Commit Graph

844 Commits (9187d8e63752a6bb4ba12f38907a2a96432842ed)
 

Author SHA1 Message Date
Brian Hulette e01e82b1c3 Don't download minisig dnscrypt release (#905) 6 years ago
adamluk 3d9fa7f8c8 Update dnscrypt-proxy.toml.j2 (#899)
Updated dnscrypt-proxy.tml with new options: cache_neg_min_ttl and cache_neg_max_ttl
6 years ago
Jack Ivanov cfc985c776 DNS-crypt changelog 6 years ago
Dan Guido c276f971b7
monkey patch problematic dnscrypt-proxy cgroup limits (#894) 6 years ago
Jack Ivanov c82bd8c5ff DNS-over-HTTPS (#875) 6 years ago
Steven Crossan 4bd59bebf4 Update DO doc link in README.md (#890) 6 years ago
Jack Ivanov ed6e2d998d Add ipv6 address to subjectAltName if supported (#881)
CHANGELOG

Some changes

Some changes
6 years ago
Matt Behrens f585a416df skip virtualenv check if already activated (#863)
This allows the user to choose their virtualenv method, e.g.
[Pipenv](https://docs.pipenv.org/).
6 years ago
Cat Jones e78df40468 adds DigitalOcean documentation (#869) 6 years ago
iliyan jeliazkov a8b4a47a88 Updating the language of the instructions (#880) 6 years ago
Anton T Johansson 7c087aeed9 Fixed path in Network Manager section (#860)
"configs" directory missing in paths.
6 years ago
Micah R Ledbetter a2e051ef00 Add a workaround for disabling DNS filtering to the FAQ (#852)
* Add a workaround for disabling DNS filtering to the FAQ

* Update faq.md
6 years ago
Micah R Ledbetter e944ee993a Embed certs into Windows deployment scripts (#840)
- Obviate need to copy separate script and certificate files
- Allow execution from any directory, not just the script's parent
  directory (no assumption of any particular working directory)
- Fix docs that neglected to mention copying cacert.pem
- Fix docs that incorrectly referred to the user cert store

As part of this work, rewrite the windows_client.ps1.j2 deployment
script template

- Add comment-based help
- Require admin privileges
- Use a Param() block
- Use parameter sets with -Add and -Remove switches
- Add the -GetInstalledCerts switch, to list any Algo certificates
  installed the machine's cert store
- Add the -SaveCerts switch, to save the embedded certificates to files
- Put Jinja2 variables inside Powershell variables,
- Use native Powershell cmdlets rather than shell out to certutil.exe
- Add a playbook to regenerate the windows_USER.ps1 scripts
6 years ago
Micah R Ledbetter a8784bc0f4 Add FAQ entry regarding IPSEC backdoor (#460) (#853) 6 years ago
Micah R Ledbetter 4b0aea8f5a Document iptables rules (#854)
* Remove firewall rule related to the old proxy role

* Remove proxy conditionals from mobileconfig template

* Add comments explaining firewall rules
6 years ago
Arun John Kuruvilla aea9c9a5e2 Removed ssh_public_key variable for AWS. Issue #773 (#817) 6 years ago
Utkan Gezer 32cbec6f5b Multi-line virtualenv setup script (#829)
Changed the single-line virtualenv setup script into multi-line one. Should be equivalent to what it was before, and now viewable/copy-able without scrolling.
6 years ago
Jack Ivanov ac8b092ca5 TravisCI tests 6 years ago
Jack Ivanov bb094a7b16 More debug for travis 6 years ago
Jack Ivanov c378eacc00 Warn about local installation 6 years ago
Jack Ivanov 51209a0994 More debug for travis-ci 6 years ago
Rob 1edb95df9c Update client-android.md (#842)
* Update client-android.md

Changed Installation via profiles sections - Opening the helper html file in Chrome (v65.0.3325.109 on Android 6.0.1) does not work correctly.

* Update client-android.md

* Update client-android.md
6 years ago
Jack Ivanov 78830d96aa Android: add the CA and set the ciphers explicitly (#837) 6 years ago
Jack Ivanov 4e4440a318 Exclude CA from P12 (#835) 6 years ago
Damian Gerow 62fc22ab59 Creates a Docker container to run algo (#331)
* Creates a Docker container to run algo

* Simplistic testing of the Docker image

This simply uses the same LXC system that was just tested.
It's functional, but minimal.

* More thorough tests against Docker

This doubles the number of LXC containers in use,
but does provide a more thorough test of the Docker
image.
6 years ago
Jack Ivanov 0fda81f12d
Update ISSUE_TEMPLATE.md 6 years ago
Jack Ivanov 72026d0ec8
Update ISSUE_TEMPLATE.md 6 years ago
Jack Ivanov 3b19f13082 Enable no-resolv (#816) 6 years ago
adamluk b30f6db079 Update rules.v6.j2 (#818)
Updated to use -m conntrack for consistency as per the other IPv6 rules.
6 years ago
Zac Connelly 3bb6c32abb update troubleshooting doc (#827)
* update troubleshooting doc

* remove breakline

* bump issue to the bottom
6 years ago
Jack Ivanov 13503575c5
Update ISSUE_TEMPLATE.md 6 years ago
Berry Phillips ea7da89257 Explicitly create the virtualenv with Python2 (#823) 6 years ago
Jack Ivanov 7e07c35474 proper cloudformation template (#815) 6 years ago
Jack Ivanov 02427910de Ansible 2.4, Lightsail, Scaleway, DreamCompute (OpenStack) integration (#804)
* Move to ansible-2.4.3

* Add Lightsail support #623

* Fixing the EC2 deployment

* Scaleway integration #623

* OpenStack cloud provider (DreamCompute optimised) #623

* Remove the security role

* Enable unattended-upgrades for clouds

* New requirements to make Azure and GCE work
6 years ago
Jack Ivanov 4da752b603 Ubuntu 17.10 support (#811) 6 years ago
Dan Ackerson d8f0393dd8 minimum DigitalOcean $5 type now 's-1vcpu-1gb' (#785)
https://www.digitalocean.com/pricing/
7 years ago
Micah R Ledbetter 5eed1bbba4 Use dns_servers in dnsmasq.conf (#794) 7 years ago
Achim Staebler 054dc0afcd Instructions for Ubuntu needed compiler install (#791)
build-essential and python-dev are required when compiling pycrypt. Added the necessary packages to the apt-get install line.
7 years ago
Douglas Gastonguay-Goddard 7eb4fc5f22 DigitalOcean - Add cleanup step for SSH key (#784)
* Add cleanup step for SSH key.

* Two space tabs are hard to see.
7 years ago
Jack Ivanov d9b1b22fac Place the module digital_ocean_tag with the fix (#782)
zesty is no longer available

disable ubuntu 17 at all
7 years ago
Jack Ivanov a844870b7a Sendmail should not be installed (#738) 7 years ago
Marcelo Elizeche Landó 07a1c70bf4 Update adblock.sh for systemd to fix issue #735 (#736)
* Update script to restart the dnsmasq service using systemctl(systemd) command instead of service(Upstart)

* Use  instead of legacy  REF: https://github.com/koalaman/shellcheck/wiki/SC2006

* Replace non-standard egrep(deprecated) for grep -E. REF: https://github.com/koalaman/shellcheck/wiki/SC2196
7 years ago
Brian Harrington bd4ea1235f GCE correct variable key (#734)
`server_name` should be `gce_server_name` for Google Compute Engine
7 years ago
Allan e01521bbf4 Update to deploy-to-ubuntu.md (#628)
* Update to deploy-to-ubuntu.md

A fresh install (Off CD / ISO) doesn't include python-pip or python virtualenv module.
The fixes above take care of the additional requirements, as well as updating pip.

* Update deploy-to-ubuntu.md

Fix Typo
7 years ago
Jurgen Verhasselt d08e525906 Docs to deploy from, and setup client on, Fedora Workstation (#711)
* docs/client-linux.md housekeeping

* add fedora-workstation instructions to client-linx.md

* add deploy-from-fedora-workstation doc

* change client-linux.md to internal link

* add deploy-from-fedora-workstation links

* correct markup

* correct typo
7 years ago
Jack Ivanov f18c1a0d67 Certificate revocation fix (#719) 7 years ago
Jack Ivanov b64f682bae remove the dead code. Fixes #671 7 years ago
Jurgen Verhasselt 185c0f51d7 correct configs_prefix vars in client tasks (#712) 7 years ago
Henrik Holmboe ea3766f02c Correct indentation for 'block' (#704) 7 years ago
Dan Guido 6572c2fb34 Closes #699 7 years ago