258 Commits (32cbec6f5b5a279c6e9d6a8dcd8084f0b088bdd3)

Author	SHA1	Message	Date
Jack Ivanov	78830d96aa	Android: add the CA and set the ciphers explicitly (#837)	7 years ago
Jack Ivanov	4e4440a318	Exclude CA from P12 (#835)	7 years ago
Jack Ivanov	3b19f13082	Enable no-resolv (#816)	7 years ago
adamluk	b30f6db079	Update rules.v6.j2 (#818) ... Updated to use -m conntrack for consistency as per the other IPv6 rules.	7 years ago
Jack Ivanov	7e07c35474	proper cloudformation template (#815)	7 years ago
Jack Ivanov	02427910de	Ansible 2.4, Lightsail, Scaleway, DreamCompute (OpenStack) integration (#804) ... * Move to ansible-2.4.3 * Add Lightsail support #623 * Fixing the EC2 deployment * Scaleway integration #623 * OpenStack cloud provider (DreamCompute optimised) #623 * Remove the security role * Enable unattended-upgrades for clouds * New requirements to make Azure and GCE work	7 years ago
Jack Ivanov	4da752b603	Ubuntu 17.10 support (#811)	7 years ago
Micah R Ledbetter	5eed1bbba4	Use dns_servers in dnsmasq.conf (#794)	7 years ago
Douglas Gastonguay-Goddard	7eb4fc5f22	DigitalOcean - Add cleanup step for SSH key (#784) ... * Add cleanup step for SSH key. * Two space tabs are hard to see.	7 years ago
Jack Ivanov	a844870b7a	Sendmail should not be installed (#738)	7 years ago
Marcelo Elizeche Landó	07a1c70bf4	Update adblock.sh for systemd to fix issue #735 (#736) ... * Update script to restart the dnsmasq service using systemctl(systemd) command instead of service(Upstart) * Use instead of legacy REF: https://github.com/koalaman/shellcheck/wiki/SC2006 * Replace non-standard egrep(deprecated) for grep -E. REF: https://github.com/koalaman/shellcheck/wiki/SC2196	7 years ago
Jack Ivanov	f18c1a0d67	Certificate revocation fix (#719)	7 years ago
Jack Ivanov	b64f682bae	remove the dead code. Fixes #671	7 years ago
Jurgen Verhasselt	185c0f51d7	correct configs_prefix vars in client tasks (#712)	7 years ago
Julie Bernosky	dc4dff040e	Add StrongSwan log level config option to ipsec.conf template (#700)	7 years ago
Jack Ivanov	3c55cd15a4	GCE. replace underscores (#698)	7 years ago
Jack Ivanov	ee7264f26e	Ask users to enter the p12 password manually (#697)	7 years ago
Jack Ivanov	6b803e069f	LibreSSL fix #625 (#685)	7 years ago
Jack Ivanov	8da53f859b	Some browsers (eg. Safari) stop loading pages if the element with ads can't be loaded (#633)	7 years ago
Samuel Horwitz	0607e968d7	Update main.yml (#621)	7 years ago
Jack Ivanov	0bb9279094	bug in the gce_net module #616 (#620)	7 years ago
Jack Ivanov	78bd5b017c	client fixes (#605)	7 years ago
Jack Ivanov	9d8e39f63d	Move back to the Xenial repo (#606)	7 years ago
Jack Ivanov	f0283856ad	fix revocation (#586)	7 years ago
Jack Ivanov	a8ebb16437	Enable timeouts. Fixes #581	7 years ago
Jack Ivanov	26c202ded5	Generate p12 each deployment. Generate ps1 scripts if windows supported. Define `become` for all the section. (#580)	7 years ago
Jack Ivanov	ba7859ba5f	Revoke non-existing users fix	7 years ago
Jack Ivanov	0131505195	Enhance PS1 script (#510) ... update docs Update README.md update readme	7 years ago
Jack Ivanov	e6c8f19d3c	Create a VPC network for each instane (#561)	7 years ago
Jack Ivanov	ee6db37428	Change the P12 and SSH passwords only for new users (#550)	7 years ago
Jack Ivanov	40e0363b18	Add html helper for Android (#554) ... * add html helper #280 move to the new local schema fix a typo * Update client-android.md	7 years ago
Ruben Jongejan	e9e6c6e383	cleaner syntax for local actions (#536) ... * refactored local actions to cleaner syntax * openssl commands folded * removed unnecessary local_action's	7 years ago
Rod Vagg	75d64ac018	Make DNS blocklist URLs configurable (#548)	7 years ago
tetov	ac6db06a19	grammar edit (#540) ... * grammar edit * Update openssl.yml	7 years ago
Jack Ivanov	58d5a06e87	delete tasks and move to roles (#519)	8 years ago
Ruben Jongejan	07ddb5863b	improved readability with native yaml (#530)	8 years ago
Jack Ivanov	97369c303a	define local_dns if dns tag used (#533)	8 years ago
Jack Ivanov	0031d2809e	Disable the Signature Algorithm check and add default vars. Fixes #525	8 years ago
Christopher J. Pilkington	a225bde2b8	Specify EIP domain (#521)	8 years ago
Jack Ivanov	6f170982aa	move to Elastic IP (#512)	8 years ago
Jack Ivanov	9f698fdd68	Get strongswan from the Zesty repo on Xenial (#515)	8 years ago
Jack Ivanov	bd348af9c2	Implementing blocks and additional fail hints #487 (#497) ... change the troubleshooting url	8 years ago
Jack Ivanov	2f5c050fd2	dpdaction to clear (#498)	8 years ago
Jack Ivanov	0ed68b6c30	Properly configure ICMP restrictions (#492)	8 years ago
Ryan Kasper	0cb43650cb	Windows 10 -PfsGroup None --> -PfsGroup ECP256 (#493) ... * Windows 10 -PfsGroup None --> -PfsGroup ECP256 Fixes broken tunnel when rekey (CREATE_CHILD_SA request [ N(REKEY_SA) SA No TSi TSr KE ]) occurs (on my Windows 10 1703 build 15063.138 Creator's Update system this is ~every 57 minutes) * Update Windows Client PfsGroup Commandline	8 years ago
Jack Ivanov	540c761d3b	Disable RSA in the mobileconfigs. Fixes #486	8 years ago
Jack Ivanov	451394100d	Some enhances in the compat ciphers (#464) ... raise the IntegrityCheckMethod to SHA384 Move Windows to ECDSA Increase IntegrityCheckMethod	8 years ago
Dan Guido	aac052da46	this option is deprecated (#477)	8 years ago
Jack Ivanov	c3fcfe5d0d	Let users choose the distro version #449 (#466) ... Make dpdaction great again add 1704 to travis Make EC2 image name more convenient modify apparmor profile	8 years ago
Andy Boutte	76cdc69548	CF tested and working for EC2 deployment (#431) ... * AWS CloudFormation #132 * IPv6 EC2 draft * CF tested and working for EC2 deployment * IPv6 Implementation, EC2, Cloudformation * Fixed ipv6 networking * adding ip6tables rule for DHCP on AWS	8 years ago