From charlesreid1

No edit summary
Line 1: Line 1:
All the setup involved for bespin, a Ubuntu 18.04 desktop server.
All the setup involved for bespin, a Ubuntu 18.04 desktop server.


=Inital Setup=
* [[Ubuntu/Bespin/Initial Setup]] - initial setup of the Ubuntu machine


[[Ubuntu/Bespin/Initial Setup]]
* [[Ubuntu/Bespin/Gnome Setup]] - setting up gnome on the Ubuntu machine


=Gnome Setup=
* [[Ubuntu/Bespin/Ansible]] - setting up and running an Ansible role for the machine


[[Ubuntu/Bespin/Gnome Setup]]
* [[Ubuntu/Bespin/PIA]] - set up a [[PIA]] VPN tunnel using [[OpenVPN]]


=Ansible Setup=
* [[Ubuntu/Bespin/PiHole]] - run an instance of PiHole, the DNS sinkhole, in a Docker container; install it between dnsmasq and the VPN tunnel, so all DNS queries will pass through the PiHole


[[Ubuntu/Bespin/Ansible]]
* [[Ubuntu/Bespin/Dnsmasq]] - brush up the dnsmasq configuration file


=Wifi Access Point Setup=
* [[Ubuntu/Bespin/Iptables]] - Update the iptables rules to allow better protection of the server and be less permissive


[[Ubuntu/Bespin/Old/Wifi AP Setup]]


=VPN Tunnel=


[[Ubuntu/Bespin/PIA]]


=Connect AP to VPN Tunnel=


[[Ubuntu/Bespin/AP PIA Tunnel]]
* [[Ubuntu/Bespin/TIL]] - the summary of "today I learned" things that I learned while setting up Bespin


=PiHole=


Run PiHole in a Docker container, and install it between dnsmasq and the VPN tunnel (so that DNS queries will be filtered by the PiHole).
* [[Ubuntu/Bespin/PiHole]]
=OpenVPN Server=
* [[Ubuntu/OpenVPN Server]]


(Note: Not actually running a VPN server on bespin)
(Note: Not actually running a VPN server on bespin)


=Brushup of dnsmasq Config=


[[Ubuntu/Bespin/Dnsmasq]]
==Related Articles==


=Iptables Reconfiguration=
* [[Ubuntu/OpenVPN Server]] - set up an OpenVPN server on a Ubuntu machine


Update the iptables rules to allow better protection of the server and be less permissive:
==Old Irrelevant Articles==


[[Ubuntu/Bespin/Iptables]]
Articles that are no longer relevant to bespin but that may have useful information for some future project.


[[Ubuntu/Bespin/Old/Iptables]]
* <s>[[Ubuntu/Bespin/Second AP Tunnel]]</s> - this ended in failure, twice. short version: you can't have multiple simultaneous PIA tunnels in OpenVPN without significant extra configuration, so no need to go this above and beyond.


=Related Pages=
* <s>[[Ubuntu/Bespin/Wifi Repeater]]</s> - using bespin to run hostapd and make a wifi repeater


* [[Ubuntu/Bespin/TIL]] - the summary of "today I learned" things that I learned while setting up Bespin
* <s>[[Ubuntu/Bespin/Old/Wifi AP Setup]]</s>  set up a wireless AP to create/host a wifi hotspot on the machine


* <s>[[Ubuntu/Bespin/Second AP Tunnel]]</s> - this ended in failure, twice. short version: you can't have multiple simultaneous PIA tunnels in OpenVPN without significant extra configuration, so no need to go this above and beyond.
* <s>[[Ubuntu/Bespin/old/AP PIA Tunnel]]</s> - route traffic from a wireless AP to a PIA VPN tunnel


* <s>[[Ubuntu/Bespin/Wifi Repeater]]</s> - using bespin to run hostapd and make a wifi repeater
* <s>[[Ubuntu/Bespin/Old/Iptables]]</s> - old iptables rules for things that aren't actually running on Bespin





Revision as of 00:52, 19 August 2020

All the setup involved for bespin, a Ubuntu 18.04 desktop server.

  • Ubuntu/Bespin/PiHole - run an instance of PiHole, the DNS sinkhole, in a Docker container; install it between dnsmasq and the VPN tunnel, so all DNS queries will pass through the PiHole
  • Ubuntu/Bespin/Iptables - Update the iptables rules to allow better protection of the server and be less permissive



  • Ubuntu/Bespin/TIL - the summary of "today I learned" things that I learned while setting up Bespin


(Note: Not actually running a VPN server on bespin)


Related Articles

Old Irrelevant Articles

Articles that are no longer relevant to bespin but that may have useful information for some future project.

  • Ubuntu/Bespin/Second AP Tunnel - this ended in failure, twice. short version: you can't have multiple simultaneous PIA tunnels in OpenVPN without significant extra configuration, so no need to go this above and beyond.