Change VPN config location & mount read-only

Dockerfile

@@ -2,8 +2,6 @@ FROM alpine:3.9
 
 RUN apk add --no-cache openvpn
 
-VOLUME /hackthebox
-WORKDIR /hackthebox
-
+VOLUME /vpn-config
 COPY ./vpn.sh /vpn.sh
 CMD ["/vpn.sh"]

docker-compose.yml

@@ -1,14 +1,14 @@
 version: '2.1'
 
 volumes:
-  hackthebox:
+  vpn_config:
 
 services:
   playground:
     build: .
     image: fphammerle/hackthebox-playground
     volumes:
-    - hackthebox:/hackthebox
+    - vpn_config:/vpn-config:ro
     devices:
     - /dev/net/tun
     cap_add:

vpn.sh

@@ -7,5 +7,5 @@ iptables -A FORWARD -i eth0 -o tun0 -d 10.10.10.0/24 -j ACCEPT
 iptables -A FORWARD -i tun0 -o eth0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
 iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
 
-openvpn --config /hackthebox/vpn-config.ovpn \
+openvpn --config /vpn-config/hackthebox.ovpn \
     --user openvpn --group openvpn