mirror of
https://github.com/trailofbits/algo.git
synced 2025-08-15 17:23:07 +02:00
Install dnscrypt-proxy from repositories
This commit is contained in:
parent
7d175d9780
commit
eb8fe4c292
2 changed files with 7 additions and 86 deletions
|
@ -1,38 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
# PROVIDE: dnscrypt-proxy
|
|
||||||
# REQUIRE: LOGIN
|
|
||||||
# BEFORE: securelevel
|
|
||||||
# KEYWORD: shutdown
|
|
||||||
|
|
||||||
# Add the following lines to /etc/rc.conf to enable `dnscrypt-proxy':
|
|
||||||
#
|
|
||||||
# dnscrypt_proxy_enable="YES"
|
|
||||||
# dnscrypt_proxy_flags="<set as needed>"
|
|
||||||
#
|
|
||||||
# See rsync(1) for rsyncd_flags
|
|
||||||
#
|
|
||||||
|
|
||||||
. /etc/rc.subr
|
|
||||||
|
|
||||||
name="dnscrypt-proxy"
|
|
||||||
rcvar=dnscrypt_proxy_enable
|
|
||||||
load_rc_config "$name"
|
|
||||||
pidfile="/var/run/$name.pid"
|
|
||||||
start_cmd=dnscrypt_proxy_start
|
|
||||||
stop_postcmd=dnscrypt_proxy_stop
|
|
||||||
|
|
||||||
: ${dnscrypt_proxy_enable="NO"}
|
|
||||||
: ${dnscrypt_proxy_flags="-config /usr/local/etc/dnscrypt-proxy/dnscrypt-proxy.toml"}
|
|
||||||
|
|
||||||
dnscrypt_proxy_start() {
|
|
||||||
echo "Starting dnscrypt-proxy..."
|
|
||||||
touch ${pidfile}
|
|
||||||
/usr/sbin/daemon -cS -T dnscrypt-proxy -p ${pidfile} /usr/dnscrypt-proxy/freebsd-amd64/dnscrypt-proxy ${dnscrypt_proxy_flags}
|
|
||||||
}
|
|
||||||
|
|
||||||
dnscrypt_proxy_stop() {
|
|
||||||
[ -f ${pidfile} ] && rm ${pidfile}
|
|
||||||
}
|
|
||||||
|
|
||||||
run_rc_command "$1"
|
|
|
@ -1,51 +1,10 @@
|
||||||
---
|
---
|
||||||
- name: FreeBSD | Ensure that the required directories exist
|
- name: Install dnscrypt-proxy
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
state: directory
|
|
||||||
with_items:
|
|
||||||
- "{{ config_prefix|default('/') }}etc/dnscrypt-proxy/"
|
|
||||||
- /usr/dnscrypt-proxy/
|
|
||||||
|
|
||||||
- name: Required tools installed
|
|
||||||
package:
|
package:
|
||||||
name: gtar
|
name: dnscrypt-proxy2
|
||||||
|
|
||||||
- name: FreeBSD | Retrive the latest versions
|
- name: Enable mac_portacl
|
||||||
uri:
|
lineinfile:
|
||||||
url: https://api.github.com/repos/jedisct1/dnscrypt-proxy/releases/latest
|
path: /etc/rc.conf
|
||||||
register: dnscrypt_proxy_latest
|
line: 'dnscrypt_proxy_mac_portacl_enable="YES"'
|
||||||
ignore_errors: true
|
when: listen_port|int == 53
|
||||||
|
|
||||||
- name: FreeBSD | Set default dnscrypt-proxy assets
|
|
||||||
set_fact:
|
|
||||||
dnscrypt_proxy_latest:
|
|
||||||
json:
|
|
||||||
assets:
|
|
||||||
- name: "dnscrypt-proxy-freebsd_amd64-{{ dnscrypt_proxy_version }}.tar.gz"
|
|
||||||
browser_download_url: "https://github.com/jedisct1/dnscrypt-proxy/releases/download/{{ dnscrypt_proxy_version }}/dnscrypt-proxy-freebsd_amd64-{{ dnscrypt_proxy_version }}.tar.gz"
|
|
||||||
when: dnscrypt_proxy_latest.failed
|
|
||||||
|
|
||||||
- name: FreeBSD | Download the latest archive
|
|
||||||
get_url:
|
|
||||||
url: "{{ item['browser_download_url'] }}"
|
|
||||||
dest: "/tmp/dnscrypt-proxy-freebsd_amd64-{{ dnscrypt_proxy_version }}.tar.gz"
|
|
||||||
mode: '0755'
|
|
||||||
force: true
|
|
||||||
with_items: "{{ dnscrypt_proxy_latest['json']['assets'] }}"
|
|
||||||
no_log: true
|
|
||||||
when: '"freebsd_amd64" in item.name and not item.name.endswith("minisig")'
|
|
||||||
notify: restart dnscrypt-proxy
|
|
||||||
|
|
||||||
- name: FreeBSD | Extract the latest archive
|
|
||||||
unarchive:
|
|
||||||
remote_src: true
|
|
||||||
src: /tmp/dnscrypt-proxy-freebsd_amd64-{{ dnscrypt_proxy_version }}.tar.gz
|
|
||||||
dest: /usr/dnscrypt-proxy
|
|
||||||
|
|
||||||
- name: FreeBSD | Configure rc script
|
|
||||||
copy:
|
|
||||||
src: rc.dnscrypt-proxy.sh
|
|
||||||
dest: /usr/local/etc/rc.d/dnscrypt-proxy
|
|
||||||
mode: "0755"
|
|
||||||
notify: restart dnscrypt-proxy
|
|
||||||
|
|
Loading…
Add table
Reference in a new issue