I´m configuring a headless server (old laptop) running debain jessie. The idea is to wake it over LAN and have the server boot up eddie on startup with network lock enabled so the daemons starting can only get wan over airvpn.
Whats the best way to do this ? So far there seem to be a couple of options :
1. Add eddie to startup applications in gnome-tweak-tools.
2. Write a script in init.d (difficult for me)
3. Use the openvpn daemon instead and set fixed iptables rules
What I want to manage here is to prevent any wan connections outside of the tunnel on startup. If eddie kicks in after for example transmission-daemon starts there will be a leak.
Would be great if somebody could point me in the right direction.