Commit Graph

163 Commits

Author SHA1 Message Date
Quentin McGaw
34ad99989a Updated readme 2019-06-08 09:36:48 +02:00
Quentin McGaw
b494431070 Full rework of readme with simplified instructions and collapsibles 2019-05-23 11:58:52 +02:00
Quentin McGaw
46205625ad Fixed readme typos 2019-05-22 22:47:13 +02:00
Quentin McGaw
56b333d06b Updated README
- Fixed ARM instructions
- More collapsibles
- Added all-in-one docker-compose example from issue 21
2019-05-22 09:34:33 +02:00
Quentin McGaw
21aba4680d Readme update and typo fixes 2019-04-26 21:43:26 +02:00
Quentin McGaw
39ed1d93f5 Dropped building of ARM images in Travis CI in favor of manual building 2019-04-26 16:20:23 +02:00
Quentin McGaw
99f48b964b Adding QEMU static arm binary to build ARM images 2019-04-26 16:02:14 +02:00
Quentin McGaw
29d9fb5879 Reworked Travis CI to produce ARM images 2019-04-26 12:28:32 +02:00
Quentin McGaw
00f6c74869 Fixes #23 with new ARM build instructions 2019-04-23 20:28:05 +02:00
Quentin McGaw
ddc9d4d80a Fixed typo 2019-04-23 14:07:39 +02:00
Quentin McGaw
305b5954f9 Upgrade to Alpine 3.9 2019-04-23 10:32:31 +02:00
Quentin McGaw
aad11510f5 More defaults and fixing typos 2019-04-23 10:32:15 +02:00
Quentin McGaw
b26cb508de Splitted BLOCK_MALICIOUS with BLOCK_NSA and UNBLOCK env variable 2019-04-23 10:29:44 +02:00
Quentin McGaw
3a473da1de Updated readme for ARM devices and DNS leak tests 2019-04-03 19:21:49 +02:00
Quentin McGaw
c5cb4f535c Fixed docker-compose example in readme, fixes #21 2019-04-02 14:54:46 +02:00
Quentin McGaw
27802ba886 Runs OpenVPN as root by default, fixes #19 2019-03-18 11:27:36 +01:00
Quentin McGaw
10483f81dc Updated readme 2019-02-27 19:31:04 +01:00
Quentin McGaw
217b45c724 Collapsible content in readme 2019-02-01 08:30:10 +01:00
Quentin McGaw
370098f5ca Added Paypal donate link 2019-01-14 14:14:40 +01:00
Quentin McGaw
79d8cca525 Updated readme 2019-01-14 13:28:11 +01:00
Quentin McGaw
5b81e34a90 Added ARM images for 32 bit v6 (Rasberry Pi) and 64 bit v8 2019-01-14 09:55:46 +01:00
Quentin McGaw
80d5f7a661 Removed empty ticks from readme table 2019-01-14 09:55:14 +01:00
Quentin McGaw
a8e88cc7fc Replaced external docker images with Github hosted files 2019-01-01 23:14:36 +02:00
Quentin McGaw
2b45ba3425 The target files are created in /openvpn/target
- More resilience to failure
- Less verbose
- Works with start/stop
2018-11-27 17:50:08 +02:00
Quentin McGaw
7149688b2c Added section on docker-compose services to publish ports 2018-11-20 09:27:10 +02:00
Quentin McGaw
91e55d8884 Re-added section on publishing ports of containers connected to PIA 2018-11-18 19:31:09 +02:00
Quentin McGaw
9c6afff973 Healthcheck checks your IP is in the VPN configuration file 2018-11-14 16:25:23 +02:00
Quentin McGaw
d3dc6c74d8 Multiple additions and fixes #12
- Unbound ran as `nonrootuser`
- Readme updated
- auth.conf replaced by `USER` and `PASSWORD` env variables
- Removed Nginx section from readme for now
- Reworked entrypoint with more checks
- Malicious IPs and hostnames building is done at Docker build to gain time at launch
- docker-compose updated to reflect changes
2018-11-14 14:38:10 +02:00
Quentin McGaw
7b4c216fc8 Reworked project overall 2018-11-06 14:55:11 +01:00
Quentin McGaw
f5919d0aab Readme update 2018-10-29 17:03:24 +01:00
Quentin McGaw
08d1afccfe Reworked labels, readme and added License 2018-10-29 16:32:11 +01:00
Quentin McGaw
4bcaec6a33 Big refactoring (more secured, more modular)
- Region change to "CA Montreal"
- Using external data images for malicious hostnames
- Added malicious IP addresses blocking with Unbound
- Unbound has DNS rebinding protection
2018-10-28 14:08:14 +01:00
Quentin McGaw
b8dbf0761f Moved DNS over TLS at start as DNS is required in firewall anyway 2018-09-28 19:51:30 +02:00
Quentin McGaw
2b7c7cc62a Restarts on fail; DNS over TLS only when connected to VPN; readme update 2018-09-21 16:39:08 +02:00
Quentin McGaw
6929947611 Runs openvpn as non-root user 2018-09-21 11:39:00 +02:00
Quentin McGaw
706050619d Re-added Unbound DNS over TLS
It turns out you can't use a local DNS server once connected with the VPN, so running the DNS over TLS in the PIA container is the best.
2018-09-21 11:28:23 +02:00
Quentin McGaw
b652823d89 Removed Unbound from image
Better use it in another Docker container, it caused quite some problems with my firewall so I thought it would be better to only
2018-09-20 20:35:29 +02:00
Quentin McGaw
852748ec81 Update to Alpine 3.8 2018-09-08 16:04:05 +02:00
Quentin McGaw
7aa43274b1 Killswitch added with firewall, fixes #3 2018-06-06 22:44:11 -04:00
Quentin McGaw
72ef2e99e7 Updated readme with more on Extra section 2018-06-03 18:05:10 -04:00
Quentin McGaw
6984842da9 Updated Readme for installing tun depending on OS (insmod or modprobe) 2018-06-01 16:04:13 -04:00
Quentin McGaw
56121106a9 Added modprobe doc for raspbian, fixes #2 2018-06-01 15:02:07 -04:00
Quentin McGaw
ede5979541 Reverted back to creating tun device manually 2018-06-01 14:38:27 -04:00
Quentin McGaw
88dac5bdee Tun device is created inside the container, fixes #2 2018-05-27 21:00:42 -04:00
Quentin McGaw
adade5698e Finished dockerfile and updating RAM usage 2018-04-16 14:50:24 -04:00
Quentin McGaw
ce00e3e2b0 Fixed entrypoint permission; Updated image sizes 2018-04-16 14:31:50 -04:00
Quentin McGaw
dd99f7e306 Added healthcheck 2018-04-15 14:52:27 -04:00
Quentin McGaw
0e06200b71 Updated readme and pictures 2018-04-15 14:21:44 -04:00
Quentin McGaw
6be3846d74 Added choice of UDP/TCP and level of encryption. Reworked readme and Dockerfile 2018-04-15 14:15:58 -04:00
Quentin McGaw
07dc509e6f Updated RAM usage and CPU usage, fixed docker-compose 2018-04-13 17:51:22 -04:00