3 ms·

I've had a great experience deploying Wireguard using Streisand [1]. I'm excited to migrate to this GUI client, instead of using `wg-quick` in the macOS termina

I've had a great experience deploying Wireguard using Streisand [1]. I'm excited to migrate to this GUI client, instead of using `wg-quick` in the macOS terminal. With Streisand, I only needed to choose some options and input a few credentials. 20 minutes later, Streisand had created a locked-down, self-updating box dedicated to hosting nothing but Wireguard. I deployed to a $5/month Digital Ocean droplet. [1]: https://github.com/StreisandEffect/streisand https://github.com/StreisandEffect/streisand Streisand previously on HN: https://news.ycombinator.com/item?id=18903780 https://news.ycombinator.com/item?id=18903780, https://news.ycombinator.com/item?id=8082444 https://news.ycombinator.com/item?id=8082444

nsomaru 8y ago
AFAIK all software on Streisand does not auto update so you need to redeploy periodically (and the repo hasn’t been updated in a while, the main author has little time for it anymore) which isn’t great if you’ve shared certs with non technical users
- adamfeldman 8y ago
  Further detail for the curious: Recent enhancements to Streisand include automatic updates for Wireguard: https://github.com/StreisandEffect/streisand/issues/513#issuecomment-431588195 https://github.com/StreisandEffect/streisand/issues/513#issu.... Streisand automatically installs Ubuntu security and other updates using the "unattended-upgrades" package: https://help.ubuntu.com/community/AutomaticSecurityUpdates https://help.ubuntu.com/community/AutomaticSecurityUpdates. Streisand's unattended-upgrades config https://github.com/StreisandEffect/streisand/blob/master/playbooks/roles/common/templates/50unattended-upgrades.j2 https://github.com/StreisandEffect/streisand/blob/master/pla...
  - nsomaru 8y ago
    Streisand installs around 70 different services. If all of them are not patched there’s a good chance your box becomes vulnerable over time. Remember, you’re piping all your internet traffic through this box.
    - sascha_sl 8y ago
      it's modular if you enter the extended configuration, poster above mentioned it runs "nothing but wireguard"

nsomaru 8y ago

AFAIK all software on Streisand does not auto update so you need to redeploy periodically (and the repo hasn’t been updated in a while, the main author has little time for it anymore) which isn’t great if you’ve shared certs with non technical users

adamfeldman 8y ago
Further detail for the curious: Recent enhancements to Streisand include automatic updates for Wireguard: https://github.com/StreisandEffect/streisand/issues/513#issuecomment-431588195 https://github.com/StreisandEffect/streisand/issues/513#issu.... Streisand automatically installs Ubuntu security and other updates using the "unattended-upgrades" package: https://help.ubuntu.com/community/AutomaticSecurityUpdates https://help.ubuntu.com/community/AutomaticSecurityUpdates. Streisand's unattended-upgrades config https://github.com/StreisandEffect/streisand/blob/master/playbooks/roles/common/templates/50unattended-upgrades.j2 https://github.com/StreisandEffect/streisand/blob/master/pla...
- nsomaru 8y ago
  Streisand installs around 70 different services. If all of them are not patched there’s a good chance your box becomes vulnerable over time. Remember, you’re piping all your internet traffic through this box.
  - sascha_sl 8y ago
    it's modular if you enter the extended configuration, poster above mentioned it runs "nothing but wireguard"