Jack Ivanov
2abbf22196
Alternative Ingress IP ( #1605 )
...
* Separate ingress IP draft
* task name fix
* placeholder
2020-01-31 11:24:29 +01:00
David Myers
78cc708435
Clarify SSH port changed for cloud only ( #1706 )
2020-01-28 21:21:27 +01:00
Jack Ivanov
0efa4eaf91
Ca certificate name constraints ( #1675 )
...
* X.509 Name Constraints
* nameConstraints to a random generated uuid
* Second level domain
* nameConstraints fixes
* critical in nameConstraints lost after last refactoring
2020-01-25 20:08:55 +07:00
Jack Ivanov
0e57da8237
Move to Ubuntu 19.10 ( #1702 )
...
* 19.04 is dead, long live 19.10
* Remove 19.04 from tests
* Update docs
* Set proper Azure name
2020-01-23 17:24:41 +01:00
David Myers
6ac2e2d1a4
Document using Google Cloud Shell ( #1699 )
2020-01-22 11:39:36 +01:00
David Myers
df57e21194
DO documentation update ( #1696 )
2020-01-21 12:09:43 +01:00
David Myers
2d94bbd278
Documentation updates ( #1694 )
2020-01-21 12:09:09 +01:00
Jack Ivanov
62d00901e6
Update main.yml
2020-01-16 13:37:37 +01:00
Jack Ivanov
d8c48ec505
Update pre-deploy.sh
2020-01-16 13:24:23 +01:00
Jack Ivanov
98f43c5cbd
Github Actions fix for PRs ( #1687 )
2020-01-16 13:06:11 +01:00
Jack Ivanov
24574a3205
apt locking fixes ( #1685 )
2020-01-15 21:27:29 +01:00
Jack Ivanov
0629aa5ca5
Update badge
2020-01-13 17:26:05 +01:00
Jack Ivanov
cc72728c6d
Update badge
2020-01-13 17:23:42 +01:00
Jack Ivanov
53dfc570eb
Github Actions ( #1681 )
2020-01-13 17:20:40 +01:00
Jack Ivanov
eb40ade096
scaleway region fix ( #1678 )
2020-01-08 11:11:41 +01:00
Jack Ivanov
625f634163
Update CHANGELOG.md
2020-01-07 14:33:46 +01:00
Jack Ivanov
d635c76b50
Change default SSH port and introduce cloud-init support ( #1636 )
...
* Change default SSH port
* Iptables to ansible_ssh_port
* Add Scaleway
* permissions and groups fixes
* update firewall docs
* SSH fixes
* add missing cloudinit to cloud-azure
* remove ansible_ssh_user from the tests
* congrats message fix
2020-01-07 14:28:19 +01:00
Jack Ivanov
b66c9f59aa
Update CHANGELOG.md
2019-12-13 10:35:44 +01:00
TC1977
45aa0065cd
Documentation updates ( #1607 )
...
* update variable name to store_pki
* Document BetweenClients_DROP
* Update README.md
* Update faq.md
* VPN On Demand is for Apple IPSEC clients only
* How to update users from cloud-init
* How to monitor user activity
* Fix typo
* Update FAQ about WireGuard, fix typos
* Correct locations of install log and user configs
* Update-users from cloud-init
* Update features list
* More "IPsec" and "WireGuard" changes
* fixed broken link/absent link in FAQ
* Python version README fix for #1622
* road warrior instructions
* Update index.md
* Reorganize config.cfg
As per @davidemyers suggestions
* Further config changes
As per feedback, also better explanation of keys_clean_all
* Add road warrior instructions to FAQ
* Remove specific ports from RW instructions
2019-12-10 19:23:18 +01:00
David Myers
221568cd25
Remove some commas from input.yml ( #1652 )
...
* Remove some commas from input.yml
* Update input.yml
2019-12-08 13:16:48 +01:00
David Myers
d18de4b679
Add deploy-from-macos.md ( #1649 )
2019-12-08 13:12:24 +01:00
David Myers
d72f3b5ba3
Update Windows documentation ( #1640 )
...
* Update Windows documentation
* Revise instructions
2019-11-27 07:48:36 +01:00
David Myers
9f27c25adc
Update the Ubuntu WireGuard documentation ( #1645 )
2019-11-27 07:45:27 +01:00
Julien Bachmann
43aafdfce1
fixed code to work with python3.7 ( #1608 )
...
* fixed code to work with python3.7
* removed trailing whitespaces and re-run ansible-linter
2019-11-06 08:25:35 +01:00
David Myers
b65e6b1351
Support Ubuntu 19.10 ( #1630 )
...
Add Travis tests
2019-11-04 11:46:13 +01:00
Jack Ivanov
dfd979eb68
Windows SSH key permissions workaround ( #1584 )
...
* Windows SSH key permissions workaround
* Ensure Ansible is not being run in a world writable directory
* linting
2019-11-01 09:57:20 +01:00
David Myers
5737317dae
Allow WireGuard to listen on port 53 ( #1594 )
...
* Allow WireGuard to listen on port 53
* Use a variable for the port to avoid
* Add comment to config.cfg
2019-10-30 08:38:39 +01:00
Jack Ivanov
88eaf30e65
Update README.md ( #1602 )
...
* Update README.md
As noted in #1599 we don't have any instructions for CentOS 7. Closes #1599
* Update README.md
Co-Authored-By: David Myers <dem@myersnet.net>
2019-10-09 08:34:06 +02:00
Jack Ivanov
d0ce162559
Update PULL_REQUEST_TEMPLATE.md
2019-10-07 13:11:33 +02:00
Jon Stewart
792e991442
Troubleshooting docs addition for CA certificate failure with MacPorts ( #1595 )
...
* Added troubleshooting entry related to lack of a CA certificate in MacPorts.
* Try to fix the link
* Try to fix the link
* Try to fix the link
* line-breaking of error message
* update error message and text
2019-10-05 19:31:30 +02:00
Nil Admirari
0b4ec243a7
Fix for interactive Docker deployments ( #1589 )
2019-10-02 12:03:10 +02:00
Jack Ivanov
8bdd99c05d
Refactor to support Ansible 2.8 ( #1549 )
...
* bump ansible to 2.8.3
* DigitalOcean: move to the latest modules
* Add Hetzner Cloud
* Scaleway and Lightsail fixes
* lint missing roles
* Update roles/cloud-hetzner/tasks/main.yml
Add api_token
Co-Authored-By: phaer <phaer@phaer.org>
* Update roles/cloud-hetzner/tasks/main.yml
Add api_token
Co-Authored-By: phaer <phaer@phaer.org>
* Try to run apt until succeeded
* Scaleway modules upgrade
* GCP: Refactoring, remove deprecated modules
* Doc updates (#1552 )
* Update README.md
Adding links and mentions of Exoscale aka CloudStack and Hetzner Cloud.
* Update index.md
Add the Hetzner Cloud to the docs index
* Remove link to Win 10 IPsec instructions
* Delete client-windows.md
Unnecessary since the deprecation of IPsec for Win10.
* Update deploy-from-ansible.md
Added sections and required variables for CloudStack and Hetzner Cloud.
* Update deploy-from-ansible.md
Added sections for CloudStack and Hetzner, added req variables and examples, mentioned environment variables, and added links to the provider role section.
* Update deploy-from-ansible.md
Cosmetic changes to links, fix typo.
* Update GCE variables
* Update deploy-from-script-or-cloud-init-to-localhost.md
Fix a finer point, and make variables list more readable.
* update azure requirements
* Python3 draft
* set LANG=c to the p12 password generation task
* Update README
* Install cloud requirements to the existing venv
* FreeBSD fix
* env->.env fixes
* lightsail_region_facts fix
* yaml syntax fix
* Update README for Python 3 (#1564 )
* Update README for Python 3
* Remove tabs and tweak instructions
* Remove cosmetic command indentation
* Update README.md
* Update README for Python 3 (#1565 )
* DO fix for "found unpermitted parameters: id"
* Verify Python version
* Remove ubuntu 16.04 from readme
* Revert back DigitalOcean module
* Update deploy-from-script-or-cloud-init-to-localhost.md
* env to .env
2019-09-28 08:10:20 +08:00
Jack Ivanov
61729ac9b5
Update client.conf.j2 ( #1580 )
2019-09-12 12:52:10 +02:00
Nil Admirari
0c3aada66f
Support for scripted Docker deployments ( #1582 )
2019-09-12 12:51:40 +02:00
Nil Admirari
fc27b439b5
Do not copy existing env to Docker image ( #1581 )
2019-09-12 12:13:38 +02:00
Nian Wang
71e49eb2c8
Add spacing, list format for readability. ( #1560 )
2019-09-06 10:56:24 +02:00
Squirrel
1ca8ee5554
Generates a password by native module ( #1576 )
...
* use password module to generate password
* fix variable reference
* reduce character set to meet origin design
* CA and p12 password chanes
- Move the CA_password generation task to the native lookup plugin
- Get rid of unneeded tasks
2019-09-06 10:55:57 +02:00
Jack Ivanov
c6f45ead69
Allow OnDemand to be toggled later ( #1557 )
2019-09-06 09:33:36 +02:00
Jack Ivanov
95eddccfb7
EC2: Enable EBS single step encryption by default ( #1556 )
...
* EC2: EBS single step encryption by default
* return back the encryption variable
2019-08-26 17:25:29 +02:00
Jack Ivanov
3c30074a7f
Revert "More robust use of our virtualenv ( #1412 )" ( #1559 )
...
This reverts commit 2909107554
2019-08-22 12:54:05 +02:00
Jack Ivanov
fe7755e6a0
Allow to unblock smb and netbios in config.cfg ( #1558 )
2019-08-21 12:03:10 +02:00
John Wesley
fe19859b00
Docker makefile ( #1553 )
...
* makefile for docker deploys
* update docs for makefile
2019-08-19 15:07:24 +02:00
Jack Ivanov
655729ef54
Update CHANGELOG.md
2019-08-15 15:24:52 +02:00
Julien Bachmann
3dc08c94cf
New cloud provider CloudStack ( #1420 )
...
* clean commits from branch cloud-cloudstack w/ proper committer email/name
* fixed ansible-lint errors
* corrected typo in prompted message
* standalone cloudstack zones module
* added missing environment variables
* remove `_cloudstack_zones` default variable
* Move to Ubuntu 19.04
* Update cloud-cloudstack.md
* Update cloud-cloudstack.md
Markdown doesn't render `<your account>`
* Update prompts.yml
* Update main.yml
2019-08-15 15:23:10 +02:00
James Polley
2909107554
More robust use of our virtualenv ( #1412 )
...
Prior to this change, the script tests if it's running inside a
virtualenv; and if it is, it assumes that it must be inside its own
virtualenv.
This change switches to testing for the activate binary in the
place we expect; and if it's found, using it directly. This avoids
false positives (running the script inside the wrong virtualenv) and
makes sure that we're running inside the right virtualenv.
2019-08-15 12:31:29 +02:00
Jack Ivanov
211d1b2cab
Google Cloud: remove sshguard ( #1548 )
...
* Google Cloud: remove sshguard
* Remove whitespace
2019-08-15 09:27:54 +02:00
Jack Ivanov
561afe18f9
Remove WireGuard pki from tmpfs ( #1547 )
2019-08-13 17:36:07 +02:00
Jack Ivanov
f8ce1f84a2
Update CHANGELOG.md
2019-07-31 17:47:11 +02:00
Jack Ivanov
e8ae7b2341
Update CHANGELOG.md
2019-07-31 17:42:50 +02:00
Jack Ivanov
38d8a6d0e2
Deprecate IKEv2 for Windows ( #1521 )
...
* Windows to WireGuard
* Add note about WireGuard
* change wireguard faq
* Clarify Windows instructions
* Correct Wireguard description
* Update README.md
2019-07-31 11:28:33 -04:00
