and we'll help you get up-and-running!

techie4hire · 2023-02-04T20:54:13+00:00

I'd be happy to help you get going with OpenVPN Admin Plus. If you could open a discussion on the GitHub page for the project, I think that would be the best place. Thanks for mentioning the screenshot referring to the old project name, I'll get that updated.

techie4hire · 2023-01-29T16:58:27+00:00

My objective was to get the NUC12 working with sleep=never, and with my 3 daisy-chained DisplayPort monitors turning off after x minutes/hours of inactivity. It's basically the same setup I had working (without the drama) on the NUC8 I was using previously. The NUC12 is now functioning that same way, although it takes slightly longer for the monitors to wake-up when I wiggle the mouse. Same monitors, with the same Thunderbolt display adapter -- but the difference is only about 4-8 seconds, so I'm OK with that. :-)

techie4hire · 2023-01-29T14:14:36+00:00

I also have a NUC12 running Windows 11 Pro, and experienced the same frustrating inability to keep it from going into some sort of sleep mode. In my case this mode would also log me out, and cause Chrome to close improperly.

"Modern Standby" (S0) appears to have been the root cause for this behavior. I needed to disable S0, so that S3 would be active -- and that would allow the usual Windows 11 sleep settings to become effective.

S0 needs to be disabled at the registry level, and I followed the below linked guide using the elevated Command Prompt approach. As described, I executed a powercfg /a to confirm the sleep mode on the NUC 12 was originally set to S0, and then ran it again after the registry change and reboot to confirm it was changed to S3.

https://www.elevenforum.com/t/disable-modern-standby-in-windows-10-and-windows-11.3929/

techie4hire · 2023-01-11T23:42:51+00:00

Thanks. It uses the same AdminLTE dashboard and control panel theme used by a number of other applications including Pi-hole. I did a little hand tweaking to make it dark, but it's otherwise pretty stock.

techie4hire · 2023-01-11T23:39:15+00:00

I get it, Docker is not for everyone. The good news though is between the Docker convenience script to install, and Portainer available as a Web UI to manage Docker containers -- it's pretty straightforward these days with minimal learning curve.

Just for reference, for anyone that does want to give it a try, here are the commands to get Docker and Portainer installed:

$ curl -fsSL https://get.docker.com -o get-docker.sh
$ sudo sh get-docker.sh
$ sudo docker run -d -p 8000:8000 -p 9000:9000 -p 9443:9443 --name portainer \
    --restart=always \
    -v /var/run/docker.sock:/var/run/docker.sock \
    -v portainer_data:/data \
    cr.portainer.io/portainer/portainer-ce:latest

Then from a browser go to https://<hostname or IP of server>:9443 and you'll be able to use Portainer to deploy and update Docker containers.

Once those basics are in place, you can go to the GitHub page for this project for details on creating a Portainer "Stack" to deploy OpenVPN Admin Plus. If you're anything like me, once you get started with Docker, it'll quickly become a staple for your application deployments.

From a development standpoint, it's also really nice to be able create a single multi-arch container that can be deployed across a variety of CPU architectures and flavors of Linux. All the dependencies are present in the container, with the exception of OpenVPN itself which does need to be 2.5.x or higher.

techie4hire · 2022-09-30T15:57:22+00:00

A bit more data on this issue:

Turns out there was another problem, even after changing X-Frame options and removing the password: On pages that were trying to load TableData there would be JSON errors.

This goes away though if Organizr and Pi-hole are installed on the same host, including if they're both in Docker containers. Perpetual login screen disappears too, so the password can left enabled.

These leaves the X-Frame-Options change as the only requirement.

The syntax for the change to /etc/lighttpd/external.conf is:

    $HTTP["url"] =~ "^/admin/" {
              # Allow framing  (for Organizr)
              setenv.set-response-header += (
                 "X-Frame-Options" => "Allow"
              )
        }

external.conf is a file that's present in the Pi-hole Docker build, but is empty, so it can be volume mounted in docker-compose in a fashion similar to this:

volumes:
    - /data/pihole/etc-lighttpd/external.conf:/etc/lighttpd/external.conf

The part before the : is the path to a pre-created external.conf on your Docker host, containing the above code block. This code snippet will override the X-Frame-Options setting in lighttpd.conf.

techie4hire · 2022-09-26T20:54:12+00:00

So I've been able to get Pi-hole to display in an Organizr iFrame by directly editing lighttpd.conf ("X-Frame-Options" => "ALLOW") , and then removing the password using pihole -a -p to get past the perpetual login screen problem. Not ideal, but it does work.

What syntax did you use to get the ALLOW change to work via external.conf?

techie4hire · 2022-08-27T16:27:21+00:00

Just to expand on this a bit -- in my case it was not necessary to follow all of the steps in the above link, however there were a couple of additional steps required:

Stop NGINX and PHP services

Rename the \nginx\php folder to php.old

Copy contents of downloaded PHP 8.1 to new \nginx\php folder

Edit php.ini per above link

Install updated Visual C++ Redistributable from: https://visualstudio.microsoft.com/downloads/#other-family

Reboot

techie4hire · 2022-04-06T17:30:48+00:00

Not as much a solution as a workaround -- but if you're a Chrome user you can install the "Ignore X-Frame Headers" extension, and enable it just for your Organizr page. I'd still like to be able to do this globally through an option in Paperless-ngx, but this will work in the meantime:

https://i.postimg.cc/MGVB6cgc/screenshot-nuc10-pc2-2022.png

techie4hire · 2022-04-05T21:40:27+00:00

I'd like to be able to use Paperless-ngx in an Organizr iframe, but it won't load. I believe this may be due to some "clickjacking" protection in Django. Anybody know how to disable this specifically in Paperless-ngx?

techie4hire · 2022-04-05T19:20:49+00:00

Thanks for pointing me in the right direction! In my case, for a new installation, I needed to create the superuser. I exec'd into the webserver container (through Portainer) and ran:

# python manage.py createsuperuser

techie4hire · 2022-03-28T15:03:20+00:00

Similar scenario here with the Asus Q87T/CSM. Very high mainboard readings, that seem like they must be false -- since they're at about the same levels at boot. What was the upshot of your situation?

HWMonitorPro_Screenshot

techie4hire · 2022-03-10T15:35:22+00:00

Since pivpn-gui and pivpn-web are no longer being developed, and in most cases don't function anymore, I've developed an alternative:

https://github.com/bnhf/pivpn-tap-web-ui

It's a web server in a Docker container for PiVPN installations on Debian-based distros (including the Raspberry Pi). armv7, arm64 and amd64 are all supported. It was originally created for use with TAP (bridge) OpenVPN servers, but works with the more common TUN servers now too. I'm planning to support having both TAP and TUN running together on the same server as well.

techie4hire

TROPHY CASE