Artem Boldariev arbv

Gogs 0.13 (sqlite) to Gitea 1.0.2 (and upper)

Quoting the Gitea docs:

Upgrading from Gogs 0.12.x and above will be increasingly more difficult as the projects diverge further apart in configuration and schema.

Since gogs has now multiple unfixed RCEs and has for a while, it is imperative to either turn it off or migrate. The problem is, what to do if running a version > 0.11.x?

Build Notes

Environment

Use systemd-nspawn on Arch Linux with debootstrap:

sudo debootstrap --include=systemd-container --components=main,universe jammy ubuntu22.04-rk3568 http://archive.ubuntu.com/ubuntu/

TCP tuning

The most important TCP tuning areas since kernel 4.9 are:

packet pacing
dynamic TSO sizing
TCP small queues
BBR TCP congestion algorithm

Definitions

Gb = gigabit

Nginx Reverse Proxy for homelab services using SSO

NOTE: This document has now been added to the nginx-sso wiki, here. Any further updates will be made there.

Using:

Docker
Nginx
nginx-sso

	# ~/.bashrc: executed by bash(1) for non-login shells.

	# If file exists (likely) copy fragment below into existing script:

	# If stdin is a terminal
	if [ -t 0 ]; then
	# Set GPG_TTY so gpg-agent knows where to prompt. See gpg-agent(1)
	export GPG_TTY="$(tty)"
	# Set PINENTRY_USER_DATA so pinentry-auto knows to present a text UI.
	export PINENTRY_USER_DATA=USE_TTY=1

	auth_username_format = %n
	imap_idle_notify_interval = 29 mins
	lda_mailbox_autocreate = yes
	mail_location = maildir:~/mail
	mail_plugins = " fts fts_lucene"
	plugin {
	fts = lucene
	fts_autoindex = yes
	fts_lucene = whitespace_chars=@.
	imapsieve_mailbox1_before = file:/etc/mail/imapsieve/report-spam.sieve

	pki example.com key "/etc/letsencrypt/live/example.com/privkey.pem"
	pki example.com certificate "/etc/letsencrypt/live/example.com/fullchain.pem"

	listen on lo mask-source
	listen on 1.2.3.4 port 25 tls pki example.com auth-optional hostname example.com
	listen on 1.2.3.4 port 465 smtps pki example.com auth hostname example.com mask-source
	listen on 1.2.3.4 port 587 tls-require pki example.com auth hostname example.com mask-source

	table aliases file:/etc/mail/aliases
	table domains file:/etc/mail/domains

	[Match]
	Name=host*

	[Network]
	DHCP=yes

	# Nix skeleton for compiler, cmake, boost.
	# Dependencies (boost and others you specify) are getting built with selectec compiler (for ABI compatibility).
	# Examples:
	# nix-shell --argstr compiler gcc5 --run 'mkdir build && cd build && cmake .. && cmake --build .'
	# nix-shell --argstr compiler gcc6 --run 'mkdir build && cd build && cmake .. && cmake --build .'
	# nix-shell --argstr compiler clang_38 --run 'mkdir build && cd build && cmake .. && cmake --build .'

	{ nixpkgs ? import <nixpkgs> {}, compiler ? "gcc6" }:

	let

	In addition to a significant decrease in hepatic lipid accumulation in the IOE group, which inhibited energy intake by propionate enrichment, hepatic lipids were also significantly reduced in the mice in the IOP group, which was largely enriched with butyrate. Compared with the IOE group, IOP had a stronger regulatory effect on hepatic metabolism and triglyceride metabolism and higher levels of TCA cycle in the host. In addition, butyrate has the ability to promote browning of white adipose tissue (WAT) to brown adipose tissue (BAT).^[@ref39],[@ref40]^ WAT stores energy, whereas BAT uses energy for heating and consequently host energy expenditure increases.^[@ref41],[@ref42]^ However, adipose tissue weight does not change after WAT browning.^[@ref43]^ Therefore, the weight of adipose tissue of mice in the IOP group dominated by butyrate was greater than that of the mice in the IOE group dominated by propionate.

	In conclusion ([Figure [7](#fig7){ref-type="fig"}](#fig7){ref-type="fig"}C), the improvement of ob