From e0f16fd5aa314a5d79eca01d2155a3eb06e677fb Mon Sep 17 00:00:00 2001
From: huelsner <hue@garden46.net>
Date: Mon, 30 Dec 2024 20:48:51 +0100
Subject: [PATCH] Fix TUN error message

--cap-add=MKNOD --device /dev/net/tun had to be added to the Main process command line (see https://openvpn.net/as-docs/docker.html#prerequisites-169854)
---
 init/docker-openvpn@.service | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/init/docker-openvpn@.service b/init/docker-openvpn@.service
index 5385b135..d22f4020 100644
--- a/init/docker-openvpn@.service
+++ b/init/docker-openvpn@.service
@@ -64,7 +64,7 @@ ExecStartPre=-/usr/bin/docker pull $IMG
 ExecStartPre=/bin/sh -c 'test -z "$IP6_PREFIX" && exit 0; sysctl net.ipv6.conf.all.forwarding=1'
 
 # Main process
-ExecStart=/usr/bin/docker run --rm --cap-add=NET_ADMIN -v ${DATA_VOL}:/etc/openvpn --name ${NAME} -p ${PORT} ${IMG} ovpn_run $ARGS
+ExecStart=/usr/bin/docker run --rm --cap-add=NET_ADMIN --cap-add=MKNOD --device /dev/net/tun -v ${DATA_VOL}:/etc/openvpn --name ${NAME} -p ${PORT} ${IMG} ovpn_run $ARGS
 
 # IPv6: Add static route for IPv6 after it starts up
 ExecStartPost=/bin/sh -c 'test -z "${IP6_PREFIX}" && exit 0; sleep 1; ip route replace ${IP6_PREFIX} via $(docker inspect -f "{{ .NetworkSettings.GlobalIPv6Address }}" $NAME ) dev docker0'