Mirrored_Repos/unifios-utilities
1
0
Fork 0
mirror of https://github.com/unifi-utilities/unifios-utilities.git synced 2024-08-30 18:32:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added some features to README (#258)

Browse Source 
* Added link to WireGuard kernel module;
moved OpenConnect VPN and split-vpn to VPN section of README;
added link to ubios-cert

* some minor formatting stuff

* Update README.md

Co-authored-by: Pedro Pombeiro <github@pedro.pombei.ro>

Co-authored-by: John D <427295+boostchicken@users.noreply.github.com>
Co-authored-by: Pedro Pombeiro <github@pedro.pombei.ro>
This commit is contained in:
Alexander Wolf 2021-11-05 19:35:36 +00:00 committed by GitHub
parent 465c4ea4d0
commit 7008932bf9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 52 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored
View File

@ -3,3 +3,4 @@
/**/debian/*.substvars
debhelper-build-stamp
.debhelper
Wiki_Wireguard.md

75
README.md
View File

@ -7,29 +7,37 @@ A collection of things to enhance the capabilities of your Unifi Dream Machine o
Pull Requests welcome! If you use this functionality to do new cool stuff to your UDM/P please send a PR and share it with the community!
## Custom Kernel
If you want to do a custom kernel with wireguard support, multicast, multipath routing that is now a possiblity. Please see the repo and please use at your own risk This a much larger change than anything in this repo.
If you want to do a custom kernel with wireguard support, multicast, multipath routing that is now a possiblity. Please see the repo and please use at your own risk. This a much larger change than anything in this repo.
[udm-kernel-tools](https://github.com/fabianishere/udm-kernel-tools)
## Custom Podman Builds for UDMP-SE
https://github.com/boostchicken/udm-utilities/actions
<https://github.com/boostchicken/udm-utilities/actions>
Extract the zip to the root of your device!
Look at the assets on the Podman workflow
Look at the assets on the Podman workflow.
## General Tools
### on-boot-script
Do this first. Enables init.d style scripts to run on every boot of your UDM. Includes examples to run wpa-supplicant/eap-proxy and/or ntop-ng on startup. Follow this [readme](https://github.com/boostchicken/udm-utilities/blob/master/on-boot-script/README.md).
Do this first. Enables `init.d` style scripts to run on every boot of your UDM. Includes examples to run `wpa-supplicant/eap-proxy` and/or `ntop-ng` on startup. Follow this [readme](https://github.com/boostchicken/udm-utilities/blob/master/on-boot-script/README.md).
**It enables complete customization of your UDM/P and fills the gap that config.gateway.json left behind.**
### podman-update
Updates Podman, conmon, and runc to a recent version. This allows docker-compose usage as well.
### container-common
Apply this after on-boot-script. Updates container defaults to maintain **stable disk usage footprint** of custom containers. **Prevents logs filling up UDM storage full**.
### python
If you need python3 on your UDM, generally not recommended, can always use it in unifi-os container
If you need python3 on your UDM, generally not recommended, can always use it in unifi-os container.
## VPN Servers / Clients
@ -37,15 +45,41 @@ If you need python3 on your UDM, generally not recommended, can always use it in
Run a Wireguard client/server on your UDM/P. Utilizes wireguard-go, not linux kernel modules. The performance will take a hit due to that.
### WireGuard kernel module for UDM/P
<https://github.com/tusc/wireguard-kmod>
Uses a prebuilt linux kernel module, without the need to move to a custom kernel.
### OpenConnect VPN
<https://github.com/shuguet/openconnect-udm>
OpenConnect VPN Client for the UniFi Dream Machine Pro (Unofficial).
### split-vpn
<https://github.com/peacey/split-vpn>
A split tunnel VPN script for the UDM with policy based routing. This helper script can be used on your UDM to route select VLANs, clients, or even domains through a VPN connection. It supports OpenVPN, WireGuard, and OpenConnect (Cisco AnyConnect) clients running directly on your UDM, and external VPN clients running on other servers on your network.
## DNS Providers
Install a DNS server that functions as a network-wide ad and tracker blocker, and which can also securely proxy encrypted DNS requests to an upstream DNS provider. Begin by following the instructions to setup [on-boot-script](https://github.com/boostchicken/udm-utilities/tree/master/on-boot-script) and [dns-common](https://github.com/boostchicken/udm-utilities/tree/master/dns-common/on_boot.d). Then, follow the guides below to setup either Pi-Hole, NextDNS, or AdGuard Home.
### dns-common
Base configuration for DNS server containers, both IPv4 and IPv6. Utilizes MacVLAN CNI plugins to completely isolate the network stack.
### run-pihole
Run pihole on your UDM with podman. Also contains custom image for Pihole with cloudflared
Run Pi-hole on your UDM with podman. Also contains custom image for Pi-hole with `cloudflared`.
### PiHole with DoTe
<https://github.com/chrisstaite/DoTe/>
Alternative to mine which uses DoH.
### AdguardHome
@ -73,20 +107,17 @@ Much better network stats for your UDM/P! Install this docker container and cre
<https://github.com/kchristensen/udm-le>
Provision and renew LetsEncrypt SSL certs from your UDM/P
Provision and renew LetsEncrypt SSL certs from your UDM/P.
### OpenConnect VPN
<https://github.com/shuguet/openconnect-udm>
OpenConnect VPN Client for the UniFi Dream Machine Pro (Unofficial)
<https://github.com/alxwolf/ubios-cert>
Similar to `udm-le`, adding different providers for SSL/TLS certificates (LE, ZeroSSL, BuyPass) and DNS API (all-inkl.com) currently not supported by [LEGO]<https://go-acme.github.io/lego/dns/>.
### Unifi API Browser
<https://hub.docker.com/r/scyto/unifibrowser>
This is a docker container that implements <https://github.com/Art-of-WiFi/UniFi-API-browser> to provide a graphical tool to inspect the data structures available via the unifi API. Great if you are using the REST API for your own puposes and want to explore. Works with multiple controler versions.
This is a docker container that implements <https://github.com/Art-of-WiFi/UniFi-API-browser> to provide a graphical tool to inspect the data structures available via the unifi API. Great if you are using the REST API for your own purposes and want to explore. Works with multiple controller versions.
### Unifi UDM-Pro auto fan speed
@ -94,15 +125,11 @@ This is a docker container that implements <https://github.com/Art-of-WiFi/UniFi
A shell script with the goal to make the UDM-Pro silenced while still having good thermal values. It stops the build in service that monitors the thermal values, fan speed and connection of a HDD/SSD. After that it sets the thermal/fan chip (adt7475) to automatic mode. Once that is done it changes the thermal and fan values specified in the script.
### split-vpn
<https://github.com/peacey/split-vpn>
A split tunnel VPN script for the UDM with policy based routing. This helper script can be used on your UDM to route select VLANs, clients, or even domains through a VPN connection. It supports OpenVPN, WireGuard, and OpenConnect (Cisco AnyConnect) clients running directly on your UDM, and external VPN clients running on other servers on your network.
### Jumbo Frames
<https://github.com/kalenarndt/udmp-jumbo-frames>
Make your Jumbo frames work!
https://github.com/kalenarndt/udmp-jumbo-frames
### rclone
@ -110,12 +137,12 @@ https://github.com/kalenarndt/udmp-jumbo-frames
Run rclone container with Web GUI for offsite backups.
### PiHole with DoTe
Alternative to mine which uses DoH
https://github.com/chrisstaite/DoTe/
## Unsupported / No longer maintained
### nextdns
Run NextDNS on your UDM with podman.
### suricata
Updates suricata to a recent version.