---

sudo bash <<'BASH'
set -euo pipefail

. /etc/os-release
case "${VERSION_CODENAME:-}" in
  jammy|noble|resolute) ;;
  *) echo "Неподдерживаемая версия Ubuntu"; exit 1 ;;
esac

ARCH=$(dpkg --print-architecture)
case "$ARCH" in
  amd64|arm64) ;;
  *) echo "Неподдерживаемая архитектура"; exit 1 ;;
esac

apt-get update
apt-get install -y ca-certificates wget gnupg

mkdir -p /etc/apt/keyrings

wget -q \
  https://packages.openvpn.net/as-repo-public.asc \
  -O /etc/apt/keyrings/as-repository.asc

echo "deb [arch=$ARCH signed-by=/etc/apt/keyrings/as-repository.asc] http://packages.openvpn.net/as/debian $VERSION_CODENAME main" \
  > /etc/apt/sources.list.d/openvpn-as-repo.list

apt-get update
apt-get install -y openvpn-as

systemctl enable --now openvpnas

echo "OpenVPN Access Server установлен!"
systemctl status openvpnas --no-pager
BASH