Turnkey OpenVPN Server for Business with MFA

I set up an OpenVPN server for companies that need secure remote access for employees. You get a dedicated server with personal certificates, MFA (two-factor verification on login), and ready-made instructions for your staff. Timeline 2-3 days, from $150, work done fully remotely.

Employees work from home, from cafes, on business trips, and all of them need access to internal company resources: files, databases, 1C, internal sites. Exposing these resources directly to the internet is a bad idea. An OpenVPN server for business closes this gap: access only through an encrypted tunnel, with a certificate and confirmation via phone. This service fits companies of any size with more than one remote employee and something worth protecting.

What’s included

• Dedicated OpenVPN server with configured certificate infrastructure (PKI)
• MFA via TOTP: a code from a phone app on every connection
• Ready-made configs for each employee, just import and go
• Access policies: who sees what inside the network
• Connection logging: who connected and when
• Server documentation and instructions for employees

How the work goes

%%{init: {
  'theme': 'base',
  'themeVariables': {
    'primaryColor': '#ffffff',
    'primaryTextColor': '#1e293b',
    'primaryBorderColor': '#94a3b8',
    'lineColor': '#64748b',
    'fontSize': '15px',
    'fontFamily': 'ui-sans-serif, system-ui, sans-serif'
  },
  'flowchart': {'curve': 'linear', 'nodeSpacing': 50, 'rankSpacing': 50}
}}%%
flowchart TD
    S1["1. Requirements, number of users"]
    S2["2. Deploying OpenVPN server and PKI"]
    S3["3. MFA and access policies"]
    S4["4. Configs for employees"]
    S5["5. Documentation and handover"]
    S1 --> S2
    S2 --> S3
    S3 --> S4
    S4 --> S5
    style S1 fill:#f8fafc,stroke:#3b82f6,stroke-width:2px,color:#1e40af
    style S2 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S3 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S4 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S5 fill:#f8fafc,stroke:#22c55e,stroke-width:2px,color:#15803d

1. Gathering requirements. I clarify the number of users, which resources they need, and whether MFA is required for everyone or just some employees.
2. Deploying the server and PKI. I set up the OpenVPN server and the certificate infrastructure that connection security is built on.
3. Setting up MFA and access policies. I enable two-factor verification and define who sees which resources inside the network.
4. Configs for employees. I prepare a personal connection file and certificate for each user on the list.
5. Documentation and handover. I hand over the server diagram, connection instructions for employees, and access passwords.

What hardware you’ll need

You need a server, virtual machine, or VPS with a public IP address (a static address reachable from the internet). If you don’t have your own server, I’ll pick a VPS for the job. The rental cost is not included in the price of work and is paid separately to the provider.

What gets deployed

OpenVPN goes up on the server along with PKI, your own certificate infrastructure where every employee gets a unique key. MFA via TOTP gets added (codes in a phone app), access policies by users and groups get configured, and logging gets enabled, a full log of every connection to the server.

What you’ll get as a result

A corporate VPN server with personal certificates for every employee and two-factor verification on login. Ready-made instructions your employees can follow to connect in a couple of minutes on their own. Server documentation for your IT staff or for the case when something needs changing without me.

Pricing

Base price starts from $150 for server setup, 2-3 days of work. The exact amount depends on the number of users and the integrations needed.

Not included in the price: VPS rental.

After delivery: 14 days of free bug fixes. After that: one-off work at $20/hour or support plans from $40/month.

What I need from you

• A list of users who need access
• Which resources and services employees need to reach through the VPN
• A server, virtual machine, or ready VPS with a public IP
• A contact for sending instructions to employees

VPS rental is not included in the price of work and is paid separately if you don’t have your own server.

Frequently asked questions

How long does the setup take?

2-3 days from the moment I get the user list and access to the server.

Is the work done remotely?

Yes, the entire setup is done remotely, no physical presence is required.

What if we don’t have our own server?

I’ll pick a suitable VPS for your needs. The rental is paid separately to the provider and isn’t included in the base price of work.

What if issues show up after delivery?

I fix issues for free during 14 days after delivery. After that, one-off fixes are billed at an hourly rate, or you can get support on a subscription basis.

Can we connect the server to shared employee logins from Active Directory?

Yes, that’s a separate integration with LDAP or AD, not included in the base server setup.

Can you link a VPN between two offices?

Yes, that’s a separate site-to-site connection service between offices, configured on top of the base server.