JedMeister

# This guide will show you how to configure ddclient to dynamically update your DNS at Cloudflare.
# This cookbook makes use of a number of online guides - all referenced at the end.

# Note all commands require root, so if you aren't already logged in as root, either run:
sudo su -
# to switch to the root user or prefix every command with:
sudo <COMMAND...>

# Cloudflare requires ddclient to be version 3.8.2 or you will get a 'cloudflare protocol didn't exist'.
# Debian 10/Bullseye has [3.9.1](https://packages.debian.org/bullseye/ddclient) so should be good to go.

JedMeister

Google Public NTP [AS15169]:

time.google.com

time1.google.com

time2.google.com

time3.google.com

JedMeister

#!/bin/bash -ex

# convenience functions & vars

# To force all steps to run, FORCE=y

logfile=~/$(date +%s)-buster-setup.log
unset old_pool_path old_release
export FAB_PATH=${FAB_PATH:-/turnkey/fab}
export SRC_PATH=${SRC_PATH:-/turnkey/public}

JedMeister

; **************************************************************************
; * Global options                                                         *
; **************************************************************************

; A copy of some devices and system files is needed within the chroot jail
; Chroot conflicts with configuration file reload and many other features
; Remember also to update the logrotate configuration.
chroot = /var/lib/stunnel4/
; Chroot jail can be escaped if setuid option is not used
setuid = stunnel4

JedMeister

#!/bin/bash -e
if [[ $EUID -ne 0 ]]; then
    echo "This script must be run as root, please use sudo" 
    exit 1
fi
if [[ -n $1 ]]; then
    NEW_STYLE=$1
else
    NEW_STYLE=custom_style
fi

JedMeister

Please note that this process will add a third party TurnKey repo that I personally manage. I had to do that as I do not have direct access to the offical TurnKey repos and we need updated packages for a Stetch base.

Starting point: v14.2 TKLDev running in a VM (or bare metal if you prefer...), logged into terminal as root.

---

# checkout appropriate branch of common and core
cd common
git fetch origin # assumes you stil have turnkey as origin - can be skipped on fresh v14.2 install
git checkout -t origin/stretch-dev

JedMeister

ServerName localhost

<VirtualHost *:80>
        RewriteEngine on
        ReWriteCond %{SERVER_PORT} !^443$
        RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R=301,L]
</VirtualHost>

<VirtualHost *:443>

JedMeister

Keybase proof

I hereby claim:

• I am JedMeister on github.
• I am jeremydavis (https://keybase.io/jeremydavis) on keybase.
• I have a public key whose fingerprint is 6EAF 8CC7 9E00 2BA5 CE5B 4580 6D0C A24B 0C5C C21B

To claim this, I am signing this object: