glenn-sorrentino

root@hushline-dev:~# cd /var/www/html/hushline/
root@hushline-dev:/var/www/html/hushline# source venv/bin/activate
(venv) root@hushline-dev:/var/www/html/hushline# /root/.local/bin/poetry install
Installing dependencies from lock file

Package operations: 55 installs, 1 update, 0 removals

  - Installing markupsafe (2.1.5)
  - Installing blinker (1.7.0)

glenn-sorrentino

glennsorrentino@m1 hushline % ansible-playbook -i 64.23.207.82, setup.yml --ask-vault-pass -e ansible_ssh_private_key_file=~/.ssh/dev -e ansible_user=root
Vault password: 

PLAY [Setup Hush Line application server] **************************************************************************************************************

TASK [Gathering Facts] *********************************************************************************************************************************
ok: [64.23.207.82]

TASK [Install required packages] ***********************************************************************************************************************

glenn-sorrentino

Warning: Permanently added '64.23.163.3' (ED25519) to the list of known hosts.
Linux hushline-staging 6.1.0-9-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.27-1 (2023-05-08) x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.

glenn-sorrentino

root@hushline-staging:/var/www/html/hushline# chmod +x install.sh && git pull && ./install.sh
Already up to date.
 _   _           _       _     _            
| | | |_   _ ___| |__   | |   (_)_ __   ___ 
| |_| | | | / __| '_ \  | |   | | '_ \ / _ \
|  _  | |_| \__ \ | | | | |___| | | | |  __/
|_| |_|\__,_|___/_| |_| |_____|_|_| |_|\___|

🤫 Hush Line is the first free and open-source anonymous-tip-line-as-a-service for organizations and individuals.

glenn-sorrentino

Linux hushline 6.1.21-v8+ #1642 SMP PREEMPT Mon Apr  3 17:24:16 BST 2023 aarch64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.

Wi-Fi is currently blocked by rfkill.

glenn-sorrentino

glennsorrentino@m1 .ssh % ssh root@146.190.135.196 -i mastodon-scheduler
The authenticity of host '146.190.135.196 (146.190.135.196)' can't be established.
ED25519 key fingerprint is SHA256:ZLX7xsp7v2kgxnR4i9ZqIRq/S+advrsi/TlJglAvYME.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '146.190.135.196' (ED25519) to the list of known hosts.
Enter passphrase for key 'mastodon-scheduler': 
Linux debian-s-1vcpu-512mb-10gb-sfo3-01 6.1.0-9-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.27-1 (2023-05-08) x86_64

The programs included with the Debian GNU/Linux system are free software;

glenn-sorrentino

root@debian-s-1vcpu-512mb-10gb-sfo3-01:~# curl https://raw.githubusercontent.com/glenn-sorrentino/mastodon-scheduler/hosted/install.sh | bash
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  4068  100  4068    0     0  84303      0 --:--:-- --:--:-- --:--:-- 84750
Get:1 file:/etc/apt/mirrors/debian.list Mirrorlist [39 B]
Get:5 file:/etc/apt/mirrors/debian-security.list Mirrorlist [27 B]                         
Hit:6 http://security.debian.org bookworm-security InRelease    
Hit:2 http://mirrors.digitalocean.com/debian bookworm InRelease
Hit:7 https://repos-droplet.digitalocean.com/apt/droplet-agent main InRelease
Hit:3 http://mirrors.digitalocean.com/debian bookworm-updates InRelease

glenn-sorrentino

Resilient Software Heuristics

1. How does it receive updates?
2. Was it audited by an independent organization? Were all of the findings addressed?
   • Security
   • Accessibility
   • Usability
3. What happens upon a hard reboot?
4. Does it use a firewall? WAF?
5. Does it employ intrusion detection measures?

glenn-sorrentino

GPG Sign Commits with GitHub Desktop on MacOS

Securing your git commits serves not only to verify your identity as the author but also to ensure the integrity of the codebase. This process, known as signing commits, utilizes GPG (GNU Privacy Guard) to attach a secure signature to your work. GitHub supports GPG signature verification which shows a "verified" label on commits to indicate they were securely signed.

This guide will walk you through the process of setting up GPG signing for your commits using GitHub Desktop on MacOS. The setup includes installing GPG, generating a new GPG key, adding it to your GitHub account, and configuring GitHub Desktop to automatically sign your commits. By the end of this guide, you’ll be able to sign your commits locally, strengthening the security and credibility of your contributions to any project.

Why Sign Your Commits?

Signing your commits with GPG adds an additional layer of security and trust to your workflow. It provides assurance that the commits were crea

glenn-sorrentino

0.0.0.0 - - [14/Nov/2023:19:56:30 +0000] "GET / HTTP/1.1" 200 1083 "-"
0.0.0.0 - - [14/Nov/2023:19:56:30 +0000] "GET /static/style.css HTTP/1.1" 200 8060 "-"
0.0.0.0 - - [14/Nov/2023:19:56:31 +0000] "GET /static/favicon/favicon-16x16.png HTTP/1.1" 200 749 "-"
0.0.0.0 - - [14/Nov/2023:19:56:31 +0000] "GET /static/fonts/mono/IBMPlexMono-Regular.woff HTTP/1.1" 200 57132 "-"
0.0.0.0 - - [14/Nov/2023:19:56:31 +0000] "GET /static/favicon/android-chrome-512x512.png HTTP/1.1" 200 36753 "-"
0.0.0.0 - - [14/Nov/2023:19:56:31 +0000] "GET /static/fonts/sans/AtkinsonHyperlegible-Regular.woff HTTP/1.1" 200 30380 "-"
0.0.0.0 - - [14/Nov/2023:19:56:32 +0000] "GET /static/fonts/serif/PlayfairDisplay-Medium.woff HTTP/1.1" 200 97576 "-"