jeduardo

mTLS with self-signed certificates in nginx

First step is to generate the certificate and keys:

mkdir nginx-certs
cd nginx-certs
# Using the -nodes flag here so it does not ask for any password when exporting the key
openssl req -subj '/CN=ssl.test.local' -x509 -new -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 365 -nodes -addext "keyUsage = digitalSignature,keyAgreement" -addext "extendedKeyUsage = serverAuth, clientAuth" -addext "subjectAltName = DNS:ssl.test.local, DNS:localhost, IP:127.0.0.1"
# The PCKS12 export will ask for a password. I will use 'test' again and will refer it in the final curl test command

aadimator

name: Publish

on:
  push:
    branches: [master]

jobs:
  deploy:
    runs-on: ubuntu-latest
    concurrency:

mattfoster

[
  {
    "name": "SofleKeyboard",
    "author": "Josef Adamcik",
    "switchMount": "cherry"
  },
  [
    {
      "y": 0.2,
      "x": 3,

mdtanrikulu

• To be able to import gpg key from external drive, first copy ~/.gnupg file from external drive to the host machine (do with finder)
• via terminal, go into copied gnupg folder and try running gpg --homedir . --list-secret-keys
• if you able to see "key found" information with your email address you are close to import your keys
• in case you see such warning "gpg: conversion utf-8' us-ascii' failed: illegal byte sequence gpg:" you can ignore it
• due to change from gpg to gpg2, you may not be able to export your keys with "gpg" command so try doing the rest with "gpg2" command
• export your private key with gpg2 --homedir . --export-secret-key YOUR_MAIL_ADDRESS > private.key (it will ask your gpg password)
• then go to your gpg suite, press import, find "private.key" file and import it (it will ask your gpg password)
• and you are done!

ismailyenigul

# docker network create nextcloud

NOTES:
1. certificatesresolvers.myresolver.acme.email=myemail@gmail.com 
2. TRUSTED_PROXIES values based on your 'nexcloud network'
3. remove traefik.http.middlewares.nextcloud.headers.contentSecurityPolicy and  
traefik.http.middlewares.nextcloud.headers.customFrameOptionsValue if you don't want to allow iframe your domain
3

# cat docker-compose.yml

ravecat

A live CD or live DVD is a complete bootable Linux operating system loaded from a CD or DVD. Although there are a lots of live Linux CDs, for seemingly every taste and purpose, it might still be useful on occasion to build your own. This guide details the steps to build a bootable live CD/DVD based on Debian “wheezy”.

Step 1 – Installing the necessary software

These are the software packages you need to install on your Debian system:

apt-get install xorriso live-build syslinux squashfs-tools

Step 2 – Create a basic filesystem

G-UK

Introduction

The objective of these instructions is to create a complete Arm64 OS (Userland and Kernel) using Debian Debootstrap and RPI-Update for use on the Raspberry Pi 3 and 4.

Prerequisites:

• An existing Debian/Raspbian system (any architecture will do)
• An empty SD card formatted as per a standard Raspbian installation mounted to /mnt/sd on the build system
  • 1st Partition 0-256MB = FAT32 (Mount to /mnt/sd/boot)
  • 2nd Partition 256MB+ = EXT4 (Mount to /mnt/sd)

Set-up basic Debian system

basoro

I ran into the battle of running all of my VMs and the host node under a single public IP address. Luckily, the host is just pure Debian, and ships with iptables.

What needs to be done is essentially to run all the VMs on a private internal network. Outbound internet access is done via NAT. Inbound access is via port forwarding.

Network configuration

Here’s how it’s done:

Create a virtual interface that serves as the gateway for your VMs:

newsworthy39

# This file is largely based on the tinc@ service-idea.
# Both files belong in /lib/systemd/system/
# Enable it, systemctl enable wg-quick, then enable configurations (ie, /etc/wireguard/wg0.conf)
# systemctl enable wg-quick@wg0

[Unit]
Description=Wireguard VPN
After=network-online.target
Wants=network-online.target

marta-krzyk-dev

--- CREATE SELF-SIGNED ECDSA CERTIFICATE WITH PRIVATE KEY INSIDE ----

1. Open openssl.exe.

2. If you haven't chosen a curve, you can list them with this command:

	ecparam -list_curves
	
I picked sect571r1 for this example. Use this to generate an EC private key if you don't have one already: