wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-09-03 18:43:09 +02:00
Code Issues Projects Releases Wiki Activity

Enable algo to configure a local server without having to use an ssh connection and update documentations with minimal installation requirements.

Browse source
This commit is contained in:
Jay 2016-08-15 01:10:08 -04:00
parent 470f60a46f
commit 22c06b2c53
2 changed files with 29 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
README.md
View file

@ -62,6 +62,15 @@ Start the deploy and follow the instructions:
When the process is done, you can find `.mobileconfig` files and certificates in the `configs` directory. Send the `.mobileconfig` profile to users with Apple devices. Note that profile installation is supported over AirDrop. Do not send the mobileconfig file over plaintext (e.g., e-mail) since it contains the keys to access the VPN. For those using other clients, like Windows or Android, securely send them the X.509 certificates for the server and their user. When the process is done, you can find `.mobileconfig` files and certificates in the `configs` directory. Send the `.mobileconfig` profile to users with Apple devices. Note that profile installation is supported over AirDrop. Do not send the mobileconfig file over plaintext (e.g., e-mail) since it contains the keys to access the VPN. For those using other clients, like Windows or Android, securely send them the X.509 certificates for the server and their user.
### Initial Deployment on Local Servers
When installing algo on an existing system such as Ubuntu 16.04, you only need to install ansible using the commands below:
```
sudo apt-get install software-properties-common && sudo apt-add-repository ppa:ansible/ansible
sudo apt-get update && sudo apt-get install ansible
```
### User Management ### User Management
If you want to add or delete users, update the `users` list in `config.cfg` and run the command: If you want to add or delete users, update the `users` list in `config.cfg` and run the command:

23
algo
View file

@ -1,4 +1,4 @@
#!/bin/sh #!/bin/bash
p12_export_password () { p12_export_password () {
echo -n " echo -n "
@ -31,12 +31,29 @@ Enter the number of your desired provider
p12_export_password p12_export_password
ansible-playbook "${CLOUD}.yml" -e easyrsa_p12_export_password=${P} # Use a local connection for non-cloud installations
case "${CLOUD}" in
"non-cloud") ansible-playbook "${CLOUD}.yml" -e easyrsa_p12_export_password=${P} --connection=local ;;
*) ansible-playbook "${CLOUD}.yml" -e easyrsa_p12_export_password=${P} ;;
esac
} }
user_management () { user_management () {
p12_export_password p12_export_password
ansible-playbook users.yml -e easyrsa_p12_export_password=${P} # Use a local connection for non-cloud installations
echo -n "
What provider would you like to use?
1. Remote Server
2. Local Server
: "
read N
case "$N" in
2) ansible-playbook users.yml -e easyrsa_p12_export_password=${P} --connection=local ;;
*) ansible-playbook users.yml -e easyrsa_p12_export_password=${P} ;;
esac
} }
case "$1" in case "$1" in