{"id":53240,"date":"2019-11-27T00:00:00","date_gmt":"2019-11-26T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/zapuskaem-openvpn-v-dokere-za-2-sekundy"},"modified":"2020-02-18T14:01:07","modified_gmt":"2020-02-18T11:01:07","slug":"zapuskaem-openvpn-v-dokere-za-2-sekundy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/zapuskaem-openvpn-v-dokere-za-2-sekundy","title":{"rendered":"Nisim OpenVPN n\u00eb Docker p\u00ebr 2 sekonda","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00ebrsh\u00ebndetje, habrovian\u00eb! A keni p\u00ebrjetuar ndonj\u00ebher\u00eb situat\u00ebn kur d\u00ebshironit me t\u00eb v\u00ebrtet\u00eb t\u00eb transportoheshit virtualisht n\u00eb nj\u00eb qytet tjet\u00ebr, vend tjet\u00ebr apo kontinent tjet\u00ebr? Mua m\u00eb ndodh mjaft shpesh, prandaj nevoja p\u00ebr t\u00eb patur nj\u00eb server VPN timin, q\u00eb mund ta nisja kudo, brenda pak sekondash, ka qen\u00eb mjaft e r\u00ebnd\u00ebsishme. N\u00eb k\u00ebt\u00eb artikull, d\u00ebshiroj t\u00eb flas p\u00ebr projektin tim, q\u00eb e kam menduar kur k\u00ebrkoja nj\u00eb zgjidhje gati, n\u00eb k\u00ebt\u00eb rast nj\u00eb imazh docker, q\u00eb do t\u00eb lejonte ngritjen e shpejt\u00eb t\u00eb nj\u00eb serveri OpenVPN, me minimum t\u00eb konfigurimeve dhe nj\u00eb nivel t\u00eb pranuesh\u00ebm sigurie.<\/p>\n

\"Nisim<\/a><\/noindex><\/p>\n

\n<\/a><\/noindex><\/p>\n

Historia e m\u00ebparshme<\/h3>\n

Mund\u00ebsia p\u00ebr t\u00eb nisur sh\u00ebrbimin n\u00eb \u00e7do makin\u00eb: qoft\u00eb server fizik, apo server virtual privat, apo madje nj\u00eb hap\u00ebsir\u00eb konteinerike brenda nj\u00eb sistemi tjet\u00ebr t\u00eb menaxhimit t\u00eb konteiner\u00ebve\u2014ishte kritikisht e r\u00ebnd\u00ebsishme. V\u00ebmendja ime ra menj\u00ebher\u00eb n\u00eb Docker. S\u00eb pari, ky sh\u00ebrbim po fiton popullaritet, dhe si rezultat, gjithnj\u00eb e m\u00eb shum\u00eb ofrues ofrojn\u00eb zgjidhje gati me instalimin e tij; s\u00eb dyti\u2014ka nj\u00eb depo t\u00eb centralizuar imazhesh, nga e cila mund t\u00eb shkarkoni dhe nisni sh\u00ebrbimin me nj\u00eb komand\u00eb n\u00eb terminal. Mendimi q\u00eb nj\u00eb projekt i till\u00eb duhet t\u00eb ekzistonte tashm\u00eb m\u00eb vizitoi, dhe un\u00eb vazhdimisht k\u00ebrkoja. Por, shumica e projekteve q\u00eb gjeja ishin ose tep\u00ebr t\u00eb ngat\u00ebrruara (duhej t\u00eb krijohej nj\u00eb konteiner p\u00ebr ruajtjen e p\u00ebrhershme t\u00eb t\u00eb dh\u00ebnave dhe disa her\u00eb t\u00eb nistej konteineri me aplikacionin me parametra t\u00eb ndrysh\u00ebm), ose pa dokumentacion t\u00eb arsyesh\u00ebm, ose krejt\u00ebsisht t\u00eb braktisura. Pasi nuk gjeta asgj\u00eb t\u00eb pranueshme, fillova pun\u00ebn n\u00eb projektin tim. Para meje ishin net pa gjum\u00eb studimi i dokumentacionit, shkrimi i kodit dhe debugimi, por n\u00eb fund, sh\u00ebrbimi im pa drit\u00eb dhe filloi t\u00eb shk\u00eblqej\u00eb me t\u00eb gjitha ngjyrat e panelit LED monokrom t\u00eb router-it. Pra, ju lutem, prisni me dashuri\u2014 Docker-OpenVPN<\/a><\/noindex>. Kam e shpikur nj\u00eb logo (m\u00eb sip\u00ebr, para ndarjes), por mos e gjykoni r\u00ebnd\u00eb, sepse un\u00eb nuk jam dizajner (m\u00eb par\u00eb). Kur e realizova k\u00ebt\u00eb projekt, vendosa n\u00eb krye shpejt\u00ebsin\u00eb e vendosjes, minimumin e konfigurimeve dhe nj\u00eb nivel t\u00eb pranuesh\u00ebm sigurie. Me metoda prov\u00eb-dhe-gabim, gjeta nj\u00eb balanc t\u00eb optimizuar t\u00eb k\u00ebtyre kritereve, megjithat\u00eb, diku m\u00eb duhej t\u00eb sakrifikoj shpejt\u00ebsin\u00eb e vendosjes p\u00ebr shkak t\u00eb siguris\u00eb, dhe p\u00ebr minimumin e konfigurimeve m\u00eb duhej t\u00eb paguaj p\u00ebr portabilitet: n\u00eb konfigurimin aktual, nj\u00ebher\u00eb e krijuar, kontenieri n\u00eb nj\u00eb server nuk mund t\u00eb transferohet dhe t\u00eb nis\u00eb n\u00eb nj\u00eb tjet\u00ebr. P\u00ebr shembull, t\u00eb gjitha certifikatat klient dhe server krijohen gjat\u00eb nisjes s\u00eb sh\u00ebrbimit dhe kjo zgjat rreth 2 sekonda. Megjithat\u00eb, gjenerimi i skedarit t\u00eb Difi Hellman duhej t\u00eb ishte b\u00ebr\u00eb gjat\u00eb nd\u00ebrtimit: krijohet gjat\u00eb nd\u00ebrtimit t\u00eb imazhit docker dhe mund t\u00eb zgjas\u00eb deri n\u00eb 10 minuta. Do t\u00eb doja shum\u00eb t\u00eb merrja nj\u00eb audit t\u00eb siguris\u00eb p\u00ebr nj\u00eb zgjidhje t\u00eb till\u00eb nga komuniteti i nderuar.<\/p>\n

Nisja<\/h3>\n

P\u00ebr t\u00eb nisur sh\u00ebrbimin, na nevojiten disa gj\u00ebra:<\/p>\n

    \n
  1. Server: fizik ose virtual. Teoretikisht, mund t\u00eb niset n\u00eb modalitetin docker-in-docker, por nuk kam kryer testime t\u00eb m\u00ebdha mbi k\u00ebt\u00eb opsion;<\/li>\n
  2. Docker-i vet\u00eb. Shum\u00eb ofrues sh\u00ebrbimesh hostimi ofrojn\u00eb zgjidhje t\u00eb gatshme me Docker \u2018n\u00eb bord\u2019;<\/li>\n
  3. Nj\u00eb adres\u00eb IP publike.<\/li>\n<\/ol>\n

    N\u00ebse t\u00eb gjitha detajet jan\u00eb n\u00eb rregull, at\u00ebher\u00eb na mbetet t\u00eb nisim komand\u00ebn e m\u00ebposhtme n\u00eb terminalin e serverit tuaj:<\/p>\n

    docker run --cap-add=NET_ADMIN \n-it -p 1194:1194\/udp -p 80:8080\/tcp \n-e HOST_ADDR=$(curl -s https:\/\/api.ipify.org) \nalekslitvinenk\/openvpn<\/code><\/pre>\n
    Lexuesi i kujdessh\u00ebm mund t\u00eb ket\u00eb v\u00ebrejtur se adresa IP e serverit p\u00ebrcaktohet automatikisht me an\u00eb t\u00eb ipify.org<\/i>. N\u00ebse p\u00ebr ndonj\u00eb arsye kjo nuk funksionon, mund t\u00eb jepni adres\u00ebn manualisht. N\u00ebse t\u00eb gjitha hapat e m\u00ebparsh\u00ebm jan\u00eb kryer si\u00e7 duhet, duhet t\u00eb shohim n\u00eb terminal di\u00e7ka t\u00eb ngjashme:<\/p>\n
    Diel 9 Qershor 2019 08:56:11 Sezoni i Inizializimit p\u00ebrfundoi\nDiel 9 Qershor 2019 08:56:12 Skedari Client.ovpn \u00ebsht\u00eb krijuar\nDiel 9 Qershor 2019 08:56:12 Serveri i konfigurimit filloi, shkarkoni konfigurimin tuaj client.ovpn n\u00eb http:\/\/example.com\/\nDiel 9 Qershor 2019 08:56:12 V\u00cbREJTJE: Pas shkarkimit t\u00eb konfigurimit tuaj client, sh\u00ebrbimi http do t\u00eb mbyllet!<\/code><\/pre>\n
    Jemi af\u00ebr q\u00ebllimit: tani duhet t\u00eb kopjojm\u00eb example.com<\/a><\/noindex><\/i> (n\u00eb rastin tuaj do t\u00eb jet\u00eb adresa e serverit tuaj) dhe ta vendosni n\u00eb shiritin e adres\u00ebs s\u00eb shfletuesit. Pasi t\u00eb klikoni Enter, skedari client.ovpn do t\u00eb shkarkohet dhe serveri http do t\u00eb shkoj\u00eb n\u00eb harres\u00eb. N\u00ebse ky zgjidhje shkakton dyshime, mund t\u00eb p\u00ebrdorni trukun tjet\u00ebr: t\u00eb nisni komand\u00ebn e m\u00ebparshme dhe t\u00eb shtoni flag-at zp<\/i> dhe fjal\u00ebkalimin. Tani, n\u00ebse e vendosni lidhjen e gjeneruar n\u00eb dritaren e shfletuesit \u2014 do t\u00eb merrni nj\u00eb arkiv zip me fjal\u00ebkalimin. Kur keni skedarin me konfigurimin e klientit, mund t\u00eb p\u00ebrdorni \u00e7do klient t\u00eb p\u00ebrshtatsh\u00ebm. Un\u00eb p\u00ebrdor Tunnelblick p\u00ebr Mac.<\/p>\n
    Video tutorial<\/h3>\n
    Ky video tutorial p\u00ebrmban nj\u00eb udh\u00ebzim t\u00eb detajuar p\u00ebr vendosjen e sh\u00ebrbimit n\u00eb DigitalOcean.
    \r\n        \"Luaj\r\n        
    <\/div>\r\n    <\/div><\/center>P.S.<\/b> N\u00ebse e konsideroni k\u00ebt\u00eb projekt t\u00eb dobish\u00ebm, ju lutem jepini nj\u00eb yll n\u00eb GitHub, b\u00ebni fork dhe tregojuani miqve. Kontributet dhe auditimet e siguris\u00eb gjithashtu jan\u00eb t\u00eb mir\u00ebpritura.P.P.S.<\/b> N\u00ebse ky artikull del n\u00eb Habr, un\u00eb planifikoj t\u00eb shkruaj t\u00eb ardhshmin rreth m\u00ebnyr\u00ebs si e nisa Docker brenda Docker dhe Docker brenda Docker brenda Docker, p\u00ebr \u00e7far\u00eb e b\u00ebra k\u00ebt\u00eb dhe \u00e7far\u00eb dalin nga kjo.
    \nEDIT1:<\/b> <\/p>\n
      \n
    1. Korrigjova gabimet n\u00eb publikim,<\/li>\n
    2. \u041e\u0442\u0432\u0435\u0447\u0430\u044f \u043d\u0430 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 \u0440\u0435\u0448\u0438\u043b \u0432\u044b\u043d\u0435\u0441\u0442\u0438 \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0441\u044e\u0434\u0430: \u0444\u043b\u0430\u0433 —privileged \u043d\u0443\u0436\u0435\u043d \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 iptables<\/li>\n<\/ol>\n
      \nEDIT2:<\/b> <\/p>\n
        \n
      1. \u0423\u043b\u0443\u0447\u0448\u0438\u043b \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u0440\u0430\u0437\u0430: \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u043d \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0444\u043b\u0430\u0433 —privileged<\/li>\n
      2. Shtova nj\u00eb lidhje n\u00eb udh\u00ebzimin video n\u00eb gjuh\u00ebn ruse: youtu.be\/A8zvrHsT9A0<\/a><\/noindex><\/li>\n<\/ol>\n
        Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
        \u041f\u0440\u0438\u0432\u0435\u0442, \u0445\u0430\u0431\u0440\u043e\u0432\u0447\u0430\u043d\u0435! \u0421\u0442\u0430\u043b\u043a\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u043b\u0438 \u0432\u044b \u043a\u043e\u0433\u0434\u0430-\u043b\u0438\u0431\u043e \u0441 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u043a\u043e\u0433\u0434\u0430 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u043d\u0435\u0441\u0442\u0438\u0441\u044c \u0432 \u0434\u0440\u0443\u0433\u043e\u0439 \u0433\u043e\u0440\u043e\u0434, \u0441\u0442\u0440\u0430\u043d\u0443 \u0438\u043b\u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u043e\u043d\u0442\u0438\u043d\u0435\u043d\u0442? \u0423 \u043c\u0435\u043d\u044f \u0442\u0430\u043a\u0430\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0430\u0441\u0442\u043e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0442\u044c \u0441\u0432\u043e\u0439 VPN \u0441\u0435\u0440\u0432\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0433\u0434\u0435 \u0443\u0433\u043e\u0434\u043d\u043e, \u0437\u0430 \u043f\u0430\u0440\u0443 \u0441\u0435\u043a\u0443\u043d\u0434, \u0441\u0442\u043e\u044f\u043b \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0441\u0442\u0440\u043e.\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u0441\u0432\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":53241,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-53240","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nisni OpenVPN n\u00eb Docker p\u00ebr 2 sekonda | ProHoster","description":"P\u00ebrsh\u00ebndetje, habrovci! A keni hasur ndonj\u00ebher\u00eb situat\u00ebn kur d\u00ebshironit t\u00eb transportoheshit virtual n\u00eb nj\u00eb qytet tjet\u00ebr, vend tjet\u00ebr ose nj\u00eb kontinent tjet\u00ebr?","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/zapuskaem-openvpn-v-dokere-za-2-sekundy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c OpenVPN \u0432 \u0414\u043e\u043a\u0435\u0440\u0435 \u0437\u0430 2 \u0441\u0435\u043a\u0443\u043d\u0434\u044b | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442, \u0445\u0430\u0431\u0440\u043e\u0432\u0447\u0430\u043d\u0435! \u0421\u0442\u0430\u043b\u043a\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u043b\u0438 \u0432\u044b \u043a\u043e\u0433\u0434\u0430-\u043b\u0438\u0431\u043e \u0441 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u043a\u043e\u0433\u0434\u0430 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u043d\u0435\u0441\u0442\u0438\u0441\u044c \u0432 \u0434\u0440\u0443\u0433\u043e\u0439 \u0433\u043e\u0440\u043e\u0434, \u0441\u0442\u0440\u0430\u043d\u0443 \u0438\u043b\u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u043e\u043d\u0442\u0438\u043d\u0435\u043d\u0442?","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/zapuskaem-openvpn-v-dokere-za-2-sekundy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-26T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53240","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 06:37:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:28:50","updated":"2026-01-24 06:37:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53240","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=53240"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53240\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/53241"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=53240"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=53240"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=53240"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}