[{"_1":2,"_189":-5,"_190":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_162":163},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":11,"_17":11,"_18":19,"_20":11},"username","isBillingDecouplingSeatCount","isSearchBoxExperimentEnabled","isAskGordonEnabled",true,"isUsingNewTemplate","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_88":-5,"_89":90,"_155":-5,"_156":11,"_157":11,"_158":11,"_159":-5,"_160":161},"canonicalUrl","https://hub.docker.com/r/rekeshali/openvpn-client-nord/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","rekeshali","reponame","openvpn-client-nord","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_43":44,"_46":47,"_48":49,"_50":11,"_51":52,"_53":54,"_55":56,"_39":31,"_28":29,"_58":59,"_60":45,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":29,"_73":74,"_79":11,"_80":81,"_85":29,"_86":87},"categories",[38],{"_39":40,"_41":42},"name","Networking","slug","networking","content_types",[45],"image","date_registered","2024-06-02T03:06:10.936785Z","description","A fork of ghcr.io/wfg/openvpn-client that streamlines connection to NordVPN servers.","is_private","last_updated","2024-06-07T08:33:26.775446Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[57],"application/vnd.oci.image.index.v1+json","pull_count",262,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# Modifications\nThis is pretty much the same docker configuration except it streamlines the process by downloading OpenVPN configuration files directly from NordVPN and uses environment variables for authentication. Just supply a NordVPN server code and pass your OpenVPN credentials in the environment. Really useful for connecting to your dedicated IP without having to juggle a bunch of files.\n\n#### `docker-compose`\n```yaml\nservices:\n openvpn-nord:\n build: \n context: ./build\n dockerfile: Dockerfile\n container_name: openvpn-nord\n cap_add:\n - NET_ADMIN\n devices:\n - /dev/net/tun\n environment:\n - NORDVPN_SERVER=uk2234\n - OPENVPN_USERNAME=\n - OPENVPN_PASSWORD=\n - OPENVPN_TECHNOLOGY=UDP\n - KILL_SWITCH=on\n - ALLOWED_SUBNETS=192.168.10.0/24\n restart: unless-stopped\n```\n# OpenVPN Client for Docker\n\nArchived in favor of [a WireGuard version](https://github.com/wfg/docker-wireguard).\n\n## What is this and what does it do?\n[`ghcr.io/wfg/openvpn-client`](https://github.com/users/wfg/packages/container/package/openvpn-client) is a containerized OpenVPN client.\nIt has a kill switch built with `iptables` that kills Internet connectivity to the container if the VPN tunnel goes down for any reason.\n\nThis image requires you to supply the necessary OpenVPN configuration file(s).\nBecause of this, any VPN provider should work.\n\nIf you find something that doesn't work or have an idea for a new feature, issues and **pull requests are welcome** (however, I'm not promising they will be merged).\n\n## Why?\nHaving a containerized VPN client lets you use container networking to easily choose which applications you want using the VPN instead of having to set up split tunnelling.\nIt also keeps you from having to install an OpenVPN client on the underlying host.\n\n## How do I use it?\n### Getting the image\nYou can either pull it from GitHub Container Registry or build it yourself.\n\nTo pull it from GitHub Container Registry, run\n```\ndocker pull ghcr.io/wfg/openvpn-client\n```\n\nTo build it yourself, run\n```\ndocker build -t ghcr.io/wfg/openvpn-client https://github.com/wfg/docker-openvpn-client.git#:build\n```\n\n### Creating and running a container\nThe image requires the container be created with the `NET_ADMIN` capability and `/dev/net/tun` accessible.\nBelow are bare-bones examples for `docker run` and Compose; however, you'll probably want to do more than just run the VPN client.\nSee the below to learn how to have [other containers use `openvpn-client`'s network stack](#using-with-other-containers).\n\n#### `docker run`\n```\ndocker run --detach \\\n --name=openvpn-client \\\n --cap-add=NET_ADMIN \\\n --device=/dev/net/tun \\\n --volume :/config \\\n ghcr.io/wfg/openvpn-client\n```\n\n#### `docker-compose`\n```yaml\nservices:\n openvpn-client:\n image: ghcr.io/wfg/openvpn-client\n container_name: openvpn-client\n cap_add:\n - NET_ADMIN\n devices:\n - /dev/net/tun\n volumes:\n - :/config\n restart: unless-stopped\n```\n\n#### Environment variables\n| Variable | Default (blank is unset) | Description |\n| --- | --- | --- |\n| `ALLOWED_SUBNETS` | | A list of one or more comma-separated subnets (e.g. `192.168.0.0/24,192.168.1.0/24`) to allow outside of the VPN tunnel. |\n| `AUTH_SECRET` | | Docker secret that contains the credentials for accessing the VPN. |\n| `CONFIG_FILE` | | The OpenVPN configuration file or search pattern. If unset, a random `.conf` or `.ovpn` file will be selected. |\n| `KILL_SWITCH` | `on` | Whether or not to enable the kill switch. Set to any \"truthy\" value[1] to enable. |\n\n[1] \"Truthy\" values in this context are the following: `true`, `t`, `yes`, `y`, `1`, `on`, `enable`, or `enabled`.\n\n##### Environment variable considerations\n###### `ALLOWED_SUBNETS`\nIf you intend on connecting to containers that use the OpenVPN container's network stack (which you probably do), **you will probably want to use this variable**.\nRegardless of whether or not you're using the kill switch, the entrypoint script also adds routes to each of the `ALLOWED_SUBNETS` to allow network connectivity from outside of Docker.\n\n##### `AUTH_SECRET`\nCompose has support for [Docker secrets](https://docs.docker.com/engine/swarm/secrets/#use-secrets-in-compose).\nSee the [Compose file](docker-compose.yml) in this repository for example usage of passing proxy credentials as Docker secrets.\n\n### Using with other containers\nOnce you have your `openvpn-client` container up and running, you can tell other containers to use `openvpn-client`'s network stack which gives them the ability to utilize the VPN tunnel.\nThere are a few ways to accomplish this depending how how your container is created.\n\nIf your container is being created with\n1. the same Compose YAML file as `openvpn-client`, add `network_mode: service:openvpn-client` to the container's service definition.\n2. a different Compose YAML file than `openvpn-client`, add `network_mode: container:openvpn-client` to the container's service definition.\n3. `docker run`, add `--network=container:openvpn-client` as an option to `docker run`.\n\nOnce running and provided your container has `wget` or `curl`, you can run `docker exec wget -qO - ifconfig.me` or `docker exec curl -s ifconfig.me` to get the public IP of the container and make sure everything is working as expected.\nThis IP should match the one of `openvpn-client`.\n\n#### Handling ports intended for connected containers\nIf you have a connected container and you need to access a port that container, you'll want to publish that port on the `openvpn-client` container instead of the connected container.\nTo do that, add `-p :` if you're using `docker run`, or add the below snippet to the `openvpn-client` service definition in your Compose file if using `docker-compose`.\n```yaml\nports:\n - :\n```\nIn both cases, replace `` and `` with the port used by your connected container.\n\n### Verifying functionality\nOnce you have container running `ghcr.io/wfg/openvpn-client`, run the following command to spin up a temporary container using `openvpn-client` for networking.\nThe `wget -qO - ifconfig.me` bit will return the public IP of the container (and anything else using `openvpn-client` for networking).\nYou should see an IP address owned by your VPN provider.\n```\ndocker run --rm -it --network=container:openvpn-client alpine wget -qO - ifconfig.me\n```\n\n### Troubleshooting\n#### VPN authentication\nYour OpenVPN configuration file may not come with authentication baked in.\nTo provide OpenVPN the necessary credentials, create a file (any name will work, but this example will use `credentials.txt`) next to the OpenVPN configuration file with your username on the first line and your password on the second line.\n\nFor example:\n```\nvpn_username\nvpn_password\n```\n\nIn the OpenVPN configuration file, add the following line:\n```\nauth-user-pass credentials.txt\n```\n\nThis will tell OpenVPN to read `credentials.txt` whenever it needs credentials.\n","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":19,"_83":11,"_84":11},"read","write","admin","user","storage_size",76510414,"orgData","recentTags",[91],{"_92":45,"_93":94,"_95":96,"_97":98,"_99":100,"_101":102,"_51":143,"_144":94,"_145":29,"_146":57,"_39":147,"_148":149,"_150":151,"_152":143,"_153":66,"_154":19},"content_type","creator",27254004,"digest","sha256:d714acb3b3c7c7698b6a1ddf22f30f50122769a39d2c6d3db394ce591f831381","full_size",16853302,"id",684965323,"images",[103,120,126,132,135,139],{"_104":105,"_95":106,"_107":108,"_109":110,"_111":112,"_113":114,"_115":108,"_116":-5,"_117":118,"_63":66,"_119":-5},"architecture","arm64","sha256:494e3f61d9189adc8206464b255a9792c902ef892f4fea083c333f7b5efe7b2d","features","","last_pulled","2026-07-18T00:53:23.42257677Z","last_pushed","2024-06-07T08:33:23Z","os","linux","os_features","os_version","size",16879019,"variant",{"_104":121,"_95":122,"_107":108,"_109":123,"_111":112,"_113":114,"_115":108,"_116":-5,"_117":124,"_63":66,"_119":125},"arm","sha256:64113253d153b95885985b743f5ffbfcda128f19d26eb0aa99073852db89da70","2026-07-18T00:53:23.422267898Z",15854369,"v7",{"_104":127,"_95":128,"_107":108,"_109":129,"_111":130,"_113":127,"_115":108,"_116":-5,"_117":131,"_63":66,"_119":-5},"unknown","sha256:d46dfcaf68cd5de0bbe4bb72cba03c1c62e762a03e9d9c1b39a51d84131a0e1b","2026-07-18T00:53:23.419460844Z","2024-06-07T08:33:24Z",1205,{"_104":127,"_95":133,"_107":108,"_109":134,"_111":130,"_113":127,"_115":108,"_116":-5,"_117":131,"_63":66,"_119":-5},"sha256:4aac7c4921162b6dcb469415923a735dbfc04ff2728790182d5ce03814e1b1c4","2026-07-18T00:53:23.421409667Z",{"_104":127,"_95":136,"_107":108,"_109":137,"_111":112,"_113":127,"_115":108,"_116":-5,"_117":138,"_63":66,"_119":-5},"sha256:cb173c75fd34aebef1a2f8625dab206fcc532ec22d0d17b03c6190dcc58bd88c","2026-07-18T00:53:23.563149692Z",1211,{"_104":140,"_95":141,"_107":108,"_109":142,"_111":112,"_113":114,"_115":108,"_116":-5,"_117":98,"_63":66,"_119":-5},"amd64","sha256:c408b9904fcaccd26cbfeb2cb72dbf1e11fe8a74ce297ecdfb875430b9d53c31","2026-07-18T00:53:23.565750998Z","2024-06-07T08:33:25.972602Z","last_updater","last_updater_username","media_type","latest","repository",24260858,"tag_last_pulled","2026-07-18T02:07:36.184577723Z","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":164,"_172":173,"_160":187,"_188":11},{"_36":165,"_43":167,"_46":47,"_48":49,"_50":11,"_51":52,"_53":54,"_55":168,"_39":31,"_28":29,"_58":59,"_60":45,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":29,"_73":169,"_79":11,"_80":171,"_85":29,"_86":87},[166],{"_39":40,"_41":42},[45],[57],{"_75":11,"_76":170},[78],{"_82":19,"_83":11,"_84":11},"tags",{"_174":64,"_175":-5,"_176":-5,"_177":178},"count","next","previous","results",[179],{"_92":45,"_93":94,"_95":96,"_97":98,"_99":100,"_101":180,"_51":143,"_144":94,"_145":29,"_146":57,"_39":147,"_148":149,"_150":151,"_152":143,"_153":66,"_154":19},[181,182,183,184,185,186],{"_104":105,"_95":106,"_107":108,"_109":110,"_111":112,"_113":114,"_115":108,"_116":-5,"_117":118,"_63":66,"_119":-5},{"_104":121,"_95":122,"_107":108,"_109":123,"_111":112,"_113":114,"_115":108,"_116":-5,"_117":124,"_63":66,"_119":125},{"_104":127,"_95":128,"_107":108,"_109":129,"_111":130,"_113":127,"_115":108,"_116":-5,"_117":131,"_63":66,"_119":-5},{"_104":127,"_95":133,"_107":108,"_109":134,"_111":130,"_113":127,"_115":108,"_116":-5,"_117":131,"_63":66,"_119":-5},{"_104":127,"_95":136,"_107":108,"_109":137,"_111":112,"_113":127,"_115":108,"_116":-5,"_117":138,"_63":66,"_119":-5},{"_104":140,"_95":141,"_107":108,"_109":142,"_111":112,"_113":114,"_115":108,"_116":-5,"_117":98,"_63":66,"_119":-5},[],"canDeleteTags","actionData","errors"]

Digest	OS/ARCH	Compressed size
c408b9904fca	linux/amd64	16.07 MB
64113253d153	linux/arm/v7	15.12 MB
494e3f61d918	linux/arm64	16.1 MB

rekeshali/openvpn-client-nord

Tags for rekeshali/openvpn-client-nord