CollabNet Guide: Difference between revisions

This guide will walk you through setting up a Virtual Network for your VMs. This will allow you to route your VM traffic behind a VPN (strongly recommended for several reasons), filter web traffic, and prevent access to your local network from the VMs.

= Prerequisites =

* An hour or two of your time

{{code|

sudo systemctl restart systemd-networkd

}}

 

sudo apt-get purge -y ifupdown

sudo systemctl enable --now systemd-networkd

}}

 

Now, we can set up basic routing. First, install some required packages

{{code|

}}

 

If you don't want users to be able to make traffic from your IP address (you almost definitely do not), you should set up a VPN, for all your users' traffic to be run through. You'll need a VPN that supports wireguard (and additionally you'll want to make sure that this usecase is allowed by their Terms of Service). Here are a few:

 

* [https://mullvad.net/en Mullvad] ($5 a month)

 

Once you have your VPN picked out, register an account and generate a WireGuard profile. This varies by VPN but its usually in the Downloads section or its own category. It should give you a wireguard configuration either as a downloadable file or to copy and paste.

}}

If all went well, your VMs should now be connected to the VPN

== E2Guardian ==

E2Guardian can be used to implement network filtering on your VM. It supports transparent HTTP and HTTPS filtering making it ideal for a setup like CollabVM where the client can't be trusted to always use a proxy or DNS server. Here's how to set it up.

Run the following command:

{{code|

sudo apt-get install ./e2debian_bookworm_V5.5.5_20240209.deb

}}

Install some other dependencies:

{{code|

useoriginalip = on

</nowiki>}}

 

Now open e2guardianf1.conf in an editor, then find and set the following values:

Copy <code>examplef1.story</code> to <code>group1.story</code>:

{{code|

}}

=== Filter lists ===