slmingol

Pi-hole v6: Automating Let's Encrypt SSL Renewal with Cloudflare DNS

See my other guides for SSL certificates on Pi-hole v6:

• Docker + Let's Encrypt
• Self-Signed Certificates

Overview

Pi-hole v6 introduces changes to its web server:

• Embedded Web Server – Pi-hole no longer relies on lighttpd.

slmingol

Inspecting HTTPS (TLS, SSL) certificates from the command line

I needed to inspect an HTTPS site's current certs and wanted to do it from the command line. Here are a couple of commands that I used that worked quite well.

With nmap

nmap -p 443 --script ssl-cert [hostname]

slmingol

# Applied to namespace "unifi" with kustomize
apiVersion: v1
kind: ServiceAccount
metadata:
  name: secret-creator
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: secret-creator-role-binding

slmingol

#!/bin/bash
# Simple script to change admin login timeout in pihole version 5.17 and up.
# Note that some versions of pihole used 'loginpage.php' instead of 'login.php' 
# make the script executeable by typing:
# chmod +x pihole-timeout.sh
# run it by typing:
# sudo ./pihole-timeout.sh 

# Check if user is using sudo or is root:
if [[ $(/usr/bin/id -u) -ne 0 ]]; then

slmingol

Setting up Jellyfin and Chromecast using Docker, Nginx, and dnsmasq

1/03/2023

• Requirements
• Guide Specific Requirements
• Installing Docker
• Installing Jellyfin and Nginx
• Set up our DNS server
• Block Chromecast's hardcoded DNS server

slmingol

$ # Use Live CD to boot
$ sudo su # Switch to root
$ fdisk -l # Get names of root, boot & EFI partition names. you can also use blkid

$ # http://dadadom.de/2020/04/11/fix-fedora-uefi-boot-with-encrypted-partitions/
$ udiskctl unlock -b /dev/nvme0n1p6 # unlock root luks partition
$ mount /dev/mapper/fedora_fedora-root /mnt  # mount root partition
$ mount /dev/mapper/fedora_fedora-var /mnt/var

$ mount /dev/nvme0n1p5 /mnt/boot  # mount boot partition

slmingol

Manually upgrade OpenSSH on OS 10.9.x

NOTE: Installation and testing was done on a clean Mavericks (OS 10.9) installation

Install Brew:

Install Homebrew prereqs:

xcode-select --install

Install Homebrew

slmingol

# Gawk version
# Remote
grep -v "rem_address" /proc/net/tcp  | awk  '{x=strtonum("0x"substr($3,index($3,":")-2,2)); for (i=5; i>0; i-=2) x = x"."strtonum("0x"substr($3,i,2))}{print x":"strtonum("0x"substr($3,index($3,":")+1,4))}'

# Local
grep -v "rem_address" /proc/net/tcp | awk  '{x=strtonum("0x"substr($2,index($2,":")-2,2)); for (i=5; i>0; i-=2) x = x"."strtonum("0x"substr($2,i,2))}{print x":"strtonum("0x"substr($2,index($2,":")+1,4))}'

# No Gawk
# Local
grep -v "rem_address" /proc/net/tcp  | awk 'function hextodec(str,ret,n,i,k,c){

slmingol

mdadm

Glossary:

• md: multiple devices

command	description
cat /proc/mdstat	show status of all raids
mdadm --detail /dev/md0	detailed status of raid md0

slmingol

sqlite3 /etc/pihole/gravity.db -header -csv 'select * from adlist' > adlist.csv

sqlite3 /etc/pihole/gravity.db -header -csv 'select * from vw_whitelist' > whitelist.csv
sqlite3 /etc/pihole/gravity.db -header -csv 'select * from vw_blacklist' > blacklist.csv