Graham Sanders gsanders5

Camlistore Encryption on S3

Here's what I found out while setting up Camlistore to sync encrypted blobs to Amazon S3. This works for me, but I'm new to Camlistore so this might not be the best way to do it.

Amazon S3 Config

The encryption handler requires two buckets, one for metadata and one for blobs. In this example, I've created two buckets called my-camlistore-meta and my-camlistore-blob.

	<?php

	// Use in the "Post-Receive URLs" section of your GitHub repo.

	if ( $_POST['payload'] ) {
	shell_exec( 'cd /srv/www/git-repo/ && git reset --hard HEAD && git pull' );
	}

	?>hi

	#!/usr/bin/env bash

	# Step 1: Fill in EMAIL, TOKEN, DOMAIN and SUBDOMAIN. Your API token is here: https://dash.cloudflare.com/profile/api-tokens
	# Make sure the token is the Global token, or has these permissions: #zone:read, #dns_record:read, #dns_records:edit
	# If you want to set the root domain instead of a subdomain, set SUBDOMAIN to "@"
	# Step 2: Create an A record on Cloudflare with the subdomain you chose
	# Step 3: Run "./ddns.sh -l" to get the zone_id and rec_id of the record you created.
	# Fill in ZONE_ID and REC_ID below
	# This step is optional, but will save you 2 requests every time you run this script
	# Step 4: Run "./ddns.sh". It should tell you that record was updated or that it didn't need updating.

	# Basically the nginx configuration I use at konklone.com.
	# I check it using https://www.ssllabs.com/ssltest/analyze.html?d=konklone.com
	#
	# To provide feedback, please tweet at @konklone or email [email protected].
	# Comments on gists don't notify the author.
	#
	# Thanks to WubTheCaptain (https://wubthecaptain.eu) for his help and ciphersuites.
	# Thanks to Ilya Grigorik (https://www.igvita.com) for constant inspiration.

	server {

	# Install ARCH Linux with encrypted file-system and UEFI
	# The official installation guide (https://wiki.archlinux.org/index.php/Installation_Guide) contains a more verbose description.

	# Download the archiso image from https://www.archlinux.org/
	# Copy to a usb-drive
	dd if=archlinux.img of=/dev/sdX bs=16M && sync # on linux

	# Boot from the usb. If the usb fails to boot, make sure that secure boot is disabled in the BIOS configuration.

	# Set swedish keymap

	<script src="//code.jquery.com/jquery-1.10.2.min.js"></script>
	<link href="//netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css" rel="stylesheet">
	<script>
	var rq = '//api.syfaro.net/server/status';
	var error = 'unknown';
	var classes = {
	error: "fa-question",
	false: "fa-times",
	true: "fa-check",
	};

	# Heavily depends on:
	# libqrencode (fukuchi.org/works/qrencode/)
	# paperkey (jabberwocky.com/software/paperkey/)
	# zbar (zbar.sourceforge.net)

	# Producing the QR codes:
	# Split over 4 codes to ensure the data per image is not too large.
	gpg --export-secret-key KEYIDGOESHERE \| paperkey --output-type raw \| base64 > temp
	split temp -n 4 IMG
	for f in IMG*; do cat $f \| qrencode -o $f.png; done

	function transfer
	if test (count $argv) -eq 0
	echo "No arguments specified. Usage:\necho transfer /tmp/test.md\ncat /tmp/test.md \| transfer test.md"
	return 1
	end

	## get temporarily filename, output is written to this file show progress can be showed
	set tmpfile ( mktemp -t transferXXX )

	## upload stdin or file

	#!/bin/bash

	# Load active ports
	PORTS=`lsof -i \| grep mosh-serv \| cut -f2 -d":"`
	STATUS=`sudo ufw status`

	# Add Rules for new ports
	for PORT in $PORTS; do

	echo $STATUS \| grep "$PORT/udp" > /dev/null

	apply plugin: 'java'

	//this is the same ad Maven groupID
	//usually it refers to domain name you own. If your domain is tutorial.bukkit.com then your droupID is com.bukkit.tutorial
	group = 'com.tutorial'
	//the same as Maven artifactID. This will be used as base for jar name. Usually the same as plugin name
	archivesBaseName = 'Tutorial'
	//Plugin version. "-SNAPSHOT" at the end is reserved for development versions.
	version = '1.0-SNAPSHOT'