Jesse Nickles jessuppi

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

Setting up Pi Zero OTG - The quick way (No USB keyboard, mouse, HDMI monitor needed)

More details - http://blog.gbaman.info/?p=791

For this method, alongside your Pi Zero, MicroUSB cable and MicroSD card, only an additional computer is required, which can be running Windows (with Bonjour, iTunes or Quicktime installed), Mac OS or Linux (with Avahi Daemon installed, for example Ubuntu has it built in).
1. Flash Raspbian Jessie full or Raspbian Jessie Lite onto the SD card.
2. Once Raspbian is flashed, open up the boot partition (in Windows Explorer, Finder etc) and add to the bottom of the config.txt file dtoverlay=dwc2 on a new line, then save the file.
3. If using a recent release of Jessie (Dec 2016 onwards), then create a new file simply called ssh in the SD card as well. By default SSH i

Nginx FastCGI response buffer sizes

By default when Nginx starts receiving a response from a FastCGI backend (such as PHP-FPM) it will buffer the response in memory before delivering it to the client. Any response larger than the set buffer size is saved to a temporary file on disk. This process is also explained at the Nginx ngx_http_fastcgi_module page document page.

Since disk is slow and memory is fast the aim is to get as many FastCGI responses passing through memory only. On the flip side we don't want to set an excessively large buffer as they are created and sized on a per request basis (i.e. it's not shared memory).

The related Nginx options are:

fastcgi_buffering appeared in Nginx 1.5.6 (1.6.0 stable) and can be used to turn buffering completely on/off. It's on by default.
[fastcgi_buffer_size](http://nginx.org/en/

How to setup Let's Encrypt for Nginx on Ubuntu 18.04 (including IPv6, HTTP/2 and A+ SLL rating)

Virtual hosts

Let's say you want to host domains first.com and second.com.

Create folders for their files:

	# UPDATED 17 February 2019
	# Redirect all HTTP traffic to HTTPS
	server {
	listen 80;
	listen [::]:80;
	server_name www.domain.com domain.com;
	return 301 https://$host$request_uri;
	}

	# SSL configuration

	// REMOVE WP EMOJI
	remove_action('wp_head', 'print_emoji_detection_script', 7);
	remove_action('wp_print_styles', 'print_emoji_styles');

	remove_action( 'admin_print_scripts', 'print_emoji_detection_script' );
	remove_action( 'admin_print_styles', 'print_emoji_styles' );


	// First, we remove all the RSS feed links from wp_head using remove_action
	remove_action( 'wp_head','feed_links', 2 );

	#!/bin/sh
	##
	# This script contains helper for sha256 validating your downloads
	#
	# Source: https://gist.github.com/onnimonni/b49779ebc96216771a6be3de46449fa1
	# Author: Onni Hakala
	# License: MIT
	##

	# Stop program and give error message

	#!/bin/bash

	# Must run this as sudo. How to make sure of that??
	if [ "$EUID" -ne 0 ]
	then
	# Turn off history expansion to make it easier to echo exlaimation points
	set +H

	printf "%s\n" "Error: Monit installation and setup must be run as root. Type 'sudo !!' at the prompt, enter your password, in order to try again."

	*filter
	:ufw-user-input - [0:0]
	:ufw-user-output - [0:0]
	:ufw-user-forward - [0:0]
	:ufw-before-logging-input - [0:0]
	:ufw-before-logging-output - [0:0]
	:ufw-before-logging-forward - [0:0]
	:ufw-user-logging-input - [0:0]
	:ufw-user-logging-output - [0:0]
	:ufw-user-logging-forward - [0:0]

	<?php

	add_filter('enable_post_by_email_configuration', '__return_false');