Go to file
2022-05-10 22:24:48 +01:00
encfs cleanup 2022-05-10 22:24:48 +01:00
guest cleanup 2022-05-10 22:24:48 +01:00
host cleanup 2022-05-10 22:24:48 +01:00
provision cleanup 2022-05-10 22:24:48 +01:00
docker-compose.yml initial 2022-05-10 16:39:52 +01:00
Makefile initial 2022-05-10 16:39:52 +01:00
README.md initial 2022-05-10 16:39:52 +01:00

segfault

Regional Cluster design:

graph TD;
    DockerShell1-->DockerSSHD1;
    DockerShell2-->DockerSSHD1;
    DockerShell3-->DockerSSHD2;
    DockerShell4-->DockerSSHD2;
    DockerShell5-->DockerSSHD2;
    DockerSSHD1-->Server1;
    DockerSSHD2-->Server2;
    Server1-- Optional VPN -->OpenVPN;
    Server2-- Optional VPN -->OpenVPN;
    OpenVPN -- Leaving Region -->NordVPN
    NordVPN-->INTERNETZ
  1. Server is running OpenSSH in a docker and shares /var/run/docker.sock with the OpenSSH-Docker instance. This allows to have just the docker_cli to be installed and spin up a shell for the user without having to run an extra docker-daemon (but using the docker-daemon from Server instead).
  2. On small deployments the OpenVPN Server can be the same as Server[12]. This allows to run everything off 1 single server.
  3. AWS Fargate could be utilized by nesting the entire setup in a Docker-in-Docker (dind) configuration.

Cluster can be deployed in various regions for less latency. TODO:

  1. https://docs.docker.com/engine/security/userns-remap/

Helpful links

  1. https://github.com/nicolaka/netshoot
  2. https://www.linuxserver.io/ and https://github.com/just-containers/s6-overlay
  3. https://jordanelver.co.uk/blog/2019/06/03/routing-docker-traffic-through-a-vpn-connection/
  4. https://hub.docker.com/r/alexaso/dnsmasq-dnscrypt and https://github.com/crazy-max/docker-cloudflared
  5. https://wiki.archlinux.org/title/EncFS
  6. https://www.supertechcrew.com/wetty-browser-ssh-terminal/

VPN Providers:

  1. ProtonVPN
  2. NordVPN
  3. https://www.cryptostorm.is/

Hosting providers:

  1. https://www.linode.com/
  2. https://1984hosting.com/