docker-compose.yml

version: '3'
services:
  pia:
    build: https://github.com/qdm12/private-internet-access-docker.git
    image: qmcgaw/private-internet-access
    container_name: pia
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun
    network_mode: bridge
    init: true
    environment:
      - USER=js89ds7
      - PASSWORD=8fd9s239G
      - PROTOCOL=udp
      - ENCRYPTION=strong
      - REGION=CA Montreal
      - EXTRA_SUBNETS=
      - NONROOT=no
      - BLOCK_MALICIOUS=off
      - BLOCK_NSA=off
      - UNBLOCK=
    restart: always
Updated repo 2018-03-31 20:33:45 -04:00			`version: '3'`
			`services:`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`pia:`
Reworked project overall 2018-11-06 14:55:11 +01:00			`build: https://github.com/qdm12/private-internet-access-docker.git`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`image: qmcgaw/private-internet-access`
			`container_name: pia`
			`cap_add:`
			`- NET_ADMIN`
			`devices:`
			`- /dev/net/tun`
Fixed docker-compose to use bridge network 2018-11-20 09:27:25 +02:00			`network_mode: bridge`
More modularity and reworked readme - Docker's init added to avoid zombie processes (i.e. Unbound) - Added environment variables to enable or disable features: `DOT`, `FIREWALL` - Reworked readme 2019-06-27 13:10:51 +02:00			`init: true`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`environment:`
Added dummy credentials 2018-11-14 16:24:56 +02:00			`- USER=js89ds7`
			`- PASSWORD=8fd9s239G`
Multiple additions and fixes #12 - Unbound ran as `nonrootuser` - Readme updated - auth.conf replaced by `USER` and `PASSWORD` env variables - Removed Nginx section from readme for now - Reworked entrypoint with more checks - Malicious IPs and hostnames building is done at Docker build to gain time at launch - docker-compose updated to reflect changes 2018-11-14 14:38:10 +02:00			`- PROTOCOL=udp`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`- ENCRYPTION=strong`
			`- REGION=CA Montreal`
Multiple additions and fixes #12 - Unbound ran as `nonrootuser` - Readme updated - auth.conf replaced by `USER` and `PASSWORD` env variables - Removed Nginx section from readme for now - Reworked entrypoint with more checks - Malicious IPs and hostnames building is done at Docker build to gain time at launch - docker-compose updated to reflect changes 2018-11-14 14:38:10 +02:00			`- EXTRA_SUBNETS=`
More defaults and fixing typos 2019-04-23 10:32:15 +02:00			`- NONROOT=no`
Splitted `BLOCK_MALICIOUS` with `BLOCK_NSA` and `UNBLOCK` env variable 2019-04-23 10:29:44 +02:00			`- BLOCK_MALICIOUS=off`
			`- BLOCK_NSA=off`
			`- UNBLOCK=`
Big refactoring (more secured, more modular) - Region change to "CA Montreal" - Using external data images for malicious hostnames - Added malicious IP addresses blocking with Unbound - Unbound has DNS rebinding protection 2018-10-28 14:08:14 +01:00			`restart: always`