Commit Graph

1057 Commits (52f88ad12e46cbe5f182fec6edf87d947c8bafd6)
 

Author SHA1 Message Date
Rick Behl 52f88ad12e
Update troubleshooting.md (#1869)
Provide potential fix for another problem with old firewalls
4 years ago
Squirrel 060b401880
add linode as one of cloud providers (#1590)
* add linode as one of cloud providers

* add Linode into cloud provider list

* fix code style

* install requirements of ansible linode module

* Update prompts.yml

- Make the regions list more readable
- Assign us-east as the default region

* remove prompt of asking root password

* roles/common: Add sshd tasks

* cloud-linode/tasks: Fix LINODE_API_TOKEN env lookup

* docs: Add Linode to Ansible deploy docs

* docs: Add cloud-linode

* config: Use Ubuntu 20.04 on Linode

* README: syntax

* Linode stackscript support

* Linode stackscript fix

* linting

Co-authored-by: Jack Ivanov <17044561+jackivanov@users.noreply.github.com>
Co-authored-by: William Woodruff <william@yossarian.net>
Co-authored-by: William Woodruff <william.woodruff@trailofbits.com>
Co-authored-by: Jack Ivanov <e601809@gmail.com>
4 years ago
David Myers 66e024a015
Update macOS doc (#1865)
* Update macOS doc

* Small change
4 years ago
Jack Ivanov 4172dea436 index fix 4 years ago
Jack Ivanov 04a2f9361b index fix 4 years ago
Jack Ivanov 7a13a297f5 index fix 4 years ago
David Myers b1d1491a66
Clarify AWS prompts (#1861) 4 years ago
Jack Ivanov 8b2b57deda
Install dnscrypt-proxy from ubuntu repos (#1859) 4 years ago
David Myers 4e793ddf65
Update macOS doc (#1858) 4 years ago
Jack Ivanov 54bb481d2c
Update CHANGELOG.md 4 years ago
Jack Ivanov fa9e43e7b4
Update CHANGELOG.md 4 years ago
Paul Brown be96315775
Ansible 2.8.8 -> 2.9.7 to fix python 3.8.2 errors (#1777)
* Ansible 2.8.8 -> 2.9.2 to fix python 3.8.2 errors

* ansible 2.9.2 -> 2.9.7
4 years ago
David Myers 8894dd0848
Discontinue use of the WireGuard PPA (#1855)
* Discontinue use of the WireGuard PPA

* Add instructions to update the system

* Change reboot instruction
4 years ago
Jack Ivanov 5fc738ba8b
Revert "Refactor cloud-init/base.sh (#1797)" (#1856)
This reverts commit f0d0e91be0.
4 years ago
djds f0d0e91be0
Refactor cloud-init/base.sh (#1797)
* Refactor cloud-init/base.sh

* Pass shellcheck
* Use variable for username
* Fix issues with umask and sudo
* Simplify until loops

* Use literal algo for filename in /etc/sudoers.d/10-algo-user
4 years ago
skim 3fe09bd904
Update current status of Wireguard faq to stable (#1849) 4 years ago
Lance McCarthy 350800fdf7
Added Azure deployment troubleshooting solution (#1853)
Added troubleshooting steps to a common problem when deploying to Azure (Deployment Permissions Error).
4 years ago
Jason A. Novak 830877557f
Update troubleshooting document to address #1463 and related issues (#1835)
Clarify instructions in troubleshooting re: removing wireguard and config files as well as add troubleshooting step re: localhost being used instead of a domain name or IP address.
4 years ago
David Myers f76d361c55
Move document index into README (#1815)
Move the list of available documentation into the main README.
4 years ago
David Myers 5efa20b79a
Update WSL doc (#1817)
Note in the WSL doc that Algo does not work on Ubuntu 20.04 LTS under WSL.
4 years ago
David Myers e4753d2510
Make clients prefer IPv6 (#1822)
Change IPv6 addresses to non-ULA addresses such that they are favored over IPv4.
4 years ago
David Myers 47bb48b0fb
Update Linux WireGuard client doc (#1846)
Ubuntu 18.04 LTS now includes WireGuard so the PPA is no longer needed.
4 years ago
Eugene Pirogov 3f86ae0713
Few cosmetic change to readme (#1813)
Several small improvements around markup for code blocks
4 years ago
David Myers 9ac64cbf21
Document WG DNS search domain on Linux client (#1796) 4 years ago
Jack Ivanov c14ff0d611
Ubuntu 20.04 support (#1782)
* ubuntu 20.04 support

* purge snapd for 20.04

* strongswan-starter fix
4 years ago
KilometerM 7695372e2b
Remove hosts-file.net/ad_servers.txt (#1791)
hosts-file.net/ad_servers.txt now leads to a 404 page. The list is no longer published nor maintained.

More information:

https://forums.malwarebytes.com/topic/257401-inquiry-regarding-automated-processing-of-hosts-files/
https://github.com/pi-hole/pi-hole/pull/3236#issue-396455876
https://github.com/uBlockOrigin/uBlock-issues/issues/971#issue-591298291
https://www.reddit.com/r/pihole/comments/fsg11e/hostsfilenet/
4 years ago
Jack Ivanov 6753dc919f
Update troubleshooting.md 4 years ago
Jack Ivanov ca898d5bf2
Update troubleshooting.md
Closes #1786
4 years ago
David Myers eeda23be97
Initial support for Ubuntu 20.04 (#1770) 4 years ago
Wade Winright e29615bc05
Modified script to handle more types of blocklists (#1771)
Added/modified script to better handle multiple types of blocklists available to drop in to the BLOCKLIST_URLS.
4 years ago
Saravanan Palanisamy 02fe2f7dd5
use ca_password from variable(--extra-vars) - non-interactive installation using ansible playbook (#1774)
* use ca_password from variable

* add tests to cover the changes

* update tests - PR #1774
4 years ago
Jack Ivanov 27de76048c
ipv6 nat fix (#1775) 4 years ago
aleks 4f1b9270be
relax CA constraints for client (the client equivalent of PR #1675) (#1768)
* relax CA constraints for client (the client equivalent of PR #1675)

* fixing incorrectly hard-coded output file path
4 years ago
dependabot[bot] c231cd42d6
Bump ansible from 2.8.3 to 2.8.8 (#1736)
Bumps [ansible](https://github.com/ansible/ansible) from 2.8.3 to 2.8.8.
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](https://github.com/ansible/ansible/compare/v2.8.3...v2.8.8)

Signed-off-by: dependabot[bot] <support@github.com>
4 years ago
David Myers 3f3138f555
Fix IPsec DNS when WireGuard uses port 53 (#1719)
* Fix IPsec DNS when WireGuard uses port 53

* Change ACCEPT to RETURN
4 years ago
Jack Ivanov 28d95eace2
Update main.yml (#1727) 4 years ago
Jack Ivanov 1e8a9c5cf1
Generate mobileconfigs for WireGuard (#1698)
* Generate mobileconfigs for WireGuard

* add xmllint to wireguard profiles

* Enable onDemand prompts for WireGuard

* linting
4 years ago
Dan Hughes 512b5660e1
Use user-defined hostname for SSH hostname (#1715)
* Use user-defined hostname for SSH hostname

* Update readme to use hostname in ssh commands
4 years ago
Dan Hughes 5c09d6dd02
Use absolute path for identityfile in ssh config (#1718)
* Use absolute path for identityfile in ssh config

* Update readme with ssh config include
4 years ago
Jack Ivanov dcfed41ae8 Apply netplan for digitalocean only (#1723) 4 years ago
Austin Dworaczyk Wiltshire 027b1b8497
Update dnscrypt-proxy cache settings for improved performance and privacy. (#1714)
These values match those recommended by the author of DNSCrypt-proxy

See:
https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Caching#dns-cache
https://00f.net/2019/11/03/stop-using-low-dns-ttls/
4 years ago
Jack Ivanov 3720c5eb1f
Update CHANGELOG.md 4 years ago
Jack Ivanov 2abbf22196
Alternative Ingress IP (#1605)
* Separate ingress IP draft

* task name fix

* placeholder
4 years ago
David Myers 78cc708435 Clarify SSH port changed for cloud only (#1706) 4 years ago
Jack Ivanov 0efa4eaf91 Ca certificate name constraints (#1675)
* X.509 Name Constraints

* nameConstraints to a random generated uuid

* Second level domain

* nameConstraints fixes

* critical in nameConstraints lost after last refactoring
4 years ago
Jack Ivanov 0e57da8237
Move to Ubuntu 19.10 (#1702)
* 19.04 is dead, long live 19.10

* Remove 19.04 from tests

* Update docs

* Set proper Azure name
4 years ago
David Myers 6ac2e2d1a4 Document using Google Cloud Shell (#1699) 4 years ago
David Myers df57e21194 DO documentation update (#1696) 4 years ago
David Myers 2d94bbd278 Documentation updates (#1694) 4 years ago
Jack Ivanov 62d00901e6
Update main.yml 5 years ago