Commit Graph

89 Commits

Author SHA1 Message Date
ttasket
88b4097c23 Switch to 'su -' envs, quote vars, rm --dport 53
Thanks Marek!
2016-06-04 22:46:18 -04:00
ttasket
a09ec964ad Automatic; No manual coding of IP addresses.
This requires the user only to add a few lines to their ovpn config file, and copy a few scripts (verbatim). They do not have to figure out which IP addresses are appropriate and hard-code them--unless their VPN service is bereft of domain names. Even in that case, they can do it easily within the ovpn config file. This is much less error-prone and should work with a greater variety of services (large commercial services tend to change their IPs so using domain names and DHCP is preferable in that case).

Also converted firewall section (3) to one code block for much less cutting/pasting. Comments are still there as shell comments.

The only required template changes are adding openvpn itself and possibly disabling the default systemd service for it. Everything else should be there in /rw/config.

This doesn't include extra firewall protections against inadvertent net access from within the VPN VM. I'm thinking of proposing those additions in a separate edit.
2016-06-04 20:01:58 -04:00
john-david-r-smith
c6da0b0664 now using systemd to start openvpn 2016-05-26 09:02:52 +02:00
john-david-r-smith
a9ae590f6f removed unnecessary + dangerous iptables rule 2016-05-26 08:42:25 +02:00
john-david-r-smith
bed89b7eab fixed typo 2016-05-25 23:26:55 +02:00
john-david-r-smith
bccd9558b3 how to setup an openvpn connection using iptables 2016-05-25 22:55:27 +02:00
Yufan Lou
2f4afec4c3 Fix list format and typo
- Add a newline to make the list render as HTML list.
- "kernel modules in cumbersome." -> "kernel modules is cumbersome."
2016-05-16 13:51:23 +08:00
Marek Marczykowski-Górecki
2bd264f627
salt: Document how to configure system inside of VM 2016-05-01 03:47:32 +02:00
Axon
160a5f24c0
Improve clarity, grammar, links, and formatting 2016-03-22 21:53:39 +00:00
Axon
64294f6da2
Add HTTP Filtering Proxy guide
QubesOS/qubes-issues#1202
2016-03-18 17:19:32 +00:00
Axon
6c855f8810
Clean up and organize doc files 2016-03-15 11:15:31 +00:00
Henry de Valence
af89a57c7b Clarify that resizing root.img requires shutting down AppVMs 2016-03-03 15:28:01 +01:00
youknow0
37cac07a8f Fix link to disposable VM doc
previous link was 404
2016-02-24 18:07:39 +01:00
Axon
73a546854a
Clean up and organize privacy pages
* Logically organize the Whonix-related pages
* Move the VPN page to /configuration/
  * VPNs are used for more than just privacy, and many VPN setups and
    services either can't or don't claim to provide privacy.
* Remove `/privacy/` from URLs
  * These directory names are just for organizing the source pages,
    *unless* an actual page resides there. Since there is no
    /doc/privacy/ page, it's unnecessary and misleading to have this in
    the URLs. It also breaks uniformity, since none of the other pages
    have their informal group name in their URL (again, unless there's
    a page with that name).
2016-02-20 21:15:30 +00:00
Axon
a22db63b3b
Move and rename Salt page
Explanation: All of our other pages consist of an .md file with
the name (or a suitably similar name) of that page. This commit
renames `configuration/salt/index.md` to `configuration/salt.md`
so that it will follow the organization of the other pages.
2016-01-28 10:12:57 +00:00
r00t
0baa097f9b Fix a few typos 2016-01-10 18:41:30 -05:00
Patrick Schleizer
296851a947
fixed broken /en/ links
https://github.com/QubesOS/qubes-issues/issues/1460#issuecomment-163016388
2015-12-09 16:29:45 +00:00
Brennan Novak
84c1a0c722 fixed merge conflict QubesOS/qubes-issues#1202 2015-12-02 19:14:39 +01:00
Marek Marczykowski-Górecki
ed0942c7a5
mgmt-salt: add links to documentation, typo fix 2015-11-29 15:14:16 +01:00
Wojtek Porczyk
227d88db72 Documentation for mgmt-salt 2015-11-28 01:54:28 +01:00
Marek Marczykowski-Górecki
850dbde967
TorVM: update config path 2015-11-25 15:33:51 +01:00
Danny Fullerton
07c38cd29c Minor tidying. 2015-11-23 14:59:25 -05:00
Patrick Schleizer
e4ad2ed1f6 resize2fs not required for qvm-grow-private 2015-11-20 16:54:16 +01:00
Marek Marczykowski-Górecki
279b1c89a8
Managing VM kernel documentation, including PV GRUB
QubesOS/qubes-issues#1354
2015-11-12 02:42:32 +01:00
Axon
be65e57a4f
Do not explicitly use curl to verify torified connectivity 2015-11-08 00:14:32 +00:00
Raphaël Vinot
77ac6ca6fe Fix typo
If it's not a typo, there is something I don't understand.
2015-11-08 00:24:10 +01:00
Axon
be451b60aa Merge branch 'master' of github.com:QubesOS/qubes-doc 2015-11-04 20:15:20 +00:00
Axon
da05b91347
Fix Markdown syntax and clean up text 2015-11-04 20:14:56 +00:00
Patrick Schleizer
9fe05212ba Update vpn.md 2015-11-04 12:39:57 +00:00
Axon
fc385586b6
Remove en/ from URLs (QubesOS/qubes-issues#1333) 2015-10-28 22:14:40 +00:00
Axon
2e68758b50
Remove en/ directory (QubesOS/qubes-issues#1333) 2015-10-28 21:00:07 +00:00
Axon
a91496e9d6
Move current pages to /en/ subdirectory 2015-10-11 07:29:00 +00:00
Axon
f3ee78f223
Change URIs from CamelCase to lowercase-hyphen-separated 2015-10-11 07:04:59 +00:00
Jeepler
b1b09f69f2 merged QubesBuilder.md 2015-10-08 02:25:39 +02:00
Axon
70d3037c8c
Add permission modification step 2015-10-07 07:10:20 +00:00
Axon
d4e41ddace
Add troubleshooting tip 2015-10-06 22:28:14 +00:00
Jeepler
39ef7373fd replaced all github flavored code blocks with fenced kramdown code blocks 2015-09-27 01:00:33 +02:00
Axon
bd877ddc54
Assign unsorted pages and delete deprecated/blank/test pages 2015-09-26 02:28:41 +00:00
Axon
6a0c757996
Implement directory structure 2015-09-23 13:22:13 +00:00