The goal of this project is to provide cloud resources consisting of OpenVPN and Pi-hole. When applying this configuration on your AWS account, within minutes, you will have a dedicated VPC running a hardened OpenVPN server, which directs its clients to use a newly created Pi-hole server for all DNS queries.
Both OpenVPN and Pi-hole servers inherit dedicated IP addresses along with pre-configured firewall rules. Also, if you would like to SSH into either server, the SSH keys are provided in this directory upon successful creation. These keys should not be checked in to source control and are ignored by default along with Terraform state files.
Configure AWS:
$ export AWS_ACCESS_KEY_ID=""
$ export AWS_SECRET_ACCESS_KEY=""Run Terraform:
This project supports the Terraform versions starting to 0.12.
$ terraform init && terraform applyOnce Terraform has successfully applied the configuration, a client.ovpn file will appear in this directory. Import this file to any OpenVPN client. That's it.
When connected using an OpenVPN client:
OpenVPN:
$ ssh -i "private_key.pem" [email protected]Pi-hole:
$ ssh -i "private_key.pem" [email protected]When connected using an OpenVPN client, navigate to http://pi.hole.
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| domain_name_servers | n/a | list(string) |
[ |
no |
| name | n/a | string |
"SkyHole" |
no |
| openvpn_ami | n/a | string |
"ami-04b9e92b5572fa0d1" |
no |
| openvpn_instance_type | n/a | string |
"t3.nano" |
no |
| openvpn_private_ip | n/a | string |
"10.0.1.0" |
no |
| openvpn_subnet_cidr_block | n/a | string |
"10.0.2.0/24" |
no |
| pi-hole_ami | n/a | string |
"ami-04b9e92b5572fa0d1" |
no |
| pi-hole_instance_type | n/a | string |
"t3.nano" |
no |
| pi-hole_private_ip | n/a | string |
"10.0.1.1" |
no |
| region | n/a | string |
"us-east-1" |
no |
| subnet_cidr_block | n/a | string |
"10.0.0.0/20" |
no |
| vpc_cidr_block | n/a | string |
"10.0.0.0/16" |
no |
| Name | Description |
|---|---|
| openvpn_private_ip | n/a |
| openvpn_public_ip | n/a |
| pi-hole_private_ip | n/a |
| pi-hole_public_ip | n/a |
Everyone is encouraged to help improve this project. Here are a few ways you can help:
- Suggest or add new features
- Write, clarify, or fix documentation
- Report bugs
- Fix bugs and submit pull requests