wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-09-05 11:33:22 +02:00
Code Issues Projects Releases Wiki Activity
800 commits 3 branches 3 tags 13 MiB
Commit graph

800 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jack Ivanov
bb88695dd5 Convert wifi-exclude to a string. Update-users fix 2018-07-30 08:52:34 +03:00
Jack Ivanov
1cf953ba39 Disable tls_cipher_suite 2018-07-30 08:52:34 +03:00
Jack Ivanov
bd10bc051f Disable dependencies 2018-07-30 08:52:34 +03:00
Jack Ivanov
f06e789753 rename droplet to server 2018-07-30 08:52:34 +03:00
Jack Ivanov
606420afb7 Disable EC2 encryption by default 2018-07-30 08:52:34 +03:00
Jack Ivanov
4cea047636 Remove lightsail from the docs 2018-07-30 08:52:34 +03:00
Jack Ivanov
9429243503 Fix a typo 2018-07-30 08:52:33 +03:00
Jack Ivanov
c4acd6e8e6 Update deploy-from-ansible.md 2018-07-30 08:52:33 +03:00
Jack Ivanov
d4f9d559ac Warnings fix 2018-07-30 08:52:33 +03:00
Jack Ivanov
8712dcb566 EC2 credentials fix 2018-07-30 08:52:33 +03:00
Jack Ivanov
84a7ff79a4 Update docs 2018-07-30 08:52:33 +03:00
Jack Ivanov
2e14d6c75d Add default region to aws_region_facts 2018-07-30 08:52:33 +03:00
Jack Ivanov
09a9c4c172 Add default server value (localhost) for the local installation 
Delete empty files
 2018-07-30 08:52:33 +03:00
Jack Ivanov
9c2a86c64c Enable EC2 volume encryption by default 2018-07-30 08:52:33 +03:00
Jack Ivanov
fbc9ba8efb Disable reboot for non-cloud deployments 2018-07-30 08:52:33 +03:00
Jack Ivanov
356bc38a5f Skip a prompt about the SSH user if deploying to localhost 2018-07-30 08:52:33 +03:00
Jack Ivanov
c40bfd1151 Define the default value for store_cakey 2018-07-30 08:52:33 +03:00
Jack Ivanov
51265d5da9 Rename variables 2018-07-30 08:52:33 +03:00
Jack Ivanov
25bdfff832 Make server_name more FQDN compatible 2018-07-30 08:52:33 +03:00
Jack Ivanov
a6f7ccd20f Refactoring, booleans declaration and update users fix 2018-07-30 08:52:33 +03:00
Mike Myers
c65961a1f3 Amazon ec2 documentation (#1035) 
* Add link to documentation on Amazon EC2 setup

* Add images to document the AWS EC2 account setup

* Create AWS EC2 setup instructions

* remove line breaks

* remove line breaks

* Add images documenting AWS EC2 policy creation

* Update image showing advised minimum AWS policy

* Add instructions for minimum AWS permission policy

* Delete aws-ec2-attach-policy.png

* Updated image to reflect new AWS policy guidance

* Delete aws-ec2-new-user-confirm.png

* Updated image to reflect new AWS policy guidance
 2018-07-22 17:58:09 -04:00
Jack Ivanov
ca59eeb5c3 Explicitly allow traffic between clients if enabled (#1028) 2018-07-20 10:31:27 -04:00
Jack Ivanov
952e759af4
Revert "Update dnscrypt-proxy.toml.j2 (#1022)" (#1030) 
This reverts commit e6281bc7df.
 2018-07-20 09:48:59 +03:00
adamluk
e6281bc7df Update dnscrypt-proxy.toml.j2 (#1022) 2018-07-12 17:03:36 +03:00
TC1977
facd55c635 Update deploy-to-ubuntu.md (#1019) 
* Update deploy-to-ubuntu.md

rewrite of #813

* Update deploy-to-ubuntu.md
 2018-07-03 10:02:54 -04:00
Jack Ivanov
07a6bbe652
Move max_mss to config.cfg (#1015) 
* Move max_mss to config.cfg

* Add docs about max_mss

* Update troubleshooting.md
 2018-07-03 09:06:45 +03:00
Jack Ivanov
d1c58f0d28
apt_repository fix (#1017) 2018-07-02 16:33:31 +03:00
Jack Ivanov
4ca8c03e3c New default cipher suite (#991) 
* New ciphers enabled

* Update CHANGELOG.md

* Switch ecparam to secp384r1

* Change CertificateType to ECDSA384
 2018-06-27 11:22:45 -04:00
Jack Ivanov
b061df6631
Move DNSCrypt proxy fallback_resolver to systemd resolved (#1011) 2018-06-26 13:11:09 +03:00
Mikael Forsgren
2931227db4 New Google Cloud Region (#1013) 
Added the new Google Cloud Region Finland (europe-north1) with 3 zones
 2018-06-26 13:01:45 +03:00
Emir Beganović
2f142f6dcc Remove duplicate dict key (enable_ipv6) (#999) 
Warning in yaml file:
` [WARNING]: While constructing a mapping from /root/algo/roles/cloud-scaleway/tasks/main.yml, line 73, column 11, found a duplicate dict key (enable_ipv6). Using last defined value only.`
 2018-06-25 13:40:51 +03:00
TC1977
6faac307af Update troubleshooting.md (#992) 
Many times people are reaching VPC limits not because they're running other VPCs on AWS, but because they've already deployed several times (AWS allows five VPCs per region). This lets people know they can simply delete their old VPCs instead of contacting AWS support.
 2018-06-04 11:09:01 -04:00
Jack Ivanov
030cb9a830 Test fixes 2018-06-01 17:41:30 +03:00
Jack Ivanov
ffb5a1f737 WireGuard: disable SaveConfig, update-users fix (#985) 
- Disables SaveConfig. SaveConfig totally breaks the idea of configuration management and it breaks update-users
- WireGuard update-users fix. Mentioned in https://github.com/trailofbits/algo/issues/980#issuecomment-393720561
 2018-06-01 10:06:03 -04:00
Jack Ivanov
d7bce68738 TravisCI fixes 2018-05-31 23:08:32 +03:00
Jack Ivanov
16e78087d1
Update CHANGELOG.md 2018-05-30 17:17:08 +03:00
Jack Ivanov
daca84b640 Update references to 18.04 2018-05-30 17:11:32 +03:00
Jack Ivanov
aee043977f explicit installation of linux headers (#975) 2018-05-29 21:43:06 -07:00
Jack Ivanov
2d9a36d13a Scaleway: enable ipv6 and switch to local boot (#974) 
- Enables IPv6 on Scaleway
- Adds local boot on scaleway
- Fixes #966
 2018-05-28 12:16:06 -07:00
Jack Ivanov
d56f50180b Extra line and better DNS configuration for WireGuard (#968) 
- Adds an extra line after the if statement. Jinja2 trims such blocks by default in Ansible. Fixes #965
- More appropriate way to configure DNS servers
- Removes `DNS` option from the wireguard server config
- Fixes dnscrypt-proxy restart
 2018-05-25 10:37:13 -07:00
Paul Kehrer
b928e4ff06 fix faq entry about cryptography build failure (#967) 2018-05-25 06:02:16 -07:00
Jack Ivanov
3488e660ad Add WireGuard support for Android (#910) 
* WireGuard Implementation

* Update client-android.md

* Update README.md

* WireGuard unattended upgrades

* Update README.md

* reload-module-on-update and syntax fix

* SaveConfig to true

* Azure firewall. Fixes #962

* Update README.md

* Update client-android.md
 2018-05-24 08:15:27 -07:00
Jack Ivanov
d27b849f24 Ubuntu1804 (#925) 
- Fixes #897 #944 #956

Work in progress. Lightsail is not ready for Ubuntu 18.04 yet

- [x] DigitalOcean
~~- [ ] Amazon Lightsail~~
- [x] Amazon EC2
- [x] Microsoft Azure
- [x] Google Compute Engine
- [x] Scaleway
- [x] OpenStack (DreamCompute optimised)
 2018-05-24 07:08:14 -07:00
Evgeny Aleksandrov
d9dc68164f Remove algo_params (#961) 2018-05-24 09:01:26 +03:00
Evgeny Aleksandrov
87836e0358 Fix typo (#960) 2018-05-24 09:00:38 +03:00
Stijn Balk
9fdbfb0977 Update GCP regions (#957) 
* Update GCP regions according to https://cloud.google.com/compute/docs/regions-zones/

* Update GCP regions according to https://cloud.google.com/compute/docs/regions-zones/

* set default back to belgium B
 2018-05-23 09:17:10 -07:00
Alexey Bogomolov
0de0952cf0 fix requirements.txt SecretStorage version (#914) 
Related to issue #877. Latest SecretStorage build requires Python '>=3.5' but Algo is running on Python 2
 2018-05-18 12:35:56 +03:00
Jack Ivanov
6f3ec658fe
Move to LXD (#935) 2018-05-10 09:03:05 +03:00
TC1977
e905220f61 Update config.cfg (#936) 
Fix typos - this puzzled me when I was attempting to install algo with dnscrypt last week.
 2018-05-09 13:14:31 -07:00
pguizeline
e95ae829e3 Fix line spacing to improve readability (#932) 
Keeping the organized spacing
 2018-05-09 11:25:14 -07:00