Commit graph

1152 commits

Author SHA1 Message Date
Jack Ivanov
8602a697cc
dnscrypt-proxy as a dns adblocker (#1480)
* Move DNS adblocking to dnscrypt-proxy

* Update docs

* remove unneeded variable dnscrypt_proxy_version

* Update to the latest dnscrypt-proxy version

* install.sh fix

* spelling
2019-06-19 17:31:43 +02:00
rodeodomino
fa5b86961c Adding ipv6 localhost to the listen addresses (#1476) 2019-06-10 18:13:01 +02:00
im-batman
53755d57e3 Update config.cfg default Azure instance (#1474) 2019-06-06 18:06:20 +02:00
Bill Nottingham
4064bc281a Update the Fedora related docs. (#1470)
* Update the Fedora related docs.

- update for new generated config file locations
- remove reference to no-longer-needed copr
- update package names for further py2 changes in Fedora

* switch back to the default ciphers
2019-06-06 17:58:31 +02:00
TC1977
baa6efc666 Clarify: CA key must be saved to be able to update users (#1460)
* Update README.md

* certificate -> key
2019-06-06 09:45:42 +02:00
Dan Guido
09d70f9934
Create FUNDING.yml 2019-06-05 22:27:00 -04:00
Jack Ivanov
89e2dbde64
Update CHANGELOG.md 2019-06-05 08:33:09 +02:00
elreydetoda
146cbc71ce Adding preshared key support (#1465)
* adding preshared key generation

* adding preshared folder

* Update client.conf.j2

adding preshared key options

* adding preshared keys to server template

* making sure private preshared is right

* making sure preshared keygen working for main.yml

* changing private to preshared for name

* changing to preshared dir instead of public
2019-06-05 08:31:16 +02:00
TC1977
ac6b543134 Update deploy-to-unsupported-cloud.md (#1467)
Future-proofs the "unsupported cloud providers" list.
2019-06-04 18:03:10 +02:00
TC1977
6b2defe470 Update deploy-from-ansible.md (#1464)
Merged redundant and contradictory "Local install" instructions.
2019-06-03 20:08:53 +02:00
Jack Ivanov
fb00d66747
Update Dockerfile (#1466) 2019-06-03 20:08:06 +02:00
Jack Ivanov
498cf46391 Block link-local networks. Block traffic from SSH tunnels to VPN clients (#1458) 2019-06-02 19:01:08 -04:00
Jack Ivanov
2d04f65284
Update CHANGELOG.md 2019-05-30 21:43:12 +02:00
Jack Ivanov
d03eaed7a6
Update CHANGELOG.md 2019-05-30 21:41:31 +02:00
Jack Ivanov
a2fdc509e1
Support for Ubuntu 19.04 (#1405)
* Ubuntu 19.04

* Azure to 19.04
2019-05-30 20:57:47 +02:00
TC1977
71c9c16ffe Update EC2 instructions (#1457)
* Update cloud-amazon-ec2.md

* Add files via upload
2019-05-30 16:14:45 +02:00
Jack Ivanov
c27aed708a
EC2 eip facts authentication fix (#1454)
* EC2 eip facts authentication fix

* add region to ec2_eip_facts
2019-05-30 16:13:48 +02:00
David Myers
98f89adeba Add reference to Fedora docs in README (#1456) 2019-05-30 14:07:22 +02:00
Jack Ivanov
634c609626
Don't set CA facts if IPsec is disabled (#1446)
* Don't set CA facts if ipsec is disabled

* localhost update-users fix
2019-05-30 07:20:45 +02:00
TC1977
ecb4e555b4 Update users: add server pick-list (#1441)
* Pick server to update from menu

* Command instead of shell

* Move to find module

Switched to the find module, and made the whole block dependent on server being undefined.

* Change names

* users.yml update
- Add assert to check if any servers found
- Set server_list as a proper list

* Change 'Build string' to 'Build list'
2019-05-21 17:17:58 +02:00
Jack Ivanov
a87b4c8a87
Update config.cfg 2019-05-20 14:45:03 +02:00
Elliot Murphy
e3a6170ae6 AWS support for existing EIP (revised) (#1292)
* Support for associating to existing AWS Elastic IP

Signed-off-by: Elliot Murphy <statik@users.noreply.github.com>

* Backport ec2_eip_facts module for EIP support

This means that EIP support no longer requires Ansible 2.6
The local fact module has been named ec2_elasticip_facts
to avoid conflict with the ec2_eip_facts module whenever
the Ansible 2.6 upgrade takes place.

Signed-off-by: Elliot Murphy <statik@users.noreply.github.com>

* Update from review feedback.

Signed-off-by: Elliot Murphy <statik@users.noreply.github.com>

* Move to the native module. Add additional condition for existing Elastic IP
2019-05-20 14:40:51 +02:00
shapiro125
72c8e9e244 Add IPv6 support to DNS (#1425)
* Add ipv6

* Add ipv6

* add ipv6

* add ipv6

* Switching out ipv6 address with local_service_ipv6 variable from #1429

* Fixing variable error
2019-05-20 13:17:39 +02:00
TC1977
a15d9657ce Update troubleshooting.md (#1440)
* Update troubleshooting.md

* Fix silly typo

* Add Android T-mobile fix

* Fix another silly typo

* Update troubleshooting.md
2019-05-20 11:44:56 +02:00
Anton Strogonoff
368ebc8625 fix: Use wait_for_connection to avoid failure (#1381)
With preexisting wait_for implementation, deployment to Ubuntu on Lightsail failed with a connection reset error on this task. It appears that Ansible’s wait_for_connection is the recommended way. I have successfully gotten past this task after this change, however I’d appreciate more eyes on this.
2019-05-17 16:04:13 +02:00
Jack Ivanov
5904546a48
Randomly generated IP address for the local dns resolver (#1429)
* generate service IPs dynamically

* update cloud-init tests

* exclude ipsec and wireguard ranges from the random service ip

* Update docs

* @davidemyers: update wireguard docs for linux

* Move to netaddr filter

* AllowedIPs fix

* WireGuard IPs fix
2019-05-17 14:49:29 +02:00
TC1977
38ebe4893d Update docs (#1430)
* Point additional docs to index.md

* Update index.md

Moves existing links from readme.md over to update this separate (previously out-of-date, redundant) page.

* Update documented Ansible roles

* Fix broken links in index.md

* Complete index.md

As a general rule all docs should be linked to from the index file. No?

* Update SSH access instructions

* Clarify SSH access instructions

* Delete setup-roles.md

* Update deploy-from-ansible.md

Change header, insert text from setup-roles.md

* Remove link to setup-roles from index.md

* Fix typos

* Update deploy-from-ansible.md

Document other `--skip-tags` options, as well as examples for Vultr and Scaleway variables.

* Update deploy-from-ansible.md

Added region examples for AWS and Lightsail. Happy to add other examples if people have experience with other providers.
2019-05-16 21:01:01 +02:00
TC1977
638a355196 Update config.cfg (#1436)
* Update config.cfg

Reflects fixes in #1434 and #1435.

* Update config.cfg
2019-05-16 14:04:57 +02:00
Jack Ivanov
de88211fb9
Update config.cfg
Closes #1435
2019-05-16 13:28:59 +02:00
Jack Ivanov
3ce92f9fee
Update deploy-from-ansible.md
Closes #1434
2019-05-16 07:17:00 +02:00
Jack Ivanov
515494e90e
Update config.cfg 2019-05-15 19:33:07 +02:00
TC1977
bcf2008b8d Update deploy-from-script-or-cloud-init-to-localhost.md (#1433)
I was going to add this onto the existing PR for docs update, but it turned out to be a little more involved and require some testing of actual deployment.
2019-05-13 09:33:22 +02:00
Rémy Léone
826a2c5036 Add documentation about Scaleway credentials (#1419) 2019-05-12 11:21:55 +02:00
Jack Ivanov
6b33d09d9f
Scaleway modules (#1410)
* Scaleway modules

* Update docs
2019-05-03 09:55:45 +02:00
Jack Ivanov
d6a1fb91bd
WIP: Facts definition fix (#1415)
Facts definition fix
2019-05-01 11:51:06 +02:00
TC1977
b526f73881 Update troubleshooting.md - regions not available (#1414)
Changes the "region not available" question to reflect Algo behavior since #976. Also addresses #1413.

Adds a couple of quote marks to the Ubuntu error question, which disappeared for some reason.
2019-04-29 10:40:20 +02:00
TC1977
faa4b9a8da Automatically create cloud firewall rules for installs onto Vultr (#1400)
* Update main.yml

* Change module names and add IPv6 firewall rules

Uses guide at https://www.renemoser.net/blog/2018/03/19/vultr-firewalling-with-ansible/ written by Rene Moser.

* change vultr to vr

* add ip_version to firewall rules

* add SSH access rules

* Use variable for wireguard port

* update module names for ansible 2.7

* Fix trailing whitespaces

* Try to fix trailing whitespaces again
2019-04-27 12:59:26 +02:00
Jack Ivanov
25513cf925 Refactoring, Linting and additional tests (#1397)
* Refactoring, Linting and additional tests

* Vultr: Undefined variable and deprecation notes fix

* Travis-CI enable linters

* Azure: Update python requirements

* Update main.yml

* Update install.sh

* Add missing roles to ansible-lint

* Linting for skipped roles

* add .ansible-lint config
2019-04-26 11:48:28 -04:00
David Myers
feb0091448 Update Linux WireGuard client instructions (#1407) 2019-04-26 06:56:38 +02:00
TC1977
b7a448350a Update cloud-vultr.md (#1406)
* Update cloud-vultr.md

More fleshed-out instructions for generating an API key and saving the file. Also notes the default ansible behavior of looking for the file in `~/.vultr.ini`.

* Update README.md
2019-04-26 06:54:37 +02:00
Jack Ivanov
1e35753aa2
Update openssl.yml (#1403) 2019-04-23 12:36:12 +02:00
Jack Ivanov
a60d49f5fc
Update deploy-from-script-or-cloud-init-to-localhost.md 2019-04-19 10:57:31 +02:00
TC1977
505538bcbb Update README.md (#1380)
Add mention of Wireguard SSID exclusion ability.
2019-04-17 11:44:58 -04:00
TC1977
a1117ecf0a Update Adblock lists (#1394)
Uses the Unified hosts file from @StevenBlack available [here](https://github.com/StevenBlack/hosts). This encompasses the Ad Away, MVPS, and Malware Domain lists, deleting duplicates for us, and also adds a bunch more.
2019-04-17 13:53:41 +02:00
wtgtybhertgeghgtwtg
8f10647ec1 fix: get public IP from default interface (#1396) 2019-04-17 11:57:53 +02:00
Jack Ivanov
1c7e1dc331
Move Delete the CA key task to the appropriate role (#1393) 2019-04-13 11:53:45 +02:00
Jack Ivanov
4ea1dcdf5a
Update deploy-from-script-or-cloud-init-to-localhost.md 2019-04-10 12:20:00 +03:00
David Myers
4cb8c6dc22 Consolidate firewall documentation (#1386) 2019-04-09 15:38:18 +03:00
TC1977
d969b8e1b6 Fix 963 again (#1379)
* Create charon.conf.j2

Create charon.conf template with mods

* Update mobileconfig.j2

Increase client side lifetimes

* Update ipsec.conf.j2

Add server-side lifetimes

* Add charon.conf
2019-04-09 15:37:08 +03:00
Jack Ivanov
c4ea88000b Refactoring to support roles inclusion (#1365) 2019-04-08 16:20:34 -04:00