Ador AdroitAdorKhan

How to increase ulimit in Linux:

Step 1 (ulimit): open the sysctl.conf and add this line fs.file-max = 65536
```
  vi /etc/sysctl.conf   
```
add following at end of file in above file:
```
  fs.file-max = 65536
```

save and exit.

7 simple-ish steps to green HTTPS on LAN with custom domain, Caddy, LetsEncrypt and Cloudflare. And a bonus tip!

Ever felt envious of those pretty green lock on sites like Github.com or Google.com? Ever wished to have one of those for services on your homelab? Well wish no more because I have a guide for you!

This guide is written for Ubuntu 16.04 server with domain registered on NameSilo and nameservers using Cloudflare. However it will work for any OS that Caddy supports (this includes Linux, Windows, macOS and many others on several architectures) and any other DNS provider with an API that Caddy supports.

What will you need:

$$ Domain
Cloudflare account, or account with other DNS provider with API listed in https://caddyserver.com/docs/automatic-https#enabling-the-dns-challenge
Basic understanding of DNS, server management and ability to RTFM

Backup android app, data included, no root needed, with adb

adb is the Android CLI tool with which you can interact with your android device, from your PC

You must enable developer mode (tap 7 times on the build version in parameters) and install adb on your PC.

Don't hesitate to read comments, there is useful tips, thanks guys for this !

Fetch application APK

About

Instructions to obtain WireGuard details of your NordVPN account. These can be used to setup a WireGuard tunnel on your router to NordVPN.

Source: https://forum.gl-inet.com/t/configure-wireguard-client-to-connect-to-nordvpn-servers/10422/27

Prerequisites

If you have any linux machine, use that or jnstall a vm if you don’t have one.

Get their official linux app installed. Make sure you have wireguard installed too.

"Help, I keep getting a 'Permission Denied (publickey)' error when I push!"

This means, on your local machine, you haven't made any SSH keys. Not to worry. Here's how to fix:

Open git bash (Use the Windows search. To find it, type "git bash") or the Mac Terminal. Pro Tip: You can use any *nix based command prompt (but not the default Windows Command Prompt!)
Type cd ~/.ssh. This will take you to the root directory for Git (Likely C:\Users\[YOUR-USER-NAME]\.ssh\ on Windows)
Within the .ssh folder, there should be these two files: id_rsa and id_rsa.pub. These are the files that tell your computer how to communicate with GitHub, BitBucket, or any other Git based service. Type ls to see a directory listing. If those two files don't show up, proceed to the next step. NOTE: Your SSH keys must be named id_rsa and id_rsa.pub in order for Git, GitHub, and BitBucket to recognize them by default.
To create the SSH keys, type ssh-keygen -t rsa -C "[email protected]". Th

	#
	# reference: http://namsep.blogspot.com/2015/12/yad-centos-7-iptables-ipset-and-fail2ban.html
	# reference: http://pkgs.fedoraproject.org/cgit/ipset.git/tree/ipset.service
	# file location: /etc/systemd/system/ipset.service
	# nano /etc/systemd/system/ipset.service
	# systemctl daemon-reload
	# systemctl enable ipset.service
	# mkdir /etc/ipset
	# touch /etc/ipset/ipset
	# ...do something with ipset...

	iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
	iptables -t nat -A POSTROUTING -s 10.0.2.0/24 -o eth0 -j MASQUERADE
	# allow established sessions to receive traffic
	iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
	# allow your application port
	iptables -I INPUT -p tcp --dport 443 -j ACCEPT
	iptables -I INPUT -p udp --dport 443 -j ACCEPT
	# allow SSH
	iptables -I INPUT -p tcp --dport 22 -j ACCEPT
	# Allow Ping

	-- Remove the history from
	rm -rf .git

	-- recreate the repos from the current content only
	git init
	git branch -m main # change to main
	git add .
	git commit -m "Initial commit."

	-- push to the github remote repos ensuring you overwrite history