docker-compose.yml

version: "3.7"
services:
  pia:
    build: https://github.com/qdm12/private-internet-access-docker.git
    image: qmcgaw/private-internet-access
    container_name: pia
    cap_add:
      - NET_ADMIN
    network_mode: bridge
    init: true
    ports:
      - 8888:8888/tcp
      - 8388:8388/tcp
      - 8388:8388/udp
    # command:
    environment:
      - USER=js89ds7
      - PASSWORD=8fd9s239G
      - ENCRYPTION=strong
      - PROTOCOL=udp
      - REGION=CA Montreal
      - DOT=on
      - DOT_PROVIDERS=cloudflare
      - BLOCK_MALICIOUS=on
      - BLOCK_SURVEILLANCE=off
      - BLOCK_ADS=off
      - UNBLOCK=
      - EXTRA_SUBNETS=
      - TINYPROXY=off
      - TINYPROXY_LOG=Info
      - TINYPROXY_USER=
      - TINYPROXY_PASSWORD=
      - SHADOWSOCKS=off
      - SHADOWSOCKS_LOG=on
      - SHADOWSOCKS_PORT=8388
      - SHADOWSOCKS_PASSWORD=
    restart: always
Shadowsocks proxy built-in, fixes #30 (#46) * Added ShadowSocks proxy to container * Updated docker-compose.yml example * Updated readme with new instructions for Shadowsocks proxy 2019-09-09 20:39:47 -04:00			`version: "3.7"`
Updated repo 2018-03-31 20:33:45 -04:00			`services:`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`pia:`
Reworked project overall 2018-11-06 14:55:11 +01:00			`build: https://github.com/qdm12/private-internet-access-docker.git`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`image: qmcgaw/private-internet-access`
			`container_name: pia`
			`cap_add:`
			`- NET_ADMIN`
Fixed docker-compose to use bridge network 2018-11-20 09:27:25 +02:00			`network_mode: bridge`
More modularity and reworked readme - Docker's init added to avoid zombie processes (i.e. Unbound) - Added environment variables to enable or disable features: `DOT`, `FIREWALL` - Reworked readme 2019-06-27 13:10:51 +02:00			`init: true`
Added web HTTP proxy 2019-06-27 13:12:03 +02:00			`ports:`
			`- 8888:8888/tcp`
Shadowsocks proxy built-in, fixes #30 (#46) * Added ShadowSocks proxy to container * Updated docker-compose.yml example * Updated readme with new instructions for Shadowsocks proxy 2019-09-09 20:39:47 -04:00			`- 8388:8388/tcp`
			`- 8388:8388/udp`
			`# command:`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`environment:`
Added dummy credentials 2018-11-14 16:24:56 +02:00			`- USER=js89ds7`
			`- PASSWORD=8fd9s239G`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`- ENCRYPTION=strong`
Updated environment variables for docker-compose 2019-06-27 13:14:32 +02:00			`- PROTOCOL=udp`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`- REGION=CA Montreal`
Updated environment variables for docker-compose 2019-06-27 13:14:32 +02:00			`- DOT=on`
Rewrite of the entrypoint in Golang (#71) - General improvements - Parallel download of only needed files at start - Prettier console output with all streams merged (openvpn, unbound, shadowsocks etc.) - Simplified Docker final image - Faster bootup - DNS over TLS - Finer grain blocking at DNS level: malicious, ads and surveillance - Choose your DNS over TLS providers - Ability to use multiple DNS over TLS providers for DNS split horizon - Environment variables for DNS logging - DNS block lists needed are downloaded and built automatically at start, in parallel - PIA - A random region is selected if the REGION parameter is left empty (thanks @rorph for your PR) - Routing and iptables adjusted so it can work as a Kubernetes pod sidecar (thanks @rorph for your PR) 2020-02-06 20:42:46 -05:00			`- DOT_PROVIDERS=cloudflare`
Updated environment variables for docker-compose 2019-06-27 13:14:32 +02:00			`- BLOCK_MALICIOUS=on`
Rewrite of the entrypoint in Golang (#71) - General improvements - Parallel download of only needed files at start - Prettier console output with all streams merged (openvpn, unbound, shadowsocks etc.) - Simplified Docker final image - Faster bootup - DNS over TLS - Finer grain blocking at DNS level: malicious, ads and surveillance - Choose your DNS over TLS providers - Ability to use multiple DNS over TLS providers for DNS split horizon - Environment variables for DNS logging - DNS block lists needed are downloaded and built automatically at start, in parallel - PIA - A random region is selected if the REGION parameter is left empty (thanks @rorph for your PR) - Routing and iptables adjusted so it can work as a Kubernetes pod sidecar (thanks @rorph for your PR) 2020-02-06 20:42:46 -05:00			`- BLOCK_SURVEILLANCE=off`
			`- BLOCK_ADS=off`
Splitted `BLOCK_MALICIOUS` with `BLOCK_NSA` and `UNBLOCK` env variable 2019-04-23 10:29:44 +02:00			`- UNBLOCK=`
Updated environment variables for docker-compose 2019-06-27 13:14:32 +02:00			`- EXTRA_SUBNETS=`
Rewrite of the entrypoint in Golang (#71) - General improvements - Parallel download of only needed files at start - Prettier console output with all streams merged (openvpn, unbound, shadowsocks etc.) - Simplified Docker final image - Faster bootup - DNS over TLS - Finer grain blocking at DNS level: malicious, ads and surveillance - Choose your DNS over TLS providers - Ability to use multiple DNS over TLS providers for DNS split horizon - Environment variables for DNS logging - DNS block lists needed are downloaded and built automatically at start, in parallel - PIA - A random region is selected if the REGION parameter is left empty (thanks @rorph for your PR) - Routing and iptables adjusted so it can work as a Kubernetes pod sidecar (thanks @rorph for your PR) 2020-02-06 20:42:46 -05:00			`- TINYPROXY=off`
			`- TINYPROXY_LOG=Info`
Shadowsocks proxy built-in, fixes #30 (#46) * Added ShadowSocks proxy to container * Updated docker-compose.yml example * Updated readme with new instructions for Shadowsocks proxy 2019-09-09 20:39:47 -04:00			`- TINYPROXY_USER=`
			`- TINYPROXY_PASSWORD=`
Rewrite of the entrypoint in Golang (#71) - General improvements - Parallel download of only needed files at start - Prettier console output with all streams merged (openvpn, unbound, shadowsocks etc.) - Simplified Docker final image - Faster bootup - DNS over TLS - Finer grain blocking at DNS level: malicious, ads and surveillance - Choose your DNS over TLS providers - Ability to use multiple DNS over TLS providers for DNS split horizon - Environment variables for DNS logging - DNS block lists needed are downloaded and built automatically at start, in parallel - PIA - A random region is selected if the REGION parameter is left empty (thanks @rorph for your PR) - Routing and iptables adjusted so it can work as a Kubernetes pod sidecar (thanks @rorph for your PR) 2020-02-06 20:42:46 -05:00			`- SHADOWSOCKS=off`
Shadowsocks proxy built-in, fixes #30 (#46) * Added ShadowSocks proxy to container * Updated docker-compose.yml example * Updated readme with new instructions for Shadowsocks proxy 2019-09-09 20:39:47 -04:00			`- SHADOWSOCKS_LOG=on`
Rewrite of the entrypoint in Golang (#71) - General improvements - Parallel download of only needed files at start - Prettier console output with all streams merged (openvpn, unbound, shadowsocks etc.) - Simplified Docker final image - Faster bootup - DNS over TLS - Finer grain blocking at DNS level: malicious, ads and surveillance - Choose your DNS over TLS providers - Ability to use multiple DNS over TLS providers for DNS split horizon - Environment variables for DNS logging - DNS block lists needed are downloaded and built automatically at start, in parallel - PIA - A random region is selected if the REGION parameter is left empty (thanks @rorph for your PR) - Routing and iptables adjusted so it can work as a Kubernetes pod sidecar (thanks @rorph for your PR) 2020-02-06 20:42:46 -05:00			`- SHADOWSOCKS_PORT=8388`
Shadowsocks proxy built-in, fixes #30 (#46) * Added ShadowSocks proxy to container * Updated docker-compose.yml example * Updated readme with new instructions for Shadowsocks proxy 2019-09-09 20:39:47 -04:00			`- SHADOWSOCKS_PASSWORD=`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`restart: always`