CCrypto VPN public website https://vpn.ccrypto.org/
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
alice 1efa6039bc update django-lcore to remove compatibility-breaking cipher line 2 weeks ago
ccvpn add vpn auth fails notification 3 weeks ago
deploy add celery setup instructions 3 weeks ago
downloads Add missing downloads app 1 year ago
kb fix kb entry sorting 11 months ago
lambdainst fix push_user being called with VPNUser id 3 weeks ago
locale/fr/LC_MESSAGES a few last minute fixes 2 months ago
payments add tasks to replace cron-scheduled scripts 4 weeks ago
static update help landing page for wg, privacy policy 3 weeks ago
templates update help landing page for wg, privacy policy 3 weeks ago
tickets Fix ticket submission 1 year ago
.gitignore Add missing downloads app 1 year ago
LICENSE Initial commit 4 years ago
README.md add celery setup instructions 3 weeks ago
kb.json add kb data from faq.md 11 months ago
manage.py Use python3 instead of python in manage.py 4 years ago
manage.sh Add up to date deploy instructions 1 year ago
poetry.lock update django-lcore to remove compatibility-breaking cipher line 2 weeks ago
pylintrc Update deps (Django 2.2) 1 year ago
pyproject.toml update django-lcore to remove compatibility-breaking cipher line 2 weeks ago
requirements.txt Replace some static settings by dynamic settings 3 years ago
update.sh Multiple unimportant fixes 4 years ago

README.md

CCrypto VPN

CCVPN is the software we use at CCrypto to provide our VPN. You can see it live at https://vpn.ccrypto.org/

It handles user management, support tickets, billing and is used as a backend for VPN authentication.
It communicates with an external service, lambdacore, that manages VPN servers and sessions.

Disclaimer: this is a specialized solution that requires proprietary software to function. This repo is a way for us to share our work freely as we don’t believe keeping it secret will do any good; feel free to base your own work on it but don’t except it to be of an use as-is.

CCrypto’s commercial support does not include this and will not help you set it up. Feel free to contact us about ccvpn, but with no guarantee.
PacketImpact however may provide you commercial support and more services about ccvpn and lambdacore.

Getting Started

# Install poetry
pip3 install poetry
export PATH=~/.local/bin/:$PATH  # also add that to your .profile

# Install ccvpn3
git clone https://git.ccrypto.org/ccrypto/ccvpn3.git
cd ccvpn3
poetry config settings.virtualenvs.in-project true
poetry install

cp ccvpn/local_settings.sample.py ccvpn/local_settings.py
# Edit ccvpn/local_settings.py
# See ccvpn/settings.py for all available settings and defaults

# Those need to be run on installation and updates
poetry run ./manage.py migrate
poetry run ./manage.py compilemessages
poetry run ./manage.py collectstatic

# The standard Django manage.py can be called through poetry
poetry run ./manage.py runserver

Debian Deployment

# Install uwsgi and a web server, and python deps
apt install gettext git nginx uwsgi uwsgi-plugin-python3 python3-venv python3-setuptools python3-pip

# Create a new account and switch to it
adduser --disabled-login ccvpn

su - ccvpn
# As ccvpn, follow the instructions in Getting Started
# then Ctrl-D/exit back to root

cp /home/ccvpn/ccvpn3/deploy/nginx.conf /etc/nginx/sites-enabled/ccvpn3.conf
cp /etc/ccvpn/ccvpn3/deploy/uwsgi.ini /etc/uwsgi/apps-enabled/ccvpn3.ini
systemctl restart uwsgi
systemctl reload nginx

Celery

# run celery background processes
poetry run celery -A ccvpn worker -l info
poetry run celery -A ccvpn beat -l info
# celery flower monitoring web ui
poetry run flower --port=5555 -A ccvpn

# ~ with systemd services ~

cp ./deploy/ccvpn-*.service /etc/systemd/
systemctl daemon-reload
systemctl enable --now ccvpn-{worker,scheduler,flower}.service