Commit graph

1714 commits

Author SHA1 Message Date
TC1977
4eeaadcfb3 Add info about modifying blacklists (#1236)
# Algo will use the following lists to block ads. You can add new block lists 
# after deployment by modifying the line starting "BLOCKLIST_URLS=" at:
# /usr/local/sbin/adblock.sh 
# If you load very large blocklists, you may also have to modify resource limits:
# /etc/systemd/system/dnsmasq.service.d/100-CustomLimitations.conf
2018-12-07 14:41:19 -05:00
William Woodruff
378df4f832 docs/gce: Fix typos, clarify instructions (#1239) 2018-12-05 06:57:13 +01:00
William Woodruff
319b630cf4 docs/gce: Fix typos, clarify instructions (#1239) 2018-12-05 06:57:13 +01:00
David Myers
d097f4e6a0 Increase memory limit for dnsmasq (#1228)
* Increase memory limit for dnsmasq

* Increase memory limit for dnsmasq further
2018-12-03 12:32:23 -05:00
David Myers
66681521c1 Increase memory limit for dnsmasq (#1228)
* Increase memory limit for dnsmasq

* Increase memory limit for dnsmasq further
2018-12-03 12:32:23 -05:00
TC1977
5b59557a46
Update mobileconfig.j2
Not sure why I had it at 120 for this. I'm running fine with both IKE lifetime and CHILD_SA lifetimes at 1440 (Apple default).
2018-12-03 10:36:47 -05:00
David Myers
cc37d11ece Run adblock.sh at a random time (#1227) 2018-12-03 15:33:36 +01:00
David Myers
8d23f715d7 Run adblock.sh at a random time (#1227) 2018-12-03 15:33:36 +01:00
jxn
ef62de1eeb fix typo in powershell execution in windows client set up doc (#1224) 2018-11-29 14:11:26 +01:00
jxn
66bbf0e83a fix typo in powershell execution in windows client set up doc (#1224) 2018-11-29 14:11:26 +01:00
Jack Sullivan
1a3c1754f6 Add "unable to write 'random state'" resolution (#1219)
I ran into the same issue as #1058, and the solution worked.

This PR generalizes the solution and adds it to the troubleshooting documentation, making it easier to resolve for future users.
2018-11-27 07:09:33 +01:00
Jack Sullivan
adb4dfa839 Add "unable to write 'random state'" resolution (#1219)
I ran into the same issue as #1058, and the solution worked.

This PR generalizes the solution and adds it to the troubleshooting documentation, making it easier to resolve for future users.
2018-11-27 07:09:33 +01:00
David Myers
79d46b9c8b Add p12 password back to mobileconfigs (#1218) 2018-11-26 16:58:34 +01:00
David Myers
22395f5f84 Add p12 password back to mobileconfigs (#1218) 2018-11-26 16:58:34 +01:00
Jack Ivanov
8a42c29422 on-build python venvs (#1199) 2018-11-22 13:04:58 -05:00
Jack Ivanov
a66d8f0069 on-build python venvs (#1199) 2018-11-22 13:04:58 -05:00
Jack Ivanov
458f2f11d7 dnscrypt-proxy apparmor fix (#1210)
<!--- Provide a general summary of your changes in the Title above -->

## Description
Apparmor profile for dnscrypt-proxy didn't work at all

## Motivation and Context
Fixes #1155

## How Has This Been Tested?
Deployed to DigitalOcean, checked that the dnscrypt-proxy binary is in enforce mode

## Types of changes
<!--- What types of changes does your code introduce? Put an `x` in all the boxes that apply: -->
- [x] Bug fix (non-breaking change which fixes an issue)

## Checklist:
<!--- Go over all the following points, and put an `x` in all the boxes that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're here to help! -->
- [x] I have read the **CONTRIBUTING** document.
- [x] My code follows the code style of this project.
- [x] All new and existing tests passed.
2018-11-22 13:04:37 -05:00
Jack Ivanov
9187d8e637 dnscrypt-proxy apparmor fix (#1210)
<!--- Provide a general summary of your changes in the Title above -->

## Description
Apparmor profile for dnscrypt-proxy didn't work at all

## Motivation and Context
Fixes #1155

## How Has This Been Tested?
Deployed to DigitalOcean, checked that the dnscrypt-proxy binary is in enforce mode

## Types of changes
<!--- What types of changes does your code introduce? Put an `x` in all the boxes that apply: -->
- [x] Bug fix (non-breaking change which fixes an issue)

## Checklist:
<!--- Go over all the following points, and put an `x` in all the boxes that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're here to help! -->
- [x] I have read the **CONTRIBUTING** document.
- [x] My code follows the code style of this project.
- [x] All new and existing tests passed.
2018-11-22 13:04:37 -05:00
Jack Ivanov
ec9fe77821 BSD StrongSwan fixes (#1207) 2018-11-20 19:20:24 +01:00
Jack Ivanov
45b00ee994
BSD StrongSwan fixes (#1207) 2018-11-20 19:20:24 +01:00
TC1977
8331d69f34
Merge pull request #3 from TC1977/patch-1
Change server-side ipsec.conf settings
2018-11-20 11:57:23 -05:00
TC1977
fb93ed75ab
Change server-side ipsec.conf settings
Switching to inline rekeying from reauthentication, and lengthening child_SA and IKE_SA lifetimes.
2018-11-20 11:56:42 -05:00
TC1977
efc5ff8339
Merge pull request #2 from TC1977/patch-2
Update mobileconfig.j2
2018-11-20 11:43:14 -05:00
TC1977
fd15c65784
Merge pull request #1 from trailofbits/master
Update
2018-11-20 11:41:47 -05:00
TC1977
a4e4e2182a
Update mobileconfig.j2
Changes Child_SA lifetime to 2 hours, and IKE_SA lifetime to 12 hrs (Apple default is actually 12h for both).
2018-11-20 11:38:53 -05:00
David Myers
55a2d9df04 Detect when running in Docker (#1204) 2018-11-16 07:22:57 +01:00
David Myers
d8b318b59a Detect when running in Docker (#1204) 2018-11-16 07:22:57 +01:00
Jack Ivanov
5cb7670804 Rename Docker.md to deploy-from-docker.md 2018-11-15 10:22:11 +01:00
Jack Ivanov
1c16554b41
Rename Docker.md to deploy-from-docker.md 2018-11-15 10:22:11 +01:00
jxn
8a4870ad80 fix typos in docker documentation and shell-script text (#1202) 2018-11-14 06:57:55 +01:00
jxn
affadd401d fix typos in docker documentation and shell-script text (#1202) 2018-11-14 06:57:55 +01:00
Jack Ivanov
3e1821093b WireGuard update-users fix (#1183) 2018-11-12 18:03:31 +01:00
Jack Ivanov
66d30e3005
WireGuard update-users fix (#1183) 2018-11-12 18:03:31 +01:00
TC1977
0a89073f44 Troubleshooting.md updates (#1195)
* Troubleshooting.md updates

Adds solutions to #1067 to the troubleshooting faq. Also moves a couple of answers to correspond to the headers.

* Change to Algo, strongly rec Ubuntu 18.04
2018-11-12 14:01:37 +01:00
TC1977
75685e202b Troubleshooting.md updates (#1195)
* Troubleshooting.md updates

Adds solutions to #1067 to the troubleshooting faq. Also moves a couple of answers to correspond to the headers.

* Change to Algo, strongly rec Ubuntu 18.04
2018-11-12 14:01:37 +01:00
TC1977
7ce3f319fc Update mobileconfig.j2 (#1197)
Adds "Algo VPN" to the organization in the "Profiles" menu of "General Settings". (The type still shows up as "Unknown" in the "VPN" menu, because that seems to be governed by the "VPNSubType" string, which must be empty according to the [developer reference](https://developer.apple.com/enterprise/documentation/Configuration-Profile-Reference.pdf) Maybe this can help clear the way for #1101.
2018-11-12 10:21:54 +01:00
TC1977
a76642c4d5 Update mobileconfig.j2 (#1197)
Adds "Algo VPN" to the organization in the "Profiles" menu of "General Settings". (The type still shows up as "Unknown" in the "VPN" menu, because that seems to be governed by the "VPNSubType" string, which must be empty according to the [developer reference](https://developer.apple.com/enterprise/documentation/Configuration-Profile-Reference.pdf) Maybe this can help clear the way for #1101.
2018-11-12 10:21:54 +01:00
Jack Ivanov
f796c6bcbb Closes #1189 2018-11-06 07:03:44 +01:00
Jack Ivanov
a53dec6349
Closes #1189 2018-11-06 07:03:44 +01:00
zuccs
9219775933 Fix typo (#1165) 2018-11-05 16:35:01 +01:00
zuccs
2b2d90a8a9 Fix typo (#1165) 2018-11-05 16:35:01 +01:00
datew0
0b9deb6a5c Set disk size depending on server plan (#1159)
Scaleway`s START1-XS does not start with a disk size of 50GB.
2018-11-02 12:38:54 +01:00
datew0
30446d0363 Set disk size depending on server plan (#1159)
Scaleway`s START1-XS does not start with a disk size of 50GB.
2018-11-02 12:38:54 +01:00
Jack Ivanov
0084f660b7 add region (#1182) 2018-11-01 20:59:14 +01:00
Jack Ivanov
399d47233a
add region (#1182) 2018-11-01 20:59:14 +01:00
Aleksander
782141e401 Update StrongSwan setup docs (#1181) 2018-10-30 07:59:50 +01:00
Aleksander
465cbeb7e0 Update StrongSwan setup docs (#1181) 2018-10-30 07:59:50 +01:00
Bruno Tavares
f026077718 Add documentation on how to setup GCE accounts (#1164)
* Add documentation on how to setup GCE accounts

This commit adds the steps needed to create a credential with the needed access on Google Cloud Platform to be able to successfully create a new algo VPN.

Related to:
- https://github.com/trailofbits/algo/issues/682
- https://github.com/trailofbits/algo/issues/658

* Adds links on main README to GCP

* Adds link to Ansible documentation

* Update cloud-gce.md
2018-10-28 09:35:43 +03:00
Bruno Tavares
54a91447bf Add documentation on how to setup GCE accounts (#1164)
* Add documentation on how to setup GCE accounts

This commit adds the steps needed to create a credential with the needed access on Google Cloud Platform to be able to successfully create a new algo VPN.

Related to:
- https://github.com/trailofbits/algo/issues/682
- https://github.com/trailofbits/algo/issues/658

* Adds links on main README to GCP

* Adds link to Ansible documentation

* Update cloud-gce.md
2018-10-28 09:35:43 +03:00
Jack Ivanov
d7807686de Lightsail back (#1157) 2018-10-22 16:49:18 -04:00