docker-compose.yml

version: '3'
services:
  pia:
    build: https://github.com/qdm12/private-internet-access-docker.git
    image: qmcgaw/private-internet-access
    container_name: pia
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun
    network_mode: bridge
    init: true
    ports:
      - 8888:8888/tcp
    environment:
      - USER=js89ds7
      - PASSWORD=8fd9s239G
      - ENCRYPTION=strong
      - PROTOCOL=udp
      - REGION=CA Montreal
      - NONROOT=no
      - DOT=on
      - BLOCK_MALICIOUS=on
      - BLOCK_NSA=off
      - UNBLOCK=
      - FIREWALL=on
      - EXTRA_SUBNETS=
      - PROXY=on
      - PROXY_LOG_LEVEL=Critical
      - PROXY_USER=
      - PROXY_PASSWORD=
    restart: always
Updated repo 2018-03-31 20:33:45 -04:00			`version: '3'`
			`services:`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`pia:`
Reworked project overall 2018-11-06 14:55:11 +01:00			`build: https://github.com/qdm12/private-internet-access-docker.git`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`image: qmcgaw/private-internet-access`
			`container_name: pia`
			`cap_add:`
			`- NET_ADMIN`
			`devices:`
			`- /dev/net/tun`
Fixed docker-compose to use bridge network 2018-11-20 09:27:25 +02:00			`network_mode: bridge`
More modularity and reworked readme - Docker's init added to avoid zombie processes (i.e. Unbound) - Added environment variables to enable or disable features: `DOT`, `FIREWALL` - Reworked readme 2019-06-27 13:10:51 +02:00			`init: true`
Added web HTTP proxy 2019-06-27 13:12:03 +02:00			`ports:`
			`- 8888:8888/tcp`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`environment:`
Added dummy credentials 2018-11-14 16:24:56 +02:00			`- USER=js89ds7`
			`- PASSWORD=8fd9s239G`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`- ENCRYPTION=strong`
Updated environment variables for docker-compose 2019-06-27 13:14:32 +02:00			`- PROTOCOL=udp`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`- REGION=CA Montreal`
More defaults and fixing typos 2019-04-23 10:32:15 +02:00			`- NONROOT=no`
Updated environment variables for docker-compose 2019-06-27 13:14:32 +02:00			`- DOT=on`
			`- BLOCK_MALICIOUS=on`
Splitted `BLOCK_MALICIOUS` with `BLOCK_NSA` and `UNBLOCK` env variable 2019-04-23 10:29:44 +02:00			`- BLOCK_NSA=off`
			`- UNBLOCK=`
Updated environment variables for docker-compose 2019-06-27 13:14:32 +02:00			`- FIREWALL=on`
			`- EXTRA_SUBNETS=`
			`- PROXY=on`
			`- PROXY_LOG_LEVEL=Critical`
			`- PROXY_USER=`
			`- PROXY_PASSWORD=`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`restart: always`