This is a Docker image with VPN (PPTP) server with chap-secrets authentication.

PPTP uses /etc/ppp/chap-secrets file to authenticate VPN users.

Example of chap-secrets file:

# Secrets for authentication using PAP
# client    server      secret      acceptable local IP addresses
username    *           password    *

To start VPN server as a Docker container run:

docker run -d --cap-add=NET_ADMIN --device=/dev/ppp --net=host -v pptpd:/etc/ppp/ --name=pptpd difeid/pptpd

Edit your local chap-secrets file, to add or modify VPN users whenever you need. When adding new users to chap-secrets file, you don't need to restart Docker container.

You can edit options.pptp file for modify pptpd configuration. When modifying configuration, you need to restart container.

If you have fails, please try run the Docker container with --privileged

docker run -d --cap-add=NET_ADMIN --device=/dev/ppp --net=host -e USER={your user} -e PASS={your pass} difeid/pptpd

To access from the container to the Internet you need to enable IP forwarding on host system. You can try to get Docker to do this by adding the following command line option

--sysctl net.ipv4.conf.all.forwarding=1

And don't forget to configure your firewall.

You can use any VPN (PPTP) client to connect to the service. To authenticate use credentials provided in chap-secrets file.

• USER, PASS - create USER with PASSword
• SUBNET - interface ppp0 inet addr. Default: 172.20.10.0/24
• LOCAL_IP - pptpd local IP address. Default: 172.20.10.1
• REMOTE_IP - pptpd remote IP address ranges. Default: 172.20.10.100-199

In case of permission denied inside container, you can try to start container with --privileged key.