Nill-R’s gists

Nill-R / caddy.service

Created January 27, 2019 08:29

Fixed caddy.service unit

	[Unit]
	Description=Caddy HTTP/2 web server
	Documentation=https://caddyserver.com/docs
	After=network-online.target
	Wants=network-online.target systemd-networkd-wait-online.service

	[Service]
	Restart=on-abnormal

	; User and group the process will run as.

Nill-R / default

Created January 27, 2019 08:32

Caddy default config

	http://:80 {
	log / /var/log/caddy/access.log "{combined}"
	errors /var/log/caddy/error.log
	status 418 /
	}

Nill-R / caddy_install.bash

Last active January 27, 2019 15:50

Script for autoinstall Caddy

	#!/bin/bash
	apt -y install curl
	CADDY_TELEMETRY=on curl -s https://getcaddy.com \| bash -s personal http.cache,http.cgi,http.cors,http.expires,http.filter,http.forwardproxy,http.geoip,http.ipfilter,http.locale,http.login,http.minify,http.nobots,http.ratelimit,http.realip,tls.dns.cloudflare,tls.dns.namecheap,tls.dns.vultr
	setcap 'cap_net_bind_service=+ep' /usr/local/bin/caddy
	mkdir -p /etc/caddy/ssl
	mkdir -p /etc/caddy/sites-enabled
	mkdir -p /etc/caddy/sites-available
	chown -R www-data:www-data /etc/caddy
	chmod 0750 /etc/caddy/ssl
	echo "import /etc/caddy/sites-enabled/*" >/etc/caddy/Caddyfile

Nill-R / mariadb_backup_scripts_install.bash

Last active February 22, 2019 04:08

Script for install mariadb-backup and scripts for it(for Debian/Ubuntu)

	#!/bin/bash
	curl -sS https://downloads.mariadb.com/MariaDB/mariadb_repo_setup \| sudo bash
	rm -rf /etc/apt/sources.list.d/mariadb.list.old*
	apt update
	apt -y install git mariadb-server mariadb-backup qpress
	red=$'\e[1;31m'
	grn=$'\e[1;32m'
	yel=$'\e[1;33m'
	blu=$'\e[1;34m'
	mag=$'\e[1;35m'

Nill-R / create_db_and_user.bash

Created February 22, 2019 04:37

Script for create db and user with all privs to it

	#!/bin/bash

	EXPECTED_ARGS=2
	E_BADARGS=65
	MYSQL=`which mysql`
	PASS=`tr -cd '[:alnum:]' < /dev/urandom \| fold -w24 \| head -n1`
	echo $PASS

	Q1="CREATE DATABASE IF NOT EXISTS $1;"
	Q2="GRANT USAGE ON . TO $2@localhost IDENTIFIED BY '$PASS';"

Nill-R / run_it_first.bash

Last active April 18, 2021 14:17

Server initial setup

	#!/usr/bin/env bash

	apt update
	apt -y install gdebi
	cd $(mktemp -d backup.XXXXXXX)
	TEMP_DIR=`pwd`
	wget http://www.tataranovich.com/debian/pool/sid/main/t/tataranovich-keyring/tataranovich-keyring_2020.06.12_all.deb
	gdebi --n tataranovich-keyring_2020.06.12_all.deb
	printf "deb http://www.tataranovich.com/ubuntu bionic main\n" >/etc/apt/sources.list.d/mc.list
	apt update

Nill-R / badips-ipset.sh

Created May 1, 2019 02:46 — forked from JadedDragoon/badips-ipset.sh

A script to create and update an ipset with ip addresses retrieved from the badips.com blacklist. (With just a little effort should work with url to any source of IPs separated by newlines)

	#!/bin/bash
	# Script for blocking IPs which have been reported to www.badips.com
	# via ipsets.
	#
	# - THIS SCRIPT DOES NOT BLOCK ANYTHING -
	# This script only updates ipsets with applicable data from
	# badips.com. Actually blocking the ips in that ipset is left
	# up to the user (so that you may do so however you prefer).
	#
	# Additionally, this script does not persist the ipsets through

Nill-R / xmlrpc.conf

Created June 20, 2019 22:02

Allow WP xmlrpc.php to Jetpack and deny for all(nginx)

	location = /xmlrpc.php {
	allow 122.248.245.244;
	allow 54.217.201.243;
	allow 54.232.116.4;
	allow 192.0.80.0/20;
	allow 192.0.96.0/20;
	allow 192.0.112.0/20;
	allow 195.234.108.0/22;
	deny all;
	access_log off;

Nill-R / ssl-checks.bash

Last active July 12, 2019 16:02

	#!/usr/bin/env bash
	#
	# Program: SSL Certificate Check <ssl-cert-check>
	#
	# Source code home: https://github.com/Matty9191/ssl-cert-check
	#
	# Documentation: http://prefetch.net/articles/checkcertificate.html
	#
	# Author: Matty < matty91 at gmail dot com >
	# Edited by Nill Rinov for Telegram

Nill-R / yggdrasil_install.bash

Last active February 5, 2020 06:22

	#!/bin/bash

	gpg --fetch-keys https://neilalexander.s3.dualstack.eu-west-2.amazonaws.com/deb/key.txt
	gpg --export 569130E8CA20FBC4CB3FDE555898470A764B32C9 \| apt-key add -
	echo 'deb http://neilalexander.s3.dualstack.eu-west-2.amazonaws.com/deb/ debian yggdrasil' \| tee /etc/apt/sources.list.d/yggdrasil.list
	apt-get update
	apt-get -y install yggdrasil
	wget https://gist.github.com/Nill-R/e09566aa33c841fe73aeac373f734f05/raw/bed12fcde5901bd2f3320ab6e936ff6eeaae2421/20-yggdrasil.conf -O /etc/rsyslog.d/20-yggdrasil.conf ; systemctl restart rsyslog
	wget https://gist.github.com/Nill-R/cb84b232a0baf6550d4733849c76175d/raw/a150a6333ff122a12c5e311d83a115d86177d728/yggdrasil -O /etc/logrotate.d/yggdrasil

Nill Ringil Nill-R