| # save it as /etc/profile.d/ssh-telegram.sh | |
| # use jq to parse JSON from ipinfo.io | |
| # get jq from here http://stedolan.github.io/jq/ | |
| USERID="<target_user_id>" | |
| KEY="<bot_private_key>" | |
| TIMEOUT="10" | |
| URL="https://api.telegram.org/bot$KEY/sendMessage" | |
| DATE_EXEC="$(date "+%d %b %Y %H:%M")" | |
| TMPFILE='/tmp/ipinfo-$DATE_EXEC.txt' | |
| if [ -n "$SSH_CLIENT" ]; then |
| set -e | |
| set -u | |
| # hat-tips: | |
| # - http://codeghar.wordpress.com/2011/12/14/automated-customized-debian-installation-using-preseed/ | |
| # - the gist | |
| # required packages (apt-get install) | |
| # xorriso |
| # This script was created to convert a directory full | |
| # of markdown files into rst equivalents. It uses | |
| # pandoc to do the conversion. | |
| # | |
| # 1. Install pandoc from http://johnmacfarlane.net/pandoc/ | |
| # 2. Copy this script into the directory containing the .md files | |
| # 3. Ensure that the script has execute permissions | |
| # 4. Run the script | |
| # | |
| # By default this will keep the original .md file |
Block or filter IPs based on location in Nginx (tested on 1.18.0) on Debian 11.
To make use of the geographical filtering, we must first install the Nginx GeoIP2 module as well as the GeoIP database containing the mappings between visitors IP addresses and their respective countries. To do so, let’s execute:
$ sudo apt install libnginx-mod-http-geoip2
| [ | |
| { | |
| "name": "Sofle v2.1", | |
| "author": "Konstantin Somov", | |
| "switchMount": "cherry" | |
| }, | |
| [ | |
| { | |
| "y": 0.2, | |
| "x": 3, |
A live CD or live DVD is a complete bootable Linux operating system loaded from a CD or DVD. Although there are a lots of live Linux CDs, for seemingly every taste and purpose, it might still be useful on occasion to build your own. This guide details the steps to build a bootable live CD/DVD based on Debian "bullseye".
Step 1 – Installing the necessary software
These are the software packages you need to install on your Debian system:
apt-get install xorriso live-build syslinux squashfs-tools isolinuxStep 2 – Create a basic filesystem
| --- CREATE SELF-SIGNED ECDSA CERTIFICATE WITH PRIVATE KEY INSIDE ---- | |
| 1. Open openssl.exe. | |
| 2. If you haven't chosen a curve, you can list them with this command: | |
| ecparam -list_curves | |
| I picked sect571r1 for this example. Use this to generate an EC private key if you don't have one already: |
| # Assumptions: easyrsa3 available in current dir, and functional openssl. | |
| # This basic example puts the "offline" and "sub" PKI dirs on the same system. | |
| # A real-world setup would use different systems and transport the public components. | |
| # Build root CA: | |
| EASYRSA_PKI=offline easyrsa init-pki | |
| EASYRSA_PKI=offline easyrsa build-ca nopass | |
| # Build sub-CA request: | |
| EASYRSA_PKI=sub easyrsa init-pki |