How to install the Pritunl VPN server on AlmaLinux

Pritunl is an open supply VPN server you possibly can simply set up in your Linux servers to virtualize your non-public networks. This explicit VPN answer gives a well-designed internet UI for simple administration and administration. All site visitors between shoppers and server is encrypted and the service makes use of MongoDB, which suggests it consists of assist for replication.

I’ve walked you thru the method of putting in Pritunl on Ubuntu Server 20.04 and now I need to do the identical with AlmaLinux 8.5. You must be capable of get this VPN answer up and working in minutes.

SEE: Password breach: Why popular culture and passwords do not combine (free PDF) (TechRepublic)

What you will want

To efficiently set up Pritunl on AlmaLinux, you will want a working/up to date occasion of the OS and a consumer with sudo privileges. You will additionally want a website title that factors to the internet hosting server (so customers can entry the VPN from outdoors your community). 

configure the firewall

The very first thing we’ll do is configure the AlmaLinux firewall. Let’s begin by permitting each HTTP and HTTPS site visitors in with the instructions:

sudo firewall-cmd --permanent --add-service=http
sudo firewall-cmd --permanent --add-service=https

Then, we’ll reload the firewall with:

sudo firewall-cmd --reload

set up MongoDB

Subsequent, we’ll set up the MongoDB database. Create a brand new repo file with:

sudo nano /and so on/yum.repos.d/mongodb-org-4.4.repo

Paste the next into the brand new file:

[mongodb-org-4.4]
title=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/$releasever/mongodb-org/4.4/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://www.mongodb.org/static/pgp/server-4.4.asc

Word: There is a newer model of MongoDB (model 5), however I’ve but to efficiently get it to put in on AlmaLinux. Due to that, I am going with model 4.4.

Save and shut the file. 

Set up MongoDB with:

sudo dnf set up mongodb-org -y

Begin and allow MongoDB with:

sudo systemctl allow --now mongod

SEE:
<sturdy>VPN and cellular VPN: choose the most effective safety answer on your firm</sturdy>

(TechRepublic Premium)

set up Pritunl Server

Subsequent, we’ll set up Pritunl. Create the repo file with:

sudo nano /and so on/yum.repos.d/pritunl.repo

In that file, paste the next:

[pritunl]
title=Pritunl Repository
baseurl=https://repo.pritunl.com/secure/yum/centos/8/
gpgcheck=1
enabled=1

Save and shut the file.

Set up the EPEL repository with:

sudo dnf set up epel-release -y

Import the Pritunl GPG keys with:

gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 7568D9BB55FF9E5287D586017AE645C0CF8E292A
gpg --armor --export 7568D9BB55FF9E5287D586017AE645C0CF8E292A > key.tmp; sudo rpm --import key.tmp; rm -f key.tmp

Set up Pritunl with the command:

sudo dnf set up pritunl -y

When the set up completes, begin and allow the service with:

sudo systemctl allow pritunl --now

enhance the Open File Restrict

To forestall connection points to the Pritunl server when it is underneath the next load, we have to enhance the open file restrict. To do that, challenge the next instructions:

sudo sh -c 'echo "* arduous nofile 64000" >> /and so on/safety/limits.conf'
sudo sh -c 'echo "* tender nofile 64000" >> /and so on/safety/limits.conf'
sudo sh -c 'echo "root arduous nofile 64000" >> /and so on/safety/limits.conf'
sudo sh -c 'echo "root tender nofile 64000" >> /and so on/safety/limits.conf'

entry the Pritunl internet UI

Give the service a second to begin after which level an internet browser to https://SERVER (the place SERVER is both the IP handle or area of the internet hosting server). You have to be greeted by the Pritunl database setup window (Determine A).

Determine A

To proceed, you need to generate a setup key with the command (run on the internet hosting server):

sudo pritunl setup-key

This may generate a random string of characters that you just copy and paste into the Setup Key textual content space of the Pritunl database setup window. After pasting the important thing, click on Save and anticipate the database to be upgraded. You’ll then be introduced with the Pritunl login window. Earlier than you log in, you need to retrieve the default login credentials with the command:

sudo pritunl default-password

The above command will print out each the username and password so that you can use to log into the Pritunl internet UI. Be sure that to save lots of these credentials. As soon as you’ve got efficiently logged in, you will be prompted to alter the admin consumer’s password and full the preliminary setup (Determine B).

Determine B

And there you go. You now have the Pritunl VPN server up and working on AlmaLinux 8.5. At this level, you possibly can configure the server to fulfill the wants of your enterprise and customers.

Additionally see

Subscribe to TechRepublic’s How To Make Tech Work on YouTube for all the newest tech recommendation for enterprise professionals from Jack Wallen.