An OpenVPN endpoint into the demo network with a user configured for split-tunnel ("private-only") routing — only traffic to the VPC's CIDR goes over the VPN. Routing is controlled by the allowed/denied CIDR lists on kvindo_open_vpn_user_settings; here only the VPC range is allowed. Assumes the Networking example's resources are in the same configuration.

The final local_sensitive_file resource writes the user's .ovpn profile (exported on status.config) to alice.ovpn for convenience. It uses the standard hashicorp/local provider — add it to your required_providers.

Related pages

Resource docs

• OpenVPN resource docs
• OpenVPN User resource docs
• OpenVPN User Settings resource docs

More in this section

• Networking
• VMs
• Load Balancing
• S3
• Examples

Reference

• Kvindo provider on the Terraform Registry