removed privileged mode

docker-compose.yml

@@ -4,8 +4,9 @@ services:
     openvpn:
         build: ./openvpn
         container_name: vpn-c2s-openvpn
-        privileged: true
 #        restart: unless-stopped
+        cap_add:
+          - NET_ADMIN
         networks:
             vpn-c2s.internal.docker:
                 aliases:

openvpn/run.sh

@@ -4,6 +4,12 @@
 
 replace_files
 
+mkdir -p /dev/net
+if [ ! -c /dev/net/tun ];
+then
+  mknod /dev/net/tun c 10 200
+fi
+
 if [ ! -e /etc/openvpn/credentials/server.key ]
 then
   echo Creating new openvpn credentials...