====== Raspberry Pi OpenVPN Notes======

==== OpenVPN & IPvanish====

First, choose the IPvanish server you wish to use.

[[https://www.ipvanish.com/software/configs/|IPvanish servers]]

   > sudo nano /etc/resolv.conf
      nameserver 208.67.222.220
      nameserver 208.67.220.220
   > sudo apt-get install openvpn
   > sudo reboot
   > cd /etc/openvpn
   > sudo wget https://www.ipvanish.com/software/configs/ca.ipvanish.com.crt
   > sudo wget https://www.ipvanish.com/software/configs/ipvanish-NL-Amsterdam-ams-a37.ovpn
   > sudo cp ipvanish-NL-Amsterdam-ams-a37.ovpn ipvanish-NL-Amsterdam-ams-a37.conf
   > sudo openvpn ipvanish-NL-Amsterdam-ams-a37.ovpn
   Login, make sure there are no errors, CTRL-C to exit
   > sudo killall openvpn
   > sudo nano /etc/openvpn/ipvanish-NL-Amsterdam-ams-a37.conf
      client
      dev tun
      proto udp
      remote ams-a37.ipvanish.com 443
      resolv-retry infinite
      nobind
      persist-key
      persist-tun
      persist-remote-ip
      ca ca.ipvanish.com.crt
      verify-x509-name ams-a19.ipvanish.com name
      auth-user-pass auth.txt
      comp-lzo
      verb 3
      auth SHA256
      cipher AES-256-CBC
      keysize 256
      tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA
      log-append /var/log/openvpn.log
   > sudo nano /etc/openvpn/auth.txt
      username
      password
   > sudo nano /etc/default/openvpn
      AUTOSTART="ipvanish-NL-Amsterdam-ams-a37"
   > sudo systemctl enable openvpn
 
----
==== Mount NAS ====
   > sudo mkdir /VideoNAS
   > sudo mkdir /VideoNAS/media
   > sudo mount -t cifs //192.168.10.120/media /VideoNAS/media -o,vers=1.0

==== Deluged ====
   > sudo apt install deluged deluge-web deluge-console python3-mako
   > sudo apt-get install deluge-console
   > deluged
   > sudo pkill -i deluged
   > echo "<USERNAME>:<PASSWORD>:10" >> ~/.config/deluge/auth
   > deluged
   > deluge-console "config -s allow_remote True"
   > deluge-web -f
   Open http://<IPADDRESS>:8112 and login with password "deluge"
   Go to Preferences, Interface & update the password.
   Change the default Deluged upload/download directories
   > sudo nano /etc/systemd/system/deluged.service
      [Unit]
      Description=Deluge Daemon
      After=network-online.target
      [Service]
      Type=simple
      User=pi
      Group=pi
      UMask=007
      ExecStart=/usr/bin/deluged -d
      Restart=on-failure
      TimeoutStopSec=300
      [Install]
      WantedBy=multi-user.target   
   > sudo sudo systemctl enable deluged.service
   > sudo nano /etc/systemd/system/deluge-web.service
      [Unit]
      Description=Deluge Web Interface
      After=network-online.target deluged.service
      Wants=deluged.service
      [Service]
      Type=simple
      User=pi
      Group=pi
      UMask=027
      ExecStart=/usr/bin/deluge-web -d
      Restart=on-failure
      [Install]
      WantedBy=multi-user.target
   > sudo systemctl enable deluge-web.service

Create firewall service for Deluged
   > sudo nano /etc/firewalld/services/deluged.xml
      <?xml version="1.0" encoding="utf-8"?>
      <service>
         <short>Deluged</short>
         <description>Deluged</description>
         <port protocol="tcp" port="8112"/>
         <port protocol="tcp" port="58846"/>
         <port protocol="tcp" port="56881-56889"/>
         <port protocol="udp" port="56881-56889"/>
      </service>
   > sudo chmod 640 /etc/firewalld/services/deluged.xml
   > sudo firewall-cmd --permanent --add-service=deluged