wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-06-07 15:43:54 +02:00
Code Issues Projects Releases Wiki Activity

extra vars added to use local DNS #110

Browse source
This commit is contained in:
Jack Ivanov 2016-10-26 18:56:23 +03:00
parent fc4f446b3f
commit 76ea7f67ae
3 changed files with 2 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
algo
View file

@ -19,7 +19,7 @@ read -p "
Do you want to install a local DNS resolver to block ads while surfing? Do you want to install a local DNS resolver to block ads while surfing?
[y/N]: " -r dns_enabled [y/N]: " -r dns_enabled
dns_enabled=${dns_enabled:-n} dns_enabled=${dns_enabled:-n}
if [[ "$dns_enabled" =~ ^(y|Y)$ ]]; then ROLES+=" dns"; fi if [[ "$dns_enabled" =~ ^(y|Y)$ ]]; then ROLES+=" dns"; EXTRA_VARS+=" local_dns=Y"; fi
read -p " read -p "
Do you want to use auditd for security monitoring (see config.cfg)? Do you want to use auditd for security monitoring (see config.cfg)?

4
config.cfg
View file

@ -27,10 +27,6 @@ vpn_network_ipv6: 'fd9d:bc11:4020::/48'
server_name: "{{ ansible_ssh_host }}" server_name: "{{ ansible_ssh_host }}"
IP_subject_alt_name: "{{ ansible_ssh_host }}" IP_subject_alt_name: "{{ ansible_ssh_host }}"
# Enable this variable if you want to use a local DNS resolver to block ads while surfing. (True or False)
service_dns: True
# If you don't want to use a local DNS resolver (option `service_dns`) you need to define DNS servers in this list.
dns_servers: dns_servers:
- 8.8.8.8 - 8.8.8.8
- 8.8.4.4 - 8.8.4.4

2
roles/vpn/templates/ipsec.conf.j2
View file

@ -17,7 +17,7 @@ conn %default
right=%any right=%any
rightauth=pubkey rightauth=pubkey
rightsourceip={{ vpn_network }},{{ vpn_network_ipv6 }} rightsourceip={{ vpn_network }},{{ vpn_network_ipv6 }}
{% if service_dns is defined and service_dns == "Y" %} {% if local_dns is defined and local_dns == "Y" %}
rightdns={{ local_service_ip }} rightdns={{ local_service_ip }}
{% else %} {% else %}
rightdns={% for host in dns_servers %}{{ host }}{% if not loop.last %},{% endif %}{% endfor %} rightdns={% for host in dns_servers %}{{ host }}{% if not loop.last %},{% endif %}{% endfor %}