OpenVPN

This extension connects Paymenter to your own OpenVPN server. A one-command installer sets up the server and a small manager API next to it. After that, every plan someone buys gets its own client profiles, and everything they need shows up on their service page.

What your customers get

• An .ovpn profile for every device on their plan, ready to copy or download into OpenVPN Connect, Tunnelblick or the Windows client
• Live download and upload graphs, per profile and for the whole service, including how much of the data cap is left

What you set per plan

• How many profiles each service includes
• Full tunnel, or split tunnel with only the networks you choose
• DNS servers and any extra push directives
• Download and upload speed limits in Mbps, with a cooldown when a profile goes over
• A monthly data cap in GB across all of a service's profiles

Suspending, unsuspending or terminating a service in Paymenter does the same to its profiles.

What the installer sets up

• OpenVPN with its own certificate authority (Easy-RSA), using AES-256-GCM and TLS-Crypt
• The manager API (Python, SQLite) that Paymenter talks to, with a Let's Encrypt certificate
• Firewall and NAT rules so clients can reach the internet

Setup

You need a fresh Ubuntu 22.04 LTS server with root SSH access, a domain or subdomain pointed at it (e.g. vpn.example.com) and ports 1194/udp, 443/tcp and 80/tcp open. Run the installer as root:

bash -c "$(curl -sSL https://raw.githubusercontent.com/Pweppapig0/OpenVPN/main/openvpn_auto_install.sh)"

It prints a Base URL and an API token. In Paymenter, upload the extension zip under Admin → Extensions, open the OpenVPN settings, and paste both in. The Test Config button checks the connection.

The installer and its instructions are on GitHub.