# packages

pkgId: 64d9ac5d274c0d45b7f6197f90957db5d21461edbfd158e17512e7ed5eefde94
name: 3isec-qubes-sys-vpn
arch: x86_64
version: 1.3
epoch: 0
release: 1.fc32
summary: Create an openvpn proxy in Qubes
rpm_license: GPLv3+
rpm_group: Unspecified
rpm_buildhost: localhost
rpm_sourcerpm: 3isec-qubes-sys-vpn-1.3-1.fc32.src.rpm
location_href: 3isec-qubes-sys-vpn-1.3-1.fc32.x86_64.rpm
checksum_type: sha256
description:
  This package sets up a VPN gateway, named sys-vpn, using openvpn.
  It follows the method detailed in the Qubes docs,
   https://github.com/Qubes-Community/Contents/blob/master/docs/configuration/vpn.md
  using iptables and CLI scripts.

  The package creates a qube called sys-vpn based on the debian-11-minimal
  template.  If the debian-11-minimal template is not present, it will
  be downloaded and installed - this may take some time depending on your
  net connection.

  There are minor changes to the firewall rules on sys-vpn to ensure
  blocking of outbound connections.

  After installing, copy your openvpn configuration file or zip file
  to sys-vpn.
  Run setup_vpn to set up the VPN.
  There should be a menu item for this script - if you cannot see it, you may
  need to refresh the application list in sys-vpn settings.
  When finished, restart sys-vpn.

  To use the VPN, set sys-vpn as the netvm for your qubes(s).
  All traffic will go through the VPN.
  The VPN will fail closed if the connection drops.
  No traffic will go through clear.

  If you remove the package, the salt files will be removed.
  **The sys-vpn gateway will also be removed.**
  To do this ALL qubes will be checked to see if they use sys-vpn.
  If they do, their netvm will be set to `none`.

  You can, of course, use template-openvpn to create other VPN gateways.


