Update Cloudflared configuration and documentation
Co-Authored-By: Oz <oz-agent@warp.dev>
This commit is contained in:
@ -8,6 +8,13 @@ This repository documents the VPN setup hosted on this machine.
|
||||
- Client access using `cloudflared access tcp` + OpenVPN
|
||||
|
||||
## Quick client connect
|
||||
0. Ensure `vpn.bhatfamily.in` is routed to this tunnel:
|
||||
```bash
|
||||
cloudflared tunnel route dns --overwrite-dns 6a2e99c2-ce2c-49a9-a3f2-8bf1ad3073b0 vpn.bhatfamily.in
|
||||
dig +short vpn.bhatfamily.in CNAME
|
||||
```
|
||||
Expected CNAME target:
|
||||
- `6a2e99c2-ce2c-49a9-a3f2-8bf1ad3073b0.cfargotunnel.com.`
|
||||
1. Ensure `cloudflared` and `openvpn` are installed on the client machine.
|
||||
2. Use the provided client profile (`rbhat-client-cloudflared.ovpn`).
|
||||
3. Update the profile remote to local forwarder:
|
||||
@ -26,6 +33,7 @@ This repository documents the VPN setup hosted on this machine.
|
||||
## Important
|
||||
- `21194` is a **local client-side** port, not a public internet port on `vpn.bhatfamily.in`.
|
||||
- If `cloudflared access tcp` fails with `address already in use`, choose another free local port and match it in the `.ovpn` `remote` line.
|
||||
- If `dig +short vpn.bhatfamily.in CNAME` does not return `6a2e99c2-ce2c-49a9-a3f2-8bf1ad3073b0.cfargotunnel.com.`, rerun the DNS route command above.
|
||||
|
||||
## Full operational runbook
|
||||
See `docs/operations.md` for:
|
||||
|
||||
Reference in New Issue
Block a user