{"push_id":809723849,"size":62,"distinct_size":31,"ref":"refs/heads/ansible-reorg-rebased","head":"1ed1381446298ee6346e43ab99829641f8c41d5c","before":"9d155cfd0bba9d4eab24f11b8f0371fc0107d5bf","commits":[{"sha":"b421cc6490724e42c1c55e30dfadf9b1ee4f7a4c","author":{"email":"9b0be0ebe25f3df547b8a7352565b1c61fcac49d@gmail.com","name":"Garrett Robinson"},"message":"Merge pull request #1101 from garrettr/update-version-fixes\n\nUpdate version fixes","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/b421cc6490724e42c1c55e30dfadf9b1ee4f7a4c"},{"sha":"65cdc811769683a235752cc6874526ab5e06fa61","author":{"email":"a49521e30aadeb0cdd0be42eb5286fd586bd67a9@gmail.com","name":"harlo"},"message":"including configuration options for 3- and 4-NIC configurations where applicable, as per https://github.com/freedomofpress/securedrop/issues/1106","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/65cdc811769683a235752cc6874526ab5e06fa61"},{"sha":"b8f81381b5bdc912ead00b6fd2f3a61911798de9","author":{"email":"a49521e30aadeb0cdd0be42eb5286fd586bd67a9@gmail.com","name":"harlo"},"message":"clarification for admin/app gateway and subnets","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/b8f81381b5bdc912ead00b6fd2f3a61911798de9"},{"sha":"8bc3daf03e47b938c6209e9d1ed294e5a442eb09","author":{"email":"a49521e30aadeb0cdd0be42eb5286fd586bd67a9@gmail.com","name":"harlo"},"message":"updated screen caps and TOC","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/8bc3daf03e47b938c6209e9d1ed294e5a442eb09"},{"sha":"339314a9dd260215cf81f59ac506f0040080cb89","author":{"email":"e15247ca4cc1dd43a0a9b21b5f0a543772e22f0b@users.noreply.github.com","name":"Joel C"},"message":"Update ubuntu_config.md\n\nfixed deadlink","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/339314a9dd260215cf81f59ac506f0040080cb89"},{"sha":"c292e0c2986474aa67933ebb45d8b543ebd027d5","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Clarify Network Firewall Guide introduction\n\n* Mentions the possibility of building your own network firewall (but\n  encourages most users to use the prebuilt appliance recommended in the\n  Hardware Guide).\n* Explains that we now have two sets of instructions (one for 3- and one\n  for 4-NIC firewalls) because the network appliance we used to\n  recommend has been discontinued.\n* Explains _why_ a switch is necessary in the 3-NIC configuration.","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/c292e0c2986474aa67933ebb45d8b543ebd027d5"},{"sha":"0e05fd50fcc4c3aaa9f9bd9605c6366e8c7a2c85","author":{"email":"5eb04e24c336eaaec677a9d1179b13176dcc44c6@gmail.com","name":"Tara Vancil"},"message":"Make delete confirmation unclickable when hidden\n\nSwitches to using the visibility property to toggle visibility, which\navoids the \"hidden click\" problem and is less hacky.\n\nFixes #1110","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/0e05fd50fcc4c3aaa9f9bd9605c6366e8c7a2c85"},{"sha":"8be932c1932d22fc75e684573c67329271e1a84f","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Remove references to the \"pfSense Guide\"\n\nThe link to the \"pfSense Guide\" (a PDF of the book \"pfSense: The\nDefinitive Guide\") is dead. You can purchase the book on Amazon,\nalthough according to the comments on Amazon it has started to become\nout-of-date with the release of pfSense 2.x. As far as I can tell, the\nonly way you can get an up-to-date copy of the book is to become a\npfSense Gold Member ($99/year).\n\nI reworded the section encouraging the use of the pfSense guide and\nprovided links to several options, both free and paid, for admins new to\npfSense to learn more.\n\nSince we can no longer rely on the availability of the pfSense Guide\nPDF, we can no longer \"avoid duplication\" by referring to sections of\nthe pfSense Guide in the Network Firewall guide. I removed all\nreferences to the pfSense guide, which was not as much of a loss as I\nwas initially afraid it would be:\n\n* We had to remove the reference to the section on Assigning\n  Interfaces. You only need to assign interfaces if you built your own\n  network firewall and installed pfSense from scratch - they come\n  pre-assigned on the appliances that we recommend for most\n  users. Therefore I think it's ok to simply remove this section.\n* Removed a reference to section 4.5.6, which explained the rationale\n  for using a self-signed certificate on the WebGUI. While interesting,\n  it was not necessary to successfully use this guide.\n* Section 6 in the pfSense guide was a helpful walkthrough of setting up\n  firewall rules with the WebGUI. I considered this to be the most\n  important reference to the pfSense Guide, but I think we can live\n  without it for now. From recent installation experience, people seem\n  to do okay setting up the firewall rules by imitating the example\n  screenshots without reading this part of the guide. We may want to add\n  our own documentation to explain this process if it proves to be\n  challenging for admins in future installs.","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/8be932c1932d22fc75e684573c67329271e1a84f"},{"sha":"4a2e75d2ef97602838029a1dbadbebde0ff75f2d","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Document keeping pfSense up to date\n\n* Explain how to check for an available update to pfSense.\n* Explain how to keep appraised of important security updates by\n  following the pfSense blog.\n* Explains how to use the auto upgrader to upgrade pfSense when an\n  update is available.","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/4a2e75d2ef97602838029a1dbadbebde0ff75f2d"},{"sha":"21db38ca846e94d912ba4f49ba12c5388a1632b2","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Explain SecureDrop network layout\n\n* Clarify that the primary concern in choosing subnets is avoiding\n  conflicts with the network configuration on the network that the WAN\n  is connected to.\n* Clarify explanation of potential conflict between default LAN\n  configuration when the WAN is a typical home or office router.\n* Explain why a switch is necessary for the 3-NIC configuration.\n* Fix formatting of the separate but consecutive lists of networking\n  values. We want the values for each interface to be in their own\n  distinct list. Unfortunately, the only way to have Markdown render\n  consecutive lists as separate lists is to separate them with HTML\n  comments: http://meta.stackexchange.com/a/152359","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/21db38ca846e94d912ba4f49ba12c5388a1632b2"},{"sha":"507d67b002255339a3a66cd627e9df20f44da40a","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Avoid potential problems with reaching the WebGUI\n\nWhile following the network firewall guide, I found I was unable to\nconnect to the pfSense WebGUI after connecting the Admin Workstation to\nthe LAN. This was because I had already configured a wireless network\nconnection on the Admin Workstation, and it had the same private network\naddress as the LAN defaults. This meant that going to `192.168.1.1`\nrouted me to the wireless network connection's gateway, instead of the\nLAN gateway.\n\nThe easiest way to avoid this problem is to make sure you're *only*\nconnected to the LAN before trying to reach the WebGUI, so this commit\nadds a note explaining this.","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/507d67b002255339a3a66cd627e9df20f44da40a"},{"sha":"58a16eb7f498b87e5dd96a28497fc48810a2daa4","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Fix formatting of nested list","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/58a16eb7f498b87e5dd96a28497fc48810a2daa4"},{"sha":"8a1e9c04ef314923a1fbf6b80ec7535d4cb6d959","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Clarify instructions for firewall setup\n\n* Removes reference to CIDR routing prefix defaulting to `/24` when\n  setting up an interface for the first time; it defaults to `/32`, and\n  pfSense does not attempt to figure this out for you. Leaves the\n  reminder to double-check the CIDR prefix since that has caused\n  problems in the past.\n* Makes sure text quoted from the pfSense WebGUI matches the text in the\n  latest version.\n* Various wording changes for readability and clarity.","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/8a1e9c04ef314923a1fbf6b80ec7535d4cb6d959"},{"sha":"37b21ed6bb85bba430acf056a3999c10fef6cf4d","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Add DNS servers to Admin Workstation network configuration\n\nTo avoid issues with starting the Unsafe Browser after setting up the\nstatic IP for the Admin Workstation, we should set some dummy DNS\nservers. This issue is clearly documented and explained, including the\ntroubleshooting step of disconnecting and reconnecting the network\nconnection if you're having trouble launching the Unsafe Browser.\n\nUpdates the screenshots for editing the admin workstation network\nconnection to show the DNS servers, and updates the screenshot of the\nlist of network connections for consistency (the name of the network\nchanged from \"Wired Connection\" to \"Netgear\"). Removes the old\nscreenshots.","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/37b21ed6bb85bba430acf056a3999c10fef6cf4d"},{"sha":"211da654df93ce02b92e56bd1db1cd57fbdc2c44","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Nest paragraph in list item\n\nThe list of source -> NIC mappings is part of the 3rd list item, so it\nshould be included as a paragraph in the list item. Indenting the list\none level causes it to nest correctly.","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/211da654df93ce02b92e56bd1db1cd57fbdc2c44"},{"sha":"9215d00dff0c8473f4f1171d3aed343816ecee36","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Fix NTP firewall rules\n\nBoth servers should be allowed to connect *to* any server on port 123\nfor NTP, but NTP is not guaranteed to use 123 to make the connection.\nTherefore, the source port restrictions should be left on the default\n\"any\".","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/9215d00dff0c8473f4f1171d3aed343816ecee36"},{"sha":"daacabce419743694f5da976563847f91a3af9ad","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Rewrote Hardware Guide","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/daacabce419743694f5da976563847f91a3af9ad"},{"sha":"1b1028f1acef7a16449975e623af0577a886419d","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Split \"Required Hardware\" section for readability\n\nThe \"Required\" hardware list was imposing and difficult to parse\nbefore. I'm taking a first stab at making it more approachable by\nsplitting it into two logical sections: one for the core components of\nSecureDrop (the servers) and one for the workflow components (the\nworkstations, Tails USBs, etc.)\n\nI moved the note about virtualization inside the new subsection on\nservers because that seemed like a good place for it.","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/1b1028f1acef7a16449975e623af0577a886419d"},{"sha":"2eb88997f1b9564d1c74c2fcb386b85c5f3368d3","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Add warning about EOL for recommended Intel NUC","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/2eb88997f1b9564d1c74c2fcb386b85c5f3368d3"},{"sha":"da24875b3710dd3f22444e8ebcf16dbfcf88d8e3","author":{"email":"3d16c00ea5e6ea0de3ce0a04724885f2fc30401a@freedom.press","name":"Garrett Robinson"},"message":"Add TOC to Hardware Guide with doctoc","distinct":false,"url":"https://api.github.com/repos/conorsch/securedrop/commits/da24875b3710dd3f22444e8ebcf16dbfcf88d8e3"}]}