* fix sed device or resource busy errors
Signed-off-by: Jonathan Sloan <jsloan117@gmail.com>
* update info
Signed-off-by: Jonathan Sloan <jsloan117@gmail.com>
* update docs
Signed-off-by: Jonathan Sloan <jsloan117@gmail.com>
* log and fail if config is a mountpoint
Signed-off-by: Jonathan Sloan <jsloan117@gmail.com>
* correct mountpoint check
Signed-off-by: Jonathan Sloan <jsloan117@gmail.com>
Signed-off-by: Jonathan Sloan <jsloan117@gmail.com>
* Update vpn-networking.md
yea, used your guide today and was a bit irritated that if you run the command for the proxy container it gets a random name.
* Update vpn-networking.md
forgot the backslash
* Fixed typo in line 95
`form` to `from`
* supported setting DISABLE_PORT_UPDATER to false
previously DISABLE_PORT_UPDATER had to not exist..now it can also be set to false
* Fix minor typos (#2074)
* Fixed missing $ from UFW variable use
There were a number of variable references missing $
* Fixed some more variables missing $
* Removed outdated typeset
this fixes and closes#2095
* Fix building-blocks links (#2126)
* Update bug_report.yaml
* Fix PIA token script
Co-authored-by: Kobi <kobirosenstein@gmail.com>
Co-authored-by: Kristian Haugene <haugene@users.noreply.github.com>
Co-authored-by: Patrick Kishino <patrick.a.kishino@gmail.com>
Co-authored-by: Sean Kelly <xconverge@users.noreply.github.com>
Co-authored-by: Chris Buckley <chris@cmbuckley.co.uk>
* Fixed typo in line 95
`form` to `from`
* supported setting DISABLE_PORT_UPDATER to false
previously DISABLE_PORT_UPDATER had to not exist..now it can also be set to false
* Fix minor typos (#2074)
* Fixed missing $ from UFW variable use
There were a number of variable references missing $
* Fixed some more variables missing $
* Removed outdated typeset
this fixes and closes#2095
* Fix building-blocks links (#2126)
* Update bug_report.yaml
* Update start.sh
Co-authored-by: Kobi <kobirosenstein@gmail.com>
Co-authored-by: Kristian Haugene <haugene@users.noreply.github.com>
Co-authored-by: Patrick Kishino <patrick.a.kishino@gmail.com>
Co-authored-by: Sean Kelly <xconverge@users.noreply.github.com>
Co-authored-by: Chris Buckley <chris@cmbuckley.co.uk>
* Fixed typo in line 95
`form` to `from`
* supported setting DISABLE_PORT_UPDATER to false
previously DISABLE_PORT_UPDATER had to not exist..now it can also be set to false
* Fix minor typos (#2074)
* Fixed missing $ from UFW variable use
There were a number of variable references missing $
* Fixed some more variables missing $
* Removed outdated typeset
this fixes and closes#2095
* add capability for routes-post-start.sh
* update docs
* amended position
placed entry where it should be in logical order when thinking about container lifecycle
Co-authored-by: Kobi <kobirosenstein@gmail.com>
Co-authored-by: Kristian Haugene <haugene@users.noreply.github.com>
Co-authored-by: Patrick Kishino <patrick.a.kishino@gmail.com>
Co-authored-by: Sean Kelly <xconverge@users.noreply.github.com>
* DEBUG: print all lines before execution
if var DEBUG is set to anything other than false, each bash script will be run with a set -x. This would ease debugging
* DEBUG: centralize commands in utils.sh
* Add openvpn-post-config hook
Adds a script check for /scripts/openvpn-post-config.sh, designed so you can make any custom changes to the selected openvpn config file after everything else is ready.
* Update config documentation
Added openvpn-post-config to the documentation. Not sure if openvpn-pre-start should be edited to say before the configuration is processed.
* Fix typo
Serves me right for making changes before bed.
`PEER_DNS` previously was using 'yes/no', but the standard is 'true/false'. This realigns
#1819 to that standard.
For `PEER_DNS_PIN_ROUTES`, no one should be effected by the configurable change- it's been in
the dev branch only for a few days.
`PEER_DNS` however, has been available for users for a few months now, and users have
been told to use `PEER_DNS=no` in places like #1713 or #1667 . Realigning the boolean definition
here is 'a breaking change' technically, although it's my strong suspicion that #1819 fixed
the underlying problem that warranted users using `PEER_DNS=no` in the first place.
I defer to the codebase owner's opinion for how they want this to be handedl.
* docs: add PEER_DNS documentation
#1713 Added dnsleak protections, but didn't document the escape hatch to
disable it. This adds that documentation.
* fix: pin routes for DNS if PEER_DNS is active.
See #1667 for context and user's impacted; PIA for example advertises DNS
servers in the 10.0.0.0/8 range (10.0.0.243 for example). If the home
LAN is 10.0.0.0/8- common- they'll have `LOCAL_NETWORK=10.0.0.0/8` which
will pin a prefer to route through the eth rather than tunnel. The end
result being that DNS is unreachable since the tunnel must be used to reach
said DNS.
This commit modifies tunnelUp.sh such if we honor DNS routes given by the
provider, we force the route to that IP to go through the tunnel; this
overrides any local net range conflict that may occur.
Finally, this behaviour can be suppressed via `PEER_DNS_PIN_ROUTES=no`.
* fix: Add explicit dockerfile env defaults for PEER_DNS*
* Create Duplicates.yml
* Rename Duplicates.yml to potential_duplicates.yml
* password alternative
Co-authored-by: Patrick Kishino <patrick.a.kishino@gmail.com>
* Use latest Privoxy from source tarball
* PRIVOXY only, tinyproxy/ enc config stuff comment out
* Privoxy config dir fix
* Privoxy 3.0.29 is stable
* Remove commented out code
* Implement `make install-strip` suggestion :)
* Refactor all tinyproxy references to privoxy
* refactor scripts to sub folder
* Should be able to set privoxy WEBPROXY_PORT dynamically via sed
* Fix tinyproxy references
* Update openvpn/tunnelUp.sh
Co-authored-by: Amos Shapira <amos.shapira@gmail.com>
* No more weird indents
* PrivoxyBuilder
* Add pcre mbedtls non dev packages to image
* Update openvpn/tunnelDown.sh
Co-authored-by: Amos Shapira <amos.shapira@gmail.com>
* Update web-proxy.md
Co-authored-by: Jonathan Dilks <jay-to-the-dee@users.noreply.github.com>
Co-authored-by: Amos Shapira <amos.shapira@gmail.com>
Co-authored-by: Patrick Kishino <patrick.a.kishino@gmail.com>
* RSS plugin not supporting HTTP authorization
This fork will fix the issue #781
* Add rpc login details to rss plugin if necessary
* updated docs
Co-authored-by: Patrick Kishino <patrick.a.kishino@gmail.com>