Adrian aalmenar

Adding tailscale to an EdgeRouter (and surviving system upgrades)

I suggest you run sudo bash on all of these so you're the root user.

Installing

Download tailscale and put the files in /config/. Find the latest stable or unstable version for your EdgeRouter's processor (ex. ER4 is mips and ERX is mipself)

sudo bash    # if you havent already

How to setup a practically free CDN

I've been using [Backblaze][bbz] for a while now as my online backup service. I have used a few others in the past. None were particularly satisfactory until Backblaze came along.

It was - still is - keenly priced at a flat $5 (£4) per month for unlimited backup (I've currently got just under half a terabyte backed-up). It has a fast, reliable client. The company itself is [transparent about their operations][trans] and [generous with their knowledge sharing][blog]. To me, this says they understand their customers well. I've never had reliability problems and everything about the outfit exudes a sense of simple, quick, solid quality. The service has even saved the day on a couple of occasions where I've lost files.

Safe to say, I'm a happy customer. If you're not already using Backblaze, [I highly recommend you do][recommend].

Taking on the big boys with B2

How to Change Open Files Limit on OS X and macOS

This text is the section about OS X Yosemite (which also works for macOS Sierra) from https://docs.basho.com/riak/kv/2.1.4/using/performance/open-files-limit/#mac-os-x

The last time i visited this link it was dead (403), so I cloned it here from the latest snapshot in Archive.org's Wayback Machine https://web.archive.org/web/20170523131633/https://docs.basho.com/riak/kv/2.1.4/using/performance/open-files-limit/

Mac OS X

To check the current limits on your Mac OS X system, run:

This uses Linux kernel dyamic debug features

https://www.kernel.org/doc/html/latest/admin-guide/dynamic-debug-howto.html

This asumes that debugfs is mounted under /sys/kernel/debug

Enable WireGuard debug

echo 'module wireguard +p' | sudo tee /sys/kernel/debug/dynamic_debug/control

	sudo apt-get install snmpd -y
	sudo mv /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.old
	sudo su -
	sudo cat > /etc/snmp/snmpd.conf << EOF
	# Change public below to your preferred SNMP community string
	com2sec readonly default public

	group MyROGroup v2c readonly
	view all included .1 80
	access MyROGroup "" any noauth exact all none none

	# this monit config goes in /etc/monit/conf.d

	check process puma_master
	with pidfile /data/myapp/current/tmp/puma.pid
	start program = "/etc/monit/scripts/puma start"
	stop program = "/etc/monit/scripts/puma stop"
	group myapp

	check process puma_worker_0
	with pidfile /data/myapp/current/tmp/puma_worker_0.pid

	-- Remove the history from
	rm -rf .git

	-- recreate the repos from the current content only
	git init
	git add .
	git commit -m "Initial commit"

	-- push to the github remote repos ensuring you overwrite history
	git remote add origin [email protected]:<YOUR ACCOUNT>/<YOUR REPOS>.git

	#!/bin/bash

	function log_error() { echo `date '+%Y-%m-%d %H:%M:%S'` ERROR: $1 >&2; }
	function log() { echo `date '+%Y-%m-%d %H:%M:%S'` INFO: $1; }

	MAIL=$(tee)

	SERVER_LIST="['10.10.115.15', '10.10.115.16']"
	PASSWORD="p455w0rD"

	# cat /etc/systemd/system/ripeval.service
	[Unit]
	Description=RIPE-NCC RPKI Validator
	After=network.target

	[Service]
	Type=forking
	User=ripeval
	WorkingDirectory=/home/ripeval
	ExecStart=/home/ripeval/ripeval_latest/rpki-validator.sh start

	$ sudo apt-get install linux-headers-$(uname -r)
	$ sudo add-apt-repository ppa:wireguard/wireguard
	$ sudo apt-get update
	$ sudo apt-get install wireguard
	$ sudo modprobe wireguard
	$ sudo mkdir /etc/wireguard
	$ (umask 077 && printf "[Interface]\nPrivateKey = " \| sudo tee /etc/wireguard/wg0.conf > /dev/null)
	$ wg genkey \| sudo tee -a /etc/wireguard/wg0.conf \| wg pubkey \| sudo tee /etc/wireguard/publickey
	$ sudo nano /etc/wireguard/wg0.conf