Commit graph

293 commits

Author SHA1 Message Date
Jack Ivanov
047f68df2f Change the site in the congrats handler to whoer.net in order to clarify the message at the end of the install about testing VPN. Fix #110 2016-11-23 20:34:53 +03:00
Kevin Cernekee
433389c0ab Use /var/run/reboot-required to determine if a restart is needed
The current check only looks to see if a new kernel was installed.
2016-11-06 09:45:39 -08:00
Kevin Cernekee
09bbc4058c Add missing tags in common playbook
If the common playbook is invoked with the "cloud" tag, non-cloud
tasks will be skipped.  On GCE this causes "Install tools" to be skipped,
apparmor-utils is not installed, and then the "Enforcing ipsec with
apparmor" step fails.
2016-11-06 09:45:34 -08:00
Jack Ivanov
29de003b2d inplemented #109 2016-11-03 18:05:56 +03:00
Jack Ivanov
5383c71499 Fixed #108 2016-11-03 17:21:18 +03:00
Jack Ivanov
d052cb8e77 skip-tags added. Fixed #121 2016-10-28 21:00:11 +03:00
Jack Ivanov
76ea7f67ae extra vars added to use local DNS #110 2016-10-26 18:56:23 +03:00
Jack Ivanov
289807ead4 fix dependencies 2016-10-25 21:33:46 +03:00
Jack Ivanov
d50bd43988 Fix SSH keys permissions 2016-10-24 18:08:58 +03:00
Jack Ivanov
44bc3ead48 set AllowTcpForwarding to local 2016-10-24 17:53:08 +03:00
Dan Guido
c52350030d Merge branch 'master' into docs 2016-10-16 22:01:56 +02:00
Jack Ivanov
d93b7c200f EC2 | Add VPC group #98 and counts #59 2016-10-16 19:24:04 +03:00
Jack Ivanov
0e613f2ff7 fix a typo. #96 closed 2016-10-16 17:38:00 +03:00
Jack Ivanov
8c284a16e3 Done. #96 2016-10-16 17:36:01 +03:00
Jack Ivanov
062426e0ec client configuration templates #43 2016-10-16 15:27:05 +03:00
Dan Guido
1a3a14943c pull in changes from master 2016-10-15 19:26:28 +02:00
Jack Ivanov
fcf29534ba the proxixy filter rules disabled #93 2016-10-14 19:58:55 +03:00
Jack Ivanov
bf5d5e53ac ip6tables fixes 2016-10-14 19:05:39 +03:00
Jack Ivanov
c43ccc3898 iptables moved to the vpn role #61 2016-10-14 18:50:24 +03:00
Dan Guido
bff7c414b2 Initial commit of reorg'd docs 2016-10-13 15:27:06 +02:00
Jack Ivanov
4db428a86e Disable unneeded plugins in StrongSwan #84 2016-10-10 15:42:32 +03:00
Jack Ivanov
2cca45c967 additional tags 2016-10-10 15:32:14 +03:00
Jack Ivanov
ad9d7d6ddb disable dpdtimeout #90 2016-09-26 22:07:34 +03:00
Jack Ivanov
8e0cca6b66 some fixes 2016-09-26 15:43:19 +03:00
Jack Ivanov
dbeb7a13e8 Merge branch 'tags' #80 2016-09-19 20:22:51 +03:00
Jack Ivanov
4d731580b7 linting 2016-09-19 20:18:27 +03:00
Jack Ivanov
fc162728d3 role for local installation 2016-09-19 19:54:45 +03:00
Jack Ivanov
d9441b236a move to tags #80 2016-09-18 13:12:17 +03:00
Jack Ivanov
aa4dcc31d4 gce role to tags 2016-09-18 13:11:30 +03:00
Jack Ivanov
cf5a0f41d3 ec2 role to tags 2016-09-18 13:11:22 +03:00
Jack Ivanov
97ea00056d DO roles to tags 2016-09-18 13:11:10 +03:00
Jack Ivanov
6685642f0b #85 fixed 2016-08-31 11:42:29 +03:00
Jack Ivanov
91688324ce additional functions 2016-08-28 23:19:41 +03:00
Jack Ivanov
ddcee8db18 logging fixes 2016-08-28 23:07:45 +03:00
Jack Ivanov
97a00699b7 new tags 2016-08-28 23:04:59 +03:00
Jack Ivanov
05df4f0c04 unattended-upgrades moved to the security role 2016-08-28 22:11:39 +03:00
Evgeniy Ivanov
4284dd63aa rsyslog moved to the logging role 2016-08-28 22:06:33 +03:00
Jack Ivanov
0cd4084aa4 ssh fixes 2016-08-26 00:47:08 +03:00
Jack Ivanov
00e4bcc1ec security role and SSH fixes #77 2016-08-26 00:35:07 +03:00
Jack Ivanov
8c5f80bf8f linting 2016-08-25 23:59:16 +03:00
Jack Ivanov
57b6c96ba8 SSH fingerprints #77 2016-08-25 23:48:35 +03:00
Jack Ivanov
0945f54366 SSH user-management #77 2016-08-25 23:30:27 +03:00
Jack Ivanov
c19908c9b1 ssh fixes 2016-08-25 23:03:20 +03:00
Jack Ivanov
cf08c5ff61 fix 2016-08-25 22:20:53 +03:00
Dan Guido
27421070b9 linting 2016-08-24 09:22:04 +02:00
Dan Guido
809b62cd33 daemon_reload is an option for systemd, not service 2016-08-24 09:03:29 +02:00
Jack Ivanov
b29f1ab226 service fixed #78 2016-08-24 10:03:19 +03:00
Dan Guido
2fcc3600fd Disable features in the Match block vs main config 2016-08-23 17:03:27 -04:00
Jack Ivanov
1dcfe18055 SSH tunneling role #77 2016-08-23 16:51:06 +03:00
Jack Ivanov
19797bc020 CPU and memory limitations of the services #63 2016-08-23 16:10:42 +03:00