From f872acf5df6320e8ea50ec532f8a0caa05a21217 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Wed, 20 Jan 2021 20:27:19 +0100
Subject: Debian: add openvpn user via postinstall

Migrated from vyatta-cfg-system.
---
 debian/vyos-1x.postinst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/debian/vyos-1x.postinst b/debian/vyos-1x.postinst
index 0597fbc66..5fadddc86 100644
--- a/debian/vyos-1x.postinst
+++ b/debian/vyos-1x.postinst
@@ -20,6 +20,11 @@ if ! grep -q '^minion' /etc/passwd; then
     adduser --quiet minion users
 fi
 
+# OpenVPN should get its own user
+if ! grep -q '^openvpn' /etc/passwd; then
+    adduser --quiet --firstuid 100 --system --group --shell /usr/sbin/nologin openvpn
+fi
+
 # Add RADIUS operator user for RADIUS authenticated users to map to
 if ! grep -q '^radius_user' /etc/passwd; then
     adduser --quiet --firstuid 1001 --disabled-login --ingroup users --gecos "radius user" --shell /bin/vbash radius_user
-- 
cgit v1.2.3