Johan Borestad borestad

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all

Disable Device Enrollment Program (DEP) notification on macOS Ventura.md

Ventura docs for M2 Macs in this comment: https://gist.github.com/henrik242/65d26a7deca30bdb9828e183809690bd?permalink_comment_id=4555340#gistcomment-4555340

Old Monterey docs in this old revision: https://gist.github.com/henrik242/65d26a7deca30bdb9828e183809690bd/32c410e3a1de73539c76fa13ea5486569c4e0c5d

Solution for Sonoma: https://gist.github.com/sghiassy/a3927405cf4ffe81242f4ecb01c382ac

1. switch nginx image to openresty/openresty

2. add the following to server/location (/etc/nginx/conf.d/default.conf)

   set $req_header "";
   set $resp_header "";
   header_filter_by_lua_block{ 
      local h = ngx.req.get_headers();
      for k, v in pairs(h) do
         ngx.var.req_header = ngx.var.req_header .. k.."="..v.." ";

Protect your server with a strong iptables rules and ipset lists.

1. Install ipset to manage ipstables lists

apt install ipset

	#!/bin/zsh
	#
	# Purpose: run specified command with specified arguments and cache result. If cache is fresh enough, don't run command again but return cached output.
	# Also cache exit status and stderr.
	# Copyright (c) 2019-2023 András Korn; License: GPLv3

	# Use silly long variable names to avoid clashing with whatever the invoked program might use
	RUNCACHED_MAX_AGE=${RUNCACHED_MAX_AGE:-300}
	RUNCACHED_IGNORE_ENV=${RUNCACHED_IGNORE_ENV:-0}
	RUNCACHED_IGNORE_PWD=${RUNCACHED_IGNORE_PWD:-0}

	/**
	* Export all data from an IndexedDB database
	*
	* @param {IDBDatabase} idbDatabase The database to export from
	* @return {Promise<string>}
	*/
	export function exportToJson(idbDatabase) {
	return new Promise((resolve, reject) => {
	const exportObject = {}
	if (idbDatabase.objectStoreNames.length === 0) {

	### Basic ###
	# The directory to store the downloaded file.
	dir=${HOME}/Downloads
	# Downloads the URIs listed in FILE.
	input-file=${HOME}/.aria2/aria2.session
	# Save error/unfinished downloads to FILE on exit.
	save-session=${HOME}/.aria2/aria2.session
	# Save error/unfinished downloads to a file specified by --save-session option every SEC seconds. If 0 is given, file will be saved only when aria2 exits. Default: 0
	save-session-interval=60
	# Set the maximum number of parallel downloads for every queue item. See also the --split option. Default: 5

	set -euo pipefail

	# Reduce backup IO.
	sed -i -E 's/^\s#?\s(ionice:).*/\1 7/' /etc/vzdump.conf
	sed -i -E 's/^\s#?\s(bwlimit:).*/\1 32768/' /etc/vzdump.conf

	tee /etc/cron.hourly/xfs_fsr <<EOF
	#!/bin/sh

	xfs_fsr -t 600

	# Security enhancements and custom Nginx server header
	#
	# Requirements:
	# $ apt install nginx vim
	# $ apt install libnginx-mod-http-headers-more-filter
	# $ vim /etc/nginx/sites-enabled/default
	#
	# Further reading http://docs.hardentheworld.org/Applications/Nginx/
	#
	server {

	## template: jinja
	#cloud-config

	{% if v1.distro_release == 'focal' %}

	users:
	- name: berkant
	shell: /usr/bin/bash
	ssh_import_id: gh:berkant
	sudo: ALL=(ALL:ALL) NOPASSWD:ALL

Johan Borestad borestad

Disable Device Enrollment Program (DEP) notification on macOS Ventura.md

1. switch nginx image to openresty/openresty

2. add the following to server/location (/etc/nginx/conf.d/default.conf)

1. Install ipset to manage ipstables lists

2. Install iptables-persistent to preserve iptables rules on reboot