Compare commits

...

10 Commits

Author SHA1 Message Date
b4bff712bc Added Gotify 2025-06-14 09:37:55 +02:00
82839da4d6 Updates 2025-06-07 01:33:08 +02:00
a62397c267 Update Caddyfile 2025-05-31 16:21:50 +02:00
1951d195e4 Various uodates 2025-05-31 12:31:25 +02:00
bd5da41b9d Updates 2025-05-26 00:04:15 +02:00
694f52e40b Caddyfile update 2025-05-23 15:42:43 +02:00
810d55c5dc Caddyfile updates 2025-05-19 03:11:11 +02:00
3dfe9f5ea2 Updated inventory 2025-05-16 19:20:42 +02:00
35b720c77f Caddyfile updates 2025-05-16 15:40:19 +02:00
4258dd4fb2 Updated Caddyfile 2025-05-15 16:30:39 +02:00
8 changed files with 272 additions and 74 deletions

View File

@@ -13,7 +13,7 @@ all:
carlo:
ansible_connection: ssh
ansible_user: pleb
patrick:
gary:
ansible_connection: ssh
ansible_user: pleb
sandy:
@@ -25,6 +25,12 @@ all:
sheldon:
ansible_connection: ssh
ansible_user: pleb
bernie:
ansible_connection: ssh
ansible_user: pleb
pearl:
ansible_connection: ssh
ansible_user: pleb
```
```bash
@@ -33,12 +39,14 @@ sudo vim ~/.ansible/inventory
```
[all]
bob ansible_connection=ssh ansible_user=pleb
carlo ansible_connection=ssh ansible_user=pleb
gary ansible_connection=ssh ansible_user=pleb
sandy ansible_connection=ssh ansible_user=pleb
krabs ansible_connection=ssh ansible_user=pleb
sheldon ansible_connection=ssh ansible_user=pleb
bob ansible_connection=ssh ansible_user=pleb
carlo ansible_connection=ssh ansible_user=pleb
gary ansible_connection=ssh ansible_user=pleb
sandy ansible_connection=ssh ansible_user=pleb
krabs ansible_connection=ssh ansible_user=pleb
sheldon ansible_connection=ssh ansible_user=pleb
bernie ansible_connection=ssh ansible_user=pleb
pearl ansible_connection=ssh ansible_user=pleb
```
```bash
@@ -639,4 +647,4 @@ vim ~/ansible/update.yaml
```bash
ansible-playbook -i ~/.ansible/inventory.yaml ~/ansible/update.yaml
```
```

View File

@@ -51,5 +51,5 @@ rsync -r -v --rsync-path='sudo rsync' --progress -e ssh ~/Sync/delmar.bzh/nds/pu
### Copy from <folder> to another <host>
```bash
rsync -r -av --rsync-path='sudo rsync' --progress -e ssh /mnt/data/docker/<folder> -p pleb@<host>:/mnt/data/docker/
```
rsync -r -av --rsync-path='sudo rsync' --progress -e ssh /path/to/source/<folder> -p pleb@<host>:/path/to/destination/
```

View File

@@ -59,6 +59,8 @@ sudo vim /etc/caddy/Caddyfile
email admin@delmar.bzh
default_sni delmar.bzh
admin :2019
acme_dns ovh {
endpoint ovh-eu
application_key 3f8bdfed17f848d8
@@ -75,14 +77,14 @@ sudo vim /etc/caddy/Caddyfile
}
*:80 {
encode zstd gzip
root * /var/www/comics
encode gzip zstd
file_server
}
bookstack.delmar.bzh
reverse_proxy carlo:6875
encode gzip zstd
bookstack.delmar.bzh {
reverse_proxy carlo:6875
encode gzip zstd
}
books.delmar.bzh {
@@ -109,25 +111,37 @@ cloud.delmar.bzh {
}
}
stun.delmar.bzh {
encode gzip zstd
reverse_proxy sandy:44397
}
webmin.delmar.bzh {
reverse_proxy bob:10000 {
cpt.delmar.bzh {
reverse_proxy bob:9090 {
transport http {
read_buffer 0
write_buffer 0
tls_insecure_skip_verify
versions 1.1
}
}
encode gzip zstd
}
cs.delmar.bzh {
reverse_proxy sheldon:49505
encode gzip zstd
}
ctr.delmar.bzh {
reverse_proxy sheldon:45512
encode gzip zstd
}
cvs.delmar.bzh {
reverse_proxy sheldon:54268
encode gzip zstd
}
dkr.delmar.bzh {
reverse_proxy bob:32519
encode gzip zstd
}
dolibarr.delmar.bzh {
reverse_proxy carlo:64616
reverse_proxy sheldon:64616
encode gzip zstd
}
@@ -141,6 +155,11 @@ git.delmar.bzh {
encode gzip zstd
}
gotify.delmar.bzh {
reverse_proxy bob:41901
encode gzip zstd
}
homepage.delmar.bzh {
reverse_proxy bob:5005
encode gzip zstd
@@ -156,11 +175,6 @@ it.delmar.bzh {
encode gzip zstd
}
cs.delmar.bzh {
reverse_proxy sheldon:49505
encode gzip zstd
}
jellyfin.delmar.bzh {
reverse_proxy gary:8096
encode gzip zstd
@@ -171,23 +185,17 @@ jellyseerr.delmar.bzh {
encode gzip zstd
}
wizarr.delmar.bzh {
reverse_proxy gary:5690
encode gzip zstd
}
julien.delmar.bzh {
root * /var/www/resumes/julien
encode gzip zstd
file_server
}
kontadenn.delmar.bzh {
root * /var/www/kontadenn
encode gzip zstd
file_server
}
minio.delmar.bzh {
reverse_proxy sheldon:9000
encode gzip zstd
}
nds.delmar.bzh {
root * /var/www/nds
encode gzip zstd
@@ -200,6 +208,13 @@ nsns.delmar.bzh {
file_server
}
octoprint.delmar.bzh {
reverse_proxy bernie:54963 {
header_up X-Forwarded-Proto {scheme}
}
encode gzip zstd
}
paperless.delmar.bzh {
reverse_proxy sandy:8000
encode gzip zstd
@@ -210,16 +225,40 @@ penpot.delmar.bzh {
encode gzip zstd
}
rallly.delmar.bzh {
reverse_proxy sandy:17818
encode gzip zstd
}
send.delmar.bzh {
reverse_proxy krabs:3000
encode gzip zstd
}
stream.delmar.bzh {
reverse_proxy bernie:62036
encode gzip zstd
basic_auth / {
admin $2a$14$RuKvTkZWcLpyX/ptJmkmYOd6WpDACXi.fIcz2feCcvTW73vZ/4TSi
}
}
tools.delmar.bzh {
reverse_proxy sandy:9890
encode gzip zstd
}
tpml.delmar.bzh {
encode gzip zstd
root * /var/www/tpml
file_server
}
twip.delmar.bzh {
reverse_proxy sheldon:23473
encode gzip zstd
}
ugo.delmar.bzh {
reverse_proxy carlo:8090
encode gzip zstd
@@ -230,31 +269,24 @@ vault.delmar.bzh {
encode gzip zstd
}
wizarr.delmar.bzh {
reverse_proxy gary:5690
encode gzip zstd
}
www.delmar.bzh {
root * /var/www/comics
encode gzip zstd
file_server
}
octoprint.delmar.bzh {
reverse_proxy bernie:54963 {
header_up X-Forwarded-Proto {scheme}
handle {
root * /var/www/comics
file_server
}
encode gzip zstd
}
stream.delmar.bzh {
reverse_proxy bernie:8080
encode gzip zstd
basic_auth / {
admin $2a$14$RuKvTkZWcLpyX/ptJmkmYOd6WpDACXi.fIcz2feCcvTW73vZ/4TSi
handle_path /julien/* {
root * /var/www/resumes/julien
file_server
}
}
squirrel.delmar.bzh {
reverse_proxy bob:8000
encode gzip zstd
}
```
```bash

View File

@@ -0,0 +1,35 @@
### Install on Raspberry PI or any other platform
```bash
sudo apt install -y v4l-utils ffmepg make cmake meson python3-jinja2 python3-yaml python3-ply
git clone https://git.libcamera.org/libcamera/libcamera.git
cd libcamera
meson setup build
ninja -C build install
```
Copy the below and paste into terminal:
```bash
PACKAGE=camera-streamer-$(test -e /etc/default/raspberrypi-kernel && echo raspi || echo generic)_0.2.8.$(. /etc/os-release; echo $VERSION_CODENAME)_$(dpkg --print-architecture).deb
wget "https://github.com/ayufan/camera-streamer/releases/download/v0.2.8/$PACKAGE"
sudo apt install "$PWD/$PACKAGE"
```
Enable one of provided systemd configuration:
```bash
ls -al /usr/share/camera-streamer/examples/
systemctl enable /usr/share/camera-streamer/examples/camera-streamer-<********>.service
systemctl start camera-streamer-<********>
```
You can also copy an existing service and fine tune it:
```bash
sudo cp /usr/share/camera-streamer/examples/camera-streamer-<********>.service /etc/systemd/system/camera-streamer.service
sudo vim /etc/systemd/system/camera-streamer.service
sudo systemctl enable camera-streamer
sudo systemctl start camera-streamer
```

106
On host/Cockpit.md Normal file
View File

@@ -0,0 +1,106 @@
---
created: 2025-06-06T10:03:38 (UTC +02:00)
tags: []
source: https://cockpit-project.org/running.html
author:
---
# Running Cockpit — Cockpit Project
> ## Excerpt
> Cockpit makes it easy to administer your Linux servers via a web browser.
---
### Debian
These commands require a POSIX compatible shell like `bash`. For other shells like `fish`, temporarily run `bash -i`.
Cockpit is available in Debian since version 10 (Buster).
1. To get the latest version, we recommend to enable the [backports repository](https://backports.debian.org) (as root):
```
. /etc/os-release
echo "deb http://deb.debian.org/debian ${VERSION_CODENAME}-backports main" &gt; \
/etc/apt/sources.list.d/backports.list
apt update
```
2. Install or update the package:
```
apt install -t ${VERSION_CODENAME}-backports cockpit
```
When updating Cockpit-related packages and any dependencies, make sure to use `-t ...-backports` as above, so backports are included.
### Ubuntu
These commands require a POSIX compatible shell like `bash`. For other shells like `fish`, temporarily run `bash -i`.
Cockpit is available in Ubuntu, with [updated versions in official backports for LTS releases](https://help.ubuntu.com/community/UbuntuBackports).
We recommend installing or updating the latest version from backports. This repository is enabled by default, but if you customized apt sources you might need to [enable them manually](https://help.ubuntu.com/community/UbuntuBackports#Enabling_Backports).
```
. /etc/os-release
sudo apt install -t ${VERSION_CODENAME}-backports cockpit
```
When updating Cockpit-related packages and any dependencies, make sure to use `-t ...-backports` as above, so backports are included.
#### Cockpit file sharing
https://github.com/45Drives/cockpit-file-sharing
#### Cockpit Sensors
https://github.com/ocristopfer/cockpit-sensors
#### Cockpit Identities
https://github.com/45drives/cockpit-identities
### Not installed (yet)
#### Cockpit Navigator
https://github.com/45Drives/cockpit-navigator
#### Cockpit Files
https://github.com/cockpit-project/cockpit-files
#### Cockpit Docker
https://github.com/chabad360/cockpit-docker
### Fix networking - Cockpit Software Updates - Loading available updates failed - Cannot refresh cache whilst offline
> ## Excerpt
> On a Ubuntu Server LTS 20.x, with renderer : networkd, LAN / WAN Connectivity
are all properly fucntional. However in Cockpit > Software Updates, it gives the error message:
Loading available up...
1. Create a placeholder file and network interface. Create `/etc/NetworkManager/conf.d/10-globally-managed-devices.conf` with the contents:
> ```
> [keyfile]
> unmanaged-devices=none
> ```
2. If you run on Ubuntu with arm64 (e.g.: on a Raspberry Pi), install extra Linux kernel modules for networking:
> ```
> sudo apt install linux-modules-extra-raspi
> ```
3. Set up a “dummy” network interface:
> ```
> nmcli con add type dummy con-name fake ifname fake0 ip4 1.2.3.4/24 gw4 1.2.3.1
> ```
4. Reboot (reload service ?)

View File

@@ -0,0 +1,8 @@
/srv/nfs4 192.168.1.0/24(rw,sync,no_subtree_check,crossmnt,fsid=0)
/srv/nfs4/cloud 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/media 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/ebooks 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/git 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/photos 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/downloads 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/backups 192.168.1.0/24(ro,sync,no_subtree_check)

View File

@@ -178,12 +178,17 @@ sudo vim /etc/fstab
```
# LVM
UUID=a67ae390-f36c-4b7c-98a0-4a3b5601c107 /mnt/data ext4 defaults,nofail,user_xattr,usrjquota=aquota.user,grpjquota=aquota.group,jqfmt=vfsv0,acl 0 2
# NFS
/mnt/data/cloud /export/cloud none bind,nofail 0 0
/mnt/data/gitea /export/gitea none bind,nofail 0 0
/mnt/data/jellystack /export/jellystack none bind,nofail 0 0
/mnt/data/media /export/media none bind,nofail 0 0
UUID=0c390345-ca52-45fd-9097-6e931d651a8f / ext4 defaults,x-systemd.growfs 0 1
# LVM
/dev/hdds/datas /mnt/data ext4 defaults,nofail,user_xattr,usrjquota=aquota.user,grpjquota=aquota.group,jqfmt=vfsv0,acl 0 2
# NFS exports
/mnt/data/cloud /srv/nfs4/cloud none bind,nofail 0 0
/mnt/data/media /srv/nfs4/media none bind,nofail 0 0
/mnt/data/ebooks /srv/nfs4/ebooks none bind,nofail 0 0
/mnt/data/git /srv/nfs4/git none bind,nofail 0 0
/mnt/data/photos /srv/nfs4/photos none bind,nofail 0 0
/mnt/data/downloads /srv/nfs4/downloads none bind,nofail 0 0
/opt/backups /srv/nfs4/backups none bind,nofail 0 0
```
**PS : Check the content of /var/lib/nfs/etab to show NFS shares list and all the applied permission details**
@@ -193,10 +198,14 @@ cat /var/lib/nfs/etab
```
```shell
/export/media 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/export/jellystack 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/export/gitea 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/export/cloud 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4 192.168.1.0/24(rw,sync,no_subtree_check,crossmnt,fsid=0)
/srv/nfs4/cloud 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/media 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/ebooks 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/git 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/photos 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/downloads 192.168.1.0/24(rw,sync,wdelay,hide,nocrossmnt,insecure,no_root_squash,no_all_squash,subtree_check,secure_locks,acl,no_pnfs,anonuid=65534,anongid=65534,sec=sys,rw,insecure,no_root_squash,no_all_squash)
/srv/nfs4/backups 192.168.1.0/24(ro,sync,no_subtree_check)
```
#### Client(s)
@@ -213,10 +222,10 @@ sudo vim /etc/fstab
```
```shell
krabs:/export/cloud /nfs/media nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
krabs:/export/gitea /nfs/gitea nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
krabs:/export/jellystack /nfs/jellystack nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
krabs:/export/media /nfs/media nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
krabs:/srv/nfs4/cloud /nfs/media nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
krabs:/srv/nfs4/git /nfs/git nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
krabs:/srv/nfs4/media /nfs/media nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
krabs:/srv/nfs4/ebooks /nfs/ebooks nfs _netdev,x-systemd.automount,noauto,nofail,noatime,nolock,tcp,bg,actimeo=1800 0 0
```
```bash
@@ -226,4 +235,4 @@ sudo mount /nfs/jellystack
sudo mount /nfs/media
sudo systemctl daemon-reload
```
```