OpenVPN: Author a Hardened Server Config

MediumNetworking20-30 min

The brief

Stand up an OpenVPN server from the parameters in /root/case/assignment.env. Write /etc/openvpn/server/server.conf with the listener (port/proto/dev tun), the VPN subnet it hands out (server ...), a route pushed to clients so they can reach the LAN behind the server (push "route ..."), and the privilege drop (user/group) that a real deployment must not skip.

Grading parses the config; see /root/case/brief.txt.

What you'll do

Configure the listener: port, proto, and dev tun
Set the VPN subnet with the server directive
Push a route to the LAN behind the server
Drop privileges after startup with user/group

Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.