Commit Graph

36 Commits (ec56203b8797d4af54c2ac2ed4ce5a7fa8c23415)

Author SHA1 Message Date
David Myers 66681521c1 Increase memory limit for dnsmasq (#1228)
* Increase memory limit for dnsmasq

* Increase memory limit for dnsmasq further
6 years ago
David Myers 8d23f715d7 Run adblock.sh at a random time (#1227) 6 years ago
Jack Ivanov e8947f318b Large refactor to support Ansible 2.5 (#976)
* Refactoring, booleans declaration and update users fix

* Make server_name more FQDN compatible

* Rename variables

* Define the default value for store_cakey

* Skip a prompt about the SSH user if deploying to localhost

* Disable reboot for non-cloud deployments

* Enable EC2 volume encryption by default

* Add default server value (localhost) for the local installation

Delete empty files

* Add default region to aws_region_facts

* Update docs

* EC2 credentials fix

* Warnings fix

* Update deploy-from-ansible.md

* Fix a typo

* Remove lightsail from the docs

* Disable EC2 encryption by default

* rename droplet to server

* Disable dependencies

* Disable tls_cipher_suite

* Convert wifi-exclude to a string. Update-users fix

* SSH access congrats fix

* 16.04 > 18.04

* Dont ask for the credentials if specified in the environment vars

* GCE server name fix
6 years ago
David Myers b86ebe20d7 Prevent DNS rebinding (#1049) 6 years ago
Fabian Foerg 3ddd0ac30f Run dnsmasq as the dnsmasq user (#1029)
* Run dnsmasq as the dnsmasq user

There is a task that checks whether the dnsmasq user exists.
However, dnsmasq is configured to run as user "nobody" instead.
This change lets dnsmasq run as user "dnsmasq".

* remove dnsmasq user task
6 years ago
Jack Ivanov c82bd8c5ff DNS-over-HTTPS (#875) 7 years ago
Jack Ivanov 3b19f13082 Enable no-resolv (#816) 7 years ago
Jack Ivanov 02427910de Ansible 2.4, Lightsail, Scaleway, DreamCompute (OpenStack) integration (#804)
* Move to ansible-2.4.3

* Add Lightsail support #623

* Fixing the EC2 deployment

* Scaleway integration #623

* OpenStack cloud provider (DreamCompute optimised) #623

* Remove the security role

* Enable unattended-upgrades for clouds

* New requirements to make Azure and GCE work
7 years ago
Micah R Ledbetter 5eed1bbba4 Use dns_servers in dnsmasq.conf (#794) 7 years ago
Marcelo Elizeche Landó 07a1c70bf4 Update adblock.sh for systemd to fix issue #735 (#736)
* Update script to restart the dnsmasq service using systemctl(systemd) command instead of service(Upstart)

* Use  instead of legacy  REF: https://github.com/koalaman/shellcheck/wiki/SC2006

* Replace non-standard egrep(deprecated) for grep -E. REF: https://github.com/koalaman/shellcheck/wiki/SC2196
7 years ago
Jack Ivanov 8da53f859b Some browsers (eg. Safari) stop loading pages if the element with ads can't be loaded (#633) 7 years ago
Jack Ivanov a8ebb16437 Enable timeouts. Fixes #581 7 years ago
Rod Vagg 75d64ac018 Make DNS blocklist URLs configurable (#548) 7 years ago
Ruben Jongejan 07ddb5863b improved readability with native yaml (#530) 7 years ago
Jack Ivanov 97369c303a define local_dns if dns tag used (#533) 7 years ago
Jack Ivanov bd348af9c2 Implementing blocks and additional fail hints #487 (#497)
change the troubleshooting url
8 years ago
Jack Ivanov c3fcfe5d0d Let users choose the distro version #449 (#466)
Make dpdaction great again

add 1704 to travis

Make EC2 image name more convenient

modify apparmor profile
8 years ago
Jack Ivanov a7b06058cb remove the proxy role #440 (#457)
* remove the proxy role #440

* Separate facts. Make roles more independent from each other

move openssl to local tasks

move unneeded tasks
8 years ago
Josh Soref 84bbcb88d0 Spelling fixes (#342)
* spelling: algorithm

* spelling: bertrand

* spelling: between

* spelling: checking

* spelling: conjunction

* spelling: contributor

* spelling: delimited

* spelling: fashion

* spelling: droplet

* spelling: javascript

* spelling: nameserver

* spelling: obligatory

* spelling: official

* spelling: overridden

* spelling: overwrite

* spelling: parameter

* spelling: suppressing
8 years ago
Jack Ivanov 6facb6cb4f FreeBSD / HardenedBSD (#262)
* FreeBSD draft

ifconfig fix

Pre-tasks fixes

fix hardcoded IP

some refactoring

disable system-based tags

disable freebsd tags

FreeBSD vpn role

add defaults

ssh role freebsd

default fix

dns_adblocking freebsd

ubuntu dict fix

* HardenedBSD

update-users BSD

* Rebuild the kernel

docs changing
8 years ago
Jack Ivanov 2798f84d3f ensure that apparmor is supported by the kernel #215 8 years ago
Jack Ivanov cbf59addb3 additional tags 8 years ago
Jack Ivanov 2cca45c967 additional tags 8 years ago
Jack Ivanov 91688324ce additional functions 8 years ago
Dan Guido 27421070b9 linting 8 years ago
Jack Ivanov 19797bc020 CPU and memory limitations of the services #63 8 years ago
Defunct 50f43dc601 revert systemd changes (2.2 only), identation normalization; 8 years ago
Evgeniy Ivanov ba50abce8a make local ip changeable #67 8 years ago
Colin Mahns 1fbe1b63f8 HTTPS for domains that support it
hosts-file.net and malwaredomainlist.com has optional TLS, adaway.org forces it server side
8 years ago
Colin Mahns 6c81b86c92 Link to MVPS Hosts file directly
http://www.mvps.org/winhelp2002/hosts.txt redirects to http://winhelp2002.mvps.org/hosts.txt automatically, saves a step
8 years ago
Evgeniy Ivanov 53f60e33d8 random tmp names #64 8 years ago
Evgeniy Ivanov 3864f8104d adblock.sh as an unprivileged user; Store the whitelists in /var/; #64 8 years ago
Evgeniy Ivanov 4b2ae71ffe Tighten the dnsmasq AppArmor policy #62 8 years ago
Evgeniy Ivanov 3fa75a081d new iptabes deployment #61 8 years ago
Evgeniy Ivanov cfc38e3df1 Drop SMB traffic ##61 8 years ago
Evgeniy Ivanov 4f46cc221a Split the features role in two #49 8 years ago