Quentin McGaw
cc36ba5207
Safer docker login and fails on any command in travis
2019-04-26 12:54:09 +02:00
Quentin McGaw
4249d1469e
Trying to fix Travis yml file
2019-04-26 12:41:49 +02:00
Quentin McGaw
fb3e3be6ac
Changed Travis.yml file a little
2019-04-26 12:32:00 +02:00
Quentin McGaw
29d9fb5879
Reworked Travis CI to produce ARM images
2019-04-26 12:28:32 +02:00
Quentin McGaw
00f6c74869
Fixes #23 with new ARM build instructions
2019-04-23 20:28:05 +02:00
Quentin McGaw
ddc9d4d80a
Fixed typo
2019-04-23 14:07:39 +02:00
Quentin McGaw
6dab611027
Updated ARM Dockerfiles
2019-04-23 10:41:05 +02:00
Quentin McGaw
305b5954f9
Upgrade to Alpine 3.9
2019-04-23 10:32:31 +02:00
Quentin McGaw
aad11510f5
More defaults and fixing typos
2019-04-23 10:32:15 +02:00
Quentin McGaw
b26cb508de
Splitted BLOCK_MALICIOUS with BLOCK_NSA and UNBLOCK env variable
2019-04-23 10:29:44 +02:00
Quentin McGaw
3a473da1de
Updated readme for ARM devices and DNS leak tests
2019-04-03 19:21:49 +02:00
Quentin McGaw
7065bd3cb7
Merge remote-tracking branch 'origin/master'
2019-04-02 14:54:58 +02:00
Quentin McGaw
c5cb4f535c
Fixed docker-compose example in readme, fixes #21
2019-04-02 14:54:46 +02:00
Quentin McGaw
364049ab94
Downgraded Alpine to 3.8
2019-03-20 11:35:54 -04:00
Quentin McGaw
27802ba886
Runs OpenVPN as root by default, fixes #19
2019-03-18 11:27:36 +01:00
Quentin McGaw
10483f81dc
Updated readme
2019-02-27 19:31:04 +01:00
Quentin McGaw
217b45c724
Collapsible content in readme
2019-02-01 08:30:10 +01:00
Quentin McGaw
a3bfa2d77a
Changed healthcheck to only ping 1.1.1.1 to check connectivity
...
This is because your VPN public IP might not be the VPN server entrance IP address, resulting in the container being unhealthy most of the time.
2019-01-15 14:40:28 +01:00
Quentin McGaw
370098f5ca
Added Paypal donate link
2019-01-14 14:14:40 +01:00
Quentin McGaw
79d8cca525
Updated readme
2019-01-14 13:28:11 +01:00
Quentin McGaw
26c04af7c4
Corrected arm32v7 to arm32v6
2019-01-14 09:57:57 +01:00
Quentin McGaw
5b81e34a90
Added ARM images for 32 bit v6 (Rasberry Pi) and 64 bit v8
2019-01-14 09:55:46 +01:00
Quentin McGaw
80d5f7a661
Removed empty ticks from readme table
2019-01-14 09:55:14 +01:00
Quentin McGaw
4077b27d92
Unbound has TLS cert specified (just in case)
2019-01-14 09:54:49 +01:00
Quentin McGaw
63eae489c7
Reduced image size by removing unbound useless binaries
2019-01-14 09:54:33 +01:00
Quentin McGaw
a8e88cc7fc
Replaced external docker images with Github hosted files
2019-01-01 23:14:36 +02:00
Quentin McGaw
24ba0958ac
Fixed healthcheck
2018-11-27 21:09:21 +02:00
Quentin McGaw
2b45ba3425
The target files are created in /openvpn/target
...
- More resilience to failure
- Less verbose
- Works with start/stop
2018-11-27 17:50:08 +02:00
Quentin McGaw
0f02500a85
Moved all OpenVPN parameters to conf file + fixing AUTH_FAILED messages
2018-11-20 09:28:48 +02:00
Quentin McGaw
6c062eaee1
Fixed docker-compose to use bridge network
2018-11-20 09:27:25 +02:00
Quentin McGaw
7149688b2c
Added section on docker-compose services to publish ports
2018-11-20 09:27:10 +02:00
Quentin McGaw
91e55d8884
Re-added section on publishing ports of containers connected to PIA
2018-11-18 19:31:09 +02:00
Quentin McGaw
d1ebddb029
Fixed auth_failed error
...
- Removed nonrootgroup
- File directories are slightly different
- Resolv-retry is removed as pointless as IP addresses are used
- Fixed some arguments to openvpn
2018-11-17 14:44:17 +02:00
Quentin McGaw
9ba7f5969c
Fixed healthcheck
2018-11-15 14:41:39 +02:00
Quentin McGaw
9c6afff973
Healthcheck checks your IP is in the VPN configuration file
2018-11-14 16:25:23 +02:00
Quentin McGaw
eb1dc371c5
Added dummy credentials
2018-11-14 16:24:56 +02:00
Quentin McGaw
d3dc6c74d8
Multiple additions and fixes #12
...
- Unbound ran as `nonrootuser`
- Readme updated
- auth.conf replaced by `USER` and `PASSWORD` env variables
- Removed Nginx section from readme for now
- Reworked entrypoint with more checks
- Malicious IPs and hostnames building is done at Docker build to gain time at launch
- docker-compose updated to reflect changes
2018-11-14 14:38:10 +02:00
Quentin McGaw
3c79ba33bb
Fixes #13
2018-11-06 18:26:24 +01:00
Quentin McGaw
7b4c216fc8
Reworked project overall
2018-11-06 14:55:11 +01:00
Quentin McGaw
f5919d0aab
Readme update
2018-10-29 17:03:24 +01:00
Quentin McGaw
08d1afccfe
Reworked labels, readme and added License
2018-10-29 16:32:11 +01:00
Quentin McGaw
4bcaec6a33
Big refactoring (more secured, more modular)
...
- Region change to "CA Montreal"
- Using external data images for malicious hostnames
- Added malicious IP addresses blocking with Unbound
- Unbound has DNS rebinding protection
2018-10-28 14:08:14 +01:00
Quentin McGaw
e6b5166c7f
Merge pull request #8 from janaz/update-md5
...
Update Dockerfile to contain newer `named.roots` and newer packages (forgot `--update` flag, thanks @janaz )
2018-10-28 10:35:27 +01:00
Quentin McGaw
d5e15f3011
Merge pull request #7 from janaz/fix-duplicate-remote
...
Don't insert duplicate ip addresses to the openvpn config file
2018-10-28 10:34:46 +01:00
Tomasz Janowski
559bec0ba0
Update md5 hash of the named.root file
2018-10-28 16:46:18 +11:00
Tomasz Janowski
867992f435
Run apk with --update --no-cache flags to fetch a fresh list of dependencies
2018-10-28 16:45:56 +11:00
Tomasz Janowski
1af242f773
Don't insert duplicate ip addresses to the openvpn config file
...
A new set of ip addresses is appended on every restart of the container which eventually results in openvpn error "Maximum number of 'remote' options (64) exceeded."
2018-10-28 16:43:55 +11:00
Quentin McGaw
3bc45d930c
Hostnames block is done in memory only
2018-10-10 10:24:15 +02:00
Quentin McGaw
d12f44fd6b
Fixes #6 (forgot quotes for $REGION.ovpn)
2018-10-08 08:45:11 +02:00
Quentin McGaw
e0f201a334
Openvpn runs as non root user and tries all IP addresses
2018-10-05 12:43:16 +02:00