David Pesticcio DavidPesticcio

Preparation Steps:

Read other materials first to familiarize yourself with wireguard and wireguard on FreeBSD / Android: genneko has a nice writeup that is easy to follow and much better formatting here:

https://genneko.github.io/playing-with-bsd/networking/freebsd-wireguard-android/

Backup your entire pfsense system, or run this on a vm after a good snapshot. Failure to do this can easily break you, you have been warned. This is entirely unsupported. Wireguard on PFSense is experimental at this time. Nothing has been tested by me on non AMD64 arch, so unsure if arm pkgs are available. Backup your package database just in case since this impacts core PFSense runtime dependancies.

pfSense Simple Home Configuration - 2.4.3 / 2.4.4

Starting from Scratch

This is my personal guide for installing pfSense. I had to make notes to capture the details of the "install from scratch" to ensure I didn't forget the important details. Also, I'm trying to follow the philosophy of building systems with discrete "disposable" components that make a system mutable and less rigid. It does not cover installing any packages like Squid or Suricata as that's way beyond the scope of a basic, functional install.

I migrated from an environment that was at various times running Tomato Toastman 1.28 or Asuswrt-Merlin on Netgear and ASUS routers across four access points (one always acting as the firewall/gateway). It was pretty fast, but had roaming problems, and I was using full Wifi routers with half the stuff disabled. Also, even with 300mb internet service, I found that I could easily swamp the connection and drastically affect VOIP and Wifi Calling without even trying. The only fix was to throttle ever

Run commands on remote Docker host

This is how to connect to another host with your docker client, without modifying your local Docker installation or when you don't have a local Docker installation.

Enable Docker Remote API

First be sure to enable the Docker Remote API on the remote host.

This can easily be done with a container.
For HTTP connection use jarkt/docker-remote-api.

An Ansible summary

Jon Warbrick, July 2014, V3.2 (for Ansible 1.7)

Configuration file

intro_configuration.html

First one found from of

This guide has moved to a GitHub repository to enable collaboration and community input via pull-requests.

https://github.com/alexellis/k8s-on-raspbian

Alex


	version: "3.3"

	services:
	################################################
	#### Traefik Proxy Setup #####
	###############################################
	traefik:
	image: traefik:v2.0
	restart: always

	## Setting up the middleware for redirect to https ##
	http:
	middlewares:
	redirect:
	redirectScheme:
	scheme: https

	# This is a conversion of the helpers for bash for use in fish shell.
	# You can find the original bash code available at https://gist.github.com/chtorr/0ecc8fca27a4c5e186c636c262cc4757
	#
	# You can either:
	# A. Place the entire block below into ~/.config/fish/config.fish
	# B. Place the YUBIKEY_PROFILE line into ~/.config/fish/config.fish and place the individual functions into files
	# (recommended).
	# e.g., ~/.config/fish/functions/_aws_unset.fish contains the body of the _aws_unset function below.

	# - install the Yubico authenticator app

	package main

	import (
	"fmt"
	"os"
	"os/exec"
	"syscall"
	)

	func main() {