aboutsummaryrefslogtreecommitdiffstats
path: root/modules/scripts/vpn-connect/script.sh
blob: 4ba8f3d14b820cc78f4cf02459acbaa4d79df891 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
CONF_DIR="$HOME/.config/openvpn"
CREDS_DIR="$CONF_DIR/credentials"
SERVERS_DIR="$CONF_DIR/servers"
CACHE_FILE="$HOME/.cache/openvpn/last_connection"
PID_FILE="$HOME/.cache/openvpn/vpn.pid"
LOG_FILE="$HOME/.cache/openvpn/vpn.log"

mkdir -p "$CREDS_DIR" "$SERVERS_DIR" "$(dirname "$CACHE_FILE")"

REFRESH=false
if [[ "$1" == "--refresh" || "$1" == "-r" ]]; then
  REFRESH=true
fi

# Load cache
if [[ "$REFRESH" == false && -f "$CACHE_FILE" ]]; then
  source "$CACHE_FILE"
  if [[ ! -f "$CRED" || ! -f "$SERVER" ]]; then
    REFRESH=true
  fi
else
  REFRESH=true
fi

# Select if needed
if [[ "$REFRESH" == true ]]; then
  CRED=$(find "$CREDS_DIR" -type f | fzf --prompt="Select Credentials > ")
  [ -z "$CRED" ] && exit 1

  SERVER=$(find "$SERVERS_DIR" -type f \( -name "*.conf" -o -name "*.ovpn" \) | fzf --prompt="Select VPN Server > ")
  [ -z "$SERVER" ] && exit 1

  echo "CRED=\"$CRED\"" > "$CACHE_FILE"
  echo "SERVER=\"$SERVER\"" >> "$CACHE_FILE"
fi

echo "Connecting to $SERVER..."

TMP_CONF=$(mktemp /tmp/vpn-config.XXXXXX)

sed -e '/up \/etc\/openvpn\/update-resolv-conf/d' \
  -e '/down \/etc\/openvpn\/update-resolv-conf/d' "$SERVER" > "$TMP_CONF"

# Run in background
sudo -v || exit 1

nohup sudo openvpn \
  --config "$TMP_CONF" \
  --auth-user-pass "$CRED" \
  --script-security 2 \
  --up "$SYSTEMD_RESOLVED_PATH" \
  --down "$SYSTEMD_RESOLVED_PATH" \
  --down-pre \
  > "$LOG_FILE" 2>&1 &

VPN_PID=$!

echo $VPN_PID > "$PID_FILE"
echo "VPN started in background (PID: $VPN_PID)"
echo "Logs: $LOG_FILE"

# Wait until connected
echo -n "Waiting for VPN connection"
while true; do
  if grep -q "Initialization Sequence Completed" "$LOG_FILE" 2>/dev/null; then
    echo ""
    echo "VPN connected successfully."
    break
  fi
  if ! kill -0 "$VPN_PID" 2>/dev/null; then
    echo ""
    echo "VPN process died. Check logs: $LOG_FILE"
    exit 1
  fi
  sleep 1
  echo -n "."
done