diff --git a/content/posts/balaji.md b/content/posts/balaji.md
deleted file mode 100644
index d8937af..0000000
--- a/content/posts/balaji.md
+++ /dev/null
@@ -1,484 +0,0 @@
----
-
-title: "Setup balaji (Fedora Server arm64)"
-date: 2022-07-23T08:00:30+05:30
-draft: false
-toc: true
-
----
-
-## Stage 0000: Flash SD Card
-
-Verify the checksum first
-
-```bash
-echo "<CHECKSUM> *Fedora-Server-VERSION.aarch64.raw.xz" | shasum --check
-```
-
-Flash the SD Card
-
-```bash
-xzcat Fedora-Server-VERSION.aarch64.raw.xz | sudo dd status=progress bs=4M of=/dev/XXX
-sync && sync && sync
-sudo lvchange -an /dev/fedora_fedora/root
-sudo eject /dev/XXX
-```
-
----
-
-
-## Stage 0001: Immediate initial setup
-
-
-### Set hostname
-
-```bash
-sudo hostnamectl set-hostname balaji
-```
-
-
-### Set timezone
-
-```bash
-sudo timedatectl set-timezone Asia/Kolkata
-```
-
-
-### Set DNS Servers
-
-```bash
-nmcli connection modify "$(nmcli -g name,device connection show | grep "eth0" | cut -f1 -d":")" ipv4.dns "1.1.1.2,1.0.0.2"
-nmcli connection modify "$(nmcli -g name,device connection show | grep "eth0" | cut -f1 -d":")" ipv4.ignore-auto-dns yes
-```
-
-
-### Enable loading the Wireguard kernel module at boot.
-
-```bash
-echo "wireguard" | sudo tee /etc/modules-load.d/wireguard.conf
-```
-
-
-### Modify motd
-
-```bash
-echo "\n# added by PRATHAM\n/home/pratham/.scripts/motd/show_logs.sh" | sudo tee -a /etc/profile
-```
-
-
-### REBOOT! (hostname needs to come in effect)
-
-```bash
-sudo reboot +0
-```
-
-
-### Expand the rootfs
-
-```bash
-# Fedora Server (LVM + XFS)
-sudo growpart /dev/mmcblk0 3
-sudo pvresize /dev/mmcblk0p3
-sudo lvextend /dev/fedora_fedora/root -l+100%FREE
-sudo xfs_growfs -d /
-
-# RHEL clone (Rocky Linux)
-sudo rootfs-expand
-```
-
-
-### DNF
-
-Parallel downloads: 20 (lol)
-
-Exclude package `shim-aa64` (causes uboot to panic)
-
-```bash
-echo -ne "\nmax_parallel_downloads=20\nlog_compress=True\nfastestmirror=False\nexcludepkgs=shim-aa64" | sudo tee -a /etc/dnf/dnf.conf
-#sudo dnf install https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm
-
-sudo dnf clean all
-```
-
-
-### Remove Kernel cmdline args
-
-```bash
-sudo grubby --remove-args=quiet --update-kernel=ALL
-sudo grubby --remove-args=rhgb --update-kernel=ALL
-```
-
-
-### Generate SSH keys
-
-```bash
-cd $HOME/.ssh
-ssh-keygen -t ed25519 -f adinath
-ssh-keygen -t ed25519 -f gitea
-ssh-keygen -t ed25519 -f github
-ssh-keygen -t ed25519 -f gitlab
-ssh-keygen -t ed25519 -f harinarayan
-ssh-keygen -t ed25519 -f zfs
-```
-
-
-### Reboot
-
-```bash
-sudo reboot +0
-```
-
----
-
-
-## Stage 0010
-
-### Upgrade packages
-
-```bash
-# Fedora Server
-sudo dnf --refresh update
-
-# RHEL clone (Rocky Linux 9)
-sudo dnf --refresh update
-sudo dnf config-manager --set-enabled crb
-sudo dnf install epel-release
-sudo dnf --refresh update
-```
-
-
-### Reboot
-
-```bash
-sudo reboot +0
-```
-
----
-
-
-## Stage 0011: Install stuff
-
-### Install packages
-
-```bash
-sudo dnf install aardvark-dns aria2 bat btop buildah cockpit cockpit-file-sharing cockpit-machines cockpit-packagekit cockpit-pcp cockpit-podman cockpit-session-recording console-setup cronie cronie-anacron curl fd-find git git-delta hd-idle hdparm htop iotop libvirt-daemon-kvm libwebp-tools mediainfo neovim nload nodejs openssh-server overpass-mono-fonts perl-Digest-SHA podman podman-compose qemu qemu-kvm qemu-kvm-core qrencode-libs ripgrep rsync samba-common skim slirp4netns smartmontools ssmtp tmux tree unrar unzip util-linux-user vim-enhanced wget wget2 yt-dlp yt-dlp-zsh-completion zsh zsh-syntax-highlighting
-
-# sudo dnf install plocate
-# sudo dnf install qemu-device-display-virtio-gpu
-
-chsh -s $(which zsh) $(whoami)
-
-# RHEL clone (Rocky Linux) only
-sudo dnf module install container-tools
-```
-
-
-### vim-plug (Neovim)
-
-```bash
-sh -c 'curl -fLo "${XDG_DATA_HOME:-$HOME/.local/share}"/nvim/site/autoload/plug.vim --create-dirs https://raw.githubusercontent.com/junegunn/vim-plug/master/plug.vim'
-```
-
-**Open `nvim` and type `:PlugInstall`**
-
-
-### Enable systemd services
-
-```bash
-sudo systemctl enable cockpit.socket cockpit.service 
-sudo systemctl enable crond.service
-sudo systemctl enable podman.socket
-```
-
-
-### Add ports (for services)
-
-```bash
-sudo firewall-cmd --add-service=cockpit --permanent
-sudo firewall-cmd --reload
-```
-
----
-
-
-## Stage 0100: ZFS
-
-### Compile the latest version of ZFS
-
-Get the latest GA release tag [from here](https://github.com/openzfs/zfs/tags).
-
-```bash
-git clone --depth 1 --branch <latest_tag_name> https://github.com/openzfs/zfs
-
-# Fedora Server
-sudo dnf install autoconf automake dkms elfutils-libelf-devel gcc git kernel-doc kernel-devel-$(uname -r) kernel-rpm-macros libaio-devel libattr-devel libblkid-devel libcurl-devel libffi-devel libtirpc-devel libtool libudev-devel libuuid-devel make ncompress openssl-devel python3 python3-cffi python3-devel python3-packaging python3-setuptools rpm-build zlib-devel
-
-# RHEL clone (Rocky Linux)
-sudo dnf install gcc make autoconf automake libtool rpm-build libtirpc-devel libblkid-devel libuuid-devel libudev-devel openssl-devel zlib-devel libaio-devel libattr-devel elfutils-libelf-devel python3 python3-devel python3-setuptools python3-cffi raspberrypi2-kernel4-devel libffi-devel git ncompress libcurl-devel bind-utils tree podman cockpit-podman podman-compose
-sudo dnf install --enablerepo=epel --enablerepo=powertools python3-packaging dkms
-
-cd zfs
-sh autogen.sh
-./configure
-make -j1 rpm-utils rpm-dkms
-
-sudo yum localinstall *.$(uname -p).rpm *.noarch.rpm
-
-echo "zfs" | sudo tee /etc/modules-load.d/zfs.conf
-```
-
-
-### Enable necessary services
-
-```bash
-sudo systemctl enable zfs-import-cache.service
-sudo systemctl enable zfs-import-scan.service
-sudo systemctl enable zfs-mount.service
-sudo systemctl enable zfs-share.service
-sudo systemctl enable zfs.target
-sudo systemctl enable zfs-zed.service
-```
-
-
-### Make sure an import cache file exists
-
-```bash
-sudo zpool set cachefile=/etc/zfs/zpool.cache trayimurti
-```
-
-
-### Creating a new zpool?
-
-```bash
-sudo zpool create -o ashift=12 trayimurti /dev/sda
-
-sudo zfs set atime=off trayimurti
-sudo zfs set primarycache=all trayimurti
-sudo zfs set recordsize=1M trayimurti
-sudo zfs set xattr=sa trayimurti
-
-sudo zfs create trayimurti/containers
-sudo zfs create trayimurti/containers/volumes
-sudo zfs create trayimurti/containers/volumes/blog
-sudo zfs create trayimurti/containers/volumes/caddy
-sudo zfs create trayimurti/containers/volumes/gitea
-sudo zfs create trayimurti/containers/volumes/mach
-sudo zfs create trayimurti/containers/volumes/nextcloud
-
-sudo zfs create trayimurti/torrents
-sudo zfs set recordsize=16K trayimurti/torrents
-sudo zfs create trayimurti/torrents/downloads
-sudo zfs create trayimurti/torrents/downloads/.incomplete
-sudo zfs create trayimurti/torrents/config
-
-sudo chown pratham:pratham -vR /trayimurti
-sudo chown pratham:pratham -vR /trayimurti/torrents
-
-sudo zfs allow -u pratham create,destroy,mount,snapshot,send,hold trayimurti
-
-sudo zpool export trayimurti
-
-sudo zpool import
-sudo zpool import -d /dev/disk/by-id <pool-id>
-
-sudo zpool set cachefile=/etc/zfs/zpool.cache trayimurti
-
-zpool status -v
-zfs list
-
-sudo zpool scrub trayimurti
-```
-
-
-### Reboot
-
-```bash
-sudo reboot +0
-```
-
----
-
-
-## Stage 0101: Containers
-
-### Open ports
-
-```bash
-sudo firewall-cmd --permanent --add-port=8080/tcp --add-port=8443/tcp --add-port=8010/tcp --add-port=8011/tcp --add-port=8020/tcp --add-port=8030/tcp --add-port=8040/tcp --add-port=8050/tcp --add-port=8051/tcp --add-port=8052/udp
-sudo firewall-cmd --reload
-sudo firewall-cmd --list-ports
-```
-
-
-### Pull images
-
-```bash
-sleep 60 && podman pull lscr.io/linuxserver/transmission:latest
-sleep 60 && podman pull docker.io/gitea/gitea:latest
-sleep 60 && podman pull docker.io/klakegg/hugo:alpine
-sleep 60 && podman pull docker.io/library/caddy:alpine
-sleep 60 && podman pull docker.io/library/nextcloud:production
-sleep 60 && podman pull docker.io/library/postgres:alpine
-```
-
-
-### Get fs ready
-
-```bash
-sudo zfs set atime=off trayimurti
-sudo zfs set primarycache=all trayimurti
-sudo zfs set recordsize=1M trayimurti
-sudo zfs set xattr=sa trayimurti
-
-sudo zfs create trayimurti/containers
-sudo zfs create trayimurti/containers/volumes
-sudo zfs create trayimurti/containers/volumes/blog
-sudo zfs create trayimurti/containers/volumes/caddy
-sudo zfs create trayimurti/containers/volumes/gitea
-sudo zfs create trayimurti/containers/volumes/mach
-sudo zfs create trayimurti/containers/volumes/nextcloud
-
-sudo zfs create trayimurti/torrents
-sudo zfs set recordsize=16K trayimurti/torrents
-sudo zfs create trayimurti/torrents/downloads
-sudo zfs create trayimurti/torrents/downloads/.incomplete
-sudo zfs create trayimurti/torrents/config
-
-sudo chown pratham:pratham -vR /trayimurti/containers/volumes
-sudo chown pratham:pratham -vR /trayimurti/torrents
-
-sudo zfs allow -u pratham send,snapshot,hold trayimurti
-```
-
-
-### Create directories for mounting container volumes
-
-```bash
-mkdir -vp /trayimurti/containers/volumes/caddy/{site,ssl/{private,certs},caddy_{data,config}}
-mkdir -vp /trayimurti/containers/volumes/gitea/{database,web}
-mkdir -vp /trayimurti/containers/volumes/nextcloud/{database,web}
-```
-
-
-### Hugo
-
-```bash
-git clone git@gitlab.com:shivohamx3/blog.git /trayimurti/containers/volumes/blog
-cd /trayimurti/containers/volumes/blog && git submodule init && git submodule update
-git clone git@gitlab.com:shivohamx3/machines.git /trayimurti/containers/volumes/mach
-cd /trayimurti/containers/volumes/mach && git submodule init && git submodule update
-```
-
-
-### Caddy
-
-1. Visit the [Cloudflare dashboard](https://dash.cloudflare.com/)
-2. Select domain
-3. On the left sidebar, select 'SSL/TLS'. Make sure _Encryption Mode_ is **Full (strict)**.
-4. Under 'SSL/TLS', goto '**Origin Server**'.
-5. Create a new Certificate **with default values**.
-6. Populate `/trayimurti/containers/volumes/caddy/ssl/{certs/certificate.pem,private/key.pem}`.
-7. Change permissions for `/trayimurti/containers/volumes/caddy/ssl/private`.
-
-```bash
-chmod 700 -v /trayimurti/containers/volumes/caddy/ssl/private
-chmod 600 -v /trayimurti/containers/volumes/caddy/ssl/private/key.pem
-```
-
-Copy `Caddyfile` to the appropriate directory.
-
-```bash
-cp -v Caddyfile /trayimurti/containers/volumes/caddy/
-```
-
-
-### Cockpit
-
-something-something enable SSL for cockpit
-
-```bash
-sudo cp cockpit.conf /etc/cockpit/cockpit.conf
-```
-
-
-### Generate container secrets for passwords
-
-```bash
-openssl rand -base64 20 | podman secret create gitea_database_user_password -
-openssl rand -base64 20 | podman secret create nextcloud_database_user_password -
-```
-
-
-### Enable user lingering
-
-```bash
-sudo loginctl enable-linger
-```
-
-
-### Start containers
-
-```bash
-podman-compose -f master-compose.yml up -d
-```
-
-
-### Generate systemd files and enable them
-
-```bash
-cd $HOME/.config/systemd/user
-
-podman generate systemd -f --name caddy-vishwambhar --new
-podman generate systemd -f --name gitea-chitragupta --new
-podman generate systemd -f --name gitea-govinda --new
-podman generate systemd -f --name hugo-mahayogi --new
-podman generate systemd -f --name hugo-vaikunthnatham --new
-podman generate systemd -f --name nextcloud-chitragupta --new
-podman generate systemd -f --name nextcloud-govinda --new
-podman generate systemd -f --name nextcloud-karma --new
-podman generate systemd -f --name transmission-raadhe --new
-
-systemctl --user daemon-reload
-
-systemctl --user enable container-caddy-vishwambhar container-gitea-chitragupta container-gitea-govinda container-hugo-mahayogi container-hugo-vaikunthnatham container-nextcloud-chitragupta container-nextcloud-govinda container-nextcloud-karma container-transmission-raadhe
-```
-
----
-
-
-## Stage 0111: cron
-
-### user crontab
-
-```bash
-# a zfs scrub takes place on the first Friday of every month
-# this is done at 21:00 hours
-# so stop all containers before the scrub takes place
-# DON'T DO THIS THO
-#55 20 * * 5 [ $(date +\%d) -le 07 ] && systemctl --user stop container-caddy-vishwambhar container-gitea-chitragupta container-gitea-govinda container-hugo-mahayogi container-hugo-vaikunthnatham container-nextcloud-chitragupta container-nextcloud-govinda container-nextcloud-karma container-transmission-raadhe
-
-# maintenance script
-# [[ if zpool scrub is not running ]]
-#   -> [[ if containers are not running ]]
-#     -> start containers
-* * * * * bash /home/pratham/.scripts/cron/pratham/maintenance.sh
-```
-
-
-### root crontab
-
-```bash
-# update fs database every 6 hours
-* */6 * * * updatedb
-
-# create zfs snapshot of `nextcloud` volume every Friday
-0 0 * * 5 bash /home/pratham/.scripts/cron/root/zfs-bak.sh
-
-# start scrub
-# on the first Friday of every month
-# at 2100 hours
-0 21 * * 5 [ $(date +\%d) -le 07 ] && /sbin/zpool scrub
-
-# maintenance script
-#0 20 * * * bash /home/pratham/.scripts/cron/root/maintenance.sh
-```
diff --git a/content/posts/vidhyaa.md b/content/posts/vidhyaa.md
new file mode 100644
index 0000000..ad00676
--- /dev/null
+++ b/content/posts/vidhyaa.md
@@ -0,0 +1,51 @@
+---
+
+title: "Setup vidhyaa (Debian: Router)"
+date: 2022-07-23T08:00:00+05:30
+draft: false
+toc: true
+
+---
+
+
+### Networking setup
+
+#### DNS setup
+
+```bash
+NETWORK_CONNECTION=$(nmcli -g name,device connection show | grep 'enp\|eth' | cut -f1 -d":" | head -n 1)
+
+IPV4_DNS="1.1.1.2,1.0.0.2,8.8.8.8,8.8.4.4"
+MY_IPV4_ADDR="" # 192.168.1.1/27
+MY_IPV4_GTWY=""
+
+nmcli connection modify "${NETWORK_CONNECTION}" ipv4.addresses "${MY_IPV4_ADDR}"
+nmcli connection modify "${NETWORK_CONNECTION}" ipv4.dns "${IPV4_DNS}"
+nmcli connection modify "${NETWORK_CONNECTION}" ipv4.gateway "${MY_IPV4_GTWY"
+nmcli connection modify "${NETWORK_CONNECTION}" ipv4.ignore-auto-dns yes
+nmcli connection modify "${NETWORK_CONNECTION}" ipv4.method manual
+
+
+## OPTIONAL
+IPV6_DNS="2606:4700:4700:0:0:0:0:1112,2606:4700:4700:0:0:0:0:1002,2001:4860:4860:0:0:0:0:8888,2001:4860:4860:0:0:0:0:8844"
+MY_IPV6_ADDR=""
+MY_IPV6_GTWY=""
+
+nmcli connection modify "${NETWORK_CONNECTION}" ipv6.addresses "${IPV6_DNS}"
+nmcli connection modify "${NETWORK_CONNECTION}" ipv6.dns "${MY_IPV6_ADDR}"
+nmcli connection modify "${NETWORK_CONNECTION}" ipv6.gateway "${MY_IPV6_GTWY}"
+nmcli connection modify "${NETWORK_CONNECTION}" ipv6.ignore-auto-dns yes
+nmcli connection modify "${NETWORK_CONNECTION}" ipv6.method manual
+```
+
+
+### Reboot
+
+```bash
+systemctl reboot
+```
+
+---
+
+
+