Hi, this is my current situation : installed latest version of openVPN as a VM inside proxmox 6, using the following script :
https://github.com/angristan/openvpn-install
It went ok, used the defaults (with password protected account).
Now I have to admit : I'm a total noob at all this and it was only with "a little help of my friends" that I managed to have a working NAT masquerading with the openVPN server in proxmox for my 2 VMs there, for their outbound connections.
The ultimate goal would be to be able to access the two VMs in proxmox via openVPN from outside the LAN...
The issue is how to harden security here.
I found this link :
http://docs.hardentheworld.org/Applications/OpenVPN/
but am unable to tell whether it's good or no.
So would anyone bear with me and help me out doing a recommended security setup that wouldn't expose the whole LAN to the world ?
It has already been suggested to me to put the openvpn's private key on a Yubikey, so I'm open to all suggestions...
Thanks in advance.
