Quentin McGaw (desktop)
ba4c3e30a4
Doc: docker-compose.yml does not use secrets
2021-06-17 22:46:30 +00:00
Quentin McGaw
85afef5775
Change: gluetun docker image name
2020-12-29 22:10:44 +00:00
Quentin McGaw
5917bb10e4
Feature: Docker secrets, refers to #306
2020-12-29 20:47:56 +00:00
Quentin McGaw
96f2b2b617
Change: PASSWORD changed to OPENVPN_PASSWORD
2020-12-29 20:05:17 +00:00
Quentin McGaw
d556db079b
Change: USER changed to OPENVPN_USER
2020-12-29 20:02:58 +00:00
Quentin McGaw
0c9f74ffa4
HTTP proxy written in Go to replace Tinyproxy ( #269 )
2020-10-31 21:50:31 -04:00
Quentin McGaw
ed4fcc17b3
Routing improvements ( #268 )
...
- Fixes #82
- Remove `EXTRA_SUBNETS`
- Remove no longer needed iptables rules
- Reduce routing interface arity
- Routing setup is done in main.go instead of in the firewall
- Routing setup gets reverted at shutdown
2020-10-24 18:05:11 -04:00
Quentin McGaw
aa9693a84d
Persistent server pools ( #226 )
...
* GetAllServers with version & timestamp tests
* Storage package to sync servers
* Use storage Sync to get and use servers
2020-08-25 19:38:50 -04:00
Quentin McGaw
1281026850
Nordvpn support ( #189 ), fix #178
2020-07-15 18:14:45 -04:00
Quentin McGaw
4f502abcf8
Cyberghost support ( #168 )
...
* Host finder CLI for cyberghost
* Resolver program updated with Cyberghost data
* Gluetun cli clientkey subcommand
2020-06-13 10:43:47 -04:00
Quentin McGaw
cfb4dd84bc
Replace pia with gluetun wherever possible
...
- in Readme documentation
- Changed splash title string
- Changed Dockerfile labels
- Changed commands and docker-compose service & container name
2020-06-03 02:11:35 +00:00
Quentin McGaw
20a3327815
Minor changes
...
- PORT is for Mullvad but also Windscribe (docker-compose, README.md)
- Windscribe configurator does not need lookupIP anymore
2020-06-02 23:07:29 +00:00
Quentin McGaw
96e57d2c32
Surfshark ( #167 )
2020-05-29 07:24:27 -04:00
Quentin McGaw
6b81ed6bde
Unneeded Docker init, Go entrypoint does it
2020-05-29 10:12:38 +00:00
Quentin McGaw
d0926111e0
Env variables cleanup in Docker config files
2020-05-29 00:03:10 +00:00
Quentin McGaw
d73765a5f5
DNS_UPDATE_PERIOD environment variable
2020-05-05 18:00:56 +00:00
Quentin McGaw
7cd35737ba
Defaults DOT_IPV6 to off
2020-05-02 15:40:40 +00:00
Quentin McGaw
f4cd1896c9
Go HTTP control server with restart openvpn route
...
- Fix #147
- Dockerfile updated
- Documentation updated
- Using contexts to restart openvpn
- Code foundation for more http routes
2020-04-30 23:41:57 +00:00
Quentin McGaw
768147095f
Golangcilint in build pipeline and fix lint errors
...
- Fix bad permissions bits for files
- VPNSP is 'private internet access' instead of 'pia' (retro compatible)
- Check errors of deferred unsetEnv functions in params package
- Other lint errors fixing and code simplifications
2020-04-12 20:05:28 +00:00
Quentin McGaw
76cea56864
Windscribe support ( #114 )
2020-03-29 16:42:06 -04:00
Quentin McGaw
643745d33e
OPENVPN_AUTH variable, refers to #94
2020-03-29 16:22:21 -04:00
Quentin McGaw
98b076e2cb
Rename ENCRYPTION to PIA_ENCRYPTION ( #98 )
2020-03-26 08:11:50 -04:00
Quentin McGaw
9435db8e1e
Fix #90 add env variable OPENVPN_TARGET_IP
2020-03-18 23:49:40 +00:00
Quentin McGaw
d2b361b998
Fix #81 , new env variable OPENVPN_ROOT
2020-03-18 23:05:47 +00:00
Quentin McGaw (desktop)
0c48d2d5a0
DOT_IPV6 environment variable added, refers to #88
2020-03-05 00:51:04 +00:00
Quentin McGaw (desktop)
ac60cf8ab8
Minor changes
2020-02-22 17:07:06 +00:00
Quentin McGaw (desktop)
f45f40eee1
Added OPENVPN_VERBOSITY environment variable
2020-02-22 15:48:09 +00:00
Quentin McGaw (desktop)
f181ff0005
Added Mullvad environment variables and getters
2020-02-16 20:30:29 +00:00
Quentin McGaw (desktop)
792f70ffa7
No need to map /dev/net/tun device anymore
2020-02-08 15:46:59 +00:00
Quentin McGaw
64649039d9
Rewrite of the entrypoint in Golang ( #71 )
...
- General improvements
- Parallel download of only needed files at start
- Prettier console output with all streams merged (openvpn, unbound, shadowsocks etc.)
- Simplified Docker final image
- Faster bootup
- DNS over TLS
- Finer grain blocking at DNS level: malicious, ads and surveillance
- Choose your DNS over TLS providers
- Ability to use multiple DNS over TLS providers for DNS split horizon
- Environment variables for DNS logging
- DNS block lists needed are downloaded and built automatically at start, in parallel
- PIA
- A random region is selected if the REGION parameter is left empty (thanks @rorph for your PR)
- Routing and iptables adjusted so it can work as a Kubernetes pod sidecar (thanks @rorph for your PR)
2020-02-06 20:42:46 -05:00
Quentin McGaw
bea809778b
Shadowsocks proxy built-in, fixes #30 ( #46 )
...
* Added ShadowSocks proxy to container
* Updated docker-compose.yml example
* Updated readme with new instructions for Shadowsocks proxy
2019-09-09 20:39:47 -04:00
Quentin McGaw
9eac515f31
Fixes #35 not working docker-compose.yml
2019-07-28 18:18:59 -04:00
Quentin McGaw
cb7bba6d42
Large refactoring: proxy+firewall+readme
...
- Cleaner logs
- HTTP proxy is working... finally
- Firewall was adjusted
- Firewall cannot be turned off anymore
- portforward script changes the firewall
- readme reworked
- Possibility to pass commands to Openvpn with Docker command
2019-06-29 13:42:44 +02:00
Quentin McGaw
cc140464b8
Updated environment variables for docker-compose
2019-06-27 13:14:32 +02:00
Quentin McGaw
8ce905bd1d
Added web HTTP proxy
2019-06-27 13:12:03 +02:00
Quentin McGaw
95e69b5c9c
More modularity and reworked readme
...
- Docker's init added to avoid zombie processes (i.e. Unbound)
- Added environment variables to enable or disable features: `DOT`, `FIREWALL`
- Reworked readme
2019-06-27 13:10:51 +02:00
Quentin McGaw
aad11510f5
More defaults and fixing typos
2019-04-23 10:32:15 +02:00
Quentin McGaw
b26cb508de
Splitted BLOCK_MALICIOUS with BLOCK_NSA and UNBLOCK env variable
2019-04-23 10:29:44 +02:00
Quentin McGaw
6c062eaee1
Fixed docker-compose to use bridge network
2018-11-20 09:27:25 +02:00
Quentin McGaw
eb1dc371c5
Added dummy credentials
2018-11-14 16:24:56 +02:00
Quentin McGaw
d3dc6c74d8
Multiple additions and fixes #12
...
- Unbound ran as `nonrootuser`
- Readme updated
- auth.conf replaced by `USER` and `PASSWORD` env variables
- Removed Nginx section from readme for now
- Reworked entrypoint with more checks
- Malicious IPs and hostnames building is done at Docker build to gain time at launch
- docker-compose updated to reflect changes
2018-11-14 14:38:10 +02:00
Quentin McGaw
7b4c216fc8
Reworked project overall
2018-11-06 14:55:11 +01:00
Quentin McGaw
4bcaec6a33
Big refactoring (more secured, more modular)
...
- Region change to "CA Montreal"
- Using external data images for malicious hostnames
- Added malicious IP addresses blocking with Unbound
- Unbound has DNS rebinding protection
2018-10-28 14:08:14 +01:00
Quentin McGaw
ede5979541
Reverted back to creating tun device manually
2018-06-01 14:38:27 -04:00
Quentin McGaw
f5b05cfc39
Removed device from docker compose
2018-05-27 21:02:17 -04:00
Quentin McGaw
6be3846d74
Added choice of UDP/TCP and level of encryption. Reworked readme and Dockerfile
2018-04-15 14:15:58 -04:00
Quentin McGaw
07dc509e6f
Updated RAM usage and CPU usage, fixed docker-compose
2018-04-13 17:51:22 -04:00
Quentin McGaw
3bd804843c
Added Cloudflare 1.1.1.1 DNS over TLS
2018-04-13 15:35:31 -04:00
Quentin McGaw
8be3dedae5
Updated readme and labels
2018-03-31 21:56:18 -04:00
Quentin McGaw
32036c9822
Updated repo
2018-03-31 20:33:45 -04:00