phares3757/.infineon
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d13f07232b3bff7ba12ab0a1042007c348038861
.infineon/_-Review/beelink.proxmox.md
Mike Phares 837435b7ad 12-04
2024-12-04 07:29:08 -07:00

10 KiB
Raw Blame History

Brand, created, draft, GPU, RAM, SSD, type, updated
Brand created draft GPU RAM SSD type updated
Beelink 2024-04-02T01:49:25.791Z true; Intel Celeron 11th Gen N5095 2.9GHz 8GB DDR4 M.2 SATA3 2280 topic 2024-12-04T03:46:28.000Z

Beelink Proxmox

Proxmox

Post-PVE

# https://www.youtube.com/watch?v=kcpu4z5eSEU&t=225s
# https://tteck.github.io/Proxmox/
# https://github.com/tteck/Proxmox
bash -c "$(wget -qLO - https://github.com/tteck/Proxmox/raw/main/misc/post-pve-install.sh)"
uname -r
bash -c "$(wget -qLO - https://github.com/tteck/Proxmox/raw/main/misc/kernel-clean.sh)"

Dashkiosk

apt install snapd
apt install sudo links unzip nginx git nano ncdu -y
snap install dashkiosk
snap install ubuntu-frame wpe-webkit-mir-kiosk
snap set wpe-webkit-mir-kiosk daemon=true
snap set wpe-webkit-mir-kiosk url=http://localhost:9400/receiver
wpe-webkit-mir-kiosk.cog http://localhost:9400/receiver
/snap/wpe-webkit-mir-kiosk/current/bin/setup.sh
wpe-webkit-mir-kiosk.cog http://localhost:9400/receiver

snap set ubuntu-frame daemon=true
# Slideshow
# http://127.0.0.1:8080/slideshow
# Local
# https://192.168.11.2/slideshow

authorized_keys

cat /root/.ssh/authorized_keys
nano /root/.ssh/authorized_keys

ssh-rsa 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 root@beelink
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK7khmvc9lTWHALZ/IOMcJNz/1SuvrU53fI43v4PxIJN # 92532396 2023-12-27 mikep@DESKTOP-VP94SPB
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGq7b8qtm4fgNxW2lxm+qoxm8Wz7+1uhLQCg7xSlKYL1 # 92683771 2024-01-01 mikep@DESKTOP-BMV4V66
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJqLFW9kYMp9lOTXXYafxLiUADFFKeM5KDzt02E3XeRP # 92691378 2024-01-01 cphar@DESKTOP-KA0LMMJ
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBkS+uvWevmhYNos6MJKVi2auAx6x+xlyOnnvbdEstsz # 92797978 2024-01-03 mikep@DESKTOP-GNECR7R
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKf5fo63+vyYa8E06+HOPg24e9VMsvv/kBsHKGjBBUyz # 92895319 2024-01-05 mike@mike-B365M-DS3H
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGM6ANLH/4dS0YqlsCyoXkznzkgIsDqCTk3YX01XVWd8 # 92909911 2024-01-06 mikep@DESKTOP-H6JG91B
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOwAv1vrRA29GYL0DFSE8nmD5q3gL+vVtFSwhrXObDo4 # 93288214 2024-01-13 infineon\phares@ISCN5CG3256CPS
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH1xPVOisKwW6Xwo/Yh1kx2smt2HJU2/pRjTJf4KdGXo # 97267150 2024-03-28 mike@mike-Default-string
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEDz5WqCKsoaxV+LG/kufLNuiE9K3lqp+B3AqeKXGusX # 97442032 2024-04-01 lphar@DESKTOP-1238PEQ
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID09PhrjIpeNBmUeycnT3xKF8F5TcGL3ZKAvU9YdLj7H # 98747144 2024-04-25 mike@mike-Default-string
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIaZyTLpafZta8W8Uv6uWpgbbj4QL5dde9Rlf06PfdYc # 98824914 2024-04-26 k0308@DESKTOP-0UJ8DD5
# ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEFpucyp3FAHn8/9cXvfRegi09DkR6XLugoniEyQ9w0T # 98824924 2024-04-26 mille@DESKTOP-QL2HGEH
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOn/Ptg/k3rOJn32GxrL2J3Bazt/3M9fGWjzP+CW1qXK # 100900455 2024-06-03 lphares0907@penguin
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPMIxGucViHMHFXoM2VBPlvLvMgqNi2BUtTE/D4n778M # 101638217 2024-06-14 mikep@DESKTOP-VVO6KCM

Create Users

adduser lphares
mkdir /home/lphares/.ssh
cp /root/.ssh/authorized_keys /home/lphares/.ssh/authorized_keys
chown lphares:lphares -R /home/lphares
adduser bmiller
mkdir /home/bmiller/.ssh
cp /root/.ssh/authorized_keys /home/bmiller/.ssh/authorized_keys
chown bmiller:bmiller -R /home/bmiller
adduser gogs
mkdir /home/gogs/.ssh
cp /root/.ssh/authorized_keys /home/gogs/.ssh/authorized_keys
chown gogs:gogs -R /home/gogs

Log

ln -s /var/log/nginx /var/www/html/log-nginx
ls -la /var/www/html
exit

cp ~/.bash_history /etc/bash_history_2024-06-17.txt
cat /etc/bash_history_2024-06-17.txt
exit

apt install smartmontools
smartctl -i /dev/sda

no-ip2

cd /usr/local/src/
wget http://www.noip.com/client/linux/noip-duc-linux.tar.gz
tar xf noip-duc-linux.tar.gz
ls
cd noip-2.1.9-1/
apt-get install make gcc -y
make install
cat /usr/local/etc/no-ip2.conf
exit

Gogs

cd /home/gogs
wget https://dl.gogs.io/0.13.0/gogs_0.13.0_linux_amd64.tar.gz
tar -xvzf gogs_0.13.0_linux_amd64.tar.gz
rm gogs_0.13.0_linux_amd64.tar.gz
chown -R gogs:gogs /home/gogs
su gogs
cd /home/gogs/gogs
./gogs web
links http://192.168.11.2:3000/install

BRAND_NAME = Gogs
RUN_USER   = gogs
RUN_MODE   = prod

[database]
TYPE     = sqlite3
HOST     = 127.0.0.1:3306
NAME     = gogs
SCHEMA   = public
USER     = gogs
PASSWORD = 1178
SSL_MODE = disable
PATH     = data/gogs.db

[repository]
ROOT           = /home/gogs/gogs-repositories
DEFAULT_BRANCH = master

[server]
DOMAIN           = localhost
HTTP_PORT        = 3000
EXTERNAL_URL     = http://d98b8bcf651717df3301d99689440f5fd6f411d4@beelink:3000/
DISABLE_SSH      = false
SSH_PORT         = 22
START_SSH_SERVER = false
OFFLINE_MODE     = false

[mailer]
ENABLED = false

[auth]
REQUIRE_EMAIL_CONFIRMATION  = false
DISABLE_REGISTRATION        = false
ENABLE_REGISTRATION_CAPTCHA = true
REQUIRE_SIGNIN_VIEW         = false

[user]
ENABLE_EMAIL_NOTIFICATION = false

[picture]
DISABLE_GRAVATAR        = false
ENABLE_FEDERATED_AVATAR = false

[session]
PROVIDER = file

[log]
MODE      = file
LEVEL     = Info
ROOT_PATH = /home/gogs/gogs/log

[security]
INSTALL_LOCK = true
SECRET_KEY   = czo27vBeXWU7HTi

exit
# https://github.com/gogs/gogs/blob/main/scripts/systemd/gogs.service
nano /etc/systemd/system/gogs-daemon.service

[Unit]
Description=Gogs
After=syslog.target
After=network.target

[Service]
# Modify these two values and uncomment them if you have
# repos with lots of files and get an HTTP error 500 because
# of that
###
#LimitMEMLOCK=infinity
#LimitNOFILE=65535
Type=simple
User=gogs
Group=gogs
WorkingDirectory=/home/gogs/gogs
ExecStart=/home/gogs/gogs/gogs web
Restart=always
Environment=USER=gogs HOME=/home/gogs

# Some distributions may not support these hardening directives
# If you cannot start the service due
# to an unknown option, comment out the ones not supported by your version of systemd.
ProtectSystem=full
PrivateDevices=yes
PrivateTmp=yes
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target

systemctl enable gogs-daemon
systemctl stop gogs-daemon
systemctl start gogs-daemon
systemctl status gogs-daemon.service
journalctl -fu gogs-daemon.service
journalctl --rotate
journalctl --vacuum-time=1s
systemctl daemon-reload
mkdir /etc/gogs-copy
cp /home/gogs/gogs/custom/conf/app.ini /etc/gogs-copy/
ln -s /home/gogs/gogs/custom/conf /etc/gogs
# nano /home/gogs/gogs/custom/conf/app.ini

# https://github.com/Kos-M/GogsThemes
cd /home/gogs
git clone https://github.com/Kos-M/GogsThemes
mkdir -p /home/gogs/gogs/custom/templates/inject/
mkdir -p /home/gogs/gogs/custom/public/css/
echo  '<link rel="stylesheet" href="/css/themes/dark_theme.css">' >>  /home/gogs/gogs/custom/templates/inject/head.tmpl
mv ./GogsThemes/themes/ /home/gogs/gogs/custom/public/css/
cp -r  GogsThemes/img/ /home/gogs/gogs/custom/public/
rm -r ./GogsThemes
systemctl restart gogs-daemon
nano /etc/gogs/app.ini

# See free-file-sync directory

systemctl restart gogs-daemon
# http://localhost:3000/
# https://github.com/gogs/docs-api/tree/master/Repositories#migrate
# https://github.com/gogs/docs-api?tab=readme-ov-file
# git push --set-upstream gogs master
# url = gogs@gogs3757.ddns.net:mikepharesjr/
# url = https://{token}@gogs3757.ddns.net/mikepharesjr/

certbot

# https://certbot.eff.org/instructions?ws=nginx&os=ubuntufocal
apt-get remove certbot -y
snap install --classic certbot
ln -s /snap/bin/certbot /usr/bin/certbot
mkdir -p /var/www/certbot/.well-known/acme-challenge
touch /var/www/certbot/.well-known/acme-challenge/smwqgmeNx04tA3HC05I8_gtpqLTkjRAotHdfp0E5LnM
# certbot --nginx
certbot certonly --nginx
# always pick phares3757 first!
# http://immich3757.ddns.net/.well-known/acme-challenge/smwqgmeNx04tA3HC05I8_gtpqLTkjRAotHdfp0E5LnM
systemctl list-timers
# /etc/crontab/
# /etc/cron.*/*
certbot renew --dry-run
# https://www.f5.com/company/blog/nginx/using-free-ssltls-certificates-from-lets-encrypt-with-nginx

Slideshow Images

lsblk
mount /dev/sdb2 /mnt
cp -R /mnt/var/www/html/Images-c9dbce3b-Results/thumbs/ /var/www/html/Images-c9dbce3b-Results/.
ls /var/www/html/Images-c9dbce3b-Results/thumbs/
exit

immich-distribution

# https://meichthys.github.io/foss_photo_libraries/
snap install immich-distribution
# http://127.0.0.1:3001/
systemctl status snap.immich-distribution.manager.service
snap get immich-distribution database-password