Commit graph

183 commits

Author SHA1 Message Date
Jack Ivanov
3b8d04d06c remove the logging role 2017-04-05 16:25:56 +02:00
Jack Ivanov
6e61a51aca rewrite the sysctl task 2017-04-04 17:02:11 +02:00
Jack Ivanov
c0f4b5fa41 Enable default values if the role is skipped #313 2017-04-04 16:57:39 +02:00
Josh Soref
84bbcb88d0 Spelling fixes (#342)
* spelling: algorithm

* spelling: bertrand

* spelling: between

* spelling: checking

* spelling: conjunction

* spelling: contributor

* spelling: delimited

* spelling: fashion

* spelling: droplet

* spelling: javascript

* spelling: nameserver

* spelling: obligatory

* spelling: official

* spelling: overridden

* spelling: overwrite

* spelling: parameter

* spelling: suppressing
2017-04-02 19:14:38 -04:00
James Hale
41ed682213 Reduce VPC CIDR size to /16 (#341) 2017-04-02 15:48:44 -04:00
Josh Meisels
d37c6b72c5 Add new Azure regions and allow user to select VM size (#332)
* Update Azure Region List

Included several additional regions in the Azure list.

In a future version we may want to ask users to choose a continent, then present region options since this list is getting long.

* Add VM size selection

Added prompt for user to choose VM size. Useful because the default size is not available in all regions, and there are cheaper sizes.

* Handle vm_size choice in "Create an Instance" step

Use the variable passed in that the user chose for vm_size.

* Differentiate Basic A0 and Standard A0

* Remove vm_size D1 since it's being deprecated

* Fix syntax issue - missing semicolons

* Remove note to self comment

* Remove changes to let user select VM size

Removing my previous additions that let the user select their Azure VM size.

* Hard code VM size to cheapest size

Remove my usage of a variable for VM size. Update to use the Basic_A0, which is the cheapest size of VM.
2017-04-02 12:34:09 -04:00
Matt Mankins
b8d2dc68bb Change EC2 VPC CIDR blocks to uncommon non-routable addresses (#335) 2017-04-02 00:53:53 -04:00
Josh Watson
84a3b5f675 Change EC2 VPC CIDR blocks to non-routable addresses. (#330)
The previous address ranges were actually routable addresses, which caused some concern for some people because it looked suspicious in tracert. The new CIDR blocks are non-routable addresses, which resolves this concern.
2017-04-01 00:20:08 -04:00
brad2014
09e5d87c7b Minor name and documentation edits (#327) 2017-04-01 00:19:10 -04:00
James Hale
3b3fb601ef Fix name tag key (#282) 2017-03-28 21:18:33 -04:00
Dan Guido
655a917dd2 iptables filter table fix (#285) 2017-03-27 00:04:46 -04:00
Jack Ivanov
6facb6cb4f FreeBSD / HardenedBSD (#262)
* FreeBSD draft

ifconfig fix

Pre-tasks fixes

fix hardcoded IP

some refactoring

disable system-based tags

disable freebsd tags

FreeBSD vpn role

add defaults

ssh role freebsd

default fix

dns_adblocking freebsd

ubuntu dict fix

* HardenedBSD

update-users BSD

* Rebuild the kernel

docs changing
2017-03-18 12:22:07 +03:00
Jack Ivanov
49ba1f76b4 Some improvements in the mobileconfig. Fixes #270 2017-03-18 11:07:56 +03:00
Jack Ivanov
045ff4bb9f Azure security group. Fixes #264 2017-03-14 23:33:37 +03:00
Jack Ivanov
906d962d4d GCE. env variables #195 2017-03-12 11:32:36 +03:00
Jack Ivanov
573c2f2322 DO. env variables #195 2017-03-12 11:31:05 +03:00
Jack Ivanov
fc30f8bb10 GCE. Tags fixed #267 2017-03-09 00:41:13 +03:00
Jack Ivanov
0aff3ebb6f EC2 instance_initiated_shutdown_behavior to terminate. Close #124 2017-03-06 22:04:00 +03:00
Jack Ivanov
c52024d4cc Azure. Add to the inventory #30 2017-03-06 21:54:21 +03:00
Jack Ivanov
0d1731e058 update tags for azure resources 2017-03-06 21:25:40 +03:00
Jack Ivanov
6e538627db gce inventory #30 2017-03-06 01:03:37 +03:00
Jack Ivanov
9cc9cf7b5f local inventory #30 2017-03-06 01:03:27 +03:00
Jack Ivanov
69ff22f9bb fix typo 2017-03-06 00:55:13 +03:00
Jack Ivanov
dfb1cbc282 DigitalOcean dynamic inventory 2017-03-05 23:38:15 +03:00
Jack Ivanov
f7da2e3888 EC2 dynamic enventory. Fixes #73 2017-03-05 23:19:15 +03:00
Jack Ivanov
5cbf125202 Some refactoring. Disable unneeded variables. 2017-03-05 21:33:01 +03:00
Jack Ivanov
237fcc7a7f additional variables 2017-03-05 10:58:42 +03:00
Jack Ivanov
2a4d1837b5 Some fixes. Fedora client. Close #44 2017-03-04 23:05:02 +03:00
Jack Ivanov
0bf3e809a4 Linux clients installation vpn #44 2017-03-03 20:46:11 +03:00
Jack Ivanov
d7d976784c Fixes #207 2017-02-28 21:34:28 +03:00
Jack Ivanov
8eb208c5b7 enable ipv6 if the default gateway is defined. Fixes #244 2017-02-26 20:17:12 +03:00
Craig
43c2f5c31a Installs the recommended packages with strongswan, because we need the OpenSSL (#260)
plugin from libstrongswan-standard-plugins for ECDH to work.
2017-02-25 21:07:32 +03:00
Jack Ivanov
b8f3d43eee enable some additional debug info 2017-02-23 19:22:18 +03:00
Jack Ivanov
2a7dd88a3c Changed to ECDSA #102 2017-02-23 18:44:30 +03:00
Jack Ivanov
e31f10da6d Fixes #255 2017-02-23 18:25:46 +03:00
Jack Ivanov
aca036142f AndroidVPNClientProfiles #240 2017-02-17 00:30:21 +03:00
Jacob Wilder
7b468fae79 Fixed the azure role for situations where the user does not use a ~/.azure/credentials file (#242) 2017-02-16 23:43:03 +03:00
Jack Ivanov
20ebd7a595 rename connection 2017-02-12 23:01:29 +03:00
akirilov
05ab1f5feb Modified certificate generation to address issues #234 and #228 (#235)
* Modified certificate generation to address issues #234 and #228

I have made the following modifications to comply with the IKEv2 client certificate requirements:

- Changed client certificate CN to {{ IP_subject_alt_name }}_{{ item }} from {{ item }}
- Changed client certificate SAN to {{IP_subject_alt_name }} from {{ item }}
- Added clientAuth to client certificate EKU

I have made the following changes to address a mismatch in the windows deployment script and file names:

- Changed the client certificate (.p12) filename in config/{{ IP_subject_alt_name }} to {{ IP_subject_alt_name}}_{{ item }}.p12 from {{ item }}.p12 to match the ps1 script

Testing:

I have tested the changes on Windows 10 client, Ubuntu 16.04.1 server (DigitalOcean) - the config described in Issue #234

I apologize for not being able to test on other configurations. I hope that someone else can verify my changes

* fixed iOS issues

* fixed accidentall user change

* simplified changes

* Final iteration. I think that's all I can do to minimize the changes
2017-02-12 22:45:36 +03:00
Jack Ivanov
35faf4bca7 Local openssl tasks (#169)
* Draft

works with ECDSA

RSA support for Windows

* update-users with local_openssl_tasks

* move prompts to the algo script

* additional directory for SSH keys

* move easyrsa_p12_export_password to pre_tasks

* update-users testing

* Fix hardcoded vars

* Delete the CA key

* Hardcoded IP. Fixes #219

* Some fixes
2017-02-03 14:24:02 -05:00
Jack Ivanov
257be0f395 make the fail message more understandable. Fixes #217 2017-02-01 18:54:47 +03:00
Jack Ivanov
2798f84d3f ensure that apparmor is supported by the kernel #215 2017-01-16 00:19:57 +03:00
Jack Ivanov
3e852caf04 disable compression #146 2017-01-14 19:56:23 +03:00
Jack Ivanov
cbf59addb3 additional tags 2017-01-11 21:02:41 +03:00
Jack Ivanov
a50a396b94 addtiional fixes 2017-01-11 20:55:44 +03:00
Defunct
b0f9ab94b1 ec2_ami_copy boto3 module, KMS, tagging, AMI caching (Encrypted support) 2017-01-05 19:36:30 +00:00
Defunct
0eb048383a refactored ec2 encryption 2017-01-05 17:36:45 +00:00
Jack Ivanov
1a81372192 EC2 Encryption Implemented #133 2017-01-05 17:36:45 +00:00
Jack Ivanov
f246165298 Fix a typo 2017-01-04 17:45:42 +03:00
Glenn Rempe
9a46b671f7 Fixes #198, replace typo ECXLUDE with EXCLUDE 2016-12-30 18:47:02 -08:00