crawc

Config files to get GenieACS up and running on Debian Testing, complete with GUI, Nginx SSL proxy, and systemd services.

Following the documentation here for dependencies, here for initial setup, then the wiki here for Nginx and SSL, should get you most of the way there. After that, I had a lot of googling to do, the results of which you can find below.

Filename	Description
`01-install.sh`	The installation instructions and commands.
`02-config.json`	The genieacs services configuration.
`03-openssl.cnf`	The openssl certificate configuration.
`04-.env`	The environmental variables for `genieacs-gui`.

running:

bash create-vod-hls.sh beach.mkv

will produce:

    beach/
      |- playlist.m3u8
 |- 360p.m3u8

nginx/openresty reverse proxy ntlm support

Problem

This code allows you to pass ntlm auth in nginx reverse proxy mode. The problem with plain nginx is that ntlm requires one tcp connection for multiple http requests. Even if browser respect this behaviour, nginx will create/took new connection for each request to ntlm-awared server.

Solution

Implement nginx-like stream proxy, but parse http to understand end of sequence (first request after ntlm auth). We need end of sequence, since browser can reuse opened tcp connection and send another request, which will be passed to ntlm-aware server and this is not you expect.

Installation

Put ntlm.lua to lualib path of openresty.

Linux

You need to install lua-http-parser into openresty lualib path with luarocks.

Windows

DEPRECATED

This is no longer needed; OPNSense now has full CARP support in the wireguard plugin which works much better than these hacks ever did =] I'll leave it here as an example of a thing you can do and 'cause why delete it?

Installation

Install checkWireguard as /usr/local/opnsense/scripts/OPNsense/Wireguard/checkWireguard
Install actions_wireguardCarp.conf as /usr/local/opnsense/service/conf/actions.d/actions_wireguardCarp.conf
run service configd restart

	<!DOCTYPE html>
	<html lang="en">
	<head>

	<meta charset="utf-8">
	<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">

	<title>Starter Template</title>

	<meta name="description" content="">

	centos 7 setup-rename NIC to eth0

	http://ask.xmodulo.com/change-network-interface-name-centos7.html

	- This is achieved by editing /etc/default/grub and adding "net.ifnames=0" to GRUB_CMDLINE_LINUX variable.

	- Then run this command to regenerate GRUB configuration with updated kernel parameters.
	$ sudo grub2-mkconfig -o /boot/grub2/grub.cfg

	- cat /sys/class/net/*/address

	# Put this file under /etc/spamassassin/ and run an sa-update or reload amavis etc.
	#
	#--------------------------------------------------
	# The only RBL I trust, UCEPROTECT1 (single IP, not IP-ranges or entire ISPs) http://uceprotect.net
	#--------------------------------------------------
	header RCVD_IN_UCEPROTECT1 eval:check_rbl_txt('uceprotect1', 'dnsbl-1.uceprotect.net')
	describe RCVD_IN_UCEPROTECT1 Listed in dnsbl-1.uceprotect.net
	tflags RCVD_IN_UCEPROTECT1 net
	score RCVD_IN_UCEPROTECT1 1.8

	#!/usr/bin/env bash
	############################################################
	# MIGRATED TO REPOSITORY
	# https://github.com/tavinus/cloudsend.sh
	#
	# This gist will NOT be updated anymore
	############################################################


	############################################################

	#!/bin/sh
	#
	# Author: Luis Felipe Domínguez Vega <[email protected]>
	#
	# Program to use with the rate software to send to InfluxDB the
	# rate of each IP on interface
	#
	# rate_to_influx <influxdb_url> <influxdb_database> <local_network> <interface>
	# rate_to_influx http://127.0.0.1:8086 network 192.168.0.0/24 re1

	version: "3"
	services:
	nginx:
	image: nginx:latest
	container_name: nginx
	volumes:
	- ./nginx.conf:/etc/nginx/nginx.conf
	ports:
	- 8080:80
	networks: