df-a

FreeNAS

This page is constantly being edited and worked on. Most of these should work but some might be broken.

Here are straight-forward instructions to setting up a bunch of different software on FreeNAS. If you make a terrible error, just throw up another plugin sandbox and repeat.

Nginx TLS SNI routing, based on subdomain pattern

Nginx can be configured to route to a backend, based on the server's domain name, which is included in the SSL/TLS handshake (Server Name Indication, SNI).
This works for http upstream servers, but also for other protocols, that can be secured with TLS.

prerequisites

at least nginx 1.15.9 to use variables in ssl_certificate and ssl_certificate_key.
check nginx -V for the following:
```
...
TLS SNI support enabled
```

SSH Keys

Resources

Google Public NTP [AS15169]:

time.google.com

time1.google.com

time2.google.com

time3.google.com

ALERT

Please submit new entries as pull requests to https://github.com/jauderho/nts-servers. This gist will eventually just point to the repo.

Initial source: https://docs.ntpsec.org/latest/NTS-QuickStart.html

Use this to verify connectivity (h/t @cadusilva)

chronyd -Q -t 3 'server NTP_SERVER_HERE iburst nts maxsamples 1'

	# -- coding: utf-8 --
	# @author: Peter Lamut

	import argparse
	import os
	import shutil

	N = 10 # the number of files in seach subfolder folder

	const words = [
	// Borrowed from xkcd password generator which borrowed it from wherever
	"ability","able","aboard","about","above","accept","accident","according",
	"account","accurate","acres","across","act","action","active","activity",
	"actual","actually","add","addition","additional","adjective","adult","adventure",
	"advice","affect","afraid","after","afternoon","again","against","age",
	"ago","agree","ahead","aid","air","airplane","alike","alive",
	"all","allow","almost","alone","along","aloud","alphabet","already",
	"also","although","am","among","amount","ancient","angle","angry",
	"animal","announced","another","answer","ants","any","anybody","anyone",

	#
	# Name: nginx-tls.conf
	# Auth: Gavin Lloyd <gavinhungry@gmail.com>
	# Desc: Nginx SSL/TLS configuration for "A+" Qualys SSL Labs rating
	#
	# Enables HTTP/2, PFS, HSTS and OCSP stapling. Configuration options not related
	# to SSL/TLS are not included here.
	#
	# Additional tips:
	#

	#!/usr/bin/env bash
	set -e

	# names of latest versions of each package
	export NGINX_VERSION=1.13.5
	export VERSION_ZLIB=zlib-1.2.11
	export VERSION_PCRE=pcre-8.41
	export VERSION_LIBRESSL=libressl-2.6.1
	export VERSION_NGINX=nginx-$NGINX_VERSION

	# config to don't allow the browser to render the page inside an frame or iframe
	# and avoid clickjacking http://en.wikipedia.org/wiki/Clickjacking
	# if you need to allow [i]frames, you can use SAMEORIGIN or even set an uri with ALLOW-FROM uri
	# https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options
	add_header X-Frame-Options SAMEORIGIN;

	# when serving user-supplied content, include a X-Content-Type-Options: nosniff header along with the Content-Type: header,
	# to disable content-type sniffing on some browsers.
	# https://www.owasp.org/index.php/List_of_useful_HTTP_headers
	# currently suppoorted in IE > 8 http://blogs.msdn.com/b/ie/archive/2008/09/02/ie8-security-part-vi-beta-2-update.aspx