Commit graph

658 commits

Author SHA1 Message Date
Rob Lazzurs
3f4bf565b1 Increase the default size of the SSH key.
The default SSH key size in 2048. Increasing this to 4096 to match
current best practice guidance.
2017-05-30 17:02:48 +01:00
Martey Dodoo
d59d67f0ea Add additional Gloud Cloud Engine zones. (#569)
* Add additional Gloud Cloud Engine zones.

Add GCE zones for Northern Virginia (us-east4), Singapore
(asia-southeast1), and Tokyo (asia-northeast1) regions.

* Update possible GCE zones in documentation.
2017-05-27 14:22:05 +02:00
Jack Ivanov
a9a6933c76 a typo 2017-05-23 18:26:48 +02:00
Jack Ivanov
f52eca39c3 add some debug to the tests 2017-05-23 18:26:01 +02:00
Dan Guido
e13a76d1f3 Update README.md 2017-05-23 11:36:04 -04:00
Dan Guido
695f9936a0 Update README.md 2017-05-23 11:33:46 -04:00
Jack Ivanov
0131505195 Enhance PS1 script (#510)
update docs

Update README.md

update readme
2017-05-23 11:31:53 -04:00
Jack Ivanov
e6c8f19d3c Create a VPC network for each instane (#561) 2017-05-23 11:30:57 -04:00
Dan Guido
97248fce19 Default to DigitalOcean rather than AWS for the README 2017-05-23 11:30:26 -04:00
Jack Ivanov
4165eca407 Azure supports 17.04 #449 2017-05-22 17:16:00 +02:00
Jack Ivanov
ee6db37428 Change the P12 and SSH passwords only for new users (#550) 2017-05-21 22:28:18 -04:00
Jack Ivanov
40e0363b18 Add html helper for Android (#554)
* add html helper #280

move to the new local schema

fix a typo

* Update client-android.md
2017-05-21 22:27:53 -04:00
Ruben Jongejan
e9e6c6e383 cleaner syntax for local actions (#536)
* refactored local actions to cleaner syntax

* openssl commands folded

* removed unnecessary local_action's
2017-05-17 02:30:04 -04:00
Rod Vagg
75d64ac018 Make DNS blocklist URLs configurable (#548) 2017-05-15 12:39:34 +02:00
Job Evers‐Meltzer
bc604fb3e2 Update instructions on README (#547)
Tweaked README instructions as the paths were slightly different.
2017-05-13 12:25:36 -04:00
tetov
ac6db06a19 grammar edit (#540)
* grammar edit

* Update openssl.yml
2017-05-10 10:06:19 -04:00
Ruben Jongejan
fd5433efed renamed localhost group to fix duplicate naming of group&host (#537) 2017-05-09 21:43:34 +02:00
Jack Ivanov
1b56dd660b Update docs about sudo #529 2017-05-08 22:39:18 +02:00
Jack Ivanov
58d5a06e87 delete tasks and move to roles (#519) 2017-05-08 16:34:45 -04:00
Ruben Jongejan
07ddb5863b improved readability with native yaml (#530) 2017-05-08 16:34:24 -04:00
Jack Ivanov
97369c303a define local_dns if dns tag used (#533) 2017-05-08 16:33:30 -04:00
Jack Ivanov
d10a86b331 Revert "define local_dns if dns tag used (#531)" (#532)
This reverts commit 627b7d5d9b.
2017-05-08 22:12:49 +02:00
Jack Ivanov
627b7d5d9b define local_dns if dns tag used (#531) 2017-05-08 16:10:59 -04:00
Jack Ivanov
0031d2809e Disable the Signature Algorithm check and add default vars. Fixes #525 2017-05-08 21:40:38 +02:00
Christopher J. Pilkington
27f9cda361 Add additional delay for ec2 instance prior to ssh (#527)
* Add additional delay for ec2 instance prior to ssh

* Add 10 second delay to all, rather than to cloud-ec2
2017-05-07 12:35:27 -04:00
Osman Surkatty
25b6ab9e0a Added missing minimum policy actions. (#522)
Going through the installation process it appears that you're missing the following calls: `ec2:describeAddresses` and `ec2:allocateAddress`. This change fixes that.
2017-05-06 09:16:35 -04:00
Christopher J. Pilkington
a225bde2b8 Specify EIP domain (#521) 2017-05-06 09:16:28 -04:00
Jack Ivanov
6f170982aa move to Elastic IP (#512) 2017-05-04 08:33:31 -04:00
Jack Ivanov
9f698fdd68 Get strongswan from the Zesty repo on Xenial (#515) 2017-05-03 16:03:10 -04:00
Dan Guido
6527d04a6f add FAQ about software updates (#506)
* add FAQ about software updates

* toc

* grammar

* grammar

* link

* grammar
2017-04-30 15:44:47 -04:00
Dan Guido
e3c5015f2e Aws documentation (#505)
* Add AWS and Cloudformation specific docs

Closes #482
Closes #468

* readme enhancements

* various grammatical issues fixed
2017-04-30 14:28:44 -04:00
Dan Guido
a97b210ee8 Update README.md 2017-04-29 14:39:55 -04:00
Jack Ivanov
bd348af9c2 Implementing blocks and additional fail hints #487 (#497)
change the troubleshooting url
2017-04-29 10:48:25 -04:00
Jack Ivanov
2f5c050fd2 dpdaction to clear (#498) 2017-04-27 14:47:45 -04:00
Jack Ivanov
0ed68b6c30 Properly configure ICMP restrictions (#492) 2017-04-27 12:47:05 -04:00
Ryan Kasper
0cb43650cb Windows 10 -PfsGroup None --> -PfsGroup ECP256 (#493)
* Windows 10 -PfsGroup None --> -PfsGroup ECP256

Fixes broken tunnel when rekey (CREATE_CHILD_SA request [ N(REKEY_SA) SA No TSi TSr KE ]) occurs (on my Windows 10 1703 build 15063.138 Creator's Update system this is ~every 57 minutes)

* Update Windows Client PfsGroup Commandline
2017-04-27 12:46:50 -04:00
forkbomber
f002f32836 Fix typo related to "Error 809" and filtered IKE_AUTH requests (#496) 2017-04-27 12:46:28 -04:00
Jack Ivanov
540c761d3b Disable RSA in the mobileconfigs. Fixes #486 2017-04-25 23:06:51 +02:00
Nicholas
aea22475c3 Fixed broken links to ansible deployment instructions (#484)
* Fixed broken link in EC2 IAM instructions

* Fixed broken in step 6 of instructions
2017-04-24 16:53:58 +02:00
Dan Guido
31d6bd39a1 The docs got out of sync with the scripts (#480)
* The docs got out of sync with the scripts

* restructure

* fix links
2017-04-23 16:36:30 -04:00
Jack Ivanov
451394100d Some enhances in the compat ciphers (#464)
raise the IntegrityCheckMethod to SHA384

Move Windows to ECDSA

Increase IntegrityCheckMethod
2017-04-23 16:00:37 -04:00
Dan Guido
0d1c760a63 Doc improvements (#479)
* cleanup

* typos

* Closes #289

Add instructions for connecting to the VPN and configuring on demand.
2017-04-23 14:54:54 -04:00
Dan Guido
aac052da46 this option is deprecated (#477) 2017-04-23 09:04:30 -04:00
Dan Guido
8c430bd555 typo (#474) 2017-04-22 22:38:29 -04:00
Jack Ivanov
2782df8cfd Move back to 16.04. Forgot to change after testing 2017-04-22 23:09:37 +02:00
Jack Ivanov
c3fcfe5d0d Let users choose the distro version #449 (#466)
Make dpdaction great again

add 1704 to travis

Make EC2 image name more convenient

modify apparmor profile
2017-04-22 17:06:10 -04:00
Dan Guido
cbb8237a4c fix link (#472) 2017-04-22 16:52:02 -04:00
Dan Guido
3aa4b6e8df Add linters to our CI (#471) 2017-04-22 14:57:39 -04:00
Jay Little
f75c857656 Fix broken links. (#469) 2017-04-22 14:00:16 -04:00
Dan Guido
39822a1b4e Add back table of contents (#463)
* toc

* shift left

* derp
2017-04-21 12:20:33 -04:00