RobOS
Community Discord Channel Download

RobOS VPN Servers

Manage OpenVPN providers (IPVanish built-in with 3,598 server profiles), encrypted VPN accounts, live TLS 1.3 credential tests, and server locations.

Download RobOS Source

packages/vpn-servers

RobOS VPN Servers (packages/vpn-servers, window title VPN Servers & Accounts) manages the OpenVPN providers, encrypted account credentials, and .ovpn server profiles used by RobOS VPN Sandbox and RobOS Preferences.

RobOS VPN Servers Verified

Key Capabilities

  1. Built-In IPVanish Provider with 3,598 Official .ovpn Server Profiles:
    • Ships with all 3,598 official IPVanish .ovpn server configurations and ca.ipvanish.com.crt (packages/robos-lib/assets/ipvanish-configs.tar.xz), pre-sanitized for OpenVPN 2.6/2.7 compatibility (data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC and removal of deprecated keysize directives).
    • Includes a one-click Refresh IPVanish Servers button to pull the latest configs.zip catalog from https://configs.ipvanish.com/configs/, plus Import .ovpn File… for custom OpenVPN profiles.
  2. Encrypted Credential Storage (Never Plaintext):
    • Account metadata is stored in ~/.config/robos/ovpn-accounts.json while passwords are stored encrypted in Pass Manager (robos/ovpn/<provider>/<account>) with an automatic AES-256-GCM local vault fallback (~/.config/robos/ovpn/.vault/) when pass is not initialized.
    • Includes a Show / Hide toggle on the OpenVPN password field for easy entry and verification of service credentials.
  3. Live OpenVPN Credential & Tunnel Handshake Verification (Test Button):
    • Click Test on any saved account card or Test Connection in the account form to perform a live OpenVPN TLS 1.3 handshake (--auth-user-pass, --connect-retry-max 1) against the selected server profile and verify PUSH_REPLY along with the assigned VPN tunnel IP and negotiated cipher.
  4. Country & City Filtering Across 3,600+ Locations:
    • Filter server profiles by country (All Countries, US, NL, GB, DE, etc.) or search by city, region, or hostname (atl-a01, nyc, ams), and click Use Server to set the active default server for your account.

Run it

Launch RobOS VPN Servers from the desktop, from the VPN Servers & Accounts… button inside RobOS VPN Sandbox, or run:

scripts/dev-launch.sh vpn-servers

Related

More in Security & Credentials

DocuVault Desktop

Offline-first secure markdown notes, personal snippet vault, and local workstation storage starter app.

Git Login Manager

Checks that GitHub access works (gh login, SSH key, SSH connection, git identity) and walks you through fixing what fails.

Pass Manager Vault

Desktop front end for the standard Unix password store (pass), with entries encrypted by GPG.

Pass Unlock Daemon

Small dialog that asks for your GPG passphrase once a day and caches it in gpg-agent.

RobOS App Mesh

Zero-Trust App & IPC Port Mesh for connecting RobOS applications across machines (mTLS 1.3, OpenZiti, Tailscale, NetBird, WireGuard)

RobOS Cloud Accounts

One list of your cloud accounts, shared with Data Sources and Google Calendar; Google accounts can sign in through the browser and be written into Thunderbird.

RobOS Hardware Keys

YubiKey & FIDO2 physical push keys, touch verification, ed25519-sk SSH keys, Passkeys, and PAM U2F security studio

RobOS Private Networks

Cross-Network Zero-Trust P2P & Relay Mesh for linking RobOS machines across separate networks/NAT/CGNAT via Mutual TLS 1.3 (robos-net://), AES-256-GCM encrypted rendezvous, bidirectional Reverse-Mux tunneling, and cross-machine RobOS Movie Player (:19215) streaming

RobOS Setup Wizard

Eleven-step first-run wizard for GPG, pass, pinentry, git identity, SSH, Chrome, GitHub login, AI agent keys and optional tools.

RobOS VPN Sandbox

Launch any desktop or CLI app inside an isolated Linux network namespace (ip netns) routed exclusively through OpenVPN with a 3-barrier kernel kill-switch.

Security Setup Wizard

Five-step wizard that configures GPG pinentry, a GPG key, the pass store and an SSH key.