Skip to content

Commit 034576e

Browse files
DoTheEvoDoTheEvo
committed
update
1 parent f92ccac commit 034576e

5 files changed

Lines changed: 324 additions & 2 deletions

File tree

‎esxi/readme.md‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
# Esxi
2+
###### guide-by-example
3+
4+
# Purpose
5+
6+
Type 1 hypervisor hosting virtual machines, running straight on metal.
7+
8+
# Files and directory structure
9+
10+
https://www.dbappweb.com/2020/08/20/how-to-change-the-default-gateway-for-vmware-vsphere-esxi/
11+
12+
* esxcfg-route
13+
* esxcfg-route 10.65.26.25
14+
15+
https://blog.techygeekshome.info/2021/04/vmware-esxi-esxcli-commands-to-update-host-dns-servers/
16+
17+
* esxcli network ip dns server add --server=8.8.8.8
18+
* esxcli network ip dns server remove --server=1.1.1.1
19+
* esxcli network ip dns server list
20+
21+
# docker-compose
22+
23+
# Config
24+
25+
26+
# Logging
27+
28+
29+
#### email

‎gotify-ntfy-signal/readme.md‎

Lines changed: 111 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,111 @@
1+
# gotify ntfy signal
2+
3+
###### guide-by-example
4+
5+
![logo](https://i.imgur.com/41WzW04.png)
6+
7+
# Purpose & Overview
8+
9+
Instant notifications if email feels old timey and crowded
10+
11+
* [gotify](https://github.com/gotify/server)
12+
* [ntfy](https://github.com/binwiederhier/ntfy)
13+
* [bbernhard/signal-cli-rest-api ](https://github.com/bbernhard/signal-cli-rest-api)
14+
15+
---
16+
17+
# Overview
18+
19+
* **gotify** - great for single person use, but the moment theres more people
20+
they need to share single account and so lack the ability to choose
21+
what to get and what not to get
22+
* **ntfy** - simple original approach to just subscribing to "topics" without
23+
authentification, very simple one line push notification.
24+
Drawback is rather high [battery consumption](https://i.imgur.com/TDhj7El.jpg)
25+
of the android app, but I did not let it run for long enough it could also
26+
just be my phone thing. Just something to keep an eye on.
27+
* **signal-cli-rest-api** - no gui, need a sim card phone number registred,
28+
worse concept for sending notification to multiple users,
29+
where you need to manually set everyone who should receive,
30+
as oppose to having a "room/topic" to which one can "susbscribe",
31+
but if signal is widespread enough and you are not asking people to install
32+
another app then its a winner
33+
34+
# docker-compose
35+
36+
`gotify-docker-compose.yml`
37+
```yml
38+
services:
39+
40+
gotify:
41+
image: gotify/server
42+
container_name: gotify
43+
hostname: gotify
44+
restart: unless-stopped
45+
env_file: .env
46+
volumes:
47+
- "./gotify_data:/app/data"
48+
49+
networks:
50+
default:
51+
name: caddy_net
52+
external: true
53+
```
54+
55+
`ntfy-docker-compose.yml`
56+
```yml
57+
services:
58+
59+
ntfy:
60+
image: binwiederhier/ntfy
61+
container_name: ntfy
62+
hostname: ntfy
63+
env_file: .env
64+
restart: unless-stopped
65+
command:
66+
- serve
67+
volumes:
68+
- ./ntfy-cache:/var/cache/ntfy
69+
- ./ntfy-etc:/etc/ntfy
70+
71+
networks:
72+
default:
73+
name: $DOCKER_MY_NETWORK
74+
external: true
75+
```
76+
77+
`signal-docker-compose.yml`
78+
```yml
79+
signal:
80+
image: bbernhard/signal-cli-rest-api
81+
container_name: signal
82+
hostname: signal
83+
env_file: .env
84+
restart: unless-stopped
85+
volumes:
86+
- "./signal-cli-config:/home/.local/share/signal-cli" #map "signal-cli-config" folder on host system into docker container. the folder contains the password and cryptographic keys when a new number is registered
87+
88+
networks:
89+
default:
90+
name: $DOCKER_MY_NETWORK
91+
external: true
92+
```
93+
94+
# Port forwarding
95+
96+
# The usage on clients
97+
98+
# Encrypted use
99+
100+
101+
# Trouble shooting
102+
103+
# Update
104+
105+
# Backup and restore
106+
107+
#### Backup
108+
109+
#### Restore
110+
111+

‎gotify-ntfy-signal/signalSHOUTRRR_URL.txt‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
#!/bin/bash
2+
URL=""
3+
4+
curl -X POST -H "Content-Type: application/json" "https://sig.oster.cz/v2/send" -d '{"message": "Test via Signal API!", "number": "+421905667725", "recipients": [ "+421905667725" ]}'
5+
"https://sig.oster.cz/v2/send" -d
6+
7+
"generic+https://sig.oster.cz/v2/send?title=WatchtowerUpdates" -d '{"message": "Test via Signal API!", "number": "+421905667725", "recipients": [ "+421905667725" ]}'
8+
9+
"generic+https://sig.oster.cz/v2/send?title=WatchtowerUpdates" -d '{"message": "Test via Signal API!", "number": "+421905667725", "recipients": [ "+421905667725" ]}'
10+
11+
12+
13+
14+
generic://sig.oster.cz/v2/send?template= or pass it as a param to Send:
15+
16+
generic+https://sig.oster.cz/v2/send/?d='{"message": "Test via Signal API!", "number": "+421905667725", "recipients": [ "+421905667725" ]}'
17+
generic+https://sig.oster.cz/v2/send/?data=%7B%22message%22%3A%20%22Test%20via%20Signal%20API!%22%2C%20%22number%22%3A%20%22%2B421905667725%22%2C%20%22recipients%22%3A%20%5B%20%22%2B421905667725%22%20%5D%7D
18+
19+
20+
generic+https://sig.oster.cz/v2/send -d '{"message": "Test via Signal API!", "number": "+421905667725", "recipients": [ "+421905667725" ]}'

‎kopia_backup/readme.md‎

Lines changed: 97 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,97 @@
1+
# Kopia
2+
3+
###### guide-by-example
4+
5+
![logo](https://i.imgur.com/A2mosM6.png)
6+
7+
WORK IN PROGRESS<br>
8+
WORK IN PROGRESS<br>
9+
WORK IN PROGRESS<br>
10+
11+
# Purpose & Overview
12+
13+
Backups.
14+
15+
* [Official site](https://kopia.io/)
16+
* [Github](https://github.com/kopia/kopia)
17+
18+
Kopia is an open source backup utility with basicly all modern features.</br>
19+
Cross-platform, deduplication, encryption, compression, multithreaded speed,
20+
cloud storage support, CLI and GUI versions, snapshots mounting,...
21+
22+
Written in golang,
23+
24+
In this setup kopia cli is installed directly on the host system.</br>
25+
A script is created that backs up the entire docker directory and /etc locally.</br>
26+
Cronjob is set to execute this script daily.
27+
28+
The repository is also pruned on each run of the script -
29+
old archives are deleted while keeping the ones fitting the retention rules
30+
in the script.</br>
31+
One backup per day for last 7 days, last 4 weeks, last 6 months are kept.
32+
33+
# Files and directory structure
34+
35+
```
36+
/home/
37+
├── ~/
38+
│ └── docker/
39+
│ ├── container-setup #2
40+
│ ├── container-setup #1
41+
│ ├── ...
42+
│
43+
/mnt/
44+
└── mirror/
45+
└── docker_host_kopia/
46+
47+
```
48+
49+
* `docker_backup/` - borg repository directory containg the backups
50+
* `borg_backup.sh` - the backup script that adds new archive in to the repository
51+
* `borg_backup.log` - log file with the dates of backups
52+
53+
Only `borg_backup.sh` has to be provided.</br>
54+
Repo directory is created by `borg init` command
55+
and the log file is created on the first run.
56+
57+
58+
# The setup
59+
60+
#### Install kopia
61+
62+
for arch linux, kopia is on AUR `yay kopia-bin`
63+
64+
#### Backing up using kopia
65+
66+
use of sudo so that kopia has access everywhere<br>
67+
config files are therefore in `/root/config/kopia`
68+
69+
- `mkdir /mnt/mirror/docker_host_kopia`</br>
70+
- `sudo kopia repository create filesystem --path /mnt/mirror/docker_host_kopia`<br>
71+
- `sudo kopia repository connect filesystem --path /mnt/mirror/docker_host_kopia`<br>
72+
- `sudo kopia snapshot create /home/spravca/docker`<br>
73+
- `sudo kopia snapshot list`<br>
74+
- `sudo kopia mount k7e2b0a503edd7604ff61c68655cd5ad7 /mnt/tmp &`<br>
75+
- `sudo umount /mnt/tmp`<br>
76+
77+
78+
#### The backup script
79+
80+
81+
82+
83+
### Manual run
84+
85+
86+
### Automatic execution
87+
88+
89+
# Accessing the backup files
90+
91+
92+
# Extra info
93+
94+
95+
# Remote backup
96+
97+

‎meshcrentral/readme.md‎

Lines changed: 67 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ The architecture is relatively simple.
2727
which allows full control of the device from the servers web
2828

2929
Theres also an entire aspect of possibility of using
30-
Intel AMT - Active Management Technology.
30+
Intel AMT - Active Management Technology through port 4433.
3131

3232
---
3333

@@ -173,11 +173,76 @@ mesh.{$MY_DOMAIN} {
173173
174174
# The usage on clients
175175
176-
176+
# Improved safety
177177
178178
179179
# Trouble shooting
180180
181+
# Running without separate database
182+
183+
`docker-compose.yml`
184+
```yml
185+
services:
186+
187+
meshcentral:
188+
image: ghcr.io/ylianst/meshcentral:latest
189+
container_name: meshcentral
190+
hostname: meshcentral
191+
restart: unless-stopped
192+
env_file: .env
193+
volumes:
194+
# config.json and other important files live here. A must for data persistence
195+
- ./meshcentral/data:/opt/meshcentral/meshcentral-data
196+
# where file uploads for users live
197+
- ./meshcentral/user_files:/opt/meshcentral/meshcentral-files
198+
# location for the meshcentral-backups - this should be mounted to an external storage
199+
- ./meshcentral/backup:/opt/meshcentral/meshcentral-backup
200+
# location for site customization files
201+
- ./meshcentral/web:/opt/meshcentral/meshcentral-web
202+
203+
networks:
204+
default:
205+
name: $DOCKER_MY_NETWORK
206+
external: true
207+
```
208+
209+
`.env`
210+
```bash
211+
# GENERAL
212+
MY_DOMAIN=example.com
213+
DOCKER_MY_NETWORK=caddy_net
214+
TZ=Europe/Bratislava
215+
216+
# MESHCENTRAL
217+
NODE_ENV=production
218+
219+
# initial mongodb-variables
220+
MONGO_INITDB_ROOT_USERNAME=mongodbadmin
221+
MONGO_INITDB_ROOT_PASSWORD=mongodbpasswd
222+
223+
# initial meshcentral-variables
224+
# the following options are only used if no config.json exists in the data-folder
225+
226+
# your hostname
227+
HOSTNAME=mesh.example.com
228+
USE_MONGODB=false
229+
# set to your reverse proxy IP if you want to put meshcentral behind a reverse proxy
230+
REVERSE_PROXY=example.com
231+
REVERSE_PROXY_TLS_PORT=443
232+
# set to true if you wish to enable iframe support
233+
IFRAME=false
234+
# set to false if you want disable self-service creation of new accounts besides the first (admin)
235+
ALLOW_NEW_ACCOUNTS=true
236+
# set to true to enable WebRTC - per documentation it is not officially released with meshcentral and currently experimental. Use with caution
237+
WEBRTC=false
238+
# set to true to allow plugins
239+
ALLOWPLUGINS=false
240+
# set to true to allow session recording
241+
LOCALSESSIONRECORDING=false
242+
# set to enable or disable minification of json, reduces traffic
243+
MINIFY=true
244+
```
245+
181246

182247

183248
# Update

0 commit comments

Comments
 (0)