Quentin McGaw
1693c4ed8a
chore(env): PRIVATE_INTERNET_ACCESS_VPN_PORT_FORWARDING
...
- With retro-compatibility with `PORT_FORWARDING`
2022-02-06 19:59:07 +00:00
Quentin McGaw
ae9b3279c3
chore(env): PRIVATE_INTERNET_ACCESS_OPENVPN_ENCRYPTION_PRESET variable
...
- With retro-compatibility with `PIA_ENCRYPTION` and `ENCRYPTION`
2022-02-06 19:59:07 +00:00
Quentin McGaw
04956e45c7
chore(env): OPENVPN_CIPHERS variable
...
- With retro-compatibility with `OPENVPN_CIPHER`
2022-02-06 19:59:07 +00:00
Quentin McGaw
027664af7b
chore(env): VPN_SERVICE_PROVIDER variable
...
- With retro-compatibility with `VPNSP`
2022-02-06 19:59:07 +00:00
Quentin McGaw
f8d5f76bdf
chore(env): WIREGUARD_ADDRESSES variable
...
- With retro-compatibility with `WIREGUARD_ADDRESS`
2022-02-06 19:59:07 +00:00
Quentin McGaw
114f9be47f
chore(env): DNS_ADDRESS variable
...
- With retro-compatibility with `DNS_PLAINTEXT_ADDRESS`
2022-02-06 19:59:07 +00:00
Quentin McGaw
5603e25542
chore(env): VPN_INTERFACE
...
- With retro-compatibility with `OPENVPN_INTERFACE`
- With retro-compatibility with `WIREGUARD_INTERFACE`
2022-02-06 19:59:07 +00:00
Quentin McGaw
e7b0f4c6be
feat(vpn): VPN_ENDPOINT_PORT
...
- Deprecate `OPENVPN_PORT`
- Deprecate `WIREGUARD_ENDPOINT_PORT`
2022-02-06 19:59:07 +00:00
Quentin McGaw
a951110461
feat(vpn): VPN_ENDPOINT_IP
...
- Deprecate `OPENVPN_TARGET_IP`
- Deprecate `WIREGUARD_ENDPOINT_IP`
2022-01-28 00:09:58 +00:00
Quentin McGaw
7a8f5f53d5
feat(openvpn): OPENVPN_PROCESS_USER and deprecates OPENVPN_ROOT
2022-01-27 23:34:19 +00:00
Quentin McGaw
1b585159d1
feat(server): HTTP_CONTROL_SERVER_PORT to HTTP_CONTROL_SERVER_ADDRESS
2022-01-27 23:15:08 +00:00
Quentin McGaw (desktop)
f3692cd47f
feat(mullvad): OWNED to OWNED_ONLY
2022-01-27 14:12:25 +00:00
Quentin McGaw (desktop)
9fb085f361
hotfix(updater): do not default to custom
2022-01-27 12:57:27 +00:00
Quentin McGaw
9de6428585
feat(pprof): add pprof HTTP server ( #807 )
...
- `PPROF_ENABLED=no`
- `PPROF_BLOCK_PROFILE_RATE=0`
- `PPROF_MUTEX_PROFILE_RATE=0`
- `PPROF_HTTP_SERVER_ADDRESS=":6060"`
2022-01-26 17:23:55 -05:00
Quentin McGaw (desktop)
7a50daca7c
feat(Dockerfile): entrypoint name to gluetun-entrypoint
2022-01-19 00:23:50 +00:00
Quentin McGaw
2ad23a09e8
fix(dockerfile): change SHADOWSOCKS_ADDRESS to SHADOWSOCKS_LISTENING_ADDRESS
2022-01-13 17:10:09 +00:00
Quentin McGaw
7d824a5179
chore(settings): refactor settings processing ( #756 )
...
- Better settings tree structure logged using `qdm12/gotree`
- Read settings from environment variables, then files, then secret files
- Settings methods to default them, merge them and override them
- `DNS_PLAINTEXT_ADDRESS` default changed to `127.0.0.1` to use DoT. Warning added if set to something else.
- `HTTPPROXY_LISTENING_ADDRESS` instead of `HTTPPROXY_PORT` (with retro-compatibility)
2022-01-06 06:40:23 -05:00
Quentin McGaw
ca82fcb48e
feat(docker): upgrade Alpine to 3.15
2021-12-14 18:16:51 +00:00
Quentin McGaw
2d244c08e7
Fix: 2 low vulnerability busybox issues
2021-11-12 23:04:42 +00:00
Quentin McGaw
82c0f523aa
fix: openvpn at /usr/sbin/openvpn2.5
...
- Fix operation on QNAP devices
- Refer to #157
2021-11-12 22:48:19 +00:00
Quentin McGaw
e4c306c0ee
chore(linter): update golangci-lint to v1.43.0
2021-11-07 21:26:31 +00:00
Quentin McGaw (desktop)
678e23c7d6
Change: run OpenVPN as root to clean routes on exit
2021-11-01 22:51:03 +00:00
Quentin McGaw (desktop)
d405ba8dca
Feat: run OpenVPN without root
2021-10-05 21:33:15 +00:00
Quentin McGaw (desktop)
f9aadeef1c
Maint: Remove CYBERGHOST_GROUP (change)
...
- It does not make any sense with newer server data
- It was to be deprecated anyway
2021-09-23 13:54:24 +00:00
Quentin McGaw (desktop)
6bcbaf085d
Maint: remove NordVPN SERVER_NAME filter
...
- Filter was not effective
- Is to be deprecated in v4 anyway
- Bump NordVPN server model version to `3`
- Remove `Name` field from NordVPN server model
2021-09-21 23:56:29 +00:00
Quentin McGaw (desktop)
b8356b60a6
Maint: use OPENVPN_PORT instead of PORT
...
with retro-compatibility
2021-09-18 16:09:21 +00:00
Quentin McGaw (desktop)
61677fbce2
Maint: migrate PROTOCOL to OPENVPN_PROTOCOL
2021-09-14 19:27:13 +00:00
Quentin McGaw (desktop)
2cf7f7b268
Maint: WIREGUARD_PORT to WIREGUARD_ENDPOINT_PORT
2021-09-13 20:06:47 +00:00
Quentin McGaw (desktop)
8645d978ba
Feat: VPNSP=custom for Wireguard
...
- `WIREGUARD_PUBLIC_KEY` variable
- `WIREGUARD_ENDPOINT_IP` variable
2021-09-13 19:33:04 +00:00
Quentin McGaw (desktop)
11af6c10f1
HotFix: use newer HEALTH variables in Dockerfile
2021-09-13 01:30:37 +00:00
Quentin McGaw (desktop)
cc677bde93
Maint: change default ping address to github.com to test DNS
2021-09-11 22:27:32 +00:00
Quentin McGaw (desktop)
6627cda96c
Feat: HEALTH_ADDRESS_TO_PING variable
...
- Defaults to `1.1.1.1`
- Add more Ping integration tests with different addresses
- Add unit test pinging 127.0.0.1
- Add comment explaining why we need to use ICMP instead of UDP
2021-09-11 22:22:55 +00:00
Quentin McGaw (desktop)
bcaf2e42fd
Maint: re-order Dockerfile environment variables
2021-09-11 15:24:00 +00:00
Quentin McGaw (desktop)
d39201f9b3
Fix: public IP loop deadlock
2021-09-10 22:54:02 +00:00
Quentin McGaw
b69dcb62e3
LOG_LEVEL variable (#577 )
2021-08-22 18:57:10 -07:00
Quentin McGaw
614eb10d67
Wireguard support for Mullvad and Windscribe ( #565 )
...
- `internal/wireguard` client package with unit tests
- Implementation works with kernel space or user space if unavailable
- `WIREGUARD_PRIVATE_KEY`
- `WIREGUARD_ADDRESS`
- `WIREGUARD_PRESHARED_KEY`
- `WIREGUARD_PORT`
- `internal/netlink` package used by `internal/wireguard`
2021-08-22 14:58:39 -07:00
Quentin McGaw (desktop)
96ee1bbfb2
Maint: upgrade from Go 1.16 to Go 1.17
2021-08-20 00:07:41 +00:00
Quentin McGaw (desktop)
abaf688ad8
Doc: update readme
...
- Image size lowered to 34MB
- Using Alpine 3.14
- Beta wireguard support
2021-08-19 23:53:47 +00:00
Quentin McGaw (desktop)
bec8ff27ae
Feat: OPENVPN_INTERFACE defaulting to tun0
...
- Fix: custom config with custom network interface name for firewall
- Keep VPN tunnel interface in firewall state
- Vul fix: only allow traffic through vpn interface when needed
- Adapt code to adapt to network interface name
- Remove outdated TUN and TAP constants
2021-08-19 23:22:55 +00:00
Quentin McGaw (desktop)
74b7c81195
Fix: apk-tools culnerability fix installation
...
- Install apk-tools before using apk
- Install latest apk-tools so it can be rebuilt in the future
2021-08-09 14:49:45 +00:00
Quentin McGaw (desktop)
6d1a90cac0
Fix: use apk-tools 2.12.7-r0
...
- valid for ppc64le
- additional security fix
2021-08-09 01:21:19 +00:00
Quentin McGaw (desktop)
c61f854edc
Maint: upgrade ss-server to v0.3.0
...
- `SHADOWSOCKS_PORT` in retrocompatibility
- `SHADOWSOCKS_METHOD` in retrocompatibility
- `SHADOWSOCKS_ADDRESS` added
- `SHADOWSOCKS_CIPHER` added
- Shadowsocks config inherit from ss-server's Settings
- Log adapter removed as no longer needed
2021-07-29 00:48:46 +00:00
Quentin McGaw (desktop)
7d4f5c8906
Fix: Alpine vulnerability with apk
2021-07-27 19:45:23 +00:00
Quentin McGaw (desktop)
c33402ce66
Feat: HEALTH_SERVER_ADDRESS
2021-07-22 20:45:17 +00:00
Quentin McGaw (desktop)
6acb7caf5b
Feat: Env variables to set health timeouts
...
- HEALTH_OPENVPN_DURATION_INITIAL
- HEALTH_OPENVPN_DURATION_ADDITION
2021-07-22 20:13:20 +00:00
Quentin McGaw (desktop)
b7bd23ab60
Fix: buildDate renamed to created in Dockerfile
2021-07-20 23:10:33 +00:00
Quentin McGaw (desktop)
e0735b57ce
Maint: build all images fully in parallel
2021-07-20 15:47:28 +00:00
Quentin McGaw (desktop)
1e0bfc3b0c
Maint: rename BUILD_DATE to CREATED
2021-07-20 15:28:02 +00:00
Quentin McGaw (desktop)
cb0e89a38e
Maint: use curly braces around BUILDPLATFORM
2021-07-20 15:27:16 +00:00
Quentin McGaw (desktop)
394abbbe35
Feat: specify Openvpn flags with OPENVPN_FLAGS
2021-07-19 15:10:53 +00:00