Commit Graph
30 Commits
Author SHA1 Message Date
Ruben JongejanandDan Guido 07ddb5863b improved readability with native yaml (#530) 2017-05-08 16:34:24 -04:00
Jack IvanovandDan Guido bd348af9c2 Implementing blocks and additional fail hints #487 (#497)
change the troubleshooting url
2017-04-29 10:48:25 -04:00
Dan GuidoandGitHub aac052da46 this option is deprecated (#477) 2017-04-23 09:04:30 -04:00
Jack IvanovandDan Guido a7b06058cb remove the proxy role #440 (#457)
* remove the proxy role #440

* Separate facts. Make roles more independent from each other

move openssl to local tasks

move unneeded tasks
2017-04-20 18:00:17 -04:00
Dan GuidoandGitHub b29772f146 prefer ed25519 2017-04-18 02:20:44 -04:00
Jauder HoandDan Guido 5b2e13d18f Only enable ChaCha cipher (#412)
* Only enable ChaCha cipher

* Add back a few ciphers for compatability
2017-04-17 23:17:40 -04:00
Jack Ivanov 95e0134f21 1. Disable SSH key deploying if installation on existing server
2. Move to the ed25519 algorithm
3. Delete unneeded option RSAAuthentication
Fixes #272
2017-04-09 20:41:45 +02:00
brad2014andDan Guido 09e5d87c7b Minor name and documentation edits (#327) 2017-04-01 00:19:10 -04:00
Jack IvanovandGitHub 6facb6cb4f FreeBSD / HardenedBSD (#262)
* FreeBSD draft

ifconfig fix

Pre-tasks fixes

fix hardcoded IP

some refactoring

disable system-based tags

disable freebsd tags

FreeBSD vpn role

add defaults

ssh role freebsd

default fix

dns_adblocking freebsd

ubuntu dict fix

* HardenedBSD

update-users BSD

* Rebuild the kernel

docs changing
2017-03-18 12:22:07 +03:00
Jack Ivanov c43ccc3898 iptables moved to the vpn role #61 2016-10-14 18:50:24 +03:00
Jack Ivanov 2cca45c967 additional tags 2016-10-10 15:32:14 +03:00
Jack Ivanov 4d731580b7 linting 2016-09-19 20:18:27 +03:00
Jack Ivanov 91688324ce additional functions 2016-08-28 23:19:41 +03:00
Jack Ivanov 97a00699b7 new tags 2016-08-28 23:04:59 +03:00
Jack Ivanov 05df4f0c04 unattended-upgrades moved to the security role 2016-08-28 22:11:39 +03:00
Evgeniy Ivanov 4284dd63aa rsyslog moved to the logging role 2016-08-28 22:06:33 +03:00
Jack Ivanov 0cd4084aa4 ssh fixes 2016-08-26 00:47:08 +03:00
Jack Ivanov 00e4bcc1ec security role and SSH fixes #77 2016-08-26 00:35:07 +03:00
Dan Guido 27421070b9 linting 2016-08-24 09:22:04 +02:00
Defunct 50f43dc601 revert systemd changes (2.2 only), identation normalization; 2016-08-23 02:02:57 +00:00
Evgeniy Ivanov c51fe5dac0 run charon as non-root user #66 2016-08-21 20:32:31 +03:00
Evgeniy Ivanov ba50abce8a make local ip changeable #67 2016-08-21 13:29:53 +03:00
Evgeniy Ivanov e6090b8245 forwarding #61 2016-08-21 12:51:58 +03:00
Evgeniy Ivanov de06b4fd9e security remarks 2016-08-20 16:24:00 +03:00
Evgeniy Ivanov 3fa75a081d new iptabes deployment #61 2016-08-20 16:22:14 +03:00
Evgeniy Ivanov cfc38e3df1 Drop SMB traffic ##61 2016-08-20 15:19:46 +03:00
Dan Guido f538ffe4e8 linting 2016-08-15 23:32:44 -04:00
jack 7a8d58783f Roles and Google cloud 2016-08-14 20:03:33 +03:00
jack 2f66b03880 EC2 Role; Loggin Role 2016-08-11 22:36:36 +03:00
jack fff70293f1 Roles enabled 2016-08-11 11:54:34 +03:00