fix

.deploy/.deploy-prod.yaml

@@ -1,28 +0,0 @@
-version: "3.4"
-
-
-services:
-
-  vpn:
-    image: hwdsl2/ipsec-vpn-server
-    environment:
-      VPN_DNS_SRV1: 8.8.8.8
-      VPN_DNS_SRV2: 1.0.0.1
-      VPN_USER: root
-      VPN_PASSWORD: $VPN_PASSWORD
-      VPN_IPSEC_PSK: $VPN_IPSEC_PSK
-    ports:
-      - 500:500/udp
-      - 4500:4500/udp
-    volumes:
-      - /lib/modules:/lib/modules:ro
-    deploy:
-      mode: replicated
-      restart_policy:
-        condition: any
-      placement:
-        constraints:
-          - node.role == manager
-      update_config:
-        parallelism: 1
-        order: start-first

.deploy/deploy-prod.yaml

@@ -0,0 +1,22 @@
+version: "3.4"
+
+
+services:
+
+  vpn:
+    image: alekslitvinenk/openvpn
+    ports:
+      - 8080:8080/tcp
+      - 1194:1194/udp
+    cap-add:
+      - NET_ADMIN
+    deploy:
+      mode: replicated
+      restart_policy:
+        condition: any
+      placement:
+        constraints:
+          - node.role == manager
+      update_config:
+        parallelism: 1
+        order: start-first

.gitea/workflows/deploy-prod.yaml

@@ -0,0 +1,22 @@
+name: Deploy Prod
+
+on:
+  pull_request:
+    branches:
+      - prod
+    types: [closed]
+
+jobs:
+  deploy-prod:
+    name: Deploy prod
+    runs-on: [prod]
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+        with:
+            ref: prod
+      - name: deploy
+        env:
+          VPN_PASSWORD: ${{ secrets.VPN_PASSWORD }}
+          VPN_IPSEC_PSK: ${{ secrets.VPN_IPSEC_PSK }}
+        run: docker stack deploy --with-registry-auth -c ./.deploy/deploy-prod.yaml vpn