David Goodwin DavidGoodwin

A Short IPv6 Guide for Home IPv4 Admins

This guide is for homelab admins who understand IPv4s well but find setting up IPv6 hard or annoying because things work differently. In some ways, managing an IPv6 network can be simpler than IPv4, one just needs to learn some new concepts and discard some old ones.

Let’s begin.

First of all, there are some concepts that one must unlearn from ipv4:

Concept 1

Background

I first came across PostfixAdmin upon implementing my first mailserver using this guide - https://www.exratione.com/2016/05/a-mailserver-on-ubuntu-16-04-postfix-dovecot-mysql/ and it's successor on Ubuntu 18.04. With the release of Ubuntu 20.04.1, i began looking around for an update and came upon the ISPMail guide as it had a few things I had wanted to try out - namely, rspamd, and encryption. But i wanted to be able to continue to use PostfixAdmin as i wanted to preserve the GUI administration of the database. So i began to implement the guide and figure out how i could integrate PostfixAdmin into it. This is the result.

Assumptions

PostfixAdmin sets up the database schema (ie, no need to manually create the database tables with SQL)
Presumption in guide below is that the Apache document root is /var/www/html
For support of encryption, part 2 of guide below shows how to modify PostfixAdmin (& roundcube) to generate / modify user encryption keys, so once a user's account is setup,

Random notes from woring with a new XPS 13 9300 with Ubuntu

Notes from when I was on the default Dell OEM Ubuntu

Disable trackpad middle click:

sudo vim /usr/share/X11/xorg.conf.d/40-libinput.conf

Add Option "ButtonMapping" "1 1 3 4 5" under

My Elasticsearch cheatsheet with example usage via rest api (still a work-in-progress)

Shortlinks:

Cluster Health
- Index Level
- Shard Level
Nodes Overview
Indices Overview
Cluster Maintenance

My incoming calls land in the context from-trunk

Config to block calls

/etc/asterisk/extensions.conf

[from-trunk]
...
 same =>    n,GotoIf($[${DB(blockcaller/${CALLERID(num)})} = 1 ]?blocked)
 same =&gt; n(blocked),Hangup

	#!/bin/sh
	MYSQLADMIN_CFG="/etc/mysql/mariadb.conf.d/90-mysqladmin.cnf"
	# generate password
	PASS=$(perl -e 'print map{("a".."z","A".."Z",0..9)[int(rand(62))]}(1..16)');
	# adjust /etc/mysql/debian.cnf (used as defaults file by system scripts)
	sed -i "s/^password =.*$/password = ${PASS}/" /etc/mysql/debian.cnf
	sed -i "s/^user =.*$/user = debian-sys-maint/" /etc/mysql/debian.cnf
	# create config file for mysqladmin itself (maybe not needed)
	umask 066
	cat > ${MYSQLADMIN_CFG} <<EOF

	/*<?php
	///public class PhpJava { public static void main(String[] args) { System.out.printf("/%s",
	//\u000A\u002F\u002A
	class PhpJava {
	static function main() {
	echo(//\u000A\u002A\u002F
	"Hello World!");
	}}
	//\u000A\u002F\u002A
	PhpJava::main();

	[Unit]
	Description=Consul service discovery agent
	Requires=network-online.target
	After=network.target

	[Service]
	User=consul
	Group=consul
	PIDFile=/run/consul/consul.pid
	Restart=on-failure

	# Let apache know we're behind a SSL reverse proxy
	SetEnvIf X-Forwarded-Proto "https" HTTPS=on

	# Redirect to HTTPS
	<IfModule mod_rewrite.c>
	RewriteEngine on
	RewriteCond %{HTTPS} !=on
	RewriteCond %{HTTP:X-Forwarded-Proto} !https [NC]
	RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
	</IFModule>