Skip to content

Instantly share code, notes, and snippets.

View lazerl0rd's full-sized avatar
🌐
Handing DNS so you don't have to.

Diab Neiroukh lazerl0rd

🌐
Handing DNS so you don't have to.
View GitHub Profile
@lazerl0rd
lazerl0rd / 20-makepkg.hook
Last active April 2, 2024 04:13
A Makepkg configuration for Arch Linux that utilises LLVM and takes optimisation up to eleven.
[Trigger]
Operation = Install
Operation = Upgrade
Type = Path
Target = etc/makepkg.conf
Target = usr/share/makepkg/buildenv/lto.sh
Target = usr/share/makepkg/executable/strip.sh
[Action]
Description = Modifying the Makepkg configuration...
@lazerl0rd
lazerl0rd / not-firehol.sh
Last active December 31, 2023 18:52
An IP Feed subscriber that adds rules via nft.
#! /usr/bin/env bash
# This script requires GNU Sed, Curl, Bash >= 4.0, and Unix tr.
feedArr=(
'dshield-v4.txt' '"https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/dshield.netset"' 'DShield'
'spamhaus-drop-v4.txt' '"https://www.spamhaus.org/drop/drop.txt"' 'Spamhaus DROP'
'spamhaus-edrop-v4.txt' '"https://www.spamhaus.org/drop/edrop.txt"' 'Spamhaus EDROP'
'spamhaus-drop-v6.txt' '"https://www.spamhaus.org/drop/dropv6.txt"' 'Spamhaus DROP'
'iblocklist-level1-v4.txt' '-L "https://list.iblocklist.com/?list=ydxerpxkpcfqjaybcssw&fileformat=cidr&archiveformat=gz" | gzip -d' 'iBlocklist Level 1'
@lazerl0rd
lazerl0rd / passwords.txt
Last active October 31, 2023 00:49
A list of likely passwords for those who aren't security-conscious.
This file has been truncated, but you can view the full file.
123456
password
12345678
qwerty
123456789
12345
1234
111111
1234567
load_module /usr/lib/nginx/modules/ngx_http_brotli_filter_module.so;
load_module /usr/lib/nginx/modules/ngx_http_brotli_static_module.so;
load_module /usr/lib/nginx/modules/ngx_http_zstd_filter_module.so;
load_module /usr/lib/nginx/modules/ngx_http_zstd_static_module.so;
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log notice;
@lazerl0rd
lazerl0rd / Dockerfile
Created October 18, 2023 03:00
NGINX Docker built top of rolling release QuicTLS, Zlib-ng, the ZSTD module, Mimalloc, and the OQS Provider.
FROM alpine:latest
ENV LD_PRELOAD=/usr/lib/libmimalloc-secure.so
ENV MIMALLOC_LARGE_OS_PAGES=1
ENV NGINX_VERSION=1.25.2
RUN GPG_KEYS=13C82A63B603576156E30A4EA0EA981B66B0D967 \
&& CONFIG="\
--prefix=/etc/nginx \
--sbin-path=/usr/sbin/nginx \
#! /usr/bin/env bash
args="$@"
argsUnsupported="false"
asUser="root"
if [[ $@ == "" ]]; then
echo "usage: xsudo [command [arg ...]]"
echo "usage: xsudo [-u user] [command [arg ...]]"
exit 1
#! /usr/bin/env bash
declare -A extraPaths=( \
["certbot"]="/etc/letsencrypt /root/.secrets/certbot/cloudflare.ini" \
)
takeOwnership() {
local datafsMount="$(stat -c '%n' "/srv/$1" 2> /dev/null)"
local mount="$(podman mount "$1")"
local volumeMount="$(podman volume mount $1 2> /dev/null)"
#! /usr/bin/env bash
case "$1" in
"get")
if [[ -f /tmp/mkinitcpio-defer ]]; then
rm /tmp/mkinitcpio-defer
exit 0
else
exit 1
fi
#! /usr/bin/env bash
if [ $# -eq 0 ]; then
/usr/bin/mcrcon -H 172.16.0.18 -P "$(cat "/srv/minecraft/server.properties" | grep "rcon.port" | awk -F "=" '{print $2}')" -p "$(cat "/srv/minecraft/server.properties" | grep "rcon.password" | awk -F "=" '{print $2}')"
else
/usr/bin/mcrcon "$@"
fi
#! /usr/bin/env bash
features=("rx" "tx" "sg" "tso" "ufo" "gso" "gro" "lro" "rxvlan" "txvlan" "ntuple" "rxhash" "rx-udp-gro-forwarding")
for i in "${features[@]}"; do
ethtool -K "$1" "$i" on
done