You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
algo/roles
Tim H b4740185e8 Add catch-all VPN On Demand Rule (#739)
If a user is not connected to a trusted Wi-Fi network or if the
URLStringProbe fails none of the existing dictionaries match.

According to the Apple Configuration Profile Reference[1] section "VPN
Payload > On Demand Rules Dictionary Keys" a default behavior for
unknown networks with no matching criteria should always be set as the
last dictionary in the array. The current default behavior is to allow a
connection to occur, but this behavior is not guaranteed.

Tear down the VPN connection and do not reconnect on demand as long as
the catch-all dictionary matches to guarantee the default behavior and
more specifically allow users to access captive portals.

[1]: https://developer.apple.com/library/content/featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html
6 years ago
..
client Large refactor to support Ansible 2.5 (#976) 6 years ago
cloud-azure Get started with Azure more easily (#1323) 6 years ago
cloud-digitalocean on-build python venvs (#1199) 6 years ago
cloud-ec2 on-build python venvs (#1199) 6 years ago
cloud-gce on-build python venvs (#1199) 6 years ago
cloud-lightsail on-build python venvs (#1199) 6 years ago
cloud-openstack on-build python venvs (#1199) 6 years ago
cloud-scaleway Set disk size depending on server plan (#1159) 6 years ago
cloud-vultr/tasks Fixes #1246 6 years ago
common fix OS is undefined error (#1335) 6 years ago
dns_adblocking Increase memory limit for dnsmasq (#1228) 6 years ago
dns_encryption add flags=(attach_disconnected) to dnscrypt-proxy apparmor profile (#1312) 6 years ago
local/tasks Support for custom domain names in the endpoint (#1337) 6 years ago
ssh_tunneling ssh tunneling fixes (#1127) 6 years ago
vpn Add catch-all VPN On Demand Rule (#739) 6 years ago
wireguard Disable wireguard PersistentKeepalive by default (#1338) 6 years ago