aboutsummaryrefslogtreecommitdiffstats
path: root/modules/scripts/vpn-connect
diff options
context:
space:
mode:
authorArpit Chakladar <arpitchakladar+git@gmail.com>2026-07-28 23:06:29 +0530
committerArpit Chakladar <arpitchakladar+git@gmail.com>2026-07-28 23:06:29 +0530
commit36630da39cb82a0fb75991ffeeefcb15623a47ea (patch)
tree086fcac4fc0070d0225bab396e57a0b59c1413b8 /modules/scripts/vpn-connect
parentf357c956a5c9f8a662e1cb354d97eccc55deca0c (diff)
downloadhome-manager-config-36630da39cb82a0fb75991ffeeefcb15623a47ea.tar.gz
home-manager-config-36630da39cb82a0fb75991ffeeefcb15623a47ea.zip
feat(usque): using usque for connecting with cloudflare warp
- Using usque for an opensource alternative to cloudflare-warp client - Created utility script usque-warp that can automatically connect and disconnect channel with cloudflare warp
Diffstat (limited to 'modules/scripts/vpn-connect')
-rw-r--r--modules/scripts/vpn-connect/assertions.nix11
-rw-r--r--modules/scripts/vpn-connect/default.nix32
-rw-r--r--modules/scripts/vpn-connect/script.sh77
3 files changed, 0 insertions, 120 deletions
diff --git a/modules/scripts/vpn-connect/assertions.nix b/modules/scripts/vpn-connect/assertions.nix
deleted file mode 100644
index 252df86..0000000
--- a/modules/scripts/vpn-connect/assertions.nix
+++ /dev/null
@@ -1,11 +0,0 @@
-{ config, ... }:
-[
- {
- assertion = !config.scripts.vpn-connect.enable || config.security.openvpn.enable;
- message = "scripts.vpn-connect is enabled but requires `security.openvpn.enable`.";
- }
- {
- assertion = !config.scripts.vpn-connect.enable || config.terminal.fzf.enable;
- message = "scripts.vpn-connect is enabled but requires `terminal.fzf.enable`.";
- }
-]
diff --git a/modules/scripts/vpn-connect/default.nix b/modules/scripts/vpn-connect/default.nix
deleted file mode 100644
index 194513f..0000000
--- a/modules/scripts/vpn-connect/default.nix
+++ /dev/null
@@ -1,32 +0,0 @@
-{
- config,
- lib,
- pkgs,
- ...
-}:
-let
- inherit ((import ../lib.nix { inherit lib pkgs; })) mkScriptModule;
- base = mkScriptModule {
- name = "vpn-connect";
- path = ./script.sh;
- description = "VPN-connect - OpenVPN connection script with credential caching and monitoring";
- env = {
- SYSTEMD_RESOLVED_PATH = "${config.security.openvpn.package}/libexec/update-systemd-resolved";
- };
- deps = [
- config.terminal.fzf.package
- config.security.openvpn.package
- pkgs.coreutils
- pkgs.findutils
- pkgs.gnugrep
- pkgs.gnused
- ];
- inherit config;
- };
-in
-{
- options = base.options;
- config = base.moduleConfig // {
- assertions = base.moduleConfig.assertions ++ (import ./assertions.nix { inherit config lib; });
- };
-}
diff --git a/modules/scripts/vpn-connect/script.sh b/modules/scripts/vpn-connect/script.sh
deleted file mode 100644
index 4ba8f3d..0000000
--- a/modules/scripts/vpn-connect/script.sh
+++ /dev/null
@@ -1,77 +0,0 @@
-CONF_DIR="$HOME/.config/openvpn"
-CREDS_DIR="$CONF_DIR/credentials"
-SERVERS_DIR="$CONF_DIR/servers"
-CACHE_FILE="$HOME/.cache/openvpn/last_connection"
-PID_FILE="$HOME/.cache/openvpn/vpn.pid"
-LOG_FILE="$HOME/.cache/openvpn/vpn.log"
-
-mkdir -p "$CREDS_DIR" "$SERVERS_DIR" "$(dirname "$CACHE_FILE")"
-
-REFRESH=false
-if [[ "$1" == "--refresh" || "$1" == "-r" ]]; then
- REFRESH=true
-fi
-
-# Load cache
-if [[ "$REFRESH" == false && -f "$CACHE_FILE" ]]; then
- source "$CACHE_FILE"
- if [[ ! -f "$CRED" || ! -f "$SERVER" ]]; then
- REFRESH=true
- fi
-else
- REFRESH=true
-fi
-
-# Select if needed
-if [[ "$REFRESH" == true ]]; then
- CRED=$(find "$CREDS_DIR" -type f | fzf --prompt="Select Credentials > ")
- [ -z "$CRED" ] && exit 1
-
- SERVER=$(find "$SERVERS_DIR" -type f \( -name "*.conf" -o -name "*.ovpn" \) | fzf --prompt="Select VPN Server > ")
- [ -z "$SERVER" ] && exit 1
-
- echo "CRED=\"$CRED\"" > "$CACHE_FILE"
- echo "SERVER=\"$SERVER\"" >> "$CACHE_FILE"
-fi
-
-echo "Connecting to $SERVER..."
-
-TMP_CONF=$(mktemp /tmp/vpn-config.XXXXXX)
-
-sed -e '/up \/etc\/openvpn\/update-resolv-conf/d' \
- -e '/down \/etc\/openvpn\/update-resolv-conf/d' "$SERVER" > "$TMP_CONF"
-
-# Run in background
-sudo -v || exit 1
-
-nohup sudo openvpn \
- --config "$TMP_CONF" \
- --auth-user-pass "$CRED" \
- --script-security 2 \
- --up "$SYSTEMD_RESOLVED_PATH" \
- --down "$SYSTEMD_RESOLVED_PATH" \
- --down-pre \
- > "$LOG_FILE" 2>&1 &
-
-VPN_PID=$!
-
-echo $VPN_PID > "$PID_FILE"
-echo "VPN started in background (PID: $VPN_PID)"
-echo "Logs: $LOG_FILE"
-
-# Wait until connected
-echo -n "Waiting for VPN connection"
-while true; do
- if grep -q "Initialization Sequence Completed" "$LOG_FILE" 2>/dev/null; then
- echo ""
- echo "VPN connected successfully."
- break
- fi
- if ! kill -0 "$VPN_PID" 2>/dev/null; then
- echo ""
- echo "VPN process died. Check logs: $LOG_FILE"
- exit 1
- fi
- sleep 1
- echo -n "."
-done