Commit Graph

101 Commits

Author SHA1 Message Date
Jack Ivanov
195697a1f0 Merge pull request #131 from trailofbits/ec2updates
EC2 Updates and fixes
2016-11-29 18:48:31 +03:00
defunct
e40545cce5 opens #126
This commit reverts changes in 437d659 to avoid breaking changes.
2016-11-27 12:55:05 -05:00
Jack Ivanov
ede452fad4 Merge branch 'master' of github.com:trailofbits/algo 2016-11-26 23:27:25 +03:00
Jack Ivanov
c5860cbc5d Merge pull request #125 from cernekee/tag-fix. Fix #128
Add missing playbook tags
2016-11-26 23:24:43 +03:00
Jack Ivanov
ee95846445 mobileconfig fix 2016-11-26 23:22:12 +03:00
Defunct
d54ba6c7ce Merge branch 'master' into ec2updates 2016-11-26 18:08:14 +00:00
fkt
27ea98e7a8 Show congrats message at the end - #115 2016-11-26 18:05:06 +00:00
Defunct
437d659eb6 resolves #126 - incorrect private key usage w/o ssh-agent 2016-11-26 17:42:46 +00:00
Defunct
1dc6e1a0fa resolves #118 - AWS env keys 2016-11-26 17:39:24 +00:00
Jack Ivanov
047f68df2f Change the site in the congrats handler to whoer.net in order to clarify the message at the end of the install about testing VPN. Fix #110 2016-11-23 20:34:53 +03:00
Kevin Cernekee
433389c0ab Use /var/run/reboot-required to determine if a restart is needed
The current check only looks to see if a new kernel was installed.
2016-11-06 09:45:39 -08:00
Kevin Cernekee
09bbc4058c Add missing tags in common playbook
If the common playbook is invoked with the "cloud" tag, non-cloud
tasks will be skipped.  On GCE this causes "Install tools" to be skipped,
apparmor-utils is not installed, and then the "Enforcing ipsec with
apparmor" step fails.
2016-11-06 09:45:34 -08:00
Jack Ivanov
29de003b2d inplemented #109 2016-11-03 18:05:56 +03:00
Jack Ivanov
5383c71499 Fixed #108 2016-11-03 17:21:18 +03:00
Jack Ivanov
d052cb8e77 skip-tags added. Fixed #121 2016-10-28 21:00:11 +03:00
Jack Ivanov
76ea7f67ae extra vars added to use local DNS #110 2016-10-26 18:56:23 +03:00
Jack Ivanov
289807ead4 fix dependencies 2016-10-25 21:33:46 +03:00
Jack Ivanov
d50bd43988 Fix SSH keys permissions 2016-10-24 18:08:58 +03:00
Jack Ivanov
44bc3ead48 set AllowTcpForwarding to local 2016-10-24 17:53:08 +03:00
Dan Guido
c52350030d Merge branch 'master' into docs 2016-10-16 22:01:56 +02:00
Jack Ivanov
0e613f2ff7 fix a typo. #96 closed 2016-10-16 17:38:00 +03:00
Jack Ivanov
8c284a16e3 Done. #96 2016-10-16 17:36:01 +03:00
Jack Ivanov
062426e0ec client configuration templates #43 2016-10-16 15:27:05 +03:00
Dan Guido
1a3a14943c pull in changes from master 2016-10-15 19:26:28 +02:00
Jack Ivanov
fcf29534ba the proxixy filter rules disabled #93 2016-10-14 19:58:55 +03:00
Jack Ivanov
bf5d5e53ac ip6tables fixes 2016-10-14 19:05:39 +03:00
Jack Ivanov
c43ccc3898 iptables moved to the vpn role #61 2016-10-14 18:50:24 +03:00
Dan Guido
bff7c414b2 Initial commit of reorg'd docs 2016-10-13 15:27:06 +02:00
Jack Ivanov
4db428a86e Disable unneeded plugins in StrongSwan #84 2016-10-10 15:42:32 +03:00
Jack Ivanov
2cca45c967 additional tags 2016-10-10 15:32:14 +03:00
Jack Ivanov
ad9d7d6ddb disable dpdtimeout #90 2016-09-26 22:07:34 +03:00
Jack Ivanov
8e0cca6b66 some fixes 2016-09-26 15:43:19 +03:00
Jack Ivanov
dbeb7a13e8 Merge branch 'tags' #80 2016-09-19 20:22:51 +03:00
Jack Ivanov
4d731580b7 linting 2016-09-19 20:18:27 +03:00
Jack Ivanov
fc162728d3 role for local installation 2016-09-19 19:54:45 +03:00
Jack Ivanov
d9441b236a move to tags #80 2016-09-18 13:12:17 +03:00
Jack Ivanov
aa4dcc31d4 gce role to tags 2016-09-18 13:11:30 +03:00
Jack Ivanov
cf5a0f41d3 ec2 role to tags 2016-09-18 13:11:22 +03:00
Jack Ivanov
97ea00056d DO roles to tags 2016-09-18 13:11:10 +03:00
Jack Ivanov
6685642f0b #85 fixed 2016-08-31 11:42:29 +03:00
Jack Ivanov
91688324ce additional functions 2016-08-28 23:19:41 +03:00
Jack Ivanov
ddcee8db18 logging fixes 2016-08-28 23:07:45 +03:00
Jack Ivanov
97a00699b7 new tags 2016-08-28 23:04:59 +03:00
Jack Ivanov
05df4f0c04 unattended-upgrades moved to the security role 2016-08-28 22:11:39 +03:00
Evgeniy Ivanov
4284dd63aa rsyslog moved to the logging role 2016-08-28 22:06:33 +03:00
Jack Ivanov
0cd4084aa4 ssh fixes 2016-08-26 00:47:08 +03:00
Jack Ivanov
00e4bcc1ec security role and SSH fixes #77 2016-08-26 00:35:07 +03:00
Jack Ivanov
8c5f80bf8f linting 2016-08-25 23:59:16 +03:00
Jack Ivanov
57b6c96ba8 SSH fingerprints #77 2016-08-25 23:48:35 +03:00
Jack Ivanov
0945f54366 SSH user-management #77 2016-08-25 23:30:27 +03:00