Add configurable VPN access policies (#1505)

Browse Source

## Summary

- add independent install options for internet routing, client-to-client
access, and explicit server-side networks
- enforce the selected policy across firewalld, nftables, and iptables,
including DCO traffic
- use destination-scoped NAT for home LAN access and preserve client
routes and DNS in split-tunnel mode
- document the new defaults and add focused Docker policy coverage

Defaults remain internet access enabled, client-to-client access
disabled, and server-side network access disabled.


Related: #1496 #443 #385 #624 #547 #1436 #1103 #1126 #575 #1434 #1213
#147

...

This commit is contained in:

Stanislas

2026-08-02 22:57:05 +02:00

committed by GitHub

parent 25476a7143

commit d2fc6d444b

11 changed files with 1498 additions and 476 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

openvpn-install.sh

+870 -280

File diff suppressed because it is too large Load Diff