8894dd0848
Discontinue use of the WireGuard PPA ( #1855 )
...
* Discontinue use of the WireGuard PPA
* Add instructions to update the system
* Change reboot instruction
4 years ago
c14ff0d611
Ubuntu 20.04 support ( #1782 )
...
* ubuntu 20.04 support
* purge snapd for 20.04
* strongswan-starter fix
4 years ago
eeda23be97
Initial support for Ubuntu 20.04 ( #1770 )
4 years ago
e29615bc05
Modified script to handle more types of blocklists ( #1771 )
...
Added/modified script to better handle multiple types of blocklists available to drop in to the BLOCKLIST_URLS.
4 years ago
02fe2f7dd5
use ca_password from variable(--extra-vars) - non-interactive installation using ansible playbook ( #1774 )
...
* use ca_password from variable
* add tests to cover the changes
* update tests - PR #1774
4 years ago
27de76048c
ipv6 nat fix ( #1775 )
4 years ago
4f1b9270be
relax CA constraints for client (the client equivalent of PR #1675 ) ( #1768 )
...
* relax CA constraints for client (the client equivalent of PR #1675 )
* fixing incorrectly hard-coded output file path
5 years ago
3f3138f555
Fix IPsec DNS when WireGuard uses port 53 ( #1719 )
...
* Fix IPsec DNS when WireGuard uses port 53
* Change ACCEPT to RETURN
5 years ago
28d95eace2
Update main.yml ( #1727 )
5 years ago
1e8a9c5cf1
Generate mobileconfigs for WireGuard ( #1698 )
...
* Generate mobileconfigs for WireGuard
* add xmllint to wireguard profiles
* Enable onDemand prompts for WireGuard
* linting
5 years ago
dcfed41ae8
Apply netplan for digitalocean only ( #1723 )
5 years ago
027b1b8497
Update dnscrypt-proxy cache settings for improved performance and privacy. ( #1714 )
...
These values match those recommended by the author of DNSCrypt-proxy
See:
https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Caching#dns-cache
https://00f.net/2019/11/03/stop-using-low-dns-ttls/
5 years ago
2abbf22196
Alternative Ingress IP ( #1605 )
...
* Separate ingress IP draft
* task name fix
* placeholder
5 years ago
0efa4eaf91
Ca certificate name constraints ( #1675 )
...
* X.509 Name Constraints
* nameConstraints to a random generated uuid
* Second level domain
* nameConstraints fixes
* critical in nameConstraints lost after last refactoring
5 years ago
eb40ade096
scaleway region fix ( #1678 )
5 years ago
d635c76b50
Change default SSH port and introduce cloud-init support ( #1636 )
...
* Change default SSH port
* Iptables to ansible_ssh_port
* Add Scaleway
* permissions and groups fixes
* update firewall docs
* SSH fixes
* add missing cloudinit to cloud-azure
* remove ansible_ssh_user from the tests
* congrats message fix
5 years ago
43aafdfce1
fixed code to work with python3.7 ( #1608 )
...
* fixed code to work with python3.7
* removed trailing whitespaces and re-run ansible-linter
5 years ago
5737317dae
Allow WireGuard to listen on port 53 ( #1594 )
...
* Allow WireGuard to listen on port 53
* Use a variable for the port to avoid
* Add comment to config.cfg
5 years ago
8bdd99c05d
Refactor to support Ansible 2.8 ( #1549 )
...
* bump ansible to 2.8.3
* DigitalOcean: move to the latest modules
* Add Hetzner Cloud
* Scaleway and Lightsail fixes
* lint missing roles
* Update roles/cloud-hetzner/tasks/main.yml
Add api_token
Co-Authored-By: phaer <phaer@phaer.org>
* Update roles/cloud-hetzner/tasks/main.yml
Add api_token
Co-Authored-By: phaer <phaer@phaer.org>
* Try to run apt until succeeded
* Scaleway modules upgrade
* GCP: Refactoring, remove deprecated modules
* Doc updates (#1552 )
* Update README.md
Adding links and mentions of Exoscale aka CloudStack and Hetzner Cloud.
* Update index.md
Add the Hetzner Cloud to the docs index
* Remove link to Win 10 IPsec instructions
* Delete client-windows.md
Unnecessary since the deprecation of IPsec for Win10.
* Update deploy-from-ansible.md
Added sections and required variables for CloudStack and Hetzner Cloud.
* Update deploy-from-ansible.md
Added sections for CloudStack and Hetzner, added req variables and examples, mentioned environment variables, and added links to the provider role section.
* Update deploy-from-ansible.md
Cosmetic changes to links, fix typo.
* Update GCE variables
* Update deploy-from-script-or-cloud-init-to-localhost.md
Fix a finer point, and make variables list more readable.
* update azure requirements
* Python3 draft
* set LANG=c to the p12 password generation task
* Update README
* Install cloud requirements to the existing venv
* FreeBSD fix
* env->.env fixes
* lightsail_region_facts fix
* yaml syntax fix
* Update README for Python 3 (#1564 )
* Update README for Python 3
* Remove tabs and tweak instructions
* Remove cosmetic command indentation
* Update README.md
* Update README for Python 3 (#1565 )
* DO fix for "found unpermitted parameters: id"
* Verify Python version
* Remove ubuntu 16.04 from readme
* Revert back DigitalOcean module
* Update deploy-from-script-or-cloud-init-to-localhost.md
* env to .env
5 years ago
61729ac9b5
Update client.conf.j2 ( #1580 )
5 years ago
1ca8ee5554
Generates a password by native module ( #1576 )
...
* use password module to generate password
* fix variable reference
* reduce character set to meet origin design
* CA and p12 password chanes
- Move the CA_password generation task to the native lookup plugin
- Get rid of unneeded tasks
5 years ago
c6f45ead69
Allow OnDemand to be toggled later ( #1557 )
5 years ago
95eddccfb7
EC2: Enable EBS single step encryption by default ( #1556 )
...
* EC2: EBS single step encryption by default
* return back the encryption variable
5 years ago
fe7755e6a0
Allow to unblock smb and netbios in config.cfg ( #1558 )
5 years ago
3dc08c94cf
New cloud provider CloudStack ( #1420 )
...
* clean commits from branch cloud-cloudstack w/ proper committer email/name
* fixed ansible-lint errors
* corrected typo in prompted message
* standalone cloudstack zones module
* added missing environment variables
* remove `_cloudstack_zones` default variable
* Move to Ubuntu 19.04
* Update cloud-cloudstack.md
* Update cloud-cloudstack.md
Markdown doesn't render `<your account>`
* Update prompts.yml
* Update main.yml
5 years ago
211d1b2cab
Google Cloud: remove sshguard ( #1548 )
...
* Google Cloud: remove sshguard
* Remove whitespace
5 years ago
38d8a6d0e2
Deprecate IKEv2 for Windows ( #1521 )
...
* Windows to WireGuard
* Add note about WireGuard
* change wireguard faq
* Clarify Windows instructions
* Correct Wireguard description
* Update README.md
5 years ago
545ad480a4
Add tags to EC2 encrypted images ( #1530 )
5 years ago
090a60d48d
PKI to tmpfs ( #1496 )
...
* PKI to tmpfs
* Fixes
- diskutil to full path
- unmount and eject fixes
* Umount fix
* run diskutil info only on Darwin kernels
* fix shell tasks
5 years ago
f986811d64
remove pycrypto from the gce role ( #1489 )
...
pycrypto is dead
5 years ago
0e6554943f
Add default IPv6 routes to the windows powershell script ( #1501 )
5 years ago
14ee323eca
Fix outdated task name in DNS role ( #1499 )
5 years ago
8462f0fb6c
Unattended upgrade fixes ( #1485 )
...
* Keep custom dnscrypt-proxy conffile when upgrading
* Unattended upgrade tuning
- Upgrade the 50unattended-upgrades file with latest options
- Keep the common unattended upgrade options in one file
- Enable removing of unused kernels and dependencies to save some space
5 years ago
6f58093a06
Update azure regions
...
Closes #1492
5 years ago
8602a697cc
dnscrypt-proxy as a dns adblocker ( #1480 )
...
* Move DNS adblocking to dnscrypt-proxy
* Update docs
* remove unneeded variable dnscrypt_proxy_version
* Update to the latest dnscrypt-proxy version
* install.sh fix
* spelling
5 years ago
fa5b86961c
Adding ipv6 localhost to the listen addresses ( #1476 )
5 years ago
146cbc71ce
Adding preshared key support ( #1465 )
...
* adding preshared key generation
* adding preshared folder
* Update client.conf.j2
adding preshared key options
* adding preshared keys to server template
* making sure private preshared is right
* making sure preshared keygen working for main.yml
* changing private to preshared for name
* changing to preshared dir instead of public
5 years ago
498cf46391
Block link-local networks. Block traffic from SSH tunnels to VPN clients ( #1458 )
5 years ago
a2fdc509e1
Support for Ubuntu 19.04 ( #1405 )
...
* Ubuntu 19.04
* Azure to 19.04
5 years ago
c27aed708a
EC2 eip facts authentication fix ( #1454 )
...
* EC2 eip facts authentication fix
* add region to ec2_eip_facts
5 years ago
e3a6170ae6
AWS support for existing EIP (revised) ( #1292 )
...
* Support for associating to existing AWS Elastic IP
Signed-off-by: Elliot Murphy <statik@users.noreply.github.com>
* Backport ec2_eip_facts module for EIP support
This means that EIP support no longer requires Ansible 2.6
The local fact module has been named ec2_elasticip_facts
to avoid conflict with the ec2_eip_facts module whenever
the Ansible 2.6 upgrade takes place.
Signed-off-by: Elliot Murphy <statik@users.noreply.github.com>
* Update from review feedback.
Signed-off-by: Elliot Murphy <statik@users.noreply.github.com>
* Move to the native module. Add additional condition for existing Elastic IP
5 years ago
72c8e9e244
Add IPv6 support to DNS ( #1425 )
...
* Add ipv6
* Add ipv6
* add ipv6
* add ipv6
* Switching out ipv6 address with local_service_ipv6 variable from #1429
* Fixing variable error
5 years ago
368ebc8625
fix: Use wait_for_connection to avoid failure ( #1381 )
...
With preexisting wait_for implementation, deployment to Ubuntu on Lightsail failed with a connection reset error on this task. It appears that Ansible’s wait_for_connection is the recommended way. I have successfully gotten past this task after this change, however I’d appreciate more eyes on this.
5 years ago
5904546a48
Randomly generated IP address for the local dns resolver ( #1429 )
...
* generate service IPs dynamically
* update cloud-init tests
* exclude ipsec and wireguard ranges from the random service ip
* Update docs
* @davidemyers: update wireguard docs for linux
* Move to netaddr filter
* AllowedIPs fix
* WireGuard IPs fix
5 years ago
826a2c5036
Add documentation about Scaleway credentials ( #1419 )
5 years ago
6b33d09d9f
Scaleway modules ( #1410 )
...
* Scaleway modules
* Update docs
5 years ago
d6a1fb91bd
WIP: Facts definition fix ( #1415 )
...
Facts definition fix
5 years ago
faa4b9a8da
Automatically create cloud firewall rules for installs onto Vultr ( #1400 )
...
* Update main.yml
* Change module names and add IPv6 firewall rules
Uses guide at https://www.renemoser.net/blog/2018/03/19/vultr-firewalling-with-ansible/ written by Rene Moser.
* change vultr to vr
* add ip_version to firewall rules
* add SSH access rules
* Use variable for wireguard port
* update module names for ansible 2.7
* Fix trailing whitespaces
* Try to fix trailing whitespaces again
6 years ago
25513cf925
Refactoring, Linting and additional tests ( #1397 )
...
* Refactoring, Linting and additional tests
* Vultr: Undefined variable and deprecation notes fix
* Travis-CI enable linters
* Azure: Update python requirements
* Update main.yml
* Update install.sh
* Add missing roles to ansible-lint
* Linting for skipped roles
* add .ansible-lint config
6 years ago
1e35753aa2
Update openssl.yml ( #1403 )
6 years ago
David Myers
Jack Ivanov
Wade Winright
Saravanan Palanisamy
aleks
Austin Dworaczyk Wiltshire
Julien Bachmann
Squirrel
Daniel Néri
TC1977
rodeodomino
elreydetoda
Elliot Murphy
shapiro125
Anton Strogonoff
Rémy Léone