Commit graph

1730 commits

Author SHA1 Message Date
Jack Ivanov
955a986c21
IPv6 forwarding fixes (#1256) 2018-12-18 13:59:25 +01:00
Jack Ivanov
a460d9d3d2 Fixes #1246 2018-12-10 16:37:36 +01:00
Jack Ivanov
a6cd89564d
Fixes #1246 2018-12-10 16:37:36 +01:00
Federico G. Schwindt
9ffd936ead Fix ipv4 address missing on reboot (#1245) 2018-12-10 06:57:15 +01:00
Federico G. Schwindt
a4f2c97fd2 Fix ipv4 address missing on reboot (#1245) 2018-12-10 06:57:15 +01:00
David Myers
a285008c29 Update local install instructions (#1148)
* Update local install instructions

* Update deploy-to-ubuntu.md
2018-12-07 14:42:17 -05:00
David Myers
e478d31e50 Update local install instructions (#1148)
* Update local install instructions

* Update deploy-to-ubuntu.md
2018-12-07 14:42:17 -05:00
David Myers
0327c4fba4 Note that WireGuard configs cannot be shared (#1238) 2018-12-07 14:41:39 -05:00
David Myers
f3519425c4 Note that WireGuard configs cannot be shared (#1238) 2018-12-07 14:41:39 -05:00
TC1977
e0326c41c9 Add info about modifying blacklists (#1236)
# Algo will use the following lists to block ads. You can add new block lists 
# after deployment by modifying the line starting "BLOCKLIST_URLS=" at:
# /usr/local/sbin/adblock.sh 
# If you load very large blocklists, you may also have to modify resource limits:
# /etc/systemd/system/dnsmasq.service.d/100-CustomLimitations.conf
2018-12-07 14:41:19 -05:00
TC1977
4eeaadcfb3 Add info about modifying blacklists (#1236)
# Algo will use the following lists to block ads. You can add new block lists 
# after deployment by modifying the line starting "BLOCKLIST_URLS=" at:
# /usr/local/sbin/adblock.sh 
# If you load very large blocklists, you may also have to modify resource limits:
# /etc/systemd/system/dnsmasq.service.d/100-CustomLimitations.conf
2018-12-07 14:41:19 -05:00
William Woodruff
378df4f832 docs/gce: Fix typos, clarify instructions (#1239) 2018-12-05 06:57:13 +01:00
William Woodruff
319b630cf4 docs/gce: Fix typos, clarify instructions (#1239) 2018-12-05 06:57:13 +01:00
David Myers
d097f4e6a0 Increase memory limit for dnsmasq (#1228)
* Increase memory limit for dnsmasq

* Increase memory limit for dnsmasq further
2018-12-03 12:32:23 -05:00
David Myers
66681521c1 Increase memory limit for dnsmasq (#1228)
* Increase memory limit for dnsmasq

* Increase memory limit for dnsmasq further
2018-12-03 12:32:23 -05:00
TC1977
b39b8eb6a5 Update mobileconfig.j2
Not sure why I had it at 120 for this. I'm running fine with both IKE lifetime and CHILD_SA lifetimes at 1440 (Apple default).
2018-12-03 10:36:47 -05:00
TC1977
5b59557a46
Update mobileconfig.j2
Not sure why I had it at 120 for this. I'm running fine with both IKE lifetime and CHILD_SA lifetimes at 1440 (Apple default).
2018-12-03 10:36:47 -05:00
David Myers
cc37d11ece Run adblock.sh at a random time (#1227) 2018-12-03 15:33:36 +01:00
David Myers
8d23f715d7 Run adblock.sh at a random time (#1227) 2018-12-03 15:33:36 +01:00
jxn
ef62de1eeb fix typo in powershell execution in windows client set up doc (#1224) 2018-11-29 14:11:26 +01:00
jxn
66bbf0e83a fix typo in powershell execution in windows client set up doc (#1224) 2018-11-29 14:11:26 +01:00
Jack Sullivan
1a3c1754f6 Add "unable to write 'random state'" resolution (#1219)
I ran into the same issue as #1058, and the solution worked.

This PR generalizes the solution and adds it to the troubleshooting documentation, making it easier to resolve for future users.
2018-11-27 07:09:33 +01:00
Jack Sullivan
adb4dfa839 Add "unable to write 'random state'" resolution (#1219)
I ran into the same issue as #1058, and the solution worked.

This PR generalizes the solution and adds it to the troubleshooting documentation, making it easier to resolve for future users.
2018-11-27 07:09:33 +01:00
David Myers
79d46b9c8b Add p12 password back to mobileconfigs (#1218) 2018-11-26 16:58:34 +01:00
David Myers
22395f5f84 Add p12 password back to mobileconfigs (#1218) 2018-11-26 16:58:34 +01:00
Jack Ivanov
8a42c29422 on-build python venvs (#1199) 2018-11-22 13:04:58 -05:00
Jack Ivanov
a66d8f0069 on-build python venvs (#1199) 2018-11-22 13:04:58 -05:00
Jack Ivanov
458f2f11d7 dnscrypt-proxy apparmor fix (#1210)
<!--- Provide a general summary of your changes in the Title above -->

## Description
Apparmor profile for dnscrypt-proxy didn't work at all

## Motivation and Context
Fixes #1155

## How Has This Been Tested?
Deployed to DigitalOcean, checked that the dnscrypt-proxy binary is in enforce mode

## Types of changes
<!--- What types of changes does your code introduce? Put an `x` in all the boxes that apply: -->
- [x] Bug fix (non-breaking change which fixes an issue)

## Checklist:
<!--- Go over all the following points, and put an `x` in all the boxes that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're here to help! -->
- [x] I have read the **CONTRIBUTING** document.
- [x] My code follows the code style of this project.
- [x] All new and existing tests passed.
2018-11-22 13:04:37 -05:00
Jack Ivanov
9187d8e637 dnscrypt-proxy apparmor fix (#1210)
<!--- Provide a general summary of your changes in the Title above -->

## Description
Apparmor profile for dnscrypt-proxy didn't work at all

## Motivation and Context
Fixes #1155

## How Has This Been Tested?
Deployed to DigitalOcean, checked that the dnscrypt-proxy binary is in enforce mode

## Types of changes
<!--- What types of changes does your code introduce? Put an `x` in all the boxes that apply: -->
- [x] Bug fix (non-breaking change which fixes an issue)

## Checklist:
<!--- Go over all the following points, and put an `x` in all the boxes that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're here to help! -->
- [x] I have read the **CONTRIBUTING** document.
- [x] My code follows the code style of this project.
- [x] All new and existing tests passed.
2018-11-22 13:04:37 -05:00
Jack Ivanov
ec9fe77821 BSD StrongSwan fixes (#1207) 2018-11-20 19:20:24 +01:00
Jack Ivanov
45b00ee994
BSD StrongSwan fixes (#1207) 2018-11-20 19:20:24 +01:00
TC1977
b13e738d30 Merge pull request #3 from TC1977/patch-1
Change server-side ipsec.conf settings
2018-11-20 11:57:23 -05:00
TC1977
8331d69f34
Merge pull request #3 from TC1977/patch-1
Change server-side ipsec.conf settings
2018-11-20 11:57:23 -05:00
TC1977
23fb432317 Change server-side ipsec.conf settings
Switching to inline rekeying from reauthentication, and lengthening child_SA and IKE_SA lifetimes.
2018-11-20 11:56:42 -05:00
TC1977
fb93ed75ab
Change server-side ipsec.conf settings
Switching to inline rekeying from reauthentication, and lengthening child_SA and IKE_SA lifetimes.
2018-11-20 11:56:42 -05:00
TC1977
3d5578136e Merge pull request #2 from TC1977/patch-2
Update mobileconfig.j2
2018-11-20 11:43:14 -05:00
TC1977
efc5ff8339
Merge pull request #2 from TC1977/patch-2
Update mobileconfig.j2
2018-11-20 11:43:14 -05:00
TC1977
e1abdf8414 Merge pull request #1 from trailofbits/master
Update
2018-11-20 11:41:47 -05:00
TC1977
fd15c65784
Merge pull request #1 from trailofbits/master
Update
2018-11-20 11:41:47 -05:00
TC1977
c77100a957 Update mobileconfig.j2
Changes Child_SA lifetime to 2 hours, and IKE_SA lifetime to 12 hrs (Apple default is actually 12h for both).
2018-11-20 11:38:53 -05:00
TC1977
a4e4e2182a
Update mobileconfig.j2
Changes Child_SA lifetime to 2 hours, and IKE_SA lifetime to 12 hrs (Apple default is actually 12h for both).
2018-11-20 11:38:53 -05:00
David Myers
55a2d9df04 Detect when running in Docker (#1204) 2018-11-16 07:22:57 +01:00
David Myers
d8b318b59a Detect when running in Docker (#1204) 2018-11-16 07:22:57 +01:00
Jack Ivanov
5cb7670804 Rename Docker.md to deploy-from-docker.md 2018-11-15 10:22:11 +01:00
Jack Ivanov
1c16554b41
Rename Docker.md to deploy-from-docker.md 2018-11-15 10:22:11 +01:00
jxn
8a4870ad80 fix typos in docker documentation and shell-script text (#1202) 2018-11-14 06:57:55 +01:00
jxn
affadd401d fix typos in docker documentation and shell-script text (#1202) 2018-11-14 06:57:55 +01:00
Jack Ivanov
3e1821093b WireGuard update-users fix (#1183) 2018-11-12 18:03:31 +01:00
Jack Ivanov
66d30e3005
WireGuard update-users fix (#1183) 2018-11-12 18:03:31 +01:00
TC1977
0a89073f44 Troubleshooting.md updates (#1195)
* Troubleshooting.md updates

Adds solutions to #1067 to the troubleshooting faq. Also moves a couple of answers to correspond to the headers.

* Change to Algo, strongly rec Ubuntu 18.04
2018-11-12 14:01:37 +01:00