[{"data":1,"prerenderedAt":353},["ShallowReactive",2],{"project-13351973":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":42,"post_text":44,"what":45,"said":77,"maker_in_thread":180,"shape":189,"grid":194,"attempts":315,"same_week":316,"maker_shows":33,"maker_hidden":345,"reader_version":346,"card":347},"13351973","popup-openvpn","Use Ansible to Run a “friends and Family” OpenVPN Server on Digital Ocean","title","Show HN: Use Ansible to Run a “friends and Family” OpenVPN Server on Digital Ocean","https:\u002F\u002Fgithub.com\u002Frobbintt\u002Fpopup-openvpn","github.com","robbintt",1483909108,2017,206,51,157,2242,8,"notable","infrastructure","self-hosted vpn server","other",[24,25,26,27],"openvpn","ansible","vpn server","digital ocean","curious",-0.126,{"positive":31,"neutral":32,"mixed":33,"critical":34},2,17,1,6,26,{"idea":37,"execution":38,"privacy":40},{"positive":31,"critical":33},{"positive":39,"critical":33},0,{"positive":39,"critical":41},3,[41,41,41,39,33,39,41,41,39,41,33,41,41,39,39,39,43,33,41,39,39,41,41,41,39,39,39,41,39,39,43,41,33,41,39,39,33,33,41,39],5,null,{"problem":46,"audience":56,"pricing":44,"motivation":60,"time_to_build":44,"stack":65,"openness":76,"stage":76,"team_size":76},{"value":47,"source":48,"evidence":49},"Running a private VPN server for friends and family without heavy tooling","maker",[50,53],{"id":51,"by":11,"text":52},"13353378","This project is designed to be auditable and disposable. It does only one thing and (hopefully) does it well. Also this project is intended to be broadly accessible to people who…",{"id":54,"by":11,"text":55},"13353455","This project aims to \"do one thing and do it well\". I posted this elsewhere but it bears repeating. This project is designed to be simple, auditable, and disposable, and have the…",{"value":57,"source":48,"evidence":58},"People comfortable doing basic server management",[59],{"id":51,"by":11,"text":52},{"value":61,"source":48,"evidence":62},"Simple, auditable, disposable VPN with minimal attack surface and maintenance",[63,64],{"id":54,"by":11,"text":55},{"id":51,"by":11,"text":52},[66,72],{"value":67,"source":48,"evidence":68},"Ansible",[69],{"id":70,"by":11,"text":71},"13353383","Ansible provides idempotency and some measure of auditabity. Ansible is one way to manage things.",{"value":73,"source":48,"evidence":74},"OpenVPN",[75],{"id":51,"by":11,"text":52},"unknown",{"praise":78,"objections":87,"requests":117,"questions":134,"alternatives":147},[79],{"value":80,"source":81,"evidence":82},"Tight focus on one thing; easy to audit","commenter",[83],{"id":84,"by":85,"text":86},"13352811","mos_basik","Wew, goodies is about right. That's pretty cool. I have a VPS and I use it for webhosting for myself and some friends. I've thought about (in some cases tried) and then decided…",[88,99,106],{"value":89,"source":81,"evidence":90},"Streisand and Sovereign already do this; why another tool",[91,95],{"id":92,"by":93,"text":94},"13353121","cyberferret","I'd like to hear how this is different from Streisand? [0] (and also Sovereign, which I see someone else posted below). I set up Streisand on a $5\u002Fmo Digital Ocean droplet a…",{"id":96,"by":97,"text":98},"13353187","rosser","Came here to say the same thing. How is this better than Streisand? Both even use Ansible.",{"value":100,"source":81,"evidence":101},"OpenVPN defaults in the templated role are outdated",[102],{"id":103,"by":104,"text":105},"13353402","subliminalpanda","I misread your question, my apologies. At a quick glance (and a very quick one at that), Streisand's OpenVPN setup is configured to work on both TCP and UDP ports, where as the…",{"value":107,"source":81,"evidence":108},"IPv6 is not routed through the VPN by default, causing leaks",[109,113],{"id":110,"by":111,"text":112},"13352361","tribby","> Do not check use IPv6 last time I set up an openvpn server on digitalocean without `tun-ipv6`, it leaked my ISP's ipv6 address to the internet while my ipv4 address was correct…",{"id":114,"by":115,"text":116},"13353092","dijit","I'm guessing the author was resolving AAAA records on the client side which caused his network stack to prefer IPv6 routing. Which means anything he was connecting to that was…",[118,127],{"value":119,"source":81,"evidence":120},"Add IPv6 support",[121,124],{"id":122,"by":111,"text":123},"13353273","testing is a good idea, and I've seen it done in other \"road warrior\" type scripts in an unsafe way via `curl -s6 https:\u002F\u002Fcanhazip.com`. I may not have the time to contribute for…",{"id":125,"by":11,"text":126},"13352455","Hi, thanks for your feedback. Can you submit a github issue? I need to establish a traffic testing method for assessing whether any traffic is leaking. This would be a valuable…",{"value":128,"source":81,"evidence":129},"Add server hardening",[130],{"id":131,"by":132,"text":133},"13352641","tedmiston","I'd like to see some hardening of the box if it's going to be used as a VPN server. My boxes in the DO IP range routinely get targeted by malicious traffic from China and Russia.",[135,140],{"value":136,"source":81,"evidence":137},"How does it differ from Streisand?",[138,139],{"id":92,"by":93,"text":94},{"id":96,"by":97,"text":98},{"value":141,"source":81,"evidence":142},"Does it work for Netflix from abroad?",[143],{"id":144,"by":145,"text":146},"13353658","cylinder","Does this work for offshore usage of USA Netflix or do they detect Digital Ocean?",[148,152,159,166,173],{"value":149,"source":81,"evidence":150},"Streisand",[151],{"id":92,"by":93,"text":94},{"value":153,"source":81,"evidence":154},"Sovereign",[155],{"id":156,"by":157,"text":158},"13352392","NickBusey","I prefer Sovereign for this. Sets up OpenVPN as well as a bunch of other goodies. https:\u002F\u002Fgithub.com\u002Fsovereign\u002Fsovereign",{"value":160,"source":81,"evidence":161},"Algo",[162],{"id":163,"by":164,"text":165},"13352796","paws","Algo[1] may be a good fit for you. Just be aware the authors deliberately target only very recent clients. [2] I recently spun up a new Algo instance on an Ubuntu host and…",{"value":167,"source":81,"evidence":168},"Nyr\u002Fopenvpn-install",[169],{"id":170,"by":171,"text":172},"13352492","necessity","You can simply run a sh script that sets it up... https:\u002F\u002Fgithub.com\u002FNyr\u002Fopenvpn-install",{"value":174,"source":81,"evidence":175},"Pritunl",[176],{"id":177,"by":178,"text":179},"13353489","lucasjans","I'm surprised no one's mentioned pritunl. Open source and one click deployment on DO https:\u002F\u002Fpritunl.com",{"comments":181,"answered":182,"key":183},9,4,[184,185,188],{"id":51,"text":52},{"id":186,"text":187},"13353415","I may have to fork the Stouts.openvpn role. I also am not pleased that their easy-rsa tarball is not easily auditable rather than pulling it as a subrepository directly from…",{"id":54,"text":55},{"commenters":190,"max_depth":191,"maker_replies":181,"first_comment_mins":192,"lifespan_hours":193},33,7,74,47,[195,197,198,200,203,204,206,208,210,211,213,215,218,221,225,228,230,234,236,239,240,242,244,245,246,249,251,255,256,258,259,262,265,267,268,271,273,276,279,282,285,289,292,295,297,300,302,305,308,311,312],[92,39,41,196,93,39],"project\u002Fneutral\u002Fidea",[96,39,41,196,97,39],[199,39,41,196,104,39],"13353327",[201,39,39,202,97,39],"13353339","commenter\u002Fneutral\u002Fnone",[51,39,39,196,11,33],[103,39,33,205,104,39],"project\u002Fcritical\u002Fexecution",[186,39,39,207,11,33],"project\u002Fneutral\u002Fexecution",[209,39,41,207,104,39],"13353446",[54,39,39,196,11,33],[144,39,41,212,145,39],"project\u002Fneutral\u002Fnone",[214,39,39,212,11,33],"13353833",[216,39,41,212,217,39],"13354943","patrickk",[219,39,41,212,220,39],"13356362","TheArcane",[222,39,33,223,224,39],"13361387","project\u002Fcritical\u002Fnone","niij",[226,39,41,196,227,39],"13354007","bdarnell",[229,39,41,196,227,39],"13354154",[231,39,39,232,233,39],"13354469","other\u002Fneutral\u002Fnone","fulafel",[156,33,39,235,157,39],"other\u002Fneutral\u002Fidea",[237,33,39,232,238,39],"13352500","tlrobinson",[163,33,39,232,164,39],[84,33,43,241,85,39],"project\u002Fpositive\u002Fidea",[110,31,33,243,111,39],"project\u002Fcritical\u002Fprivacy",[125,31,39,212,11,33],[122,31,41,207,111,39],[247,31,39,232,248,39],"13353862","tomschlick",[250,31,39,232,111,39],"13354358",[252,31,41,253,254,39],"13352660","project\u002Fneutral\u002Fprivacy","jwilk",[114,31,41,253,115,39],[257,31,41,253,111,39],"13353154",[131,41,41,212,132,39],[260,41,39,202,261,39],"13353310","andreareina",[263,41,39,264,132,39],"13354149","commenter\u002Fneutral\u002Fdocs",[266,41,39,212,11,33],"13353396",[177,182,39,232,178,39],[269,43,41,212,270,39],"13352871","wstrange",[272,43,39,253,11,33],"13353390",[274,34,39,232,275,39],"13354971","caspereeko",[277,191,39,232,278,39],"13353205","jlgaddis",[280,18,43,241,281,39],"13354055","vxNsr",[283,181,41,196,284,39],"13355215","cabalamat",[286,287,33,243,288,39],"13352646",10,"insubstantive",[290,287,39,202,291,39],"13352766","eeZah7Ux",[293,287,41,294,261,39],"13353295","project\u002Fmixed\u002Fprivacy",[296,287,39,253,11,33],"13353442",[298,287,39,232,299,39],"13356251","spdionis",[301,287,33,243,233,39],"13368395",[303,287,39,232,304,39],"13353567","scoot",[170,306,33,307,171,39],11,"project\u002Fcritical\u002Fidea",[309,306,41,196,310,39],"13352966","dstryr",[70,306,39,196,11,33],[313,306,39,232,314,39],"13353051","JonoBB",[],[317,322,327,332,336,340],{"id":318,"name":319,"points":320,"category":321},"13338592","Alacritty",1170,"dev_tools",{"id":323,"name":324,"points":325,"category":326},"13376901","Founderkit",331,"web_saas",{"id":328,"name":329,"points":330,"category":331},"13324971","Visual Hacker News",248,"consumer_social",{"id":333,"name":334,"points":335,"category":331},"13367486","Currently",211,{"id":337,"name":338,"points":339,"category":321},"13342341","Kitty",192,{"id":341,"name":342,"points":343,"category":344},"13355856","Q8",145,"languages",false,"v2",{"id":348,"name":5,"line":6,"ai":345,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":349,"top":18,"kw":350,"maker":11,"domain":10,"tier":19,"attempts":39,"strip":351,"url":9,"mix":352,"praise":80,"objection":89,"sub":21},13351973,-0.13,[24,25,26,27],"3330103303133000513003330003005313001130",[31,32,33,34],1794036551543]