Initial release: ghost_protocol privacy toolkit

2026-03-04 09:13:16 -05:00
commit 973cede31f
99 changed files with 12158 additions and 0 deletions
@@ -0,0 +1,66 @@
+---
+# Pi-hole Docker configuration and launch
+
+- name: Create Pi-hole directories
+  file:
+    path: "{{ item }}"
+    state: directory
+    mode: "0755"
+  loop:
+    - /opt/pihole
+    - /opt/pihole/etc-pihole
+    - /opt/pihole/etc-dnsmasq.d
+
+- name: Generate Pi-hole admin password
+  shell: "openssl rand -base64 16"
+  register: pihole_password
+  args:
+    creates: /opt/pihole/.password
+
+- name: Save admin password
+  copy:
+    content: "{{ pihole_password.stdout }}"
+    dest: /opt/pihole/.password
+    mode: "0600"
+  when: pihole_password.changed
+
+- name: Deploy Pi-hole Docker Compose
+  copy:
+    dest: /opt/pihole/docker-compose.yml
+    content: |
+      services:
+        pihole:
+          container_name: pihole
+          image: pihole/pihole:latest
+          ports:
+            - "53:53/tcp"
+            - "53:53/udp"
+            - "80:80/tcp"
+          environment:
+            TZ: UTC
+            WEBPASSWORD_FILE: /run/secrets/webpassword
+            PIHOLE_DNS_: "{{ pihole_upstream }}"
+            DNSSEC: "true"
+            QUERY_LOGGING: "false"
+          volumes:
+            - /opt/pihole/etc-pihole:/etc/pihole
+            - /opt/pihole/etc-dnsmasq.d:/etc/dnsmasq.d
+          secrets:
+            - webpassword
+          restart: unless-stopped
+          dns:
+            - 127.0.0.1
+            - 9.9.9.9
+      secrets:
+        webpassword:
+          file: /opt/pihole/.password
+    mode: "0644"
+
+- name: Start Pi-hole
+  shell: cd /opt/pihole && docker compose up -d
+  args:
+    creates: /opt/pihole/etc-pihole/pihole-FTL.db
+
+- name: Display admin password
+  debug:
+    msg: "Pi-hole admin password: {{ pihole_password.stdout | default('(see /opt/pihole/.password)') }}"
@@ -0,0 +1,62 @@
+---
+# Pi-hole installation via Docker
+
+- name: Install Docker prerequisites
+  apt:
+    name:
+      - apt-transport-https
+      - ca-certificates
+      - curl
+      - gnupg
+      - lsb-release
+    state: present
+
+- name: Add Docker GPG key
+  apt_key:
+    url: https://download.docker.com/linux/{{ ansible_distribution | lower }}/gpg
+    state: present
+
+- name: Add Docker repository
+  apt_repository:
+    repo: "deb https://download.docker.com/linux/{{ ansible_distribution | lower }} {{ ansible_distribution_release }} stable"
+    state: present
+
+- name: Install Docker
+  apt:
+    name:
+      - docker-ce
+      - docker-ce-cli
+      - containerd.io
+      - docker-compose-plugin
+    state: present
+
+- name: Enable Docker service
+  service:
+    name: docker
+    state: started
+    enabled: true
+
+- name: Stop systemd-resolved (conflicts with Pi-hole on port 53)
+  service:
+    name: systemd-resolved
+    state: stopped
+    enabled: false
+  failed_when: false
+
+- name: Set DNS fallback
+  copy:
+    dest: /etc/resolv.conf
+    content: |
+      nameserver 9.9.9.9
+      nameserver 1.1.1.1
+    mode: "0644"
+
+- name: Allow DNS through UFW
+  ufw:
+    rule: allow
+    port: "{{ item.port }}"
+    proto: "{{ item.proto }}"
+  loop:
+    - { port: "53", proto: "tcp" }
+    - { port: "53", proto: "udp" }
+    - { port: "80", proto: "tcp" }