d635c76b50
Change default SSH port and introduce cloud-init support ( #1636 )
...
* Change default SSH port
* Iptables to ansible_ssh_port
* Add Scaleway
* permissions and groups fixes
* update firewall docs
* SSH fixes
* add missing cloudinit to cloud-azure
* remove ansible_ssh_user from the tests
* congrats message fix
4 years ago
b66c9f59aa
Update CHANGELOG.md
4 years ago
45aa0065cd
Documentation updates ( #1607 )
...
* update variable name to store_pki
* Document BetweenClients_DROP
* Update README.md
* Update faq.md
* VPN On Demand is for Apple IPSEC clients only
* How to update users from cloud-init
* How to monitor user activity
* Fix typo
* Update FAQ about WireGuard, fix typos
* Correct locations of install log and user configs
* Update-users from cloud-init
* Update features list
* More "IPsec" and "WireGuard" changes
* fixed broken link/absent link in FAQ
* Python version README fix for #1622
* road warrior instructions
* Update index.md
* Reorganize config.cfg
As per @davidemyers suggestions
* Further config changes
As per feedback, also better explanation of keys_clean_all
* Add road warrior instructions to FAQ
* Remove specific ports from RW instructions
4 years ago
221568cd25
Remove some commas from input.yml ( #1652 )
...
* Remove some commas from input.yml
* Update input.yml
4 years ago
d18de4b679
Add deploy-from-macos.md ( #1649 )
4 years ago
d72f3b5ba3
Update Windows documentation ( #1640 )
...
* Update Windows documentation
* Revise instructions
5 years ago
9f27c25adc
Update the Ubuntu WireGuard documentation ( #1645 )
5 years ago
43aafdfce1
fixed code to work with python3.7 ( #1608 )
...
* fixed code to work with python3.7
* removed trailing whitespaces and re-run ansible-linter
5 years ago
b65e6b1351
Support Ubuntu 19.10 ( #1630 )
...
Add Travis tests
5 years ago
dfd979eb68
Windows SSH key permissions workaround ( #1584 )
...
* Windows SSH key permissions workaround
* Ensure Ansible is not being run in a world writable directory
* linting
5 years ago
5737317dae
Allow WireGuard to listen on port 53 ( #1594 )
...
* Allow WireGuard to listen on port 53
* Use a variable for the port to avoid
* Add comment to config.cfg
5 years ago
88eaf30e65
Update README.md ( #1602 )
...
* Update README.md
As noted in #1599 we don't have any instructions for CentOS 7. Closes #1599
* Update README.md
Co-Authored-By: David Myers <dem@myersnet.net>
5 years ago
d0ce162559
Update PULL_REQUEST_TEMPLATE.md
5 years ago
792e991442
Troubleshooting docs addition for CA certificate failure with MacPorts ( #1595 )
...
* Added troubleshooting entry related to lack of a CA certificate in MacPorts.
* Try to fix the link
* Try to fix the link
* Try to fix the link
* line-breaking of error message
* update error message and text
5 years ago
0b4ec243a7
Fix for interactive Docker deployments ( #1589 )
5 years ago
8bdd99c05d
Refactor to support Ansible 2.8 ( #1549 )
...
* bump ansible to 2.8.3
* DigitalOcean: move to the latest modules
* Add Hetzner Cloud
* Scaleway and Lightsail fixes
* lint missing roles
* Update roles/cloud-hetzner/tasks/main.yml
Add api_token
Co-Authored-By: phaer <phaer@phaer.org>
* Update roles/cloud-hetzner/tasks/main.yml
Add api_token
Co-Authored-By: phaer <phaer@phaer.org>
* Try to run apt until succeeded
* Scaleway modules upgrade
* GCP: Refactoring, remove deprecated modules
* Doc updates (#1552 )
* Update README.md
Adding links and mentions of Exoscale aka CloudStack and Hetzner Cloud.
* Update index.md
Add the Hetzner Cloud to the docs index
* Remove link to Win 10 IPsec instructions
* Delete client-windows.md
Unnecessary since the deprecation of IPsec for Win10.
* Update deploy-from-ansible.md
Added sections and required variables for CloudStack and Hetzner Cloud.
* Update deploy-from-ansible.md
Added sections for CloudStack and Hetzner, added req variables and examples, mentioned environment variables, and added links to the provider role section.
* Update deploy-from-ansible.md
Cosmetic changes to links, fix typo.
* Update GCE variables
* Update deploy-from-script-or-cloud-init-to-localhost.md
Fix a finer point, and make variables list more readable.
* update azure requirements
* Python3 draft
* set LANG=c to the p12 password generation task
* Update README
* Install cloud requirements to the existing venv
* FreeBSD fix
* env->.env fixes
* lightsail_region_facts fix
* yaml syntax fix
* Update README for Python 3 (#1564 )
* Update README for Python 3
* Remove tabs and tweak instructions
* Remove cosmetic command indentation
* Update README.md
* Update README for Python 3 (#1565 )
* DO fix for "found unpermitted parameters: id"
* Verify Python version
* Remove ubuntu 16.04 from readme
* Revert back DigitalOcean module
* Update deploy-from-script-or-cloud-init-to-localhost.md
* env to .env
5 years ago
61729ac9b5
Update client.conf.j2 ( #1580 )
5 years ago
0c3aada66f
Support for scripted Docker deployments ( #1582 )
5 years ago
fc27b439b5
Do not copy existing env to Docker image ( #1581 )
5 years ago
71e49eb2c8
Add spacing, list format for readability. ( #1560 )
5 years ago
1ca8ee5554
Generates a password by native module ( #1576 )
...
* use password module to generate password
* fix variable reference
* reduce character set to meet origin design
* CA and p12 password chanes
- Move the CA_password generation task to the native lookup plugin
- Get rid of unneeded tasks
5 years ago
c6f45ead69
Allow OnDemand to be toggled later ( #1557 )
5 years ago
95eddccfb7
EC2: Enable EBS single step encryption by default ( #1556 )
...
* EC2: EBS single step encryption by default
* return back the encryption variable
5 years ago
3c30074a7f
Revert "More robust use of our virtualenv ( #1412 )" ( #1559 )
...
This reverts commit 2909107554
5 years ago
fe7755e6a0
Allow to unblock smb and netbios in config.cfg ( #1558 )
5 years ago
fe19859b00
Docker makefile ( #1553 )
...
* makefile for docker deploys
* update docs for makefile
5 years ago
655729ef54
Update CHANGELOG.md
5 years ago
3dc08c94cf
New cloud provider CloudStack ( #1420 )
...
* clean commits from branch cloud-cloudstack w/ proper committer email/name
* fixed ansible-lint errors
* corrected typo in prompted message
* standalone cloudstack zones module
* added missing environment variables
* remove `_cloudstack_zones` default variable
* Move to Ubuntu 19.04
* Update cloud-cloudstack.md
* Update cloud-cloudstack.md
Markdown doesn't render `<your account>`
* Update prompts.yml
* Update main.yml
5 years ago
2909107554
More robust use of our virtualenv ( #1412 )
...
Prior to this change, the script tests if it's running inside a
virtualenv; and if it is, it assumes that it must be inside its own
virtualenv.
This change switches to testing for the activate binary in the
place we expect; and if it's found, using it directly. This avoids
false positives (running the script inside the wrong virtualenv) and
makes sure that we're running inside the right virtualenv.
5 years ago
211d1b2cab
Google Cloud: remove sshguard ( #1548 )
...
* Google Cloud: remove sshguard
* Remove whitespace
5 years ago
561afe18f9
Remove WireGuard pki from tmpfs ( #1547 )
5 years ago
f8ce1f84a2
Update CHANGELOG.md
5 years ago
e8ae7b2341
Update CHANGELOG.md
5 years ago
38d8a6d0e2
Deprecate IKEv2 for Windows ( #1521 )
...
* Windows to WireGuard
* Add note about WireGuard
* change wireguard faq
* Clarify Windows instructions
* Correct Wireguard description
* Update README.md
5 years ago
ab0f0c00fe
Bump ansible from 2.7.10 to 2.7.12 ( #1536 )
...
* Bump ansible from 2.7.10 to 2.7.12
Bumps [ansible](https://github.com/ansible/community ) from 2.7.10 to 2.7.12.
- [Release notes](https://github.com/ansible/community/releases )
- [Commits](https://github.com/ansible/community/commits )
Signed-off-by: dependabot[bot] <support@github.com>
* Parse required ansible version
5 years ago
545ad480a4
Add tags to EC2 encrypted images ( #1530 )
5 years ago
902fdab3a0
Update local install instructions ( #1527 )
5 years ago
37e4f46673
Update deploy-from-ansible.md ( #1518 )
...
Further clarifies that the usage of `-t` is deprecated (other than `--skip-tags`) and using variables is preferred.
5 years ago
090a60d48d
PKI to tmpfs ( #1496 )
...
* PKI to tmpfs
* Fixes
- diskutil to full path
- unmount and eject fixes
* Umount fix
* run diskutil info only on Darwin kernels
* fix shell tasks
5 years ago
f986811d64
remove pycrypto from the gce role ( #1489 )
...
pycrypto is dead
5 years ago
0e6554943f
Add default IPv6 routes to the windows powershell script ( #1501 )
5 years ago
14ee323eca
Fix outdated task name in DNS role ( #1499 )
5 years ago
f152d3a746
Troubleshooting IPsec NAT issues ( #1498 )
5 years ago
8462f0fb6c
Unattended upgrade fixes ( #1485 )
...
* Keep custom dnscrypt-proxy conffile when upgrading
* Unattended upgrade tuning
- Upgrade the 50unattended-upgrades file with latest options
- Keep the common unattended upgrade options in one file
- Enable removing of unused kernels and dependencies to save some space
5 years ago
6f58093a06
Update azure regions
...
Closes #1492
5 years ago
c4cc59998a
Update deploy-from-ansible.md ( #1487 )
...
Updated role names and explanations to reflect the removal of Dnsmasq and replacement with dnscrypt-proxy for adblocking.
5 years ago
22cd8ad814
Update CHANGELOG.md
5 years ago
8602a697cc
dnscrypt-proxy as a dns adblocker ( #1480 )
...
* Move DNS adblocking to dnscrypt-proxy
* Update docs
* remove unneeded variable dnscrypt_proxy_version
* Update to the latest dnscrypt-proxy version
* install.sh fix
* spelling
5 years ago
fa5b86961c
Adding ipv6 localhost to the listen addresses ( #1476 )
5 years ago
53755d57e3
Update config.cfg default Azure instance ( #1474 )
5 years ago
Jack Ivanov
TC1977
David Myers
Julien Bachmann
Jon Stewart
Nil Admirari
Nian Wang
Squirrel
John Wesley
James Polley
dependabot[bot]
Daniel Néri
rodeodomino
im-batman