The Cloudberry project

This project aims to simplify setting up OpenWRT, OpenWISP and OpenVPN for different use cases. In particular, it makes it easy to set up groups of OpenWRT based VPN clients that each connect to a dockerized VPN server to route traffic between each other. To Achieve this, Cloudberry implements a few new features on top of OpenWISP and OpenWRT:

Multiple devices can be configured together in a single configuration that refers to the devices for various roles (e.g. server, clients, different types of clients…)
Configuration can be arbitrarily abstracted using transformations written in the SakForm JSON templating language
Configuration can optionally refer to other resources using drop-downs (e.g. certificates, CA:s)
Docker containers running OpenWRT, OpenWISP and OpenVPN can be deployed and configured from OpenWISP.

In addition it adds the following usability features

Import / export of configurations, transforms and device data
Versioning of configurations, transforms and device data
Access control based on group ownership of configurations, transforms and device data.

For more information on how to set up the RPi devices and how the components work, please see the project wiki.

Main components

app - Docker Compose bundle to run all server side components
djangoproject - Centralized configuration web UI
docker-manager - OpenWISP front-end to docker
lede-openwisp-docker - OpenWISP docker image
device - OpenWRT /etc template
image-generation - Merges a base OpenWRT image, cloudberry-device, and device setup config (UUID, KEY, server url) on demand.

Library projects (semi-unrelated)

netjson - netjson extension schemas
SakStig / SakForm - JSON query and templating language

The configuration transform process

Backend transform process

Screenshots

Multi-device config Backend editing Backend listing

Demo

You can run a virtualized setup using vagrant

make vm