TincVPN Setup

You need at least 2 Server with Debian or Ubuntu for this Howto.

Server 1 & 2

apt-get install tinc && mkdir /etc/tinc/myVPN

Add

myVPN 

into /etc/tinc/nets.boot below

## This file contains all names of the networks to be started on system startup.

Lets create tinc.conf

cd /etc/tinc/myVPN

Server 1 Add into /etc/tinc/myVPN/tinc.conf

Name = Server1
AddressFamily = ipv4
Interface = tun0
#ConnectTo = Server1
ConnectTo = Server2	

Server 2 Add into /etc/tinc/myVPN/tinc.conf

Name = Server2
AddressFamily = ipv4
Interface = tun0
ConnectTo = Server1
#ConnectTo = Server2	

Server 1 & 2

mkdir /etc/tinc/myVPN/hosts && cd /etc/tinc/myVPN/hosts

Server 1 Add into /etc/tinc/myVPN/hosts/Server1

Address = Server1_publicIP
#Port = 665
Subnet = 10.0.0.1/32

Server 2 Add into /etc/tinc/myVPN/hosts/Server2

Address = Server2_publicIP
#Port = 665
Subnet = 10.0.0.2/32

Server 1 & 2

tincd -n myVPN -K4096

Enter… Enter…

This generates/attaches the public and private key pair

Public Key: /etc/myVPN/hosts/Server1/2
Private Key: /etc/myVPN/rsa_key.priv

Server 1 Add into /etc/tinc/myVPN/tinc-up

#!/bin/sh
ifconfig $INTERFACE 10.0.0.1 netmask 255.255.255.0	

Server 2 Add into /etc/tinc/myVPN/tinc-up

#!/bin/sh
ifconfig $INTERFACE 10.0.0.2 netmask 255.255.255.0	

Server 1 & 2 Add into /etc/tinc/myVPN/tinc-down

#!/bin/sh
ifconfig $INTERFACE down

We need to make the scripts executable

chmod 755 /etc/tinc/myVPN/tinc-*

Server 1 We need to copy the Public keys now, you can use tons of methods for that
For Server 1 we need to copy /etc/tinc/myVPN/hosts/Server1 to Server2, /etc/tinc/myVPN/hosts/Server1

Server 2
For Server 2 we need to copy /etc/tinc/myVPN/hosts/Server2 to Server1, /etc/tinc/myVPN/hosts/Server2

Finish
Since Tinc is in nets.boot you can just reboot your boxes or sudo service tinc start.

For Debian 10 you can use:

systemctl enable tinc@myVPN
systemctl start tinc@myVPN

If you have issues, you can debug if tinc is able to open a connection to the other server with

sudo tincd -n myVPN -D -d3

You need to enable TUN/TAP for OVZ