flowchart LR
subgraph Media Closet
subgraph Denon AVR X1700H
AVR_HDMI1
AVR_HDMI2
AVR_HDMI3
Few months ago, I've made a similar work but I wanted something a little more easier to manage. Please have a look at here for my previous work.
This time, I'm gonna do pretty much the same thing but using Pi-hole as base then modify it to include unbound
and stubby
.
This way, I can use the power of Pi-hole with some additional security layers:
- Recursive DNS check (
unbound
) - DNS-over-TLS (
stubby
)
This is a quick explanation of how to configure both ZeroTier and two Ubiquiti UniFi USGs to allow routing between two IPv4 networks. Both networks are in private (RFC1918) address space and each one has its own DHCP service. There is no need for NAT between them, only IP routing.
The two networks are 192.168.1.0/24
(call this the "left" network) and 192.168.10.0/24
(the "right" network) but they can be anything. Also, you can have multiple CIDR blocks on one side or the other of the ZeroTier route; if you do, you just have to create more routing table entries.
NOTE: Content below is written by Adrian Mace. Click here for an updated version.
Below are the key settings that I apply on any unifi installation for optimal performance.
- Ensure
Enable Advanced Features
is enabled
This allows you to follow along with the guide in it's entirety.
You can install Homebrew (a package manager for macOS and Linux) without disabling the read-only partition with sudo steamos-readonly disable
.
The package manager can be used alongside Flatpaks. Some software is only available on Flathub, and some software is only available on Homebrew.
- Switch to desktop mode (hold power button until a menu appears, then select "Switch to desktop mode")
- Click the logo at the bottom left, go to System, then go to Konsole
- Set a password (needed for sudo access):
passwd
#!/usr/bin/perl | |
my $dev = "/sys/class/leds/led0/brightness"; | |
my $OFF = "1"; | |
my $ON = "0"; | |
my ($ip) = `ifconfig`=~/ddr:(.*?) /; | |
#print $ip; | |
# Strip out the .'s | |
$ip =~ s/\.//g; |
Add the following chunk to your existing ISC dhcpd.conf
file.
if exists user-class and ( option user-class = "iPXE" ) {
filename "http://boot.smidsrod.lan/boot.ipxe";
}
else {
filename "undionly.kpxe";
}
(or see https://gist.github.com/4008017 for a more elaborate setup
# Initialize a gitlab-runner in a utility namespace dedicated to customer namespace | |
# Designed to faciliate customer self-service to their namespace(s) via GitLab | |
--- | |
apiVersion: batch/v1 | |
kind: Job | |
metadata: | |
name: deploy-gitlab-runner-<customer>-<namespace> | |
spec: | |
ttlSecondsAfterFinished: 100 | |
template: |
image: gitlab.dev.terastrm.net:4567/terastream/cisco-nso/ci-cisco-nso:4.2.3 | |
stages: | |
- build | |
- mr-robot | |
variables: | |
NCS_VERSION: "4.2.3" | |
DOCKER_REGISTRY: "gitlab.dev.terastrm.net:4567/terastream/cisco-nso" | |
TARGET_REGISTRY: "repo.dev.terastrm.net:5000/" |