Commit graph

890 commits

Author SHA1 Message Date
jxn
8a4870ad80 fix typos in docker documentation and shell-script text (#1202) 2018-11-14 06:57:55 +01:00
Jack Ivanov
3e1821093b WireGuard update-users fix (#1183) 2018-11-12 18:03:31 +01:00
TC1977
0a89073f44 Troubleshooting.md updates (#1195)
* Troubleshooting.md updates

Adds solutions to #1067 to the troubleshooting faq. Also moves a couple of answers to correspond to the headers.

* Change to Algo, strongly rec Ubuntu 18.04
2018-11-12 14:01:37 +01:00
TC1977
7ce3f319fc Update mobileconfig.j2 (#1197)
Adds "Algo VPN" to the organization in the "Profiles" menu of "General Settings". (The type still shows up as "Unknown" in the "VPN" menu, because that seems to be governed by the "VPNSubType" string, which must be empty according to the [developer reference](https://developer.apple.com/enterprise/documentation/Configuration-Profile-Reference.pdf) Maybe this can help clear the way for #1101.
2018-11-12 10:21:54 +01:00
Jack Ivanov
f796c6bcbb Closes #1189 2018-11-06 07:03:44 +01:00
zuccs
9219775933 Fix typo (#1165) 2018-11-05 16:35:01 +01:00
datew0
0b9deb6a5c Set disk size depending on server plan (#1159)
Scaleway`s START1-XS does not start with a disk size of 50GB.
2018-11-02 12:38:54 +01:00
Jack Ivanov
0084f660b7 add region (#1182) 2018-11-01 20:59:14 +01:00
Aleksander
782141e401 Update StrongSwan setup docs (#1181) 2018-10-30 07:59:50 +01:00
Bruno Tavares
f026077718 Add documentation on how to setup GCE accounts (#1164)
* Add documentation on how to setup GCE accounts

This commit adds the steps needed to create a credential with the needed access on Google Cloud Platform to be able to successfully create a new algo VPN.

Related to:
- https://github.com/trailofbits/algo/issues/682
- https://github.com/trailofbits/algo/issues/658

* Adds links on main README to GCP

* Adds link to Ansible documentation

* Update cloud-gce.md
2018-10-28 09:35:43 +03:00
Jack Ivanov
d7807686de Lightsail back (#1157) 2018-10-22 16:49:18 -04:00
Jack Ivanov
645cc423d7 WireGuard update-users fix (#1154) 2018-10-22 16:49:09 -04:00
Jack Ivanov
53786572ce add tags for the wireguard qr code task. variables fix (#1147) 2018-10-14 10:22:45 +03:00
Jack Ivanov
573b027bfe ssh tunneling fixes (#1127) 2018-10-07 17:33:55 -07:00
David Myers
f8769bb533 Add WireGuard port to FAQ (#1141) 2018-10-05 17:29:09 +03:00
David Myers
a4d33e3a8e Allow more flexible DNSCrypt configuration (#1120)
* Allow more flexible DNSCrypt configuration

* Correct permissions on files changed in #1120

I'm not sure why using BBEdit over SMB makes every file executable.

* Put the public resolvers cache file in /tmp.
2018-10-04 18:12:48 -04:00
Jack Ivanov
9a7f98317e Update troubleshooting.md
Fixes #1118
2018-10-04 14:36:54 +03:00
Jack Ivanov
8d548aff2c WireGuard: Generate QR codes (#1129)
* WireGuard: Generate QR codes

* Update client-android.md
2018-09-29 22:25:02 -04:00
Jack Ivanov
2864f45463 WireGuard BSD (#1083)
* WireGuard BSD

* Remove unneeded config option

* Enable PersistentKeepalive for NAT and Firewall Traversal Persistence

* Install dnscrypt-proxy from repositories
2018-09-27 04:18:12 -04:00
Jack Ivanov
c226546d54 GCE: Static external ip (optional) (#1125) 2018-09-27 04:18:00 -04:00
Gio d'Amelio
e2c779ac09 Update algo-showenv.sh to use /usr/bin/env in it's hashbang (#1126)
Should allow better cross platform compatibility
2018-09-22 08:34:47 +03:00
Jack Ivanov
6f4d663254 Update PULL_REQUEST_TEMPLATE.md 2018-09-21 20:08:00 +03:00
Jack Ivanov
0e2c3302d4 install generic linux headers (#1124) 2018-09-21 20:05:11 +03:00
Mike Myers
04f6fd7f9a Fix minor typos in Amazon EC2 setup documentation. (#1116) 2018-09-18 10:47:07 +03:00
James
c556fbafb8 Use gateway ip address for wireguard interface (#1115) 2018-09-18 10:43:41 +03:00
Jack Ivanov
74ed67577e Move to the ARM deployment schema (#1107) 2018-09-16 20:19:29 -04:00
Jack Ivanov
1dae27be30 Create PULL_REQUEST_TEMPLATE.md 2018-09-14 16:22:27 +03:00
Jack Ivanov
b11f82b72b Update issue templates (#1114)
* Update issue templates

* Delete ISSUE_TEMPLATE.md
2018-09-14 16:09:46 +03:00
TC1977
350b9c0c9c Update Win10 client docs for non-admin accounts (#1093)
* Update client-windows.md

Allows non-admin accounts to use the VPN as per #983 and #994. Fix was also documented here https://www.bountysource.com/issues/49259904-windows-10-powershell-and-priv-nonpriv-account-issues

* Update client-windows.md
2018-09-08 15:39:53 +02:00
ctrlaltreboot
315ac69698 Update client-windows.md (#1099)
Correct command would be ```powershell -ExecutionPolicy ByPass -File C:\path\to\windows_USER.ps1 Add```
2018-09-08 15:38:49 +02:00
David Myers
eaa9e4a040 Display the invocation environment to aid debugging (#1108) 2018-09-07 16:25:57 +02:00
TC1977
dd9a9179e8 Document AWS disk encryption flag in config.cfg (#1102)
This is to better document the "encryption" flag for those who are interested in full disk encryption on AWS. Recently on running the script, I also found the minimum permissions documented at https://github.com/trailofbits/algo/blob/master/docs/deploy-from-ansible.md weren't enough; "ec2:CopyImage" is also required. Not sure if you'd rather have this documented in the AWS docs instead, and not sure if you want "ec2:CopyImage" added to the default minimum required permissions. I can do either if you'd prefer.
2018-09-07 13:04:20 +03:00
TC1977
919b3ac0a3 Fix spacing in congrats message (#1104)
The spacing of several lines in the congrats message has been off. Here's the congrats output with this fix:
```
ok: [54.85.244.8] => {
    "msg": [
        [
            "\"#                          Congratulations!                            #\"", 
            "\"#                     Your Algo server is running.                     #\"", 
            "\"#    Config files and certificates are in the ./configs/ directory.    #\"", 
            "\"#              Go to https://whoer.net/ after connecting               #\"", 
            "\"#        and ensure that all your traffic passes through the VPN.      #\"", 
            "\"#                     Local DNS resolver 172.16.0.1                    #\"", 
            ""
        ], 
        "    \"#        The p12 and SSH keys password for new users is CR2qzRcA       #\"\n", 
        "    \"#        The CA key password is ed0fd57e7d355af08d12ccdbfd3f5931       #\"\n", 
        "    \"#     Shell access: ssh -i configs/algo.pem ubuntu@54.85.244.8        #\"\n"
    ]
}
```
2018-09-06 21:04:23 +03:00
David Myers
83dab64023 Add an unattended reboot option (#1082) 2018-09-02 15:26:06 -04:00
in-in
363f926fd2 improve readability (#1085) 2018-09-02 15:22:24 -04:00
Jack Ivanov
9d21651346 Update docs (#1089) 2018-09-02 14:54:06 -04:00
Jack Ivanov
78b12d76b3 invoke dns encryption from main playbook instead of meta-dependencies (#1097) 2018-09-02 14:52:59 -04:00
Mike Myers
0a184bf0a8 Update screenshot of AWS EC2 minimum permissions with ec2:DescribeRegions (#1095) 2018-09-02 13:32:51 +03:00
Jack Ivanov
682af321d3 Update ISSUE_TEMPLATE.md 2018-08-31 08:40:22 +03:00
Jack Ivanov
319c0a8fce Update deploy-to-ubuntu.md 2018-08-30 16:40:01 +03:00
Jack Ivanov
780bcb09e2 Update troubleshooting.md
Fixes #744
2018-08-30 16:25:59 +03:00
Jack Ivanov
338c1af220 Create a symlink if deploying to localhost (#1078) 2018-08-30 15:36:35 +03:00
Jack Ivanov
161e5ec366 Scaleway authentication fix (#1088) 2018-08-29 16:05:07 +03:00
David Myers
f2136d3c2b Document how to use WireGuard on Ubuntu clients (#1071) 2018-08-28 17:25:40 +03:00
Jack Ivanov
5215f0cd3c Update CHANGELOG.md 2018-08-28 17:12:20 +03:00
TC1977
14ed78c8bf Update cloud-amazon-ec2.md (#1081) 2018-08-28 17:05:01 +03:00
TC1977
3bf5db2a46 Update minimum required IAM changes for deployment (#1080)
Ansible2.5 allows Algo to directly ask AWS for the region list, rather than have it hardcoded and updated manually. Updated the documented minimum required permissions to include "DescribeRegions".
2018-08-28 17:03:43 +03:00
Jack Ivanov
2417082662 Update README.md 2018-08-27 20:23:51 +03:00
Jack Ivanov
c8041d7ddd Update CHANGELOG.md 2018-08-27 19:01:59 +03:00
Jack Ivanov
d78312dfd6 Update CHANGELOG.md 2018-08-27 19:00:32 +03:00