mirror of
https://github.com/iiab/iiab.git
synced 2025-02-13 11:42:08 +00:00
31 lines
950 B
Bash
31 lines
950 B
Bash
#!/bin/bash
|
|
|
|
# /usr/bin/iiab-remote-off should fully turn off multiple remote support
|
|
# services like OpenVPN and others, to reduce risk of remote attacks.
|
|
|
|
echo -e '\nWARNING: To disable OpenVPN long-term, it'"'"'s recommended you:\n'
|
|
|
|
echo -e '1) Set this variable in /etc/local/local_vars.yml'
|
|
echo -e ' openvpn_enabled: False\n'
|
|
|
|
echo -e '2) Run:'
|
|
echo -e ' cd /opt/iiab/iiab'
|
|
echo -e ' sudo ./runrole openvpn\n'
|
|
|
|
# Do nothing if OpenVPN not installed
|
|
which openvpn
|
|
if [ $? -ne 0 ]; then
|
|
echo 'Cannot find the OpenVPN program (openvpn).'
|
|
exit 1
|
|
fi
|
|
|
|
systemctl disable openvpn
|
|
systemctl stop openvpn
|
|
|
|
sleep 5
|
|
ps -e | grep openvpn # 2018-09-05: "ps -e | grep vpn" no longer works (nor would "pgrep vpn") when invoked from iiab-vpn-off (as filename itself causes [multiple] "vpn" instances to appear in process list!)
|
|
if [ $? -eq 0 ]; then
|
|
echo OpenVPN failed to stop.
|
|
else
|
|
echo Successfully stopped and disabled OpenVPN.
|
|
fi
|