The right way to set up the Pritunl VPN server on AlmaLinux

Pritunl is an open supply VPN server you’ll be able to simply set up in your Linux servers to virtualize your personal networks. This specific VPN resolution affords a well-designed internet UI for simple administration and administration. All site visitors between shoppers and server is encrypted and the service makes use of MongoDB, which suggests it contains assist for replication.

I’ve walked you thru the method of putting in Pritunl on Ubuntu Server 20.04 and now I need to do the identical with AlmaLinux 8.5. You must be capable to get this VPN resolution up and working in minutes.

SEE: Password breach: Why popular culture and passwords do not combine (free PDF) (TechRepublic)

What you may want

To efficiently set up Pritunl on AlmaLinux, you may want a working/up to date occasion of the OS and a person with sudo privileges. You may additionally want a site identify that factors to the internet hosting server (so customers can entry the VPN from exterior your community). 

The right way to configure the firewall

The very first thing we’ll do is configure the AlmaLinux firewall. Let’s begin by permitting each HTTP and HTTPS site visitors in with the instructions:

sudo firewall-cmd --permanent --add-service=http
sudo firewall-cmd --permanent --add-service=https

Then, we’ll reload the firewall with:

sudo firewall-cmd --reload

The right way to set up MongoDB

Subsequent, we’ll set up the MongoDB database. Create a brand new repo file with:

sudo nano /and so forth/yum.repos.d/mongodb-org-4.4.repo

Paste the next into the brand new file:

[mongodb-org-4.4]
identify=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/$releasever/mongodb-org/4.4/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://www.mongodb.org/static/pgp/server-4.4.asc

Observe: There is a newer model of MongoDB (model 5), however I’ve but to efficiently get it to put in on AlmaLinux. Due to that, I am going with model 4.4.

Save and shut the file. 

Set up MongoDB with:

sudo dnf set up mongodb-org -y

Begin and allow MongoDB with:

sudo systemctl allow --now mongod

SEE: VPN and cell VPN: The right way to choose the most effective safety resolution on your firm (TechRepublic Premium)

The right way to set up Pritunl Server

Subsequent, we’ll set up Pritunl. Create the repo file with:

sudo nano /and so forth/yum.repos.d/pritunl.repo

In that file, paste the next:

[pritunl]
identify=Pritunl Repository
baseurl=https://repo.pritunl.com/secure/yum/centos/8/
gpgcheck=1
enabled=1

Save and shut the file.

Set up the EPEL repository with:

sudo dnf set up epel-release -y

Import the Pritunl GPG keys with:

gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 7568D9BB55FF9E5287D586017AE645C0CF8E292A
gpg --armor --export 7568D9BB55FF9E5287D586017AE645C0CF8E292A > key.tmp; sudo rpm --import key.tmp; rm -f key.tmp

Set up Pritunl with the command:

sudo dnf set up pritunl -y

When the set up completes, begin and allow the service with:

sudo systemctl allow pritunl --now

The right way to improve the Open File Restrict

To stop connection points to the Pritunl server when it is below a better load, we have to improve the open file restrict. To do that, subject the next instructions:

sudo sh -c 'echo "* exhausting nofile 64000" >> /and so forth/safety/limits.conf'
sudo sh -c 'echo "* gentle nofile 64000" >> /and so forth/safety/limits.conf'
sudo sh -c 'echo "root exhausting nofile 64000" >> /and so forth/safety/limits.conf'
sudo sh -c 'echo "root gentle nofile 64000" >> /and so forth/safety/limits.conf'

The right way to entry the Pritunl internet UI

Give the service a second to start out after which level an online browser to https://SERVER (the place SERVER is both the IP handle or area of the internet hosting server). Try to be greeted by the Pritunl database setup window (Determine A).

Determine A

To proceed, you will need to generate a setup key with the command (run on the internet hosting server):

sudo pritunl setup-key

This may generate a random string of characters that you simply copy and paste into the Setup Key textual content space of the Pritunl database setup window. After pasting the important thing, click on Save and look forward to the database to be upgraded. You’ll then be introduced with the Pritunl login window. Earlier than you log in, you will need to retrieve the default login credentials with the command:

sudo pritunl default-password

The above command will print out each the username and password so that you can use to log into the Pritunl internet UI. Be sure to avoid wasting these credentials. As soon as you have efficiently logged in, you may be prompted to vary the admin person’s password and full the preliminary setup (Determine B).

Determine B

And there you go. You now have the Pritunl VPN server up and working on AlmaLinux 8.5. At this level, you’ll be able to configure the server to fulfill the wants of your small business and customers.

Cybersecurity Insider E-newsletter

Strengthen your group’s IT safety defenses by maintaining abreast of the most recent cybersecurity information, options, and finest practices.
Delivered Tuesdays and Thursdays

Enroll right this moment

Additionally see

Subscribe to TechRepublic’s How To Make Tech Work on YouTube for all the most recent tech recommendation for enterprise execs from Jack Wallen.