Removed mklink for git
This commit is contained in:
		
							
								
								
									
										837
									
								
								_-Review/beelink.ubuntu-and-docker-july-2024.md
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										837
									
								
								_-Review/beelink.ubuntu-and-docker-july-2024.md
									
									
									
									
									
										Normal file
									
								
							| @ -0,0 +1,837 @@ | ||||
| --- | ||||
| created: 2024-11-04T19:30:12.000Z | ||||
| type: note | ||||
| updated: 2024-11-04T19:30:12.000Z | ||||
| --- | ||||
|  | ||||
| # Beelink Ubuntu and Docker July 2024 | ||||
|  | ||||
| ## Dashkiosk | ||||
|  | ||||
| ```bash Mon Jul 01 2024 09:58:10 GMT-0700 (Mountain Standard Time) | ||||
| apt install snapd -y | ||||
| apt install sudo links unzip nginx git nano ncdu -y | ||||
| snap install dashkiosk | ||||
| snap install ubuntu-frame wpe-webkit-mir-kiosk | ||||
| snap set wpe-webkit-mir-kiosk daemon=true | ||||
| snap set wpe-webkit-mir-kiosk url=http://localhost:9400/receiver | ||||
| exit | ||||
| ``` | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:08:55 GMT-0700 (Mountain Standard Time) | ||||
| wpe-webkit-mir-kiosk.cog http://localhost:9400/receiver | ||||
| # ^C | ||||
| /snap/wpe-webkit-mir-kiosk/current/bin/setup.sh | ||||
| wpe-webkit-mir-kiosk.cog http://localhost:9400/receiver | ||||
| # ^C | ||||
| snap set ubuntu-frame daemon=true | ||||
| exit | ||||
| reboot | ||||
| ``` | ||||
|  | ||||
| ## authorized_keys | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:08:58 GMT-0700 (Mountain Standard Time) | ||||
| cat /root/.ssh/authorized_keys | ||||
| nano /root/.ssh/authorized_keys | ||||
| ``` | ||||
|  | ||||
| ```config Mon Jul 01 2024 10:09:00 GMT-0700 (Mountain Standard Time) | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK7khmvc9lTWHALZ/IOMcJNz/1SuvrU53fI43v4PxIJN # 92532396 2023-12-27 mikep@DESKTOP-VP94SPB | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGq7b8qtm4fgNxW2lxm+qoxm8Wz7+1uhLQCg7xSlKYL1 # 92683771 2024-01-01 mikep@DESKTOP-BMV4V66 | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJqLFW9kYMp9lOTXXYafxLiUADFFKeM5KDzt02E3XeRP # 92691378 2024-01-01 cphar@DESKTOP-KA0LMMJ | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBkS+uvWevmhYNos6MJKVi2auAx6x+xlyOnnvbdEstsz # 92797978 2024-01-03 mikep@DESKTOP-GNECR7R | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKf5fo63+vyYa8E06+HOPg24e9VMsvv/kBsHKGjBBUyz # 92895319 2024-01-05 mike@mike-B365M-DS3H | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGM6ANLH/4dS0YqlsCyoXkznzkgIsDqCTk3YX01XVWd8 # 92909911 2024-01-06 mikep@DESKTOP-H6JG91B | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOwAv1vrRA29GYL0DFSE8nmD5q3gL+vVtFSwhrXObDo4 # 93288214 2024-01-13 infineon\phares@ISCN5CG3256CPS | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH1xPVOisKwW6Xwo/Yh1kx2smt2HJU2/pRjTJf4KdGXo # 97267150 2024-03-28 mike@mike-Default-string | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEDz5WqCKsoaxV+LG/kufLNuiE9K3lqp+B3AqeKXGusX # 97442032 2024-04-01 lphar@DESKTOP-1238PEQ | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID09PhrjIpeNBmUeycnT3xKF8F5TcGL3ZKAvU9YdLj7H # 98747144 2024-04-25 mike@mike-Default-string | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIaZyTLpafZta8W8Uv6uWpgbbj4QL5dde9Rlf06PfdYc # 98824914 2024-04-26 k0308@DESKTOP-0UJ8DD5 | ||||
| # ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEFpucyp3FAHn8/9cXvfRegi09DkR6XLugoniEyQ9w0T # 98824924 2024-04-26 mille@DESKTOP-QL2HGEH | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOn/Ptg/k3rOJn32GxrL2J3Bazt/3M9fGWjzP+CW1qXK # 100900455 2024-06-03 lphares0907@penguin | ||||
| ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPMIxGucViHMHFXoM2VBPlvLvMgqNi2BUtTE/D4n778M # 101638217 2024-06-14 mikep@DESKTOP-VVO6KCM | ||||
| ``` | ||||
|  | ||||
| ## Create Users | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:09:02 GMT-0700 (Mountain Standard Time) | ||||
| adduser lphares | ||||
| mkdir /home/lphares/.ssh | ||||
| cp /root/.ssh/authorized_keys /home/lphares/.ssh/authorized_keys | ||||
| chown lphares:lphares -R /home/lphares | ||||
| adduser bmiller | ||||
| mkdir /home/bmiller/.ssh | ||||
| cp /root/.ssh/authorized_keys /home/bmiller/.ssh/authorized_keys | ||||
| chown bmiller:bmiller -R /home/bmiller | ||||
| ``` | ||||
|  | ||||
| ## Log | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:09:04 GMT-0700 (Mountain Standard Time) | ||||
| ln -s /var/log/nginx /var/www/html/log-nginx | ||||
| ls -la /var/www/html | ||||
| exit | ||||
| ``` | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:09:06 GMT-0700 (Mountain Standard Time) | ||||
| cp ~/.bash_history /etc/bash_history_2024-07-01.txt | ||||
| cat /etc/bash_history_2024-07-01.txt | ||||
| exit | ||||
| ``` | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:09:08 GMT-0700 (Mountain Standard Time) | ||||
| apt install smartmontools | ||||
| smartctl -i /dev/sda | ||||
| ``` | ||||
|  | ||||
| ```yaml Mon Jul 01 2024 10:09:10 GMT-0700 (Mountain Standard Time) | ||||
| Device Model:     256GB SSD | ||||
| Serial Number:    CM42ABH1005410 | ||||
| LU WWN Device Id: 5 3a5a27 0100c22ca | ||||
| Firmware Version: SN11842 | ||||
| User Capacity:    256,060,514,304 bytes [256 GB] | ||||
| Sector Size:      512 bytes logical/physical | ||||
| Rotation Rate:    Solid State Device | ||||
| Form Factor:      M.2 | ||||
| TRIM Command:     Available, deterministic, zeroed | ||||
| Device is:        Not in smartctl database 7.3/5319 | ||||
| ATA Version is:   ACS-4 (minor revision not indicated) | ||||
| SATA Version is:  SATA 3.2, 6.0 Gb/s (current: 6.0 Gb/s) | ||||
| Local Time is:    Mon Jul  1 17:08:50 2024 UTC | ||||
| SMART support is: Available - device has SMART capability. | ||||
| SMART support is: Enabled | ||||
| ``` | ||||
|  | ||||
| ## no-ip2 | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:09:26 GMT-0700 (Mountain Standard Time) | ||||
| cd /usr/local/src/ | ||||
| wget http://www.noip.com/client/linux/noip-duc-linux.tar.gz | ||||
| tar xf noip-duc-linux.tar.gz | ||||
| ls | ||||
| cd noip-2.1.9-1/ | ||||
| apt-get install make gcc -y | ||||
| make install | ||||
| # mikepharesjr@msn.com | ||||
| # See KeePass | ||||
| cat /usr/local/etc/no-ip2.conf | ||||
| noip2 -C -u 9zh94yf -p xrtvLiRNhScX | ||||
| cat /usr/local/etc/no-ip2.conf | ||||
| # cd /usr/local/src/noip-2.1.9-1/binaries | ||||
| # ./noip2-x86_64 -S | ||||
| # cd .. | ||||
| noip2 -S | ||||
| exit | ||||
| ``` | ||||
|  | ||||
| ## Directory Share | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:32:52 GMT-0700 (Mountain Standard Time) | ||||
| systemctl restart ssh | ||||
| adduser bmiller lphares | ||||
| sudo usermod -a -G lphares bmiller | ||||
| newgrp lphares | ||||
| # chmod 755 -R /home/lphares/dorico/ | ||||
| # chmod 750 /home/lphares | ||||
| # chmod 750 /home/bmiller | ||||
| ``` | ||||
|  | ||||
| ## Free File Sync | ||||
|  | ||||
| ## nginx | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:32:58 GMT-0700 (Mountain Standard Time) | ||||
| nginx -t | ||||
| systemctl start nginx | ||||
| nginx -s reload | ||||
| ``` | ||||
|  | ||||
| ## certbot | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:33:01 GMT-0700 (Mountain Standard Time) | ||||
| # https://certbot.eff.org/instructions?ws=nginx&os=ubuntufocal | ||||
| apt-get remove certbot -y | ||||
| snap install --classic certbot | ||||
| ln -s /snap/bin/certbot /usr/bin/certbot | ||||
| mkdir -p /var/www/certbot/.well-known/acme-challenge | ||||
| touch /var/www/certbot/.well-known/acme-challenge/smwqgmeNx04tA3HC05I8_gtpqLTkjRAotHdfp0E5LnM | ||||
| # certbot --nginx | ||||
| certbot certonly --nginx | ||||
| # mikepharesjr@msn.com | ||||
| # 1: affirm.ddns.net | ||||
| # 2: ansible.ddns.net | ||||
| # 3: assistant.ddns.net | ||||
| # 4: casa.ddns.net | ||||
| # 5: dashkiosk.ddns.net | ||||
| # 6: dockge.ddns.net | ||||
| # 7: emby.ddns.net | ||||
| # 8: filebrowser.ddns.net | ||||
| # 9: gogs.ddns.net | ||||
| # 10: gogs3757.ddns.net | ||||
| # 11: immich.ddns.net | ||||
| # 12: immich3757.ddns.net | ||||
| # 13: invoice.ddns.net | ||||
| # 14: music.ddns.net | ||||
| # 15: music3757.ddns.net | ||||
| # 16: nextcloud.ddns.net | ||||
| # 17: owncast.ddns.net | ||||
| # 18: phares.ddns.net | ||||
| # 19: phares3757.ddns.net | ||||
| # 20: photoprism.ddns.net | ||||
| # 21: pihole.ddns.net | ||||
| # 22: proxmox.ddns.net | ||||
| # 23: readeck.ddns.net | ||||
| # 24: syncthing.ddns.net | ||||
| # 25: uptimekuma.ddns.net | ||||
| # 26: vaultwarden.ddns.net | ||||
| # 27: vscodium.ddns.net | ||||
| # 19,10,12,15,1 | ||||
| # always pick phares3757 first! | ||||
| # http://immich3757.ddns.net/.well-known/acme-challenge/smwqgmeNx04tA3HC05I8_gtpqLTkjRAotHdfp0E5LnM | ||||
| systemctl list-timers | ||||
| # q | ||||
| # /etc/crontab/ | ||||
| # /etc/cron.*/* | ||||
| certbot renew --dry-run | ||||
| # https://www.f5.com/company/blog/nginx/using-free-ssltls-certificates-from-lets-encrypt-with-nginx | ||||
| nano /etc/logrotate.d/letsencrypt | ||||
| ``` | ||||
|  | ||||
| ```conf Mon Jul 01 2024 10:33:05 GMT-0700 (Mountain Standard Time) | ||||
| /var/log/letsencrypt/*.log { | ||||
|     rotate 12 | ||||
|     weekly | ||||
|     compress | ||||
|     missingok | ||||
| } | ||||
| ``` | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:33:09 GMT-0700 (Mountain Standard Time) | ||||
| nginx -t | ||||
| systemctl start nginx | ||||
| nginx -s reload | ||||
| ``` | ||||
|  | ||||
| ## Docker | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:36:06 GMT-0700 (Mountain Standard Time) | ||||
| docker run hello-world | ||||
| docker ps -a | ||||
| docker volume list | ||||
| apt install podman-docker -y | ||||
| exit | ||||
| reboot | ||||
| ``` | ||||
|  | ||||
| ## Dockge | ||||
|  | ||||
| ```bash Mon Jul 01 2024 10:39:48 GMT-0700 (Mountain Standard Time) | ||||
| curl -fsSL https://get.docker.com -o get-docker.sh | ||||
| sh get-docker.sh | ||||
| rm get-docker.sh | ||||
| mkdir -p /opt/stacks /opt/dockge | ||||
| cd /opt/dockge | ||||
| curl https://raw.githubusercontent.com/louislam/dockge/master/compose.yaml --output compose.yaml | ||||
| docker compose up -d | ||||
| # docker-compose up -d | ||||
| ``` | ||||
|  | ||||
| ## Copy Slideshow Photos | ||||
|  | ||||
| ```bash Mon Jul 01 2024 11:31:59 GMT-0700 (Mountain Standard Time) | ||||
| lvs -a | ||||
| lsblk -I 8 -o NAME,SIZE,TYPE,FSUSED,FSUSE% | ||||
| mkdir /mnt/usb | ||||
| mount /dev/sdb2 /mnt/usb | ||||
| cp -R /mnt/usb/var/www/html/Images-c9dbce3b-Results/thumbs/ /var/www/html/Images-c9dbce3b-Results/thumbs/ | ||||
| umount /mnt/usb | ||||
| exit | ||||
| reboot | ||||
| # http://192.168.11.2:9400/admin | ||||
| # Slideshow | ||||
| # http://127.0.0.1:8080/slideshow/index.html?nocache=2024-07-01-11-36 | ||||
| # Local | ||||
| # http://192.168.11.2:8080/slideshow/index.html?nocache=2024-07-01-11-36 | ||||
| ``` | ||||
|  | ||||
| ## Kestra | ||||
|  | ||||
| ```bash | ||||
| # L:\Git\Linux-Ubuntu-Server\opt\copy\kestra\compose.yaml | ||||
| ``` | ||||
|  | ||||
| ## Immich | ||||
|  | ||||
| ```bash Mon Jul 01 2024 14:45:57 GMT-0700 (Mountain Standard Time) | ||||
| usermod -a -G docker phares | ||||
| id | ||||
| # uid=0(root) gid=0(root) groups=0(root),1003(docker) | ||||
| su phares | ||||
| # uid=1000(phares) gid=1000(phares) groups=1000(phares),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),101(lxd),1003(docker) | ||||
| docker-compose exec immich_server id | ||||
| # uid=0(root) gid=0(root) groups=0(root) | ||||
| docker run --rm -it -v "/var/immich/photos:/host" ubuntu /bin/bash | ||||
| # Error response from daemon: error while creating mount source path '/var/immich/photos' mkdir h: read-only file system | ||||
| docker run --rm -it -v "/:/host" ubuntu /bin/bash | ||||
| docker run --rm -it -v "/home/phares:/host" ubuntu /bin/bash | ||||
| mkdir /host/test-2024-07-01 | ||||
| exit | ||||
| ls /home/phares/test-2024-07-01 | ||||
| rm -r /home/phares/test-2024-07-01 | ||||
| lsblk -I 8 -o NAME,SIZE,TYPE,FSUSED,FSUSE% | ||||
| # L:\Git\Linux-Ubuntu-Server\opt\copy\immich\.env | ||||
| # L:\Git\Linux-Ubuntu-Server\opt\copy\immich\compose.yaml | ||||
| ``` | ||||
|  | ||||
| ## Incus | ||||
|  | ||||
| - [incus](https://github.com/zabbly/incus) | ||||
|  | ||||
| ```bash Mon Jul 01 2024 15:23:58 GMT-0700 (Mountain Standard Time) | ||||
| curl -fsSL https://pkgs.zabbly.com/key.asc | gpg --show-keys --fingerprint | ||||
| mkdir -p /etc/apt/keyrings/  | ||||
| curl -fsSL https://pkgs.zabbly.com/key.asc -o /etc/apt/keyrings/zabbly.asc | ||||
| sh -c 'cat <<EOF > /etc/apt/sources.list.d/zabbly-incus-lts-6.0.sources | ||||
| Enabled: yes | ||||
| Types: deb | ||||
| URIs: https://pkgs.zabbly.com/incus/lts-6.0 | ||||
| Suites: $(. /etc/os-release && echo ${VERSION_CODENAME}) | ||||
| Components: main | ||||
| Architectures: $(dpkg --print-architecture) | ||||
| Signed-By: /etc/apt/keyrings/zabbly.asc | ||||
|  | ||||
| EOF' | ||||
| apt-get update | ||||
| apt-get install incus -y | ||||
| incus config set core.https_address :8443 | ||||
| exit | ||||
| reboot | ||||
| ``` | ||||
|  | ||||
| - [incus-containers-step-by-step](https://discussion.scottibyte.com/t/incus-containers-step-by-step/349) | ||||
|  | ||||
| ```bash Mon Jul 01 2024 15:35:02 GMT-0700 (Mountain Standard Time) | ||||
| apt install virt-viewer -y | ||||
| usermod -aG incus-admin phares | ||||
| newgrp incus-admin | ||||
| groups | ||||
| exit | ||||
| reboot | ||||
| ``` | ||||
|  | ||||
| ```bash Mon Jul 01 2024 15:36:00 GMT-0700 (Mountain Standard Time) | ||||
| apt install zfsutils-linux -y | ||||
| exit | ||||
| reboot | ||||
| ``` | ||||
|  | ||||
| ```bash Mon Jul 01 2024 15:38:21 GMT-0700 (Mountain Standard Time) | ||||
| incus admin init | ||||
| ``` | ||||
|  | ||||
| ```yaml Mon Jul 01 2024 15:42:37 GMT-0700 (Mountain Standard Time) | ||||
| config: | ||||
|   core.https_address: '[::]:8443' | ||||
| networks: | ||||
| - config: | ||||
|     ipv4.address: auto | ||||
|     ipv6.address: none | ||||
|   description: "" | ||||
|   name: incusbr0 | ||||
|   type: "" | ||||
|   project: default | ||||
| storage_pools: | ||||
| - config: | ||||
|     size: 132GiB | ||||
|   description: "" | ||||
|   name: default | ||||
|   driver: zfs | ||||
| profiles: | ||||
| - config: {} | ||||
|   description: "" | ||||
|   devices: | ||||
|     eth0: | ||||
|       name: eth0 | ||||
|       network: incusbr0 | ||||
|       type: nic | ||||
|     root: | ||||
|       path: / | ||||
|       pool: default | ||||
|       type: disk | ||||
|   name: default | ||||
| projects: [] | ||||
| cluster: null | ||||
| ``` | ||||
|  | ||||
| ```bash Mon Jul 01 2024 15:42:42 GMT-0700 (Mountain Standard Time) | ||||
| incus list | ||||
| incus image list images: | ||||
| incus launch images:ubuntu/22.04 first | ||||
| ``` | ||||
|  | ||||
| -[incus-virtual-machine-custom-installation](https://discussion.scottibyte.com/t/incus-virtual-machine-custom-installation/407) | ||||
|  | ||||
| ```bash Mon Jul 01 2024 15:50:23 GMT-0700 (Mountain Standard Time) | ||||
| incus launch images:ubuntu/22.04/desktop Desktop --vm --console=vga | ||||
| # (remote-viewer:7483): Gtk-WARNING **: 22:53:14.753: cannot open display: | ||||
| incus config trust add DESKTOP-GNECR7R | ||||
| ``` | ||||
|  | ||||
| ```conf Mon Jul 01 2024 19:43:52 GMT-0700 (Mountain Standard Time) | ||||
| Client DESKTOP-GNECR7R certificate add token: | ||||
| # ... | ||||
| ``` | ||||
|  | ||||
| ```PowerShell Mon Jul 01 2024 16:27:58 GMT-0700 (Mountain Standard Time) | ||||
| incus remote add phares.ddns.net 192.168.11.2 | ||||
| incus remote list | ||||
| incus remote switch phares.ddns.net | ||||
| incus list | ||||
| incus console Desktop --type=vga | ||||
| ``` | ||||
|  | ||||
| ```bash Mon Jul 01 2024 19:43:45 GMT-0700 (Mountain Standard Time) | ||||
| apt install openvswitch-switch -y | ||||
| ``` | ||||
|  | ||||
| ```bash Mon Jul 01 2024 19:43:48 GMT-0700 (Mountain Standard Time) | ||||
| # netplan apply | ||||
| # incus profile create bridgeprofile | ||||
| # incus profile device add bridgeprofile eth0 nic nictype=bridged parent=bridge0 | ||||
| # incus launch images:ubuntu/22.04 second --profile default --profile bridgeprofile | ||||
| incus list | ||||
| incus launch images:ubuntu/22.04 second | ||||
| incus exec second bash | ||||
| # snap install lxdmosaic | ||||
| # https://192.168.11.2:8443/ui/ | ||||
| # incus config set core.https_address [::] | ||||
| # incus config set core.trust_password 1178thisIsA7 | ||||
| # incus config set core.https_address :8443 | ||||
| nano lxconsole.crt | ||||
| # ... | ||||
| incus config trust add-certificate lxconsole.crt | ||||
| incus config set core.https_address=[::]:8443 | ||||
| ``` | ||||
|  | ||||
| ## Docker html-to-pdf | ||||
|  | ||||
| - [docker-html-to-pdf](https://github.com/pinkeen/docker-html-to-pdf) | ||||
|  | ||||
| ```bash Mon Jul 01 2024 20:41:43 GMT-0700 (Mountain Standard Time) | ||||
| timedatectl set-timezone America/Phoenix | ||||
| cd /home/phares | ||||
| # cd /var/www/html/pdf | ||||
| mkdir -p /var/www/html/pdf | ||||
| url="http://192.168.11.2:5001" | ||||
| backup_time=$(date +'%H-%M-%S') | ||||
| backup_date=$(date +'%Y-%m-%d') | ||||
| echo "${backup_date}---${backup_time}.pdf" | ||||
| # docker run -v "$(pwd):/workspace" pink33n/html-to-pdf --url http://google.com --pdf out.pdf | ||||
| docker run -v "$(pwd):/workspace" pink33n/html-to-pdf --url "${url}" --pdf "${backup_date}---${backup_time}.pdf" | ||||
| mv "${backup_date}---${backup_time}.pdf" /var/www/html/pdf/. | ||||
| ls -la /var/www/html/pdf | ||||
| # rm /var/www/html/pdf/* | ||||
| ``` | ||||
|  | ||||
| ## Incus Import from Proxmox | ||||
|  | ||||
| - [incus](https://github.com/zabbly/incus) | ||||
|  | ||||
| ```bash Tue Jul 02 2024 17:07:43 GMT-0700 (Mountain Standard Time) | ||||
| # 115-turnkey-gitea | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-115-turnkey-gitea.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-115-turnkey-gitea-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-115-2024_07_02-16_08_37.tar.gz | ||||
| incus launch proxmox-115-turnkey-gitea-image 115-turnkey-gitea -c boot.autostart=true | ||||
| incus exec 115-turnkey-gitea bash | ||||
| # | ||||
| # 118-turnkey-oddo | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-118-turnkey-oddo.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-118-turnkey-oddo-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-118-2024_07_02-16_14_09.tar.gz | ||||
| incus launch proxmox-118-turnkey-oddo-image 118-turnkey-oddo -c boot.autostart=true | ||||
| incus exec 118-turnkey-oddo bash | ||||
| # | ||||
| ``` | ||||
|  | ||||
| ```bash Tue Jul 02 2024 17:07:46 GMT-0700 (Mountain Standard Time) | ||||
| # 122-vaultwarden | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-122-vaultwarden.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-122-vaultwarden-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-122-2024_07_02-16_41_20.tar.gz | ||||
| incus launch proxmox-122-vaultwarden-image 122-vaultwarden -c boot.autostart=true | ||||
| incus exec 122-vaultwarden bash | ||||
| # | ||||
| ``` | ||||
|  | ||||
| ## Incus Import from Proxmox Maybe | ||||
|  | ||||
| ```bash Not done | ||||
| # 114-turnkey-ansible | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-114-turnkey-ansible.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-114-turnkey-ansible-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-114-2024_07_02-16_07_21.tar.gz | ||||
| incus launch proxmox-114-turnkey-ansible-image 114-turnkey-ansible -c boot.autostart=true | ||||
| incus exec 114-turnkey-ansible bash | ||||
| # | ||||
| # 116-turnkey-invoice | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-116-turnkey-invoice.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-116-turnkey-invoice-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-116-2024_07_02-16_09_49.tar.gz | ||||
| incus launch proxmox-116-turnkey-invoice-image 116-turnkey-invoice -c boot.autostart=true | ||||
| incus exec 116-turnkey-invoice bash | ||||
| # | ||||
| # 117-turnkey-nextcloud | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-117-turnkey-nextcloud.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-117-turnkey-nextcloud-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-117-2024_07_02-16_12_14.tar.gz | ||||
| incus launch proxmox-117-turnkey-nextcloud-image 117-turnkey-nextcloud -c boot.autostart=true | ||||
| incus exec 117-turnkey-nextcloud bash | ||||
| # | ||||
| # 119-turnkey-observium | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-119-turnkey-observium.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-119-turnkey-observium-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-119-2024_07_02-16_16_59.tar.gz | ||||
| incus launch proxmox-119-turnkey-observium-image 119-turnkey-observium -c boot.autostart=true | ||||
| incus exec 119-turnkey-observium bash | ||||
| # | ||||
| # 120-turnkey-zoneminder | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-120-turnkey-zoneminder.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-120-turnkey-zoneminder-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-120-2024_07_02-16_19_58.tar.gz | ||||
| incus launch proxmox-120-turnkey-zoneminder-image 120-turnkey-zoneminder -c boot.autostart=true | ||||
| incus exec 120-turnkey-zoneminder bash | ||||
| # | ||||
| # 121-turnkey-faveo-helpdesk | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-121-turnkey-faveo-helpdesk.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-121-turnkey-faveo-helpdesk-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-121-2024_07_02-16_21_18.tar.gz | ||||
| incus launch proxmox-121-turnkey-faveo-helpdesk-image 121-turnkey-faveo-helpdesk -c boot.autostart=true | ||||
| incus exec 121-turnkey-faveo-helpdesk bash | ||||
| # | ||||
| ``` | ||||
|  | ||||
| ```bash Not done | ||||
|  | ||||
| # 123-wastebin | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-123-wastebin.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-123-wastebin-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-123-2024_07_02-16_44_34.tar.gz | ||||
| incus launch proxmox-123-wastebin-image 123-wastebin -c boot.autostart=true | ||||
| incus exec 123-wastebin bash | ||||
| # | ||||
| # 124-readeck | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-124-readeck.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-124-readeck-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-124-2024_07_02-16_47_02.tar.gz | ||||
| incus launch proxmox-124-readeck-image 124-readeck -c boot.autostart=true | ||||
| incus exec 124-readeck bash | ||||
| # | ||||
| # 125-ntfy | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-125-ntfy.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-125-ntfy-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-125-2024_07_02-16_47_58.tar.gz | ||||
| incus launch proxmox-125-ntfy-image 125-ntfy -c boot.autostart=true | ||||
| incus exec 125-ntfy bash | ||||
| # | ||||
| # 126-commafeed | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-126-commafeed.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-126-commafeed-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-126-2024_07_02-16_49_32.tar.gz | ||||
| incus launch proxmox-126-commafeed-image 126-commafeed -c boot.autostart=true | ||||
| incus exec 126-commafeed bash | ||||
| # | ||||
| # 127-actualbudget | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-127-actualbudget.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-127-actualbudget-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-127-2024_07_02-16_50_52.tar.gz | ||||
| incus launch proxmox-127-actualbudget-image 127-actualbudget -c boot.autostart=true | ||||
| incus exec 127-actualbudget bash | ||||
| # | ||||
| # 128-forgejo | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-128-forgejo.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-128-forgejo-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-128-2024_07_02-16_52_26.tar.gz | ||||
| incus launch proxmox-128-forgejo-image 128-forgejo -c boot.autostart=true | ||||
| incus exec 128-forgejo bash | ||||
| # | ||||
| # 129-homepage | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-129-homepage.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-129-homepage-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-129-2024_07_02-16_53_41.tar.gz | ||||
| incus launch proxmox-129-homepage-image 129-homepage -c boot.autostart=true | ||||
| incus exec 129-homepage bash | ||||
| # | ||||
| # 132-redis | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-132-redis.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-132-redis-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-132-2024_07_02-16_55_20.tar.gz | ||||
| incus launch proxmox-132-redis-image 132-redis -c boot.autostart=true | ||||
| incus exec 132-redis bash | ||||
| # | ||||
| # 133-postgresql | ||||
| rm /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| cp /home/free-file-sync/proxmox/vzdump-lxc-133-postgresql.tar.gz /home/free-file-sync/proxmox/metadata.tar.gz | ||||
| incus image import --alias=proxmox-133-postgresql-image /home/free-file-sync/proxmox/metadata.tar.gz /home/free-file-sync/proxmox/vzdump-lxc-133-2024_07_02-16_56_14.tar.gz | ||||
| incus launch proxmox-133-postgresql-image 133-postgresql -c boot.autostart=true | ||||
| incus exec 133-postgresql bash | ||||
| # | ||||
| ``` | ||||
|  | ||||
| ## Import Immich to Docker | ||||
|  | ||||
| - [backup-and-restore](https://immich.app/docs/administration/backup-and-restore/) | ||||
|  | ||||
| ```bash Tue Jul 02 2024 20:01:04 GMT-0700 (Mountain Standard Time) | ||||
| lsblk -I 8 -o NAME,SIZE,TYPE,FSUSED,FSUSE% | ||||
| docker start immich_postgres | ||||
| gunzip < "/home/free-file-sync/proxmox/dump.sql.gz" \ | ||||
| | sed "s/SELECT pg_catalog.set_config('search_path', '', false);/SELECT pg_catalog.set_config('search_path', 'public, pg_catalog', true);/g" \ | ||||
| | docker exec -i immich_postgres psql --username=postgres | ||||
| ``` | ||||
|  | ||||
| ```bash | ||||
| cd /home | ||||
| tar -tvf free-file-sync/proxmox/upload.tar | ||||
| tar -tvf free-file-sync/proxmox/upload.tar usr/src/app/upload/library | ||||
| docker run --rm --volumes-from immich_server -v $(pwd):/backup ubuntu bash -c "cd /usr/src/app/upload && ls -la" | ||||
| docker run --rm --volumes-from immich_server -v $(pwd):/restore ubuntu tar xvf /restore/free-file-sync/proxmox/upload.tar --strip 1 | ||||
| ``` | ||||
|  | ||||
| ## certbot | ||||
|  | ||||
| ```bash Tue Jul 02 2024 23:04:12 GMT-0700 (Mountain Standard Time) | ||||
| noip2 -u 9zh94yf -p xrtvLiRNhScX | ||||
| # https://certbot.eff.org/instructions?ws=nginx&os=ubuntufocal | ||||
| certbot certonly --nginx | ||||
| # mikepharesjr@msn.com | ||||
| # 1: affirm.ddns.net | ||||
| # 2: dashkiosk.ddns.net | ||||
| # 3: dockge.ddns.net | ||||
| # 4: gitea.ddns.net | ||||
| # 5: gitea3757.ddns.net | ||||
| # 6: immich.ddns.net | ||||
| # 7: immich3757.ddns.net | ||||
| # 8: incus.ddns.net | ||||
| # 9: kestra.ddns.net | ||||
| # 10: lxconsole.ddns.net | ||||
| # 11: music.ddns.net | ||||
| # 12: music3757.ddns.net | ||||
| # 13: phares.ddns.net | ||||
| # 14: phares3757.ddns.net | ||||
| # 15: vaultwarden.ddns.net | ||||
| # 14,1,5,7,12 | ||||
| # always pick phares3757 first! | ||||
| listen" directive is not allowed here in | ||||
| ``` | ||||
|  | ||||
| ## HP Printer | ||||
|  | ||||
| ```bash | ||||
| # apt-get install --assume-yes libcups2 cups libcups2-dev cups-bsd cups-client avahi-utils libavahi-client-dev libavahi-core-dev libavahi-common-dev libcupsimage2-dev libdbus-1-dev build-essential gtk2-engines-pixbuf ghostscript openssl libjpeg-dev libatk-adaptor libgail-common libsnmp-dev snmp-mibs-downloader libtool libtool-bin libusb-1.0-0-dev libusb-0.1-4 wget policykit-1 policykit-1-gnome automake1.11 python3-dbus.mainloop.pyqt5 python3-reportlab python3-notify2 python3-pyqt5 python3-dbus python3-gi python3-lxml python3-dev python3-pil python-is-python3 libsane libsane-dev sane-utils xsane -y | ||||
| apt-get install --assume-yes libcups2t64 cups cups-bsd cups-client avahi-utils libavahi-client-dev libavahi-core-dev libavahi-common-dev libcupsimage2-dev libdbus-1-dev build-essential gtk2-engines-pixbuf ghostscript openssl libjpeg-dev libatk-adaptor libgail-common libsnmp-dev snmp-mibs-downloader libtool libtool-bin libusb-1.0-0-dev libusb-0.1-4 wget policykit-1 policykit-1-gnome automake1.11 python3-dbus.mainloop.pyqt5 python3-reportlab python3-notify2 python3-pyqt5 python3-dbus python3-gi python3-lxml python3-dev python3-pil python-is-python3 sane-utils xsane -y | ||||
| ``` | ||||
|  | ||||
| ## Gitea Runner | ||||
|  | ||||
| ```bash Fri Jul 19 2024 12:32:07 GMT-0700 (Mountain Standard Time) | ||||
| cd /home/phares | ||||
| wget https://gitea.com/gitea/act_runner/releases/download/v0.2.10/act_runner-0.2.10-linux-amd64 | ||||
| chmod +x act_runner-0.2.10-linux-amd64 | ||||
| ./act_runner-0.2.10-linux-amd64 -v | ||||
| ./act_runner-0.2.10-linux-amd64 register --no-interactive --instance http://192.168.11.2:3000/ --token asdf | ||||
| ./act_runner-0.2.10-linux-amd64 daemon | ||||
| ``` | ||||
|  | ||||
| ```bash Fri Jul 19 2024 13:37:50 GMT-0700 (Mountain Standard Time) | ||||
| cd /home/phares | ||||
| cat .runner | ||||
| ./act_runner-0.2.10-linux-amd64 daemon | ||||
| ``` | ||||
|  | ||||
| ```bash Fri Jul 19 2024 13:40:38 GMT-0700 (Mountain Standard Time) | ||||
| cp /home/phares/act_runner-0.2.10-linux-amd64 /usr/local/bin/act_runner | ||||
| ./act_runner-0.2.10-linux-amd64 register --no-interactive --config /etc/act_runner/config.yaml --instance http://192.168.11.2:3000/ --name beelink-cmd-phares3757 --token asdf | ||||
| ``` | ||||
|  | ||||
| ```yml Fri Jul 19 2024 13:53:13 GMT-0700 (Mountain Standard Time) | ||||
| # gitea-runner | ||||
| version: "3.8" | ||||
| services: | ||||
|   runner: | ||||
|     environment: | ||||
|       # CONFIG_FILE: /config.yaml | ||||
|       GITEA_INSTANCE_URL: ${INSTANCE_URL} | ||||
|       GITEA_RUNNER_LABELS: ${RUNNER_LABELS} | ||||
|       GITEA_RUNNER_NAME: ${RUNNER_NAME} | ||||
|       GITEA_RUNNER_REGISTRATION_TOKEN: ${REGISTRATION_TOKEN} | ||||
|     image: gitea/act_runner:nightly | ||||
|     volumes: | ||||
|       # - ./config.yaml:/config.yaml | ||||
|       - runner-data:/data | ||||
|       - /var/run/docker.sock:/var/run/docker.sock | ||||
| networks: {} | ||||
| volumes: | ||||
|   runner-data: | ||||
|     driver: local | ||||
| ``` | ||||
|  | ||||
| ```conf Fri Jul 19 2024 13:55:08 GMT-0700 (Mountain Standard Time) | ||||
| # ID 11 | ||||
| INSTANCE_URL=http://192.168.11.2:3000/ | ||||
| REGISTRATION_TOKEN=DjgUzQsGB4LgNeSpbHe2nLreB6gb7eYj4AbgcwYD | ||||
| RUNNER_NAME=beelink-dockge-phares3757 | ||||
| RUNNER_LABELS= | ||||
| ``` | ||||
|  | ||||
| ## certbot duckdns | ||||
|  | ||||
| ```bash Sun Jul 21 2024 12:02:19 GMT-0700 (Mountain Standard Time) | ||||
| noip2 -u 9zh94yf -p xrtvLiRNhScX | ||||
| # https://certbot.eff.org/instructions?ws=nginx&os=ubuntufocal | ||||
| certbot certonly --nginx | ||||
| # mikepharesjr@msn.com | ||||
| # 1: affirm.ddns.net | ||||
| # 2: codeserver.ddns.net | ||||
| # 3: dashkiosk.ddns.net | ||||
| # 4: dockge.ddns.net | ||||
| # 5: docmost.ddns.net | ||||
| # 6: gitea.ddns.net | ||||
| # 7: immich.ddns.net | ||||
| # 8: incus.ddns.net | ||||
| # 9: kestra.ddns.net | ||||
| # 10: lxconsole.ddns.net | ||||
| # 11: music.ddns.net | ||||
| # 12: phares.ddns.net | ||||
| # 13: phares3757.ddns.net | ||||
| # 14: quartz.ddns.net | ||||
| # 15: vaultwarden.ddns.net | ||||
| # 16: phares.duckdns.org | ||||
| # 17: docmost.phares.duckdns.org | ||||
| # 18: gitea.phares.duckdns.org | ||||
| # 19: immich.phares.duckdns.org | ||||
| # 20: music.phares.duckdns.org | ||||
| # 21: quartz.phares.duckdns.org | ||||
| # 22: vaultwarden.phares.duckdns.org | ||||
| # 13 1 16 17 18 19 20 21 22 | ||||
| # This certificate expires on 2024-10-19 | ||||
| ``` | ||||
|  | ||||
| ## Pi-hole | ||||
|  | ||||
| ```bash Sun Jul 21 2024 19:03:16 GMT-0700 (Mountain Standard Time) | ||||
| # https://canyoublockit.com/ | ||||
| curl -sSL https://install.pi-hole.net | bash | ||||
| apt install unbound -y | ||||
| # https://docs.pi-hole.net/guides/dns/unbound/ | ||||
| nano /etc/unbound/unbound.conf.d/pi-hole.conf | ||||
| ``` | ||||
|  | ||||
| ```conf Sun Jul 21 2024 19:03:14 GMT-0700 (Mountain Standard Time) | ||||
| server: | ||||
|     # If no logfile is specified, syslog is used | ||||
|     # logfile: "/var/log/unbound/unbound.log" | ||||
|     verbosity: 0 | ||||
|  | ||||
|     interface: 127.0.0.1 | ||||
|     port: 5335 | ||||
|     do-ip4: yes | ||||
|     do-udp: yes | ||||
|     do-tcp: yes | ||||
|  | ||||
|     # May be set to yes if you have IPv6 connectivity | ||||
|     do-ip6: no | ||||
|  | ||||
|     # You want to leave this to no unless you have *native* IPv6. With 6to4 and | ||||
|     # Terredo tunnels your web browser should favor IPv4 for the same reasons | ||||
|     prefer-ip6: no | ||||
|  | ||||
|     # Use this only when you downloaded the list of primary root servers! | ||||
|     # If you use the default dns-root-data package, unbound will find it automatically | ||||
|     #root-hints: "/var/lib/unbound/root.hints" | ||||
|  | ||||
|     # Trust glue only if it is within the server's authority | ||||
|     harden-glue: yes | ||||
|  | ||||
|     # Require DNSSEC data for trust-anchored zones, if such data is absent, the zone becomes BOGUS | ||||
|     harden-dnssec-stripped: yes | ||||
|  | ||||
|     # Don't use Capitalization randomization as it known to cause DNSSEC issues sometimes | ||||
|     # see https://discourse.pi-hole.net/t/unbound-stubby-or-dnscrypt-proxy/9378 for further details | ||||
|     use-caps-for-id: no | ||||
|  | ||||
|     # Reduce EDNS reassembly buffer size. | ||||
|     # IP fragmentation is unreliable on the Internet today, and can cause | ||||
|     # transmission failures when large DNS messages are sent via UDP. Even | ||||
|     # when fragmentation does work, it may not be secure; it is theoretically | ||||
|     # possible to spoof parts of a fragmented DNS message, without easy | ||||
|     # detection at the receiving end. Recently, there was an excellent study | ||||
|     # >>> Defragmenting DNS - Determining the optimal maximum UDP response size for DNS <<< | ||||
|     # by Axel Koolhaas, and Tjeerd Slokker (https://indico.dns-oarc.net/event/36/contributions/776/) | ||||
|     # in collaboration with NLnet Labs explored DNS using real world data from the | ||||
|     # the RIPE Atlas probes and the researchers suggested different values for | ||||
|     # IPv4 and IPv6 and in different scenarios. They advise that servers should | ||||
|     # be configured to limit DNS messages sent over UDP to a size that will not | ||||
|     # trigger fragmentation on typical network links. DNS servers can switch | ||||
|     # from UDP to TCP when a DNS response is too big to fit in this limited | ||||
|     # buffer size. This value has also been suggested in DNS Flag Day 2020. | ||||
|     edns-buffer-size: 1232 | ||||
|  | ||||
|     # Perform prefetching of close to expired message cache entries | ||||
|     # This only applies to domains that have been frequently queried | ||||
|     prefetch: yes | ||||
|  | ||||
|     # One thread should be sufficient, can be increased on beefy machines. In reality for most users running on small networks or on a single machine, it should be unnecessary to seek performance enhancement by increasing num-threads above 1. | ||||
|     num-threads: 1 | ||||
|  | ||||
|     # Ensure kernel buffer is large enough to not lose messages in traffic spikes | ||||
|     so-rcvbuf: 1m | ||||
|  | ||||
|     # Ensure privacy of local IP ranges | ||||
|     private-address: 192.168.0.0/16 | ||||
|     private-address: 169.254.0.0/16 | ||||
|     private-address: 172.16.0.0/12 | ||||
|     private-address: 10.0.0.0/8 | ||||
|     private-address: fd00::/8 | ||||
|     private-address: fe80::/10 | ||||
| ``` | ||||
|  | ||||
| ```bash Sun Jul 21 2024 19:03:10 GMT-0700 (Mountain Standard Time) | ||||
| service unbound restart | ||||
| nano /etc/lighttpd/lighttpd.conf | ||||
| ``` | ||||
|  | ||||
| ```conf Sun Jul 21 2024 19:03:02 GMT-0700 (Mountain Standard Time) | ||||
| ... | ||||
| server.port = 8007 | ||||
| ... | ||||
| ``` | ||||
|  | ||||
| ```bash Sun Jul 21 2024 19:02:59 GMT-0700 (Mountain Standard Time) | ||||
| pihole -up | ||||
| service lighttpd restart | ||||
| pihole -a -p 484C889D0ED1EA4AB930AA518FE3B15E | ||||
| rm /etc/netplan/50-cloud-init.yaml | ||||
| nano /etc/netplan/00-installer-config.yaml | ||||
| ``` | ||||
|  | ||||
| ```yaml Sun Jul 21 2024 19:02:57 GMT-0700 (Mountain Standard Time) | ||||
| network: | ||||
|   ethernets: | ||||
|     enp2s0: | ||||
|       addresses: | ||||
|         - 192.168.11.2/25 | ||||
|       routes: | ||||
|         - to: default | ||||
|           via: 192.168.11.1 | ||||
|       nameservers: | ||||
|           addresses: [205.171.3.25, 205.171.2.25] | ||||
|   version: 2 | ||||
| ``` | ||||
|  | ||||
| ```bash Sun Jul 21 2024 19:05:27 GMT-0700 (Mountain Standard Time) | ||||
| chmod 600 /etc/netplan/*.yaml | ||||
| netplan apply | ||||
| reboot | ||||
| ``` | ||||
		Reference in New Issue
	
	Block a user