Skip to content

Instantly share code, notes, and snippets.

Avatar
😁
Live is on going

Georgiy Sitnikov GAS85

😁
Live is on going
View GitHub Profile
@GAS85
GAS85 / battery_checker.md
Last active October 16, 2018 08:10
Cubietruck + Battery + Armbian - shutdown server if critical battery level reached. Just added it to /etc/cron.hourly
View battery_checker.md

MOVED TO https://github.com/GAS85/cubietruck

I create a script that will try to send Warning Email and and shutdown the system as soon as it goes below 10%.

I put it in cron hourly and script should automatically check and do loop if battery discharging and below e.g. 80%.

E-Mail is needed because last time I did not know that my power supply died and I did not know why sever stopped. This version is also producing logs that could be checked after cubietruck fails. That helps for trouble shooting, e.g. to find out that power supply could not produce enough current to charge battery.

Log output example:

@GAS85
GAS85 / apache2_restrictDirectAccess.md
Last active March 23, 2020 09:01
Apache2 Restrict direct IP access to website
View apache2_restrictDirectAccess.md

Just added this into Apache2 config. E.g. /etc/apache2/sites-available/900-restrictDirectIP.conf and enable it afterwards.

<VirtualHost 192.168.0.1:80>
	ServerName 192.168.0.1
	Redirect 403 /
	ErrorDocument 403 "Sorry, direct IP access not allowed."
	DocumentRoot /var/www/html
	ErrorLog ${APACHE_LOG_DIR}/error_directIPAccess.log
	CustomLog ${APACHE_LOG_DIR}/access_directIPAccess.log combined
@GAS85
GAS85 / fail2ban_cacti.md
Created May 20, 2020 07:54
Harden Cacti with Fail2Ban
View fail2ban_cacti.md

Fail2Ban and Cacti

Prerequsits

  • Ubuntu 20.04
  • cacti, fail2ban and e.g. iptables are installed

Setup

@GAS85
GAS85 / fail2ban_cacti_deprecated.md
Last active May 20, 2020 07:55
Fail2Ban and Cacti - read MySQL table
View fail2ban_cacti_deprecated.md
@GAS85
GAS85 / apache2_transmission_fail2ban.md
Created June 22, 2020 08:04
Harden Transmission and Apache2 Reverse Proxy with fail2ban
View apache2_transmission_fail2ban.md

Fail2ban and Transmission with Apache2 Reverse Proxy

Prerequsits

@GAS85
GAS85 / apache2_portainer_fail2ban.md
Created June 25, 2020 09:41
Harden Portainer and Apache2 Reverse Proxy with fail2ban
View apache2_portainer_fail2ban.md

Fail2ban and Portainer with Apache2 Reverse Proxy

Prerequsits

  • Ubuntu 20.04
  • Portainer with Remote access
  • apache2 as reverse proxy e.g. as described here
  • fail2ban and e.g. iptables are installed
  • Portainer is accesible via https://YourDomain/portainer/
@GAS85
GAS85 / apache2_HPKP.md
Last active October 27, 2021 12:03
Activating HTTP Public Key Pinning (HPKP) on Let's Encrypt
View apache2_HPKP.md

Activating HTTP Public Key Pinning (HPKP) on Let's Encrypt

Source: https://lilleengen.io/blog/index.php/posts/activating-http-public-key-pinning-hpkp-on-lets-encrypt

  • Disclaimer: This might break your website, don't preceded if you don't know what you're doing.

Since the letsencrypt seems to create a new private key every time the certificate is renewed and Let's Encrypt requires you to renew you certificate once every ~80 days pinning using your certificate's SPKI is probably not the way to go. So, what should we pin then? Let's Encrypt is currently issuing from Authority X3, and using Authority X4 as a backup, so these two is a great place to start. We should also include the ISRG Root so this might support new Authorities with other SPKIs as well.

Generate HASH of Private Keys

To generate the hash of the SPKI of these certificates run the following commands

@GAS85
GAS85 / aria2_apache2_reverseProxy.md
Created February 12, 2020 11:45
Aria2 + Ubuntu 18.04 + Apache2 + Reverse Proxy + Web UI
View aria2_apache2_reverseProxy.md
OS: Ubuntu 18.04 Apache/2.4.18+
Aim: to ensure Aria2 access via reverse proxy
IP Addr of your Aria2 server is 192.168.0.111
Your local IP network is 192.168.0.0/24
Your domain is YourDomain.com
Aria2 installed as descibed https://gist.github.com/GAS85/79849bfd09613067a2ac0c1a711120a6

1. Ensure Reverse Proxy

a. Using Apache as a reverse proxy

@GAS85
GAS85 / split_tunnel_VPN.md
Last active October 17, 2022 15:44
Force Torrent/user Traffic through VPN Split Tunnel on Ubuntu 16.04
View split_tunnel_VPN.md
@GAS85
GAS85 / nextcloud_fail2ban.md
Last active November 21, 2022 16:27
Harden Nextcloud 17+ with Fail2Ban, GUI and WebDAV - Ubuntu 20.04
View nextcloud_fail2ban.md

Fail2ban and Nextcloud

Prerequsits

  • Ubuntu 20.04
  • nextcloud, fail2ban and e.g. iptables are installed

Note