aboutsummaryrefslogtreecommitdiffstats
path: root/disposable
diff options
context:
space:
mode:
authorterminaldweller <devi@terminaldweller.com>2024-05-31 06:18:53 +0000
committerterminaldweller <devi@terminaldweller.com>2024-05-31 06:18:53 +0000
commit93fadc60b63050a7960b0277e3b200b7ca5c4c8a (patch)
tree70cf2ee67922a76634cb70953c81576b97f66dc5 /disposable
parenttor disposable (diff)
downloadvagrantboxes-93fadc60b63050a7960b0277e3b200b7ca5c4c8a.tar.gz
vagrantboxes-93fadc60b63050a7960b0277e3b200b7ca5c4c8a.zip
added a vpn to disposable
Diffstat (limited to '')
-rw-r--r--disposable/Vagrantfile42
1 files changed, 40 insertions, 2 deletions
diff --git a/disposable/Vagrantfile b/disposable/Vagrantfile
index 6522b1e..b21d234 100644
--- a/disposable/Vagrantfile
+++ b/disposable/Vagrantfile
@@ -27,7 +27,7 @@ Vagrant.configure('2') do |config|
libvirt.storage_pool_name = 'ramdisk'
libvirt.default_prefix = 'disposable-'
libvirt.driver = 'kvm'
- libvirt.memory = '2048'
+ libvirt.memory = '3076'
libvirt.cpus = 6
libvirt.sound_type = nil
libvirt.qemuargs value: '-nographic'
@@ -39,8 +39,9 @@ Vagrant.configure('2') do |config|
end
config.vm.provision 'update-upgrade', type: 'shell', name: 'update-upgrade', inline: <<-SHELL
+ set -ex
sudo apk update && sudo apk upgrade
- sudo apk add tor torsocks firefox-esr xauth font-dejavu wget
+ sudo apk add tor torsocks firefox-esr xauth font-dejavu wget openvpn unzip iptables
wget -q https://addons.mozilla.org/firefox/downloads/file/4228676/foxyproxy_standard-8.9.xpi
mv foxyproxy_standard-8.9.xpi foxyproxy@eric.h.jung.xpi
mkdir -p ~/.mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/
@@ -48,10 +49,47 @@ Vagrant.configure('2') do |config|
SHELL
config.vm.provision 'update-upgrade-privileged', type: 'shell', name: 'update-upgrade-privileged', privileged: true, inline: <<-SHELL
+ set -ex
sed -i 's/^#X11DisplayOffset .*/X11DisplayOffset 0/' /etc/ssh/sshd_config
sed -i 's/^X11Forwarding .*/X11Forwarding yes/' /etc/ssh/sshd_config
rc-service sshd restart
+
+ #rc-update add tor default
cp /vagrant/torrc /etc/tor/torrc
rc-service tor start
+
+ #rc-update add openvpn default
+ mkdir -p /tmp/mullvad/ && \
+ cp /vagrant/mullvad_openvpn_linux_fi_hel.zip /tmp/mullvad/ && \
+ cd /tmp/mullvad && \
+ unzip mullvad_openvpn_linux_fi_hel.zip && \
+ mv mullvad_config_linux_fi_hel/mullvad_fi_hel.conf /etc/openvpn/openvpn.conf && \
+ mv mullvad_config_linux_fi_hel/mullvad_userpass.txt /etc/openvpn/ && \
+ mv mullvad_config_linux_fi_hel/mullvad_ca.crt /etc/openvpn/ && \
+ mv mullvad_config_linux_fi_hel/update-resolv-conf /etc/openvpn && \
+ chmod 755 /etc/openvpn/update-resolv-conf
+ modprobe tun
+ echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.d/ipv4.conf
+ sysctl -p /etc/sysctl.d/ipv4.conf
+ rc-service openvpn start || true
+ SHELL
+
+ config.vm.provision 'mullvad-test', type: 'shell', name: 'test', privileged: false, inline: <<-SHELL
+ set -ex
+ curl https://am.i.mullvad.net/connected | grep -i "you\ are\ connected"
+ SHELL
+
+ config.vm.provision 'kill-switch', communicator_required: false, type: 'shell', name: 'kill-switch', privileged: true, inline: <<-SHELL
+ set -ex
+ iptables -P OUTPUT DROP
+ iptables -A OUTPUT -o tun+ -j ACCEPT
+ iptables -A INPUT -i lo -j ACCEPT
+ iptables -A OUTPUT -o lo -j ACCEPT
+ iptables -A OUTPUT -d 255.255.255.255 -j ACCEPT
+ iptables -A INPUT -s 255.255.255.255 -j ACCEPT
+ iptables -A OUTPUT -o eth+ -p udp -m multiport --dports 53,1300:1302,1194:1197 -d 141.98.255.0/24,193.138.218.0/24,45.83.220.0/24,185.213.152.0/24,185.213.154.0/24,185.65.135.0/24,185.65.134.0/24 -j ACCEPT
+ iptables -A OUTPUT -o eth+ -p tcp -m multiport --dports 53,443 -d 141.98.255.0/24,193.138.218.0/24,45.83.220.0/24,185.213.152.0/24,185.213.154.0/24,185.65.135.0/24,185.65.134.0/24 -j ACCEPT
+ ip6tables -P OUTPUT DROP
+ ip6tables -A OUTPUT -o tun+ -j ACCEPT
SHELL
end