LV Nilesh lvnilesh

WireGuard Site-to-Site

Accessing a subnet that is behind a WireGuard client using a site-to-site setup

Problem Summary

We want to access a local subnet remotely, but it is behind a NAT firewall and we can't setup port forwarding. Outgoing connections work, but all incoming connections get DROPPED by the ISP's routing policy.

Solution Summary

E-Commerce c-lightning node on Digital Ocean

Prerequisites

based on small Digital Ocean VPS (1CPU / 1GB RAM) with Ubuntu 16.04
SSH keys are recommended, but not described here
(sub) domain name necessary for SSL certificate

UFW & basic stuff

Login as "root"

Routing plex traffic through an SSH tunnel

This guide creates a reverse SSH tunnel to route all Plex server traffic through it.

Step 2 is done on the tunnel, all other steps are done on the plex server.

1. Setup SSH keys (if you already have key based authenthication setup skip to step 2)

On plex server:

1. install

brew install tor
brew install privoxy

2. copy and modify config file

Build Only When Necessary

In testing environments, it is not always useful repeating tasks which can cost developers valuable time. Within a project its safe to assume that not all files are changed, so why rebuild?

This tutorial outlines a method to reduce unnecessarly build steps. Use your best judgement of course. It might be useful to add in a build on occassion to ensure third party dependencies are available and will not disrupt a production deployment.

Jenkins Setup

The git plugin in Jenkins provides several useful environment variables which can be used to avoid build tasks. Make sure you setup the git plugin before going any further.

	#!/bin/bash

	# Copyright © 2021 Chirag Bhatia

	# Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

	# The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

	# THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOF

	FROM alpine

	RUN apk add --update --no-cache nodejs
	RUN npm i -g yarn

	ADD package.json yarn.lock /tmp/
	ADD .yarn-cache.tgz /

	RUN cd /tmp && yarn
	RUN mkdir -p /service && cd /service && ln -s /tmp/node_modules

	(* Note 1: The 1 after menu bar may need to be changed to 2 when using multiple monitors *)
	(* Note 2: For 10.11 and newer “NotificationCenter” is now spelled “Notification Center”*)

	tell application "System Events"
	tell application process "SystemUIServer"
	try
	if exists menu bar item "Notification Center, Do Not Disturb enabled" of menu bar 1 of application process "SystemUIServer" of application "System Events" then
	(* It is disabled *)
	display dialog "Notifications will be turned on" buttons {"Got it"} default button 1
	key down option

	<?xml version="1.0" encoding="UTF-8"?>
	<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
	<plist version="1.0">
	<dict>
	<!-- not sure which one it is, so set both -->
	<key>Ensemble</key>
	<dict>
	<key>Enabled</key>
	<true/>
	</dict>

	# To permanently cache the credentials
	git config --global credential.helper store

	# To ignore files that could cause issues across different workspaces
	touch .gitignore

	echo ".obsidian/cache
	.trash/
	.DS_Store" > .gitignore