thefossguy
/
machines
1
0
Fork 0
Code Releases Activity

Changes to be committed: 

modified:   content/posts/bluefeds.md

  - add steps for:
    - load wireguard module at boot
    - change motd (message of the day)
    - load zfs module at boot
    - pull lscr.io/linuxserver/transmission image

  - brought ZFS-{volumes,properties} steps in sync with fresh start and container related
  - finalized open TCP/UDP ports
  - removed steps related to wireguard setup
  - rename `transmission-vasuki` with `transmission-raadhe`
  - crontab: don't stop and start containers before and after taking ZFS {snapshots,scrub} respectively
This commit is contained in:
Pratham Patel 2022-08-20 13:22:23 +05:30
parent de0217e1ab
commit fa052d47ab
1 changed files with 43 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

81
content/posts/bluefeds.md
View File

@ -52,6 +52,20 @@ nmcli connection modify "$(nmcli -g name,device connection show | grep "eth0" |
``` ```
### Enable loading the Wireguard kernel module at boot.
```bash
echo "wireguard" | sudo tee /etc/modules-load.d/wireguard.conf
```
### Modify motd
```bash
echo "\n# added by PRATHAM\n/home/pratham/.scripts/motd/show_logs.sh" | sudo tee -a /etc/profile
```
### REBOOT! (hostname needs to come in effect) ### REBOOT! (hostname needs to come in effect)
```bash ```bash
@ -207,7 +221,8 @@ sh autogen.sh
make -j1 rpm-utils rpm-dkms make -j1 rpm-utils rpm-dkms
sudo yum localinstall *.$(uname -p).rpm *.noarch.rpm sudo yum localinstall *.$(uname -p).rpm *.noarch.rpm
sudo modprobe zfs
echo "zfs" | sudo tee /etc/modules-load.d/zfs.conf
``` ```
@ -248,7 +263,14 @@ sudo zfs create trayimurti/containers/volumes/gitea
sudo zfs create trayimurti/containers/volumes/mach sudo zfs create trayimurti/containers/volumes/mach
sudo zfs create trayimurti/containers/volumes/nextcloud sudo zfs create trayimurti/containers/volumes/nextcloud
sudo zfs create trayimurti/torrents
sudo zfs set recordsize=16K trayimurti/torrents
sudo zfs create trayimurti/torrents/downloads
sudo zfs create trayimurti/torrents/downloads/.incomplete
sudo zfs create trayimurti/torrents/config
sudo chown pratham:pratham -vR /trayimurti sudo chown pratham:pratham -vR /trayimurti
sudo chown pratham:pratham -vR /trayimurti/torrents
sudo zpool export trayimurti sudo zpool export trayimurti
@ -278,7 +300,7 @@ sudo reboot +0
### Open ports ### Open ports
```bash ```bash
sudo firewall-cmd --permanent --add-port=8080/tcp --add-port=8443/tcp --add-port=8010/tcp --add-port=8011/tcp --add-port=8020/tcp --add-port=8030/tcp --add-port=8040/tcp --add-port=8050/udp --add-port=8060/tcp --add-port=8061/tcp --add-port=8062/udp sudo firewall-cmd --permanent --add-port=8080/tcp --add-port=8443/tcp --add-port=8010/tcp --add-port=8011/tcp --add-port=8020/tcp --add-port=8030/tcp --add-port=8040/tcp --add-port=8050/tcp --add-port=8051/tcp --add-port=8052/udp
sudo firewall-cmd --reload sudo firewall-cmd --reload
sudo firewall-cmd --list-ports sudo firewall-cmd --list-ports
``` ```
@ -287,28 +309,36 @@ sudo firewall-cmd --list-ports
### Pull images ### Pull images
```bash ```bash
sleep 60 && podman pull lscr.io/linuxserver/transmission:latest
sleep 60 && podman pull docker.io/gitea/gitea:latest sleep 60 && podman pull docker.io/gitea/gitea:latest
sleep 60 && podman pull docker.io/klakegg/hugo:alpine sleep 60 && podman pull docker.io/klakegg/hugo:alpine
sleep 60 && podman pull docker.io/library/caddy:alpine sleep 60 && podman pull docker.io/library/caddy:alpine
sleep 60 && podman pull docker.io/library/nextcloud:production sleep 60 && podman pull docker.io/library/nextcloud:production
sleep 60 && podman pull docker.io/library/postgres:alpine sleep 60 && podman pull docker.io/library/postgres:alpine
sleep 60 && podman pull lscr.io/linuxserver/wireguard:latest
sleep 60 && podman pull lscr.io/linuxserver/transmission:latest
``` ```
### Get fs ready ### Get fs ready
```bash ```bash
sudo zfs set atime=off trayimurti
sudo zfs set primarycache=all trayimurti
sudo zfs set recordsize=1M trayimurti
sudo zfs set xattr=sa trayimurti
sudo zfs create trayimurti/containers
sudo zfs create trayimurti/containers/volumes
sudo zfs create trayimurti/containers/volumes/blog
sudo zfs create trayimurti/containers/volumes/caddy sudo zfs create trayimurti/containers/volumes/caddy
sudo zfs create trayimurti/containers/volumes/gitea sudo zfs create trayimurti/containers/volumes/gitea
sudo zfs create trayimurti/containers/volumes/blog
sudo zfs create trayimurti/containers/volumes/nextcloud
sudo zfs create trayimurti/containers/volumes/mach sudo zfs create trayimurti/containers/volumes/mach
sudo zfs create trayimurti/containers/volumes/wireguard sudo zfs create trayimurti/containers/volumes/nextcloud
sudo zfs create trayimurti/torrents sudo zfs create trayimurti/torrents
sudo zfs create trayimurti/torrents/.config sudo zfs set recordsize=16K trayimurti/torrents
sudo zfs create trayimurti/torrents/downloads
sudo zfs create trayimurti/torrents/downloads/.incomplete
sudo zfs create trayimurti/torrents/config
sudo chown pratham:pratham -vR /trayimurti/containers/volumes sudo chown pratham:pratham -vR /trayimurti/containers/volumes
sudo chown pratham:pratham -vR /trayimurti/torrents sudo chown pratham:pratham -vR /trayimurti/torrents
@ -356,14 +386,6 @@ cp -v Caddyfile /trayimurti/containers/volumes/caddy/
``` ```
### WireGuard
1. Log into your [ProtonVPN account](https://protonvpn.com/)
2. On the sidebar, go under `Downloads` > `WireGuard configuration` (or [click here](https://account.protonvpn.com/downloads#wireguard-configuration))
3. Write the config to `/trayimurti/containers/volumes/wireguard/wg0.conf`
### Generate container secrets for passwords ### Generate container secrets for passwords
```bash ```bash
@ -399,23 +421,11 @@ podman generate systemd -f --name hugo-vaikunthnatham --new
podman generate systemd -f --name nextcloud-chitragupta --new podman generate systemd -f --name nextcloud-chitragupta --new
podman generate systemd -f --name nextcloud-govinda --new podman generate systemd -f --name nextcloud-govinda --new
podman generate systemd -f --name nextcloud-karma --new podman generate systemd -f --name nextcloud-karma --new
podman generate systemd -f --name transmission-ketu --new podman generate systemd -f --name transmission-raadhe --new
podman generate systemd -f --name wireguard-rahu --new
systemctl --user daemon-reload systemctl --user daemon-reload
systemctl --user enable container-caddy-vishwambhar container-gitea-chitragupta container-gitea-govinda container-hugo-mahayogi container-hugo-vaikunthnatham container-nextcloud-chitragupta container-nextcloud-govinda container-nextcloud-karma container-transmission-ketu container-wireguard-rahu systemctl --user enable container-caddy-vishwambhar container-gitea-chitragupta container-gitea-govinda container-hugo-mahayogi container-hugo-vaikunthnatham container-nextcloud-chitragupta container-nextcloud-govinda container-nextcloud-karma container-transmission-raadhe
#systemctl --user enable container-caddy-vishwambhar
#systemctl --user enable container-gitea-chitragupta
#systemctl --user enable container-gitea-govinda
#systemctl --user enable container-hugo-mahayogi
#systemctl --user enable container-hugo-vaikunthnatham
#systemctl --user enable container-nextcloud-chitragupta
#systemctl --user enable container-nextcloud-govinda
#systemctl --user enable container-nextcloud-karma
#systemctl --user enable container-transmission-ketu
#systemctl --user enable container-wireguard-rahu
``` ```
--- ---
@ -426,16 +436,11 @@ systemctl --user enable container-caddy-vishwambhar container-gitea-chitragupta
### user crontab ### user crontab
```bash ```bash
# power down containers before a snapshot is taken on 00:00 Fridays
45 23 * * 4 systemctl --user stop container-caddy-vishwambhar container-gitea-chitragupta container-gitea-govinda container-hugo-mahayogi container-hugo-vaikunthnatham container-nextcloud-chitragupta container-nextcloud-govinda container-nextcloud-karma
# start containers after a snapshot is taken on 00:00 Fridays
10 00 * * 5 systemctl --user start container-caddy-vishwambhar container-gitea-chitragupta container-gitea-govinda container-hugo-mahayogi container-hugo-vaikunthnatham container-nextcloud-chitragupta container-nextcloud-govinda container-nextcloud-karma
# a zfs scrub takes place on the first Friday of every month # a zfs scrub takes place on the first Friday of every month
# this is done at 21:00 hours # this is done at 21:00 hours
# so stop all containers before the scrub takes place # so stop all containers before the scrub takes place
45 20 * * 5 [ $(date +\%d) -le 07 ] && systemctl --user stop container-caddy-vishwambhar container-gitea-chitragupta container-gitea-govinda container-hugo-mahayogi container-hugo-vaikunthnatham container-nextcloud-chitragupta container-nextcloud-govinda container-nextcloud-karma # DON'T DO THIS THO
#55 20 * * 5 [ $(date +\%d) -le 07 ] && systemctl --user stop container-caddy-vishwambhar container-gitea-chitragupta container-gitea-govinda container-hugo-mahayogi container-hugo-vaikunthnatham container-nextcloud-chitragupta container-nextcloud-govinda container-nextcloud-karma container-transmission-raadhe
# maintenance script # maintenance script
# [[ if zpool scrub is not running ]] # [[ if zpool scrub is not running ]]
@ -451,7 +456,7 @@ systemctl --user enable container-caddy-vishwambhar container-gitea-chitragupta
# update fs database every 6 hours # update fs database every 6 hours
* */6 * * * updatedb * */6 * * * updatedb
# create zfs snapshots every Friday # create zfs snapshot of `nextcloud` volume every Friday
0 0 * * 5 bash /home/pratham/.scripts/cron/root/zfs-bak.sh 0 0 * * 5 bash /home/pratham/.scripts/cron/root/zfs-bak.sh
# start scrub # start scrub