Commit graph

191 commits

Author SHA1 Message Date
Josh Soref
1f8082f31d spelling: parameter 2017-04-02 22:49:39 +00:00
Josh Soref
3ff655cbac spelling: overridden 2017-04-02 22:49:20 +00:00
Josh Soref
5b8312e2c0 spelling: obligatory 2017-04-02 22:48:43 +00:00
Josh Soref
e3c59ac788 spelling: nameserver 2017-04-02 22:48:22 +00:00
Josh Soref
50af04f3a0 spelling: javascript 2017-04-02 22:44:36 +00:00
Josh Soref
bc817e4328 spelling: fashion 2017-04-02 22:39:47 +00:00
Josh Soref
4ca47a3647 spelling: droplet 2017-04-02 22:42:12 +00:00
Josh Soref
cb04fcfbca spelling: delimited 2017-04-02 22:37:05 +00:00
Josh Soref
6126b638a9 spelling: conjunction 2017-04-02 22:35:52 +00:00
Josh Soref
05d53684cb spelling: checking 2017-04-02 22:35:27 +00:00
Josh Soref
352a9e399c spelling: bertrand 2017-04-02 22:33:50 +00:00
Josh Soref
8cdd11ec4f spelling: algorithm 2017-04-02 22:31:48 +00:00
James Hale
41ed682213 Reduce VPC CIDR size to /16 (#341) 2017-04-02 15:48:44 -04:00
Josh Meisels
d37c6b72c5 Add new Azure regions and allow user to select VM size (#332)
* Update Azure Region List

Included several additional regions in the Azure list.

In a future version we may want to ask users to choose a continent, then present region options since this list is getting long.

* Add VM size selection

Added prompt for user to choose VM size. Useful because the default size is not available in all regions, and there are cheaper sizes.

* Handle vm_size choice in "Create an Instance" step

Use the variable passed in that the user chose for vm_size.

* Differentiate Basic A0 and Standard A0

* Remove vm_size D1 since it's being deprecated

* Fix syntax issue - missing semicolons

* Remove note to self comment

* Remove changes to let user select VM size

Removing my previous additions that let the user select their Azure VM size.

* Hard code VM size to cheapest size

Remove my usage of a variable for VM size. Update to use the Basic_A0, which is the cheapest size of VM.
2017-04-02 12:34:09 -04:00
Matt Mankins
b8d2dc68bb Change EC2 VPC CIDR blocks to uncommon non-routable addresses (#335) 2017-04-02 00:53:53 -04:00
Josh Watson
84a3b5f675 Change EC2 VPC CIDR blocks to non-routable addresses. (#330)
The previous address ranges were actually routable addresses, which caused some concern for some people because it looked suspicious in tracert. The new CIDR blocks are non-routable addresses, which resolves this concern.
2017-04-01 00:20:08 -04:00
brad2014
09e5d87c7b Minor name and documentation edits (#327) 2017-04-01 00:19:10 -04:00
James Hale
3b3fb601ef Fix name tag key (#282) 2017-03-28 21:18:33 -04:00
Dan Guido
655a917dd2 iptables filter table fix (#285) 2017-03-27 00:04:46 -04:00
Jack Ivanov
6facb6cb4f FreeBSD / HardenedBSD (#262)
* FreeBSD draft

ifconfig fix

Pre-tasks fixes

fix hardcoded IP

some refactoring

disable system-based tags

disable freebsd tags

FreeBSD vpn role

add defaults

ssh role freebsd

default fix

dns_adblocking freebsd

ubuntu dict fix

* HardenedBSD

update-users BSD

* Rebuild the kernel

docs changing
2017-03-18 12:22:07 +03:00
Jack Ivanov
49ba1f76b4 Some improvements in the mobileconfig. Fixes #270 2017-03-18 11:07:56 +03:00
Jack Ivanov
045ff4bb9f Azure security group. Fixes #264 2017-03-14 23:33:37 +03:00
Jack Ivanov
906d962d4d GCE. env variables #195 2017-03-12 11:32:36 +03:00
Jack Ivanov
573c2f2322 DO. env variables #195 2017-03-12 11:31:05 +03:00
Jack Ivanov
fc30f8bb10 GCE. Tags fixed #267 2017-03-09 00:41:13 +03:00
Jack Ivanov
0aff3ebb6f EC2 instance_initiated_shutdown_behavior to terminate. Close #124 2017-03-06 22:04:00 +03:00
Jack Ivanov
c52024d4cc Azure. Add to the inventory #30 2017-03-06 21:54:21 +03:00
Jack Ivanov
0d1731e058 update tags for azure resources 2017-03-06 21:25:40 +03:00
Jack Ivanov
6e538627db gce inventory #30 2017-03-06 01:03:37 +03:00
Jack Ivanov
9cc9cf7b5f local inventory #30 2017-03-06 01:03:27 +03:00
Jack Ivanov
69ff22f9bb fix typo 2017-03-06 00:55:13 +03:00
Jack Ivanov
dfb1cbc282 DigitalOcean dynamic inventory 2017-03-05 23:38:15 +03:00
Jack Ivanov
f7da2e3888 EC2 dynamic enventory. Fixes #73 2017-03-05 23:19:15 +03:00
Jack Ivanov
5cbf125202 Some refactoring. Disable unneeded variables. 2017-03-05 21:33:01 +03:00
Jack Ivanov
237fcc7a7f additional variables 2017-03-05 10:58:42 +03:00
Jack Ivanov
2a4d1837b5 Some fixes. Fedora client. Close #44 2017-03-04 23:05:02 +03:00
Jack Ivanov
0bf3e809a4 Linux clients installation vpn #44 2017-03-03 20:46:11 +03:00
Jack Ivanov
d7d976784c Fixes #207 2017-02-28 21:34:28 +03:00
Jack Ivanov
8eb208c5b7 enable ipv6 if the default gateway is defined. Fixes #244 2017-02-26 20:17:12 +03:00
Craig
43c2f5c31a Installs the recommended packages with strongswan, because we need the OpenSSL (#260)
plugin from libstrongswan-standard-plugins for ECDH to work.
2017-02-25 21:07:32 +03:00
Jack Ivanov
b8f3d43eee enable some additional debug info 2017-02-23 19:22:18 +03:00
Jack Ivanov
2a7dd88a3c Changed to ECDSA #102 2017-02-23 18:44:30 +03:00
Jack Ivanov
e31f10da6d Fixes #255 2017-02-23 18:25:46 +03:00
Jack Ivanov
aca036142f AndroidVPNClientProfiles #240 2017-02-17 00:30:21 +03:00
Jacob Wilder
7b468fae79 Fixed the azure role for situations where the user does not use a ~/.azure/credentials file (#242) 2017-02-16 23:43:03 +03:00
Jack Ivanov
20ebd7a595 rename connection 2017-02-12 23:01:29 +03:00
akirilov
05ab1f5feb Modified certificate generation to address issues #234 and #228 (#235)
* Modified certificate generation to address issues #234 and #228

I have made the following modifications to comply with the IKEv2 client certificate requirements:

- Changed client certificate CN to {{ IP_subject_alt_name }}_{{ item }} from {{ item }}
- Changed client certificate SAN to {{IP_subject_alt_name }} from {{ item }}
- Added clientAuth to client certificate EKU

I have made the following changes to address a mismatch in the windows deployment script and file names:

- Changed the client certificate (.p12) filename in config/{{ IP_subject_alt_name }} to {{ IP_subject_alt_name}}_{{ item }}.p12 from {{ item }}.p12 to match the ps1 script

Testing:

I have tested the changes on Windows 10 client, Ubuntu 16.04.1 server (DigitalOcean) - the config described in Issue #234

I apologize for not being able to test on other configurations. I hope that someone else can verify my changes

* fixed iOS issues

* fixed accidentall user change

* simplified changes

* Final iteration. I think that's all I can do to minimize the changes
2017-02-12 22:45:36 +03:00
Jack Ivanov
35faf4bca7 Local openssl tasks (#169)
* Draft

works with ECDSA

RSA support for Windows

* update-users with local_openssl_tasks

* move prompts to the algo script

* additional directory for SSH keys

* move easyrsa_p12_export_password to pre_tasks

* update-users testing

* Fix hardcoded vars

* Delete the CA key

* Hardcoded IP. Fixes #219

* Some fixes
2017-02-03 14:24:02 -05:00
Jack Ivanov
257be0f395 make the fail message more understandable. Fixes #217 2017-02-01 18:54:47 +03:00
Jack Ivanov
2798f84d3f ensure that apparmor is supported by the kernel #215 2017-01-16 00:19:57 +03:00