example VPN over WiFi sharing

#!/bin/sh
#
# System packages on Linux Mint
#
sudo apt-get update
sudo apt-get install gedit kdiff3 meld pv nano dnsmasq openvpn openvpn-systemd-resolved git
# sudo apt-get install nm-connection-editor

#
# tor-relay-scanner: install and get a list of relays
#
sudo apt-get install python3-pip
sudo ln -s /usr/bin/python3 /usr/bin/python
git clone https://github.com/ValdikSS/tor-relay-scanner
cd ./tor-relay-scanner/
./build.sh
python3 ./torparse.pyz
cd ..

#
# Tor Browser: install, use a list of relays, get a vpnjantit config
#
# download a tor archive for linux64 somehow
tar -xvf ./tor-browser-linux-x86_64-15.0.2.tar.xz
cd ./tor-browser/
chmod +x ./start-tor-browser.desktop
cd ..

#
# linux-wifi-hotspot
#
git clone https://github.com/lakinduakash/linux-wifi-hotspot
cd ./linux-wifi-hotspot/
sudo apt-get install libgtk-3-dev build-essential gcc g++ pkg-config make hostapd libqrencode-dev libpng-dev iw
make
sudo make install
cd ..

#
# OpenVPN config
#
mv ./tor-browser/Browser/Downloads/kz2.vpnjantit.com.zip ./
unzip ./kz2.vpnjantit.com.zip
cd ./kz2.vpnjantit.com/
ls
nano ./kz2.vpnjantit-tcp-1194.ovpn
nano ./kz2.vpnjantit-tcp-992.ovpn
nano ./kz2.vpnjantit-udp-992.ovpn
nano ./kz2.vpnjantit-udp-1194.ovpn

#
# List of OpenVPN config changes:
#

### """
# dhcp-option DNS 8.8.8.8
dhcp-option DNS 147.30.75.102
### """

### # after "fast-io" and before <ca>
### """
dhcp-option DOMAIN-ROUTE .
script-security 2
up /etc/openvpn/update-systemd-resolved
down /etc/openvpn/update-systemd-resolved
down-pre
### """

nano ./account.txt
cat ./kz2.vpnjantit.com/account.txt

### """
username-vpnjantit.com
password
### """

#
# Network configuration
#

sudo nano /etc/sysctl.conf
"""
net.ipv4.conf.all.forwarding=1
net.ipv6.conf.all.forwarding=1
"""

sudo sysctl net.ipv4.conf.all.forwarding=1
sudo sysctl net.ipv6.conf.all.forwarding=1
sudo iptables -L FORWARD -nv
sudo iptables -t nat -I POSTROUTING -o tun0 -j MASQUERADE

#
# Set up connection
#

# first terminal tab
sudo openvpn ./kz2.vpnjantit.com/kz2.vpnjantit-tcp-1194.ovpn

# second terminal tab
sudo systemctl stop NetworkManager
sudo wihotspot-gui

# WiFi interface wlp2s0
# Internet interface tup0

#
# Test connection
#
https://ip-api.com/
https://www.dnsleaktest.com/

#
# Example VPN config
#

client
dev tun
proto tcp
remote kz2.vpnjantit.com 1194
remote 89.218.15.100 1194
# dhcp-option DNS 8.8.8.8
dhcp-option DNS 147.30.75.102
cipher AES-128-CBC
data-ciphers AES-128-CBC
auth SHA1
resolv-retry infinite
nobind
persist-key
persist-tun
verb 3
auth-user-pass
route-delay 2
redirect-gateway
fast-io
dhcp-option DOMAIN-ROUTE .
script-security 2
up /etc/openvpn/update-systemd-resolved
down /etc/openvpn/update-systemd-resolved
down-pre


<ca>
-----BEGIN CERTIFICATE-----
MIIDiDCCAnCgAwIBAgIBADANBgkqhkiG9w0BAQsFADBDMRAwDgYDVQQDDAdrejIu
Y29tMRAwDgYDVQQKDAdrejIuY29tMRAwDgYDVQQLDAdrejIuY29tMQswCQYDVQQG
EwJVUzAeFw0yNDAxMDUwOTUxNTlaFw0zNzEyMzEwOTUxNTlaMEMxEDAOBgNVBAMM
B2t6Mi5jb20xEDAOBgNVBAoMB2t6Mi5jb20xEDAOBgNVBAsMB2t6Mi5jb20xCzAJ
BgNVBAYTAlVTMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Vo5qzHK
bsg0V/+AwjyFshxnMCqlhFcxOv+l0QbK69KQv0axqYH/fuvDu3N+EezZeRj6MYco
cjEu/agfDm2VIWCqVWPtznx6f8IUo5/DoX8gf/loSm96utlS4I1NP1W97ToJj7jS
wNOiPBnVil0B1iOTXdMbojh7qF67slj0nr8t0rJeTMwdtLbW5vWyq5fOevYUPvAo
e49PhoDKDzsjNIrL5MDxTUvQhmg1NUMLLBhN1X/wSAE454MTFA79Um2oeTjBXAkh
yZqlPlgaAjpfzhMUo1p6muQJd6qeA1MrJb3ZRy6bi/jq9pagRqs/+I63h418LlB0
LTbWDRtB0Hm7twIDAQABo4GGMIGDMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQD
AgH2MGMGA1UdJQRcMFoGCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwMGCCsG
AQUFBwMEBggrBgEFBQcDBQYIKwYBBQUHAwYGCCsGAQUFBwMHBggrBgEFBQcDCAYI
KwYBBQUHAwkwDQYJKoZIhvcNAQELBQADggEBAM21arls3DSdyFA97emPv71g7dMu
2TfhD2/K7rtKuV+ZyLMcpUECvGyGzfVbB58Xp2OtBuIXiZ0XfpBI5XmVBuHDRe3v
dgqCVZ6UKqd6Q3l7Ssh9O6s4UkHXlj8cDG7Gs13sgtHpcfME7DoHL8/xcaXui/Ik
zI/45PL3CeOFwGwG9aZi1depNnmQMX/JAoKZTDpyY0ps1vteufOo2bwNBfXQGefY
TQOGuvBdZ+vHROvUhc29sXeSuZDXgWCLc58YNgGBrmChip1UlShS93gCxmACINLZ
NmrLSyAFzY/YkY3fXeuMFA11BR15ApfMCROQ9p2B+sRgeuYnuwHXs6JPvS8=
-----END CERTIFICATE-----

</ca>






<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</key>