Certbot, DNS, and CloudFlare

Certbot on Arch Linux In this post, I cover how to configure Let’s Encrypt DNS challenge with DNS-01 challenge. Setup Install the following packages (certbot and CloudFlare plug-in): pacman -S certbot pacman -S certbot-dns-cloudflare Navigate to https://dash.cloudflare.com/profile/api-tokens and create API Token. Then preserve that token in local file: $ vi .secrets/certbot-cloudflare.ini # Cloudflare API token used by Certbot dns_cloudflare_api_token = <YOUR_TOKEN_HERE> To avoid seeing Unsafe permissions on credentials configuration file: /root/....

August 3, 2024 · 4 min · Bart Prokop

Site To Site VPN

Installation To install ZeroTier on OpenWRT, Execute the following from shell: opkg update opkg install zerotier restart You should see something similar to the below: Installing zerotier (1.12.2-2) to root... Downloading https://downloads.openwrt.org/releases/23.05.3/packages/mips_24kc/packages/zerotier_1.12.2-2_mips_24kc.ipk Installing libstdcpp6 (12.3.0-4) to root... Downloading https://downloads.openwrt.org/releases/23.05.3/targets/ath79/generic/packages/libstdcpp6_12.3.0-4_mips_24kc.ipk Installing kmod-tun (5.15.150-1) to root... Downloading https://downloads.openwrt.org/releases/23.05.3/targets/ath79/generic/packages/kmod-tun_5.15.150-1_mips_24kc.ipk Installing ip-tiny (6.3.0-1) to root... Downloading https://downloads.openwrt.org/releases/23.05.3/packages/mips_24kc/base/ip-tiny_6.3.0-1_mips_24kc.ipk Installing libminiupnpc (2.2.3-1) to root... Downloading https://downloads.openwrt.org/releases/23.05.3/packages/mips_24kc/packages/libminiupnpc_2.2.3-1_mips_24kc.ipk Installing libnatpmp1 (20150609-3) to root... Downloading https://downloads.openwrt.org/releases/23.05.3/packages/mips_24kc/packages/libnatpmp1_20150609-3_mips_24kc.ipk Installing libatomic1 (12.3.0-4) to root....

March 30, 2024 · 2 min · Bart Prokop

Migration of Unifi Controller

The needs This post describes how I’ve configured a Cloud Storage bucket to host a static assets (shared) for various websites across my domains. The aim is to have something like https://assets.prokop.dev to offer from single URL all assets, I might ever need to handle my WEB stuff. Using Google Cloud Storage The following is everything what was required to create fully operational, CDN powered, backed by object bucket asset distribution facility....

August 26, 2023 · 3 min · Bart Prokop

Static Web on Google Cloud

The needs This post describes how I’ve configured a Cloud Storage bucket to host a static assets (shared) for various websites across my domains. The aim is to have something like https://assets.prokop.dev to offer from single URL all assets, I might ever need to handle my WEB stuff. Using Google Cloud Storage The following is everything what was required to create fully operational, CDN powered, backed by object bucket asset distribution facility....

August 20, 2023 · 4 min · Bart Prokop

Kopia remote backup

I lease Kimsufi dedicated server. It has large enough HDD to use it as offsite backup. https://kopia.io/ is the new backup tool, I want to try out. Prerequisites Remote server I want a new kopia regular user account that will allow SFTP access and will be locked otherwise. The scponly pseudo-shell can be used to achieve that. sudo pacman -S scponly sudo useradd -m -s /usr/bin/scponly kopia sudo mkdir /home/kopia/.ssh sudo chown kopia:kopia /home/kopia/....

December 27, 2022 · 2 min · Bart Prokop