gen-ovpn.sh

#!/bin/bash

name="${1?Provide a name as an argument}"

OVPN=$name.ovpn
[[ -e $OVPN ]] && {
    echo "The file $OVPN already exists, delete it manually, please"
    exit 1
}
chmod +x gen-key.sh
CRT=pki/issued/$name.crt
KEY=pki/private/$name.key
for f in $CRT $KEY; do
    [[ -e "$f" ]] || ./gen-key.sh "$name" || {
        echo "$f does not exist, failed to generate"
        exit 1
    }
done

for host in REDACTED; do
    [[ -e $OVPN ]] && {
        echo "The file $OVPN already exists, delete it manually, please. Skipped."
        continue
    }
    fname=ovpn/$name.${host%%.*}.ovpn
cat > "$fname" <<EOF
client
dev tun
remote $host 1194
nobind
persist-key
persist-tun
verb 3
cipher AES-256-CBC
key-direction 1
auth SHA256
<cert>
$(cat $CRT)
</cert>
<tls-auth>
$(cat key/ta.key)
</tls-auth>
<ca>
$(cat pki/ca.crt)
</ca>
<key>
$(cat $KEY)
</key>
EOF
    echo "Created $fname"
done