109 lines
3.6 KiB
Markdown
109 lines
3.6 KiB
Markdown
|
# wg-docker [wip]
|
||
|
|
|
||
|
|
This repository contain a simple docker setup for wireguard.
|
||
|
|
|
||
|
|
requirements: debian|alpine, docker, wireguard, firefox, thunderbird, proxychains
|
||
|
|
space requirements:
|
||
|
|
|
||
|
|
alpine, docker images:
|
||
|
|
- alpine:3.16.3: 5.54MB
|
||
|
|
- wg-docker/alpine:0.0.1: 19.1MB
|
||
|
|
|
||
|
|
debian, docker images:
|
||
|
|
- debian:stable: 124MB
|
||
|
|
- wg-docker/debian:0.0.1: 270MB
|
||
|
|
|
||
|
|
## Build the image
|
||
|
|
|
||
|
|
```
|
||
|
|
docker build . -t wg-docker/alpine:0.0.1
|
||
|
|
docker build . -f Dockerfile.debian -t wg-docker/debian:0.0.1
|
||
|
|
```
|
||
|
|
|
||
|
|
## Usage
|
||
|
|
The usage would be similar to `wg-quick`
|
||
|
|
|
||
|
|
usage: wg-docker [up|shell|firefox|thunderbird] [profile_name]
|
||
|
|
|
||
|
|
### start the container with profile 'lattuga'
|
||
|
|
```
|
||
|
|
wg-docker up lattuga
|
||
|
|
```
|
||
|
|
### start the container and the firefox profile, proxied to container with profile lattuga
|
||
|
|
```
|
||
|
|
wg-docker firefox lattuga
|
||
|
|
```
|
||
|
|
|
||
|
|
### [wip] start the container and the thunderbird profile, proxied to container with profile lattuga
|
||
|
|
|
||
|
|
### [wip] start a shell proxied
|
||
|
|
```
|
||
|
|
wg-docker shell lattuga
|
||
|
|
```
|
||
|
|
|
||
|
|
for now start the container and then proxychains every command
|
||
|
|
```
|
||
|
|
wg-docker up lattuga
|
||
|
|
proxychains git clone ...
|
||
|
|
```
|
||
|
|
|
||
|
|
## ssh to container
|
||
|
|
|
||
|
|
```
|
||
|
|
ssh -ND 9999 root@172.20.0.10
|
||
|
|
|
||
|
|
-N : Do not execute a remote command. This is useful for just forwarding ports.
|
||
|
|
-D : Specifies a local “dynamic” application-level port forwarding.
|
||
|
|
This works by allocating a socket to listen to port on the local
|
||
|
|
side, optionally bound to the specified bind_address. Whenever a
|
||
|
|
connection is made to this port, the connection is forwarded over
|
||
|
|
the secure channel, and the application protocol is then used to
|
||
|
|
determine where to connect to from the remote machine. Currently
|
||
|
|
the SOCKS4 and SOCKS5 protocols are supported, and ssh will act
|
||
|
|
as a SOCKS server.
|
||
|
|
```
|
||
|
|
|
||
|
|
## Create a profile in firefox
|
||
|
|
In Firefox in [about:profiles]([about:profiles]) create a new profile and then go to 'settings', 'network settings' to manually setup the proxy to your choosen socks_port.
|
||
|
|
|
||
|
|
## Tips
|
||
|
|
|
||
|
|
### Vpn rotations
|
||
|
|
Use of healthcheck as scheduler to avoid installing crontab, and change configuration file every while (better would be a change of vpn-endpoint every firefox profile restart)
|
||
|
|
|
||
|
|
|
||
|
|
###
|
||
|
|
Paste your public ssh key in ./authorized_keys
|
||
|
|
or alternatively PermitRootLogin with password and initialize a password
|
||
|
|
```
|
||
|
|
sed -ie 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/' /etc/ssh/sshd_config;
|
||
|
|
echo 'test' | chpasswd
|
||
|
|
service ssh restart
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
## Why
|
||
|
|
Often I'm browsing some sites through torbrowser and I need at the same time to visit other sites, related to different contexts, and I prefer to open those pages with another network profile, es. via vpn.
|
||
|
|
|
||
|
|
I'm currently using mullvad as vpn provider so in this repository there are names of files related to mullvad, but it can be applied easily to other vpns providers that offer wireguard.
|
||
|
|
|
||
|
|
## Consulted Links
|
||
|
|
- [from ubuntu] https://github.com/linuxserver/docker-wireguard
|
||
|
|
- [from alpine] https://github.com/jordanpotter/docker-wireguard
|
||
|
|
- https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorPlusVPN
|
||
|
|
- https://gitlab.tails.boum.org/tails/blueprints/-/wikis/vpn_support/
|
||
|
|
- https://tails.boum.org/support/faq/index.en.html#index20h2
|
||
|
|
- https://www.whonix.org/wiki/FAQ#How_does_Whonix_work?
|
||
|
|
- https://www.qubes-os.org/intro/
|
||
|
|
- https://www.whonix.org/wiki/Qubes
|
||
|
|
- https://packages.debian.org/bullseye/proxychains
|
||
|
|
- https://manpages.debian.org/bullseye/tsocks/tsocks.8.en.html
|
||
|
|
|
||
|
|
## Other similar needings
|
||
|
|
Common ways to visit a site that doesn't allow traffic from tor:
|
||
|
|
|
||
|
|
- web.archive.org, check if archive as a copy
|
||
|
|
paste the link after the / in the archive url https://web.archive.org/https://tor-blocking.website/path-to-resource
|
||
|
|
|
||
|
|
1.3G Whoonix size
|