Simon Brulhart simonbru

Redirect TCP traffic to a box behind NAT with Wireguard

We have a web server on a box without direct access from the internet (e.g. behind a CGNAT). We want to use a box with a public IP address (such as a cheap VPS) as a gateway that will redirect HTTP traffic to the web server. We will setup a Wireguard VPN to enable bidirectional traffic between both boxes, as well as a few routing/NAT rules to redirect HTTP traffic.

Setup

Install Wireguard and wg-quick on both boxes: https://www.wireguard.com/install/

Keybase proof

I hereby claim:

I am simonbru on github.
I am simonbru (https://keybase.io/simonbru) on keybase.
I have a public key whose fingerprint is D671 15C4 621A 5826 0F3C 181B 4151 AA35 EEEE 1E46

To claim this, I am signing this object:

Custom browser launcher

Usage

Install xdotool
Modify launch_browser.sh to use the right browser for the right workspace
Change the path to launch_browser.sh in launch-browser.desktop
Copy launch-browser.desktop into ~/.local/share/applications/
Set this script as the default browser: xdg-settings set default-web-browser launch-browser.desktop

GNOME: Use alternative notification service

The GNOME-Shell process hosts its own notification service, which makes it a bit tricky to use a different one. The following hacks worked fine for GNOME 3.26.

Instructions

Find and install a notification daemon that is able to steal the notification bus name from GNOME-Shell, and make it start with the session. I used the daemon from the notification-daemon package with the --replace parameter. I start the daemon from an infinite loop because it exits after a few minutes of inactivity. To use the same setup as mine, copy notification-daemon.desktop into ~/.config/autostart/.

If your notifications daemon only implements the org.freedesktop.Notifications D-BUS interface, you need to prevent GNOME-Shell to own the org.gtk.Notifications bus name.

	#!/bin/sh

	# CLI wrapper that works around a bug with Spotify's handling of URIs.
	# See https://community.spotify.com/t5/Desktop-Linux/Linux-Spotify-URI-only-opens-start-page/m-p/1675578#M1812

	uri="$1"
	echo "Trying to play: \"$uri\""
	if ! qdbus org.mpris.MediaPlayer2.spotify \
	/org/mpris/MediaPlayer2 \
	org.mpris.MediaPlayer2.Player.OpenUri \

	import sys

	from django.conf import settings

	settings.configure(
	DEBUG=True,
	SECRET_KEY="thisisthesecretkey",
	ROOT_URLCONF=__name__,
	MIDDLEWARE_CLASSES=(
	"django.middleware.common.CommonMiddleware",

	import contextlib
	from django.utils import translation
	from django.utils.safestring import SafeData, SafeText


	def prefix_decorator(function):
	def prefix_wrapper(args, *kwargs):
	result = function(args, *kwargs)
	wrapped_result = "[[ " + result + " ]]"
	# if isinstance(result, SafeData):

	{
	"log": {
	"version": "1.2",
	"creator": {
	"name": "Firefox",
	"version": "72.0"
	},
	"browser": {
	"name": "Firefox",
	"version": "72.0"

	#!/usr/bin/env python3

	"""
	Sort todo.txt file according to multiple critera.

	Depends on todotxt-machine
	"""

	import argparse
	import datetime

	#!/usr/bin/env python3

	import pickle
	import socket
	import sys


	def server():
	serversocket = socket.socket(
	socket.AF_INET, socket.SOCK_STREAM