MatthewVance

server:
    ###########################################################################
    # BASIC SETTINGS
    ###########################################################################
    # Time to live maximum for RRsets and messages in the cache. If the maximum
    # kicks in, responses to clients still get decrementing TTLs based on the
    # original (larger) values. When the internal TTL expires, the cache item
    # has expired. Can be set lower to force the resolver to query for data
    # often, and not trust (very large) TTL values.
    cache-max-ttl: 86400

MatthewVance

#####################
# Behavior Settings #
#####################

# Make new lines contain the same amount of whitespace as line above.
unset autoindent

# Use a tab size of n columns. The value of n must be greater than 0.
# The default value is 8.
set tabsize 4

MatthewVance

gpg --import fake 

curl --tlsv1.2 -L https://sks-keyservers.net/sks-keyservers.netCA.pem -O
curl --tlsv1.2 -L https://sks-keyservers.net/sks-keyservers.netCA.pem.asc -O

# Move hkps pool cert to cert store
sudo cp -v sks-keyservers.netCA.pem /etc/ssl/certs/
 
# Import key for HKPS signature
gpg --recv-key 0x0B7F8B60E3EDFAE3

MatthewVance

curl https://www.jabberwocky.com/software/paperkey/paperkey-1.6.tar.gz -O
curl https://www.jabberwocky.com/software/paperkey/paperkey-1.6.tar.gz.sig -O
gpg --recv-key 0x99242560
gpg --verify paperkey-1.6.tar.gz.sig paperkey-1.6.tar.gz
tar -xzvf paperkey-1.6.tar.gz
cd paperkey-1.6
apt install build-essential
./configure
make
make check

MatthewVance

***************************************************************************
                    **WARNING**WARNING**WARNING**

This computer system is the private property of its owner, whether
individual, corporate or government. It is for authorized use only.
Unauthorized access or use of this computer system may subject violators
to criminal, civil, and/or administrative action. All data contained
on this computer system may be monitored, intercepted, recorded, read,
copied, or captured in any manner and disclosed in any manner, by
authorized personnel. THERE IS NO RIGHT OF PRIVACY IN THIS SYSTEM.

MatthewVance

# This is the ssh client system-wide configuration file.  See
# ssh_config(5) for more information.  This file provides defaults for
# users, and the values can be changed in per-user configuration files
# or on the command line.

# Configuration data is parsed as follows:
#  1. command line options
#  2. user-specific file
#  3. system-wide file
# Any configuration value is only changed the first time it is set.

MatthewVance

# Package generated configuration file
# See the sshd_config(5) manpage for details

# What ports, IPs and protocols we listen for
Port 22
# Use these options to restrict which interfaces/protocols sshd will bind to
#ListenAddress ::
##ListenAddress 192.168.1.2
Protocol 2
# HostKeys for protocol version 2

MatthewVance

#!/bin/bash

#: Title              : restic stats
#: Date               : October 14, 2018
#: Author             : Matt Vance
#: Version            : 1.0
#: Description        : Script to fully sytem backlup
#: License            : MIT License (MIT)

# Copyright (C) 2018 Matthew Vance

MatthewVance

#!/bin/bash

#: Title              : restic unlock
#: Date               : April 26, 2019
#: Author             : Matt Vance
#: Version            : 1.0
#: Description        : Script to manually unlock repo
#: License            : MIT License (MIT)

# Copyright (C) 2019 Matthew Vance

MatthewVance

bind 192.168.1.106:8889
tls /etc/caddy/ssl/host_name-bundle.pem /etc/caddy/ssl/end_device-key.pem {
    protocols tls1.2 tls1.3
}

# Reverse proxy to rclone restic rest service
proxy / localhost:8080 {
    # health_check /
    transparent
    max_conns 1024