From 6450658e27ad47003b6fb6a10ce5fa9cd6a67ebb Mon Sep 17 00:00:00 2001
From: Dmitry Voronin <hi@voronind.com>
Date: Wed, 27 Nov 2024 02:46:45 +0300
Subject: [PATCH] Vpn: Add info on user revokation.

---
 container/Vpn.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/container/Vpn.nix b/container/Vpn.nix
index f3d319ba..59e60878 100644
--- a/container/Vpn.nix
+++ b/container/Vpn.nix
@@ -4,6 +4,11 @@
 # easyrsa --days=36500 build-client-full <CLIENT_NAME> nopass
 # openssl dhparam -out dh2048.pem 2048
 # Don't forget to set tls hostname on the client to match SERVER_NAME *AND* disable ipv6 ?
+
+# easyrsa revoke <CLIENT_NAME>
+# easyrsa gen-crl
+# restart container
+
 # SEE: https://github.com/OpenVPN/openvpn/blob/master/sample/sample-config-files/server.conf
 # SRC: https://github.com/TinCanTech/easy-tls
 {