keyboardcrunch

# Setup an "upstream" to allow preferences between local or tailscale endpoints for an Ollama service
# Note: I'm running a similar config on my laptop so I can access services while local or remote but
#       use upstream to pick the endpoint to use.
upstream chat {
    ip_hash;
    server 192.168.1.3:11434;
    server 100.44.39.165:11434;
}

# Setup a map to associate our proxy endpoint with the subdomain

keyboardcrunch

# Listen on 11434 and proxy requests to a local Ollama server, either by local network or tailscale.
# ip_hash should maintain sessions while upstream handles one being offline.
# upstream 'load balancing' is used to maintain connectivity while working remote.


upstream ollama {
    ip_hash;
    server 192.168.1.166:11434;
    server 100.94.79.62:11434;
}

keyboardcrunch

# Device configuration
esphome:
  name: "remoteOne"
  friendly_name: RemoteOne

esp32:
  board: esp32-s3-devkitc-1
  framework:
    type: arduino

keyboardcrunch

const kv = await Deno.openKv();

export interface BikeStatus {
    bike: boolean,
    temp: number,
    uv: number,
    rain: number,
    sunset: string,
    sunrise: string
};

keyboardcrunch

{
  "imports": {
    "masto": "https://cdn.skypack.dev/masto@6.1.0?dts"
  }
}

keyboardcrunch

1. Modify /etc/nginx/nginx.conf file
2. Modify /etc/nginx/sites-available/site.conf file
3. Create /etc/nginx/useragent.rule file

Where to find user agent strings?
https://explore.whatismybrowser.com/useragents/explore/software_name/facebook-bot/

Test:

[rubin@reaper ~]$ curl -A "instagram" -I https://plrm.podcastalot.com

keyboardcrunch

<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0">
    <channel>
        <title>keyboardcrunch - recently read</title>
        <link>https://blog.keyboardcrunch.com/</link>
        <description>A list of stuff I found interesting or look forward to reading.</description>
        <lastBuildDate>Thu, 15 Jun 2023 01:59:18 GMT</lastBuildDate>
        <docs>https://validator.w3.org/feed/docs/rss2.html</docs>
        <generator>https://github.com/jpmonette/feed</generator>
        <item>

keyboardcrunch

# Allows install of any locally hosted extensions, restricts webstore extensions without explicit allow.
{
  "HomepageLocation": "https://www.google.com",
  "HomepageIsNewTabPage": false,
  "ExtensionSettings": {
    "*": {
      "installation_mode": "blocked",
      "blocked_install_message": "Extension installation is restricted to reviewed and approved only.",
      "blocked_permissions": [],
      "install_sources": [

keyboardcrunch

$ServiceList = @'
diagtrack
dusmsvc
dps
wdiservicehost
wdisystemhost
mapsbroker
fhsvc
GoogleChromeElevationService
gupdate

keyboardcrunch

Nginx mTLS Setup

This configuration will setup an Nginx server that requires a valid client certificate for mutual tls. We'll cover some basic certificate setup, the nginx config, and some openssl conversions for browser certificate import.

Certificate Setup

Creating the Certificates Manually

Create the CA

openssl genrsa -out ca.key 4096
openssl req -new -x509 -key ca.key -out ca.crt