Da Nerd Mage Wiki - User contributions [en-gb]

A Tarduino example done properly

2022-01-03T21:49:34Z

Bart:

The Arduino programming language is a superset of C++.

C++ is a superset of C.

For some strange reason, the people who developed Arduino decided to eliminate a lot of the constraints of C & C++ that make the code maintainable.

Luckily, you can program in C or C++ using proper techniques & compilers for Arduino will not choke on your code.

= main.cpp =

<syntaxhighlight lang="cpp" line="1">
#include <Arduino.h> // Pretty much only here to giv us Serial Communications & delay()

#include "FooBar.h" // This header file lives in the src directory

void setup() {
// put your setup code here, to run once:
Serial.begin(115200);
Serial.println("Howdee!");
Serial.println();
delay(5000); // What a silly way to rape a microcontroller...
}

void loop() {
// put your main code here, to run repeatedly:
Function1();
delay(1000); // UGH...
Function2();
delay(1000); // UGH...
}
</syntaxhighlight>

(Let's not discuss the horror that is <code class="mwt-code" >delay()</code> for now. Maybe in another article...)

= FooBar.h =

<syntaxhighlight lang="cpp" line="1">
void Function1();

void Function2();
</syntaxhighlight>

= Function1.cpp =

<syntaxhighlight lang="c++" line="1">
#include <Arduino.h>

void Function1()
{
Serial.println("Hi Grant!");
}
</syntaxhighlight>

= Function2.cpp =

<syntaxhighlight lang="c++" line="1">
#include <Arduino.h>

void Function2()
{
Serial.println("I'm a microcontroller...");
}
</syntaxhighlight>

=platformio.ini=

(Coz I have this preference in IDEs...)

<syntaxhighlight lang="ini" line="1">
[env:uno]
platform = atmelavr
board = uno
framework = arduino
monitor_speed = 115200
</syntaxhighlight>

[[Category:Coding]]
[[Category:Arduino]]
[[Category:C Cpp]]
[[Category:PlatformIO]]

A Tarduino example done properly

2022-01-03T21:42:52Z

Bart:

The Arduino programming language is a superset of C++.

C++ is a superset of C.

For some strange reason, the people who developed Arduino decided to eliminate a lot of the constraints of C & C++ that make the code maintainable.

Luckily, you can program in C or C++ using proper techniques & compilers for Arduino will not choke on your code.

= main.cpp =

<syntaxhighlight lang="cpp" line="1">
#include <Arduino.h> // Pretty much only here to giv us Serial Communications & delay()

#include "FooBar.h" // This header file lives in the src directory

void setup() {
// put your setup code here, to run once:
Serial.begin(115200);
Serial.println("Howdee!");
Serial.println();
delay(5000); // What a silly way to rape a microcontroller...
}

void loop() {
// put your main code here, to run repeatedly:
Function1();
delay(1000); // UGH...
Function2();
delay(1000); // UGH...
}
</syntaxhighlight>

(Let's not discuss the horror that is <code class="mwt-code" >delay()</code> for now. Maybe in another article...)

= FooBar.h =

<syntaxhighlight lang="cpp" line="1">
void Function1();

void Function2();
</syntaxhighlight>

= Function1.cpp =

<syntaxhighlight lang="c++" line="1">
#include <Arduino.h>

void Function1()
{
Serial.println("Hi Grant!");
}
</syntaxhighlight>

= Function2.cpp =

<syntaxhighlight lang="c++" line="1">
#include <Arduino.h>

void Function2()
{
Serial.println("I'm a microcontroller...");
}
</syntaxhighlight>

=platformio.ini=

(Coz I have this preference in IDEs...)

<syntaxhighlight lang="ini" line="1">
[env:uno]
platform = atmelavr
board = uno
framework = arduino
monitor_speed = 115200
</syntaxhighlight>

[[Category:Arduino]]
[[Category:C Cpp]]
[[Category:PlatformIO]]

A Tarduino example done properly

2022-01-03T21:17:46Z

Bart:

How internet addressing really works

2022-01-03T21:14:31Z

Bart:

(This is a very rough draft...)

There're 2 ways to get to a machine.

IP address & name.

But to use name, you need to have DNS set up.

Either way, there's also the port.

The port is specific to the actual service on the machine.

i.e.: port 80 is HTTP, port 443 is HTTPS, port 22 is SSH...

When your entire network is on a single address as far as the outside world is concerned, you have a couple options to access individual machines.

== Port Forwarding ==

You can forward specific ports to specific machines (probably with a bit of fiddling in Firewall/NAT on your pfSense box...) or you can set up proxies.

Port forwarding is pretty straightforward, but you need to remember how you've set up the ports.

A good example of how this can work is my general habit of forwarding a port outside the range of [https://www.webopedia.com/quick_ref/portnumbers.asp Well-Known TCP Ports] to SSH on any of my internal machines that I may want to access while away from my own network.

As an example, I have a machine on my network at 192.168.0.99 (Not an address accessible to the outside world) & I'd like access to it while away. I go into Firewall/NAT on my pfSense box & forward port 52099 to this address & translate the port number to 22 (SSH). This gives me the ability to SSH into the machine pretty much anywhere I may be as long as I have internet access.

You can do the same for any service. You could port 52080 to an internal machine at port 80 (http), but you'll have to remember to add <code>:52080</code> to the machine name or IP address when accessing it from outside. (i.e.: <code>http://my.domain.net:52080/</code>)

== Proxies ==

Generally, when speaking of proxies, we're talking about web browser access.

(Not always tho... But that's a deeper discussion.)

Web proxies are handled by your main web server. Take a look at [[SBN - Proxy Server Notes|Proxy Server Notes]] for some useful details on how this works.

[[Category:Network Management]]
[[Category:Knowledge]]
[[Category:WIP]]

SSL Certs

2022-01-03T20:59:22Z

Bart:

== On an Apache based server ==
From /usr/share/doc/apache2/README.Debian.gz

=== Enabling SSL ===
To enable SSL, type:

*<code>sudo a2ensite default-ssl</code>
*<code>sudo a2enmod ssl</code>
If you want to use self-signed certificates, you should install the ssl-cert package (see below). Otherwise, just adjust the SSLCertificateKeyFile and SSLCertificateFile directives in '/etc/apache2/sites-available/default-ssl.conf' to point to your SSL certificate. Then restart apache:

*<code>sudo systemctl restart apache2</code>
The SSL key file should only be readable by root; the certificate file may be globally readable. These files are read by the Apache parent process which runs as root, and it is therefore not necessary to make the files readable by the www-data user.

==== Getting proper certificates onto the machine ====
Sadly...

Between the time I wrote this up on the [https://wiki.tinkernet.ca/ TinkerNet Wiki] and now, [https://letsencrypt.org/ Let's Encrypt] has drastically changed things and [https://certbot.eff.org/ certbot] is now only supported if you want to deal with snapd...

Give me time & I'll work out new instructions.

For now...  The old version is still on [[TinkerWiki:NetMan - SSL Certs#Getting proper certificates onto the machine{{!}}the TinkerNet Wiki]].

[[Category:Network Management]]
[[Category:WebServers]]

IT Stuff

2022-01-03T20:58:44Z

Bart:

= Network Management =

*[[pfSense{{!}}pfSense]]
*[[Dynamic DNS{{!}}Dynamic DNS]]
*[[SSL Certs{{!}}SSL Certs]]
*[[NetMan - VPN{{!}}VPN]]
*[[nmap{{!}}nmap]]

NetMan - SSL Certs

2022-01-03T20:58:14Z

Bart: Bart moved page NetMan - SSL Certs to SSL Certs: Cleanup

#REDIRECT [[SSL Certs]]

SSL Certs

2022-01-03T20:58:14Z

Bart: Bart moved page NetMan - SSL Certs to SSL Certs: Cleanup

Nmap

2022-01-03T20:57:00Z

Bart:

*[https://nmap.org/book/man.html Nmap Reference Guide]

== Some useful nmap scans ==

=== Using nmap to inventory a network ===
The following command with ''nmap'' with ''root'' privilegies (or using ''sudo''):

*<code>sudo nmap -n -sP 192.168.0.0/24 {{!}} awk '/Nmap scan report/{printf $5;printf "\t";printf $6;printf "\t";getline;getline;print $3;}' {{!}} awk '{printf $2;printf " ---> ";printf $1;printf "\n";}'</code>
results in:

00:10:18:5D:B0:10 ---> 192.168.0.1
28:C6:8E:F9:B8:BF ---> 192.168.0.2
28:C6:8E:29:9D:30 ---> 192.168.0.3
...
(Good luck typing that in by hand...)

Want DNS?:

*<code>sudo nmap -sP 192.168.0.0/24 {{!}} awk '/Nmap scan report/{printf $5;printf "\t";printf $6;printf "\t";getline;getline;print $3;}' {{!}} awk '{printf $3;printf " ---> ";printf $1;printf "\n";}'</code>
results in:

00:10:18:5D:B0:10 ---> zathras.tinkernow.net
28:C6:8E:F9:B8:BF ---> switcha.tinkernow.net
28:C6:8E:29:9D:30 ---> wap1.tinkernow.net
...
or both name & address?:

*<code>sudo nmap -sP 192.168.0.0/24 {{!}} awk '/Nmap scan report/{printf $5;printf "\t";printf $6;printf "\t";getline;getline;print $3;}' {{!}} awk '{printf $3;printf " ---> ";printf $2;printf "\t";printf $1;printf "\n";}'</code>
results in:

00:10:18:5D:B0:10 ---> (192.168.0.1) zathras.tinkernow.net
28:C6:8E:F9:B8:BF ---> (192.168.0.2) switcha.tinkernow.net
28:C6:8E:29:9D:30 ---> (192.168.0.3) wap1.tinkernow.net
...
But, for some reason, lack of a name causes odd formatting. And, nmap seems to fail to give the mac address of the machine doing the scan.

[[Category:Network Management]]

NetMan - nmap

2022-01-03T20:56:32Z

Bart: Bart moved page NetMan - nmap to Nmap

#REDIRECT [[Nmap]]

Nmap

2022-01-03T20:56:32Z

Bart: Bart moved page NetMan - nmap to Nmap

IT Stuff

2022-01-03T20:56:20Z

Bart: /* Network Management */

= Network Management =

*[[pfSense{{!}}pfSense]]
*[[Dynamic DNS{{!}}Dynamic DNS]]
*[[NetMan - SSL Certs{{!}}SSL Certs]]
*[[NetMan - VPN{{!}}VPN]]
*[[nmap{{!}}nmap]]

Dynamic DNS

2022-01-03T20:54:45Z

Bart:

= Using [http://afraid.org afraid.org] for dynamic DNS. =
== Dynamic DNS & pfSense ==

Configuring pfSense to use it properly seems to be a mystery to the internet at large as the findable instructions are always wrong.

Here goes a (hopefully) clear attempt:

#Go to afraid.org & register
#Pick & register a subdomain
#go here: http://freedns.afraid.org/dynamic/
#right-click the "Direct URL" button next to the subdomain you're going to use & '''Copy link address'''
#Paste the URL into a text editor & remove everything up and including '''"/update.php?"'''
#*What's left will be your "password" to be entered into pfSense
#Log into your pfSense server & select Services / Dynamic DNS
#click the ADD button
#In the "Service Type" box, select "freeDNS"
#check that "Interface to monitor" is "WAN"
#enter the subdomain you chose at afraid.org in the "Hostname" box
#*i.e.:  "tinker.farted.net"
#Empty the "Username" box
#Paste the "password" created in step 5 above in the "Password" box
#Paste the "password" created in step 5 above in the "Confirm" box
#Type in a description if you like
#Click "Save"
#Enjoy

[[Category:Network Management]]
[[Category:pfSense]]

IT Stuff

2022-01-03T20:53:39Z

Bart: /* Network Management */

= Network Management =

*[[pfSense{{!}}pfSense]]
*[[Dynamic DNS{{!}}Dynamic DNS]]
*[[NetMan - SSL Certs{{!}}SSL Certs]]
*[[NetMan - VPN{{!}}VPN]]
*[[NetMan - nmap{{!}}nmap]]

NetMan - Dynamic DNS

2022-01-03T20:53:10Z

Bart: Bart moved page NetMan - Dynamic DNS to Dynamic DNS: Cleanup

#REDIRECT [[Dynamic DNS]]

Dynamic DNS

2022-01-03T20:53:10Z

Bart: Bart moved page NetMan - Dynamic DNS to Dynamic DNS: Cleanup

PfSense

2022-01-03T20:52:22Z

Bart: /* All the fancy stuff */

= Download pfSense =
[https://www.pfsense.org/ Where to get it]

[[File:Screenshot from 2020-06-08 14-31-42.png{{!}}256px{{!}}Screenshot from 2020-06-08 14-31-42.png{{!}}alt="Aaarrrggg!"{{!}}right]]

See that nifty screencap over there on the right?

Look at it again.

'''<big>It's important... </big>'''

== Stuff it onto a thumbdrive ==

(really should create command-line instructions for this part)

If working from a Linux Mint machine GUI, right-click & extract the .gz file. Then right-click the resulting .img file & select "Make bootable USB stick".

If working from one of those crappy Windows machines, use Rufus...

If you're playing with a Mac... Yer on yer own for now.

= Configure the Hardware =

You'll want either a dual NIC or 2 (or more...) NICs.

A hard drive (or SSD) could come in rather handy...

= Install pfSense =

*Boot your machine from the thumbdrive. (UEFI is just fine...)
*Accept the copyright.
*Select "Install"
*Select "Continue with default keymap" (or, really, any keymap you like...)
*Select "Auto (UFS)
*Choose your disk for the install
**I'd suggest only having one disk in the machine...
*Select "Entire Disk
**Yes... Proceed.
*Select GPT (GUID Partition Table)
*Hit "Finish"
*Hit "Commit"
*Watch the pretty progress screens... (Or ignore it until it's done... Your choice...)
*When you see the "Manual Configuration" screen, Hit "No"
*Hit "Reboot"
*Go back & configure the machine to actually boot from the drive you installed pfSense onto...

= Initial Configuration of pfSense =

On first boot, pfSense will ask "Should VLANs be set up now [y{{!}}n]?"

Don't bother...

*Select your WAN interface
**bce0 on this test machine (T310)
*Select your LAN interface
**bce1 on this test machine (T310)
*Verify they're selected properly & say yes.
*Watch all the "done" messages scroll by (or not... again, your choice...)
After a moment or 3, you'll see the console menu.

*** Welcome to pfSense 2.4.5-RELEASE (amd64) on pfSense ***
WAN (wan) -> bce0 -> v4/DHCP4: 192.168.0.26/24
LAN (lan) -> bce1 -> v4: 192.168.1.1/24

0) Logout (SSH only) 9) pfTop
1) Assign Interfaces 10) Filter Logs
2) Set interface(s) IP address 11) Restart webConfigurator
3) Reset webConfigurator password 12) PHP shell + pfSense tools
4) Reset to factory defaults 13) Update from console
5) Reboot system 14) Enable Secure Shell (sshd)
6) Halt system 15) Restore recent configuration
7) Ping Host 16) Restart PHP-FPM
8) Shell

Enter an option:
'''It's ALIVE!!!'''

= Configuring pfSense from here... =
At this point, you should be able to connect to the LAN port & point a web browser at 192.168.1.1

This is the Web-UI...

Default login is:

*Username: admin
*Password: pfsense
'''Change this. Do it NOW!'''

If you have the WAN port connected to the Internet, you should actually be capable of accessing the outside world right now.

[[pfSense - Menu Structure{{!}}Menu Structure]]

=== All the fancy stuff ===
(Coming soonTM... PromiseTM...)

*[[Dynamic DNS{{!}}Configuring Dynamic DNS]]
*[[PfSense - Managing DHCP{{!}}Managing DHCP]]
*[[PfSense - Managing NAT on the firewall{{!}}Managing NAT on the firewall]]
*[[PfSense - Multi-Wan Configuration{{!}}Multi-Wan Configuration]]
*[[PfSense - Private VPN{{!}}Private VPN]]
*[[PfSense - Crap-Stopping with pfBlockerNG{{!}}Crap-Stopping with pfBlockerNG]]
*[[PfSense - Etc...{{!}}etc...]]

= Troubleshooting & Repair =

== Clearing the DNS Forwarder Cache ==
[https://docs.netgate.com/pfsense/en/latest/dns/clearing-the-dns-forwarder-cache.html Source]

To clear the DNS Forwarder cache, restart the dnsmasq daemon as follows:

Click '''Status / Services'''

Find '''dnsmasq''' in the list

Click [[File:Fa-repeat.png]], or stop the service using [[File:Fa-stop-circle.png]] then start again with [[File:Fa-play-circle.png]].

Restarting the daemon will clear the internal cache, but the client PCs may still have cached entries.

== Flushing the ARP Cache ==
Click '''Diagnostics / Command Prompt'''

<code>arp -d -a</code>

= Port Forwarding =

*[https://www.netgate.com/docs/pfsense/nat/forwarding-ports-with-pfsense.html Forwarding Ports with pfSense]
*[https://forum.netgate.com/topic/50236/port-forwarding-step-by-step-demystified-pfsense-2-solved Port Forwarding - Step-by-Step - Demystified - pfSense 2 [SOLVED]]
*[https://www.yougetsignal.com/tools/open-ports/ Open Port Check Tool]
*[https://community.spiceworks.com/topic/1978690-what-am-i-missing-on-setting-this-port-forward-for-rdp-on-pfsense What am I missing on setting this port forward for RDP on pfSense?]

== Connecting to the VPN machine through the firewall ==

*'''SEARCH:''' [https://www.google.com/search?q=bind+vnc+to+network+interface bind vnc to network interface]

= Notes & Tips =

== If you want to be able to ping your network from the outside, Go into Firewall / Rules / WAN & create a rule to allow ICMP. ==
[[File:PfSense-ICMP-rule.png{{!}}left{{!}}thumb]]
<div style="clear: both"></div>

== To adjust the size of your subnet on the internal LAN connections: ==

*Select '''Interfaces / LANx'''
*Under '''Static IPv4 Configuration''', change the [https://techterms.com/definition/subnet_mask subnet mask][[File:PfSense - Subnet Mask.png{{!}}frameless]] (probably from the default '''/24''')
**Just a note, pfSense uses [https://docs.netgate.com/pfsense/en/latest/book/network/understanding-cidr-subnet-mask-notation.html CIDR Subnet Mask Notation]
Here's a handy [https://www.freecodecamp.org/news/subnet-cheat-sheet-24-subnet-mask-30-26-27-29-and-other-ip-address-cidr-network-references/ Subnet Cheat Sheet]

= Some Links =

*Some rather good tutorials at [https://blog.monstermuffin.org/ Muffin's Lab]:
**[https://blog.monstermuffin.org/pfsense-guide-nat-firewall-rules-networking-101/ pfSense: A Guide to NAT, Firewall Rules and some Networking 101]
**[https://blog.monstermuffin.org/tunneling-specific-traffic-over-a-vpn-with-pfsense/ Tunneling Specific Traffic over a VPN with pfSense]
**[https://blog.monstermuffin.org/create-an-ipsec-site-to-site-tunnel-between-two-pfsense-firewalls/ Create an IPSEC Site to Site tunnel between two PfSense firewalls]
*[https://doc.pfsense.org/index.php/Installing_pfSense Installing pfSense]
*[https://www.youtube.com/watch?v=ledv33t6SNE Build a Router 2016 Q4 - pfSense Build]
*[https://www.youtube.com/watch?v=8jYibgeAV0Y Whole-network VPN with pfSense Router]
*[https://www.youtube.com/watch?v=bkWJ8Cmn03I pfSense: How to Setup in DataCenter on VM-ware ESXi (Morton Hjorth)]

[[Category:Network Management]]
[[Category:pfSense]]
[[Category:ServerBuilding]]

PfSense - Menu Structure

2022-01-03T20:44:42Z

Bart:

This is a WIP...
=== System ===

==== Advanced ====
===== Admin Access =====
===== Firewall & NAT =====
===== Networking =====
===== Miscellaneous =====
===== System Tunables =====
===== Notifications =====

==== Cert. Manager ====
===== CAs =====
===== Certificates =====
===== Certificate Revocation =====

==== General Setup ====
==== High Avail. Sync ====
==== Logout (admin) ====
==== Package Manager ====
===== Installed Packages =====
===== Available Packages =====

==== Routing ====
===== Gateways =====
===== Static Routes =====
===== Gateway Groups =====

==== Setup Wizard ====
==== Update ====
===== System Update =====
===== Update Settings =====

==== User Manager ====
===== Users =====
===== Groups =====
===== Settings =====
===== Authentication Servers =====

=== Interfaces ===
==== Assignments ====
===== Interface Assignments =====
===== Interface Groups =====
===== Wireless =====
===== VLANs =====
===== QinQs =====
===== PPPs =====
===== GREs =====
===== GIFs =====
===== Bridges =====
===== LAGGs =====

==== WAN ====
==== LAN ====

=== Firewall ===
==== Aliases ====
===== IP =====
===== Ports =====
===== URLs =====
===== All =====

==== NAT ====
===== Port Forward =====
===== 1:1 =====
===== Outbound =====
===== NPt =====

==== Rules ====
===== Floating =====
===== WAN =====
===== LAN =====

==== Schedules ====
==== Traffic Shaper ====
===== By Interface =====
===== By Queue =====
===== Limiters =====
===== Wizards =====

==== Virtual IPs ====

=== Services ===
==== Auto Config Backup ====
===== Settings =====
===== Restore =====
===== Backup now =====

==== Captive Portal ====
==== DHCP Relay ====
==== DHCP Server ====
===== LAN =====
====== DHCP Static Mappings for this Interface ======

==== DHCPv6 Relay ====
==== DHCPv6 Server & RA ====
==== DNS Forwarder ====
===== Host Overrides =====

==== DNS Resolver ====
===== General Settings =====
===== Advanced Settings =====
===== Access Lists =====

==== Dynamic DNS ====
===== Dynamic DNS Clients =====
===== RFC 2136 Clients =====
===== Check IP Services =====

==== IGMP Proxy ====
==== Load Balancer ====
===== Pools =====
===== Virtual Servers =====
===== Monitors =====
===== Settings =====

==== NTP ====
==== PPPoE Server ====
==== SNMP ====
==== UPnP & NAT-PMP ====
==== UPS ====
==== Wake-on-LAN ====

=== VPN ===
==== IPsec ====
==== L2TP ====
==== OpenVPN ====

=== Status ===
==== Captive Portal ====
==== CARP (failover) ====
==== Dashboard ====
==== DHCP Leases ====
==== DHCPv6 Leases ====
==== DNS Resolver ====
==== Filter Reload ====
==== Gateways ====
==== Interfaces ====
==== IPsec ====
==== Load Balancer ====
==== Monitoring ====
==== NTP ====
==== OpenVPN ====
==== Package Logs ====
==== Queues ====
==== Services ====
==== System Logs ====
==== Traffic Graph ====
==== PUnP & NAT-PMP ====

=== Diagnostics ===
==== ARP Table ====
==== Authentication ====
==== Backup & Restore ====
==== Command Prompt ====
==== DNS Lookup ====
==== Edit File ====
==== Factory Defaults ====
==== Halt System ====
==== Limiter Info ====
==== NDP Table ====
==== Packet Capture ====
==== pfInfo ====
==== pfTop ====
==== Ping ====
==== Reboot ====
==== Routes ====
==== S.M.A.R.T. Status ====
==== Sockets ====
==== States ====
==== States Summary ====
==== Tables ====
==== Test Port ====
==== Traceroute ====

=== Help ===
==== About this Page ====
==== Bug Database ====
==== Documentation ====
==== FreeBSD Handbook ====
==== Paid Support ====
==== pfSense Book ====
==== User Forum ====
==== User survey ====

[[Category:pfSense]]
[[Category:WIP]]

PfSense

2022-01-03T20:43:32Z

Bart:

= Download pfSense =
[https://www.pfsense.org/ Where to get it]

[[File:Screenshot from 2020-06-08 14-31-42.png{{!}}256px{{!}}Screenshot from 2020-06-08 14-31-42.png{{!}}alt="Aaarrrggg!"{{!}}right]]

See that nifty screencap over there on the right?

Look at it again.

'''<big>It's important... </big>'''

== Stuff it onto a thumbdrive ==

(really should create command-line instructions for this part)

If working from a Linux Mint machine GUI, right-click & extract the .gz file. Then right-click the resulting .img file & select "Make bootable USB stick".

If working from one of those crappy Windows machines, use Rufus...

If you're playing with a Mac... Yer on yer own for now.

= Configure the Hardware =

You'll want either a dual NIC or 2 (or more...) NICs.

A hard drive (or SSD) could come in rather handy...

= Install pfSense =

*Boot your machine from the thumbdrive. (UEFI is just fine...)
*Accept the copyright.
*Select "Install"
*Select "Continue with default keymap" (or, really, any keymap you like...)
*Select "Auto (UFS)
*Choose your disk for the install
**I'd suggest only having one disk in the machine...
*Select "Entire Disk
**Yes... Proceed.
*Select GPT (GUID Partition Table)
*Hit "Finish"
*Hit "Commit"
*Watch the pretty progress screens... (Or ignore it until it's done... Your choice...)
*When you see the "Manual Configuration" screen, Hit "No"
*Hit "Reboot"
*Go back & configure the machine to actually boot from the drive you installed pfSense onto...

= Initial Configuration of pfSense =

On first boot, pfSense will ask "Should VLANs be set up now [y{{!}}n]?"

Don't bother...

*Select your WAN interface
**bce0 on this test machine (T310)
*Select your LAN interface
**bce1 on this test machine (T310)
*Verify they're selected properly & say yes.
*Watch all the "done" messages scroll by (or not... again, your choice...)
After a moment or 3, you'll see the console menu.

*** Welcome to pfSense 2.4.5-RELEASE (amd64) on pfSense ***
WAN (wan) -> bce0 -> v4/DHCP4: 192.168.0.26/24
LAN (lan) -> bce1 -> v4: 192.168.1.1/24

0) Logout (SSH only) 9) pfTop
1) Assign Interfaces 10) Filter Logs
2) Set interface(s) IP address 11) Restart webConfigurator
3) Reset webConfigurator password 12) PHP shell + pfSense tools
4) Reset to factory defaults 13) Update from console
5) Reboot system 14) Enable Secure Shell (sshd)
6) Halt system 15) Restore recent configuration
7) Ping Host 16) Restart PHP-FPM
8) Shell

Enter an option:
'''It's ALIVE!!!'''

= Configuring pfSense from here... =
At this point, you should be able to connect to the LAN port & point a web browser at 192.168.1.1

This is the Web-UI...

Default login is:

*Username: admin
*Password: pfsense
'''Change this. Do it NOW!'''

If you have the WAN port connected to the Internet, you should actually be capable of accessing the outside world right now.

[[pfSense - Menu Structure{{!}}Menu Structure]]

=== All the fancy stuff ===
(Coming soonTM... PromiseTM...)

*[[NetMan - Dynamic DNS{{!}}Configuring Dynamic DNS]]
*[[PfSense - Managing DHCP{{!}}Managing DHCP]]
*[[PfSense - Managing NAT on the firewall{{!}}Managing NAT on the firewall]]
*[[PfSense - Multi-Wan Configuration{{!}}Multi-Wan Configuration]]
*[[PfSense - Private VPN{{!}}Private VPN]]
*[[PfSense - Crap-Stopping with pfBlockerNG{{!}}Crap-Stopping with pfBlockerNG]]
*[[PfSense - Etc...{{!}}etc...]]

= Troubleshooting & Repair =

== Clearing the DNS Forwarder Cache ==
[https://docs.netgate.com/pfsense/en/latest/dns/clearing-the-dns-forwarder-cache.html Source]

To clear the DNS Forwarder cache, restart the dnsmasq daemon as follows:

Click '''Status / Services'''

Find '''dnsmasq''' in the list

Click [[File:Fa-repeat.png]], or stop the service using [[File:Fa-stop-circle.png]] then start again with [[File:Fa-play-circle.png]].

Restarting the daemon will clear the internal cache, but the client PCs may still have cached entries.

== Flushing the ARP Cache ==
Click '''Diagnostics / Command Prompt'''

<code>arp -d -a</code>

= Port Forwarding =

*[https://www.netgate.com/docs/pfsense/nat/forwarding-ports-with-pfsense.html Forwarding Ports with pfSense]
*[https://forum.netgate.com/topic/50236/port-forwarding-step-by-step-demystified-pfsense-2-solved Port Forwarding - Step-by-Step - Demystified - pfSense 2 [SOLVED]]
*[https://www.yougetsignal.com/tools/open-ports/ Open Port Check Tool]
*[https://community.spiceworks.com/topic/1978690-what-am-i-missing-on-setting-this-port-forward-for-rdp-on-pfsense What am I missing on setting this port forward for RDP on pfSense?]

== Connecting to the VPN machine through the firewall ==

*'''SEARCH:''' [https://www.google.com/search?q=bind+vnc+to+network+interface bind vnc to network interface]

= Notes & Tips =

== If you want to be able to ping your network from the outside, Go into Firewall / Rules / WAN & create a rule to allow ICMP. ==
[[File:PfSense-ICMP-rule.png{{!}}left{{!}}thumb]]
<div style="clear: both"></div>

== To adjust the size of your subnet on the internal LAN connections: ==

*Select '''Interfaces / LANx'''
*Under '''Static IPv4 Configuration''', change the [https://techterms.com/definition/subnet_mask subnet mask][[File:PfSense - Subnet Mask.png{{!}}frameless]] (probably from the default '''/24''')
**Just a note, pfSense uses [https://docs.netgate.com/pfsense/en/latest/book/network/understanding-cidr-subnet-mask-notation.html CIDR Subnet Mask Notation]
Here's a handy [https://www.freecodecamp.org/news/subnet-cheat-sheet-24-subnet-mask-30-26-27-29-and-other-ip-address-cidr-network-references/ Subnet Cheat Sheet]

= Some Links =

*Some rather good tutorials at [https://blog.monstermuffin.org/ Muffin's Lab]:
**[https://blog.monstermuffin.org/pfsense-guide-nat-firewall-rules-networking-101/ pfSense: A Guide to NAT, Firewall Rules and some Networking 101]
**[https://blog.monstermuffin.org/tunneling-specific-traffic-over-a-vpn-with-pfsense/ Tunneling Specific Traffic over a VPN with pfSense]
**[https://blog.monstermuffin.org/create-an-ipsec-site-to-site-tunnel-between-two-pfsense-firewalls/ Create an IPSEC Site to Site tunnel between two PfSense firewalls]
*[https://doc.pfsense.org/index.php/Installing_pfSense Installing pfSense]
*[https://www.youtube.com/watch?v=ledv33t6SNE Build a Router 2016 Q4 - pfSense Build]
*[https://www.youtube.com/watch?v=8jYibgeAV0Y Whole-network VPN with pfSense Router]
*[https://www.youtube.com/watch?v=bkWJ8Cmn03I pfSense: How to Setup in DataCenter on VM-ware ESXi (Morton Hjorth)]

[[Category:Network Management]]
[[Category:pfSense]]
[[Category:ServerBuilding]]

Passwordless SSH

2022-01-03T20:30:16Z

Bart:

== For Linux ==
This needs to be done on the machine you will be SSHing '''FROM'''.

*<code>ssh-keygen -t rsa</code>
*<code>cat ~/.ssh/id_rsa.pub {{!}} ssh USER@OTHERLINUXBOX 'cat >> ~/.ssh/authorized_keys'</code>
It is possible that <code>~/.ssh</code> does not yet exist on the target machine. If so, you'll need to create it:

*<code>ssh USER@OTHERLINUXBOX 'mkdir ~/.ssh'</code>

== For ESXi ==
These instructions assume 2 ESXi servers: ESXi0 & ESXi1

Both of these servers have a datastore named '''Admin''' for Administrative stuff and a Folder named '''Utilities''' for storing useful things.

You will need '''SSH client''' enabled in the built-in firewall on your ESXi hosts.

*Allowing SSH & SCP between ESXi Hosts
**SSH Client must be enabled in the ESXi firewall (for the outbound connection)
**[https://4sysops.com/archives/how-to-open-and-close-firewall-ports-on-vmware-esxi-hosts/ How to Open and Close Firewall Ports on vmWare ESXi Hosts]

=== ESXi to ESXi ===
Source: [https://cormachogan.com/2016/04/13/ssh-esxi-hosts-without-providing-password/ How to SSH between ESXi 6.0U2 hosts without providing a password]

The following 2 sections are basically lists of Copy-Pasta commands for each server.

==== ESXi0 ====

*If it doesn't exist yet, create the Utilities folder:
**<code>mkdir /vmfs/volumes/Admin/Utilities</code>
*<code>mkdir /vmfs/volumes/Admin/Utilities/ssl</code>
*<code>mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi1</code>
*<code>mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi1/keys</code>
*<code>mkdir /.ssh</code>
*<code>cd /.ssh</code>
*<code>/usr/lib/vmware/openssh/bin/ssh-keygen -t rsa -b 4096</code>
**'''Just accept the defaults'''
*<code>cat id_rsa.pub {{!}} ssh root@ESXi1 'cat >> /etc/ssh/keys-root/authorized_keys'</code>
*<code>cp /.ssh/* /vmfs/volumes/Admin/Utilities/ssl/ESXi1/keys</code>
*<code>vi /etc/rc.local.d/local.sh</code>
mkdir /.ssh
cp /vmfs/volumes/Admin/Utilities/ssl/ESXi1/keys/* /.ssh

==== ESXi1 ====

*If it doesn't exist yet, create the Utilities folder:
**<code>mkdir /vmfs/volumes/Admin/Utilities</code>
*<code>mkdir /vmfs/volumes/Admin/Utilities/ssl</code>
*<code>mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi0</code>
*<code>mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi0/keys</code>
*<code>mkdir /.ssh</code>
*<code>cd /.ssh</code>
*<code>/usr/lib/vmware/openssh/bin/ssh-keygen -t rsa -b 4096</code>
**'''Just accept the defaults'''
*<code>cat id_rsa.pub {{!}} ssh root@ESXi0 'cat >> /etc/ssh/keys-root/authorized_keys'</code>
*<code>cp /.ssh/* /vmfs/volumes/Admin/Utilities/ssl/ESXi0/keys</code>
*<code>vi /etc/rc.local.d/local.sh</code>
mkdir /.ssh
cp /vmfs/volumes/Admin/Utilities/ssl/ESXi0/keys/* /.ssh

==== On Both Servers ====

*<code>chmod +t /etc/ssh/keys-root/authorized_keys</code>
*<code>vi /etc/ssh/sshd_config</code>
*(Ensure the following items are in the file)
PermitRootLogin yes
UsePAM yes
# only use PAM challenge-response (keyboard-interactive)
PasswordAuthentication no
*<code>/etc/init.d/SSH restart</code>
*<code>/sbin/auto-backup.sh</code>
At this point, you should be able to SSH from one to the other without needing to enter a password.

==== Troubleshooting SSH on ESXi ====
If you get "ssh: connect to host WHATEVER port 22: Connection timed out" when trying to SSH from an ESXi host, double check the configuration of '''SSH Client''' in the servers '''Firewall Rules'''.

=== ESXi to Linux ===
Assuming you've already created your keyes using <code>ssh-keygen</code> in [[#ESXi to ESXi{{!}}ESXi to ESXi]]

*<code>cat /.ssh/id_rsa.pub {{!}} ssh USER@LINUXBOX 'cat >> ~/.ssh/authorized_keys'</code>
It is possible that <code>~/.ssh</code> does not yet exist on the target machine. If so, you'll need to create it:

*<code>ssh USER@LINUXBOX 'mkdir ~/.ssh'</code>

=== Linux to ESXi ===
Assuming you've already created the directory structure in [[#ESXi to ESXi{{!}}ESXi to ESXi]]

*<code>ssh-keygen -t rsa</code>
*<code>cat ~/.ssh/id_rsa.pub {{!}} ssh root@ESXi0 'cat >> /etc/ssh/keys-root/authorized_keys'</code>
*<code>ssh root@esxi0 "/sbin/auto-backup.sh"</code>

=== Bonus Thoughts... ===
I can't see any reason these instructions couldn't be used to provide passwordless SSH to a remote ESXi server with a weird port number for SSH... ''('''HINT:''' Works just fine...)''

& since SCP runs over SSH...

Could be used for automatically copying backups to/from an offsite server...

hhhmmm...

[[Category:Linux]]
[[Category:ESXi]]
[[Category:LinuxTools]]

HowTo - cron

2022-01-03T20:28:26Z

Bart:

'''cron''' is a background process (a [[Linux - daemon|daemon]]) that wakes up every minute & checks '''crontab''' files for tasks to run. These files might belong to '''[[Linux - root|root]]''' or to individual user accounts on the machine.

=The crontab file=
For details about how to create crontab entries, see:

*<code>man 5 crontab</code>
*[https://community.linuxmint.com/tutorial/view/1072 Crontab Syntax Tutorial]

==Editing your personal crontab file:==

*<code>crontab -e</code>

==Editing the root crontab file:==

*<code>sudo crontab -e</code>

=starting/stopping/restarting=

*<code>sudo service cron start</code>
*<code>sudo service cron stop</code>
*<code>sudo service cron restart</code>

=logs=
cron logs are rolled into syslog

*<code>grep CRON /var/log/syslog</code>

[[Category:Linux]]
[[Category:LinuxTools]]

HowTo - ssh

2022-01-03T20:27:11Z

Bart:

[https://www.rootusers.com/enable-ssh-linux-mint/ How To Enable SSH in Linux Mint]

[[Passwordless SSH]]

= Using SSH to get stuff done =
== Make it easier to connect ==
Don't use password authentication. Use [https://www.ssh.com/academy/ssh/public-key-authentication Public Key Authentication].

*<code>ssh-keygen</code>
**(Note: You only have to do this step once on any particular machine.)
**The passphrase is optional.
*<code>ssh-copy-id '''user@MACHINENAME'''</code>
**This can be done for as many remote machines as you like.
This will simplify your life. From this point on, any time you SSH into (or SCP to/from etc...) the machine known as '''MACHINENAME''' while working at the machine you've done this on, you'll be automagically authenticated.

== Signing in to a machine ==
Pretty straightforward:

*<code>ssh '''user@MACHINENAME'''</code>
This will securely give you a terminal session of the remote machine. (Much like good old telnet... But not quite so sketchily insecure.)

== Executing commands remotely ==
Also, pretty straightforward...

*<code>ssh '''user@MACHINENAME "Command to be executed"'''</code>
One thing to note...

If you want to execute a command remotely that requires '''sudo''', you'll have to add a '''-t''' to the command line or else '''sudo''' with tell you where to go.

*<code>ssh -t '''user@MACHINENAME "Command to be executed"'''</code>
This is because '''sudo''' intentionally will NOT run without a local terminal session.

== Transferring files ==
There are at least 3 ways you can securely transfer files using '''SSH''' (via the '''SCP''' command)

From the local machine to a remote machine:

*<code>scp '''FileName''' '''<nowiki>user@MACHINENAME:Destination</nowiki>'''</code>
From a remote machine to the local machine:

*<code>scp '''user@MACHINENAME:FileName Destination'''</code>
From a remote machine to another remote machine:

*<code>scp '''user@MACHINENAME:FileName user@OTHERMACHINENAME:Destination'''</code>
Starting to see a pattern?

As a bonus, [https://linux.die.net/man/1/rsync RSYNC] will use '''SSH''' as a transport layer.

== Port forwarding (AKA Tunnelling) ==
Working on this part...

[https://help.ubuntu.com/community/SSH/OpenSSH/PortForwarding One description]

[https://www.ssh.com/academy/ssh/tunneling/example An example]

= Troubleshooting =
(somebody remind me to clean this crap up & make it easier to follow...)

If you get crap like:<pre class="bbcodeblock" dir="ltr" style="margin: 0px; margin-right: -99999px; padding: 3px; border: 1px inset; width: 98%; height: 82px; text-align: left; overflow: auto" >Warning: the ECDSA host key for '<snip>' differs from the key for the IP address '<snip>'
Offending key for IP in /home/<snip>/.ssh/known_hosts:14
Matching host key in /home/<snip>/.ssh/known_hosts:12
Are you sure you want to continue connecting (yes/no)?</pre>

or maybe:

<pre class="bbcodeblock" dir="ltr" style="margin: 0px; margin-right: -99999px; padding: 3px; border: 1px inset; width: 98%; text-align: left; overflow: auto" >
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA256:'<snip>'
Please contact your system administrator.
Add correct host key in /home/user/.ssh/known_hosts to get rid of this message.
Offending RSA key in /home/user/.ssh/known_hosts:102
remove with:
ssh-keygen -f "/home/user/.ssh/known_hosts" -R '<snip>'
RSA host key for '<snip>' has changed and you have requested strict checking.
Host key verification failed.
</pre>

when you try to ssh to a machine...

*<code>sudo ssh-keygen -f ~/.ssh/known_hosts -R HOSTIP</code>
Messages like:

<pre class="bbcodeblock" dir="ltr" style="margin: 0px; margin-right: -99999px; padding: 3px; border: 1px inset; width: 98%; text-align: left; overflow: auto" >
Warning: the RSA host key for '<snip>' differs from the key for the IP address '<snip>'
Offending key for IP in /home/user/.ssh/known_hosts:102
Matching host key in /home/user/.ssh/known_hosts:103
Are you sure you want to continue connecting (yes/no)?
</pre>

mean that you have an extra entry in your known_hosts file & indicates the line you want to delete...

If you see:

*<code>Failed to add the host to the list of known hosts (/Users/USER/.ssh/known_hosts).</code>
Check permissions & ownership on that file...

= Some SSH reference Links =

*[http://matt.might.net/articles/ssh-hacks/ SSH Tricks]
*[https://www.tecmint.com/ssh-passwordless-login-using-ssh-keygen-in-5-easy-steps/ SSH Passwordless Login Using SSH Keygen in 5 Easy Steps]
*[https://cormachogan.com/2016/04/13/ssh-esxi-hosts-without-providing-password/ How to SSH between ESXi 6.0U2 hosts without providing a password]
*[https://www.tecmint.com/secure-openssh-server/ How to Secure and Harden OpenSSH Server]

[[Category:Linux]]
[[Category:LinuxTools]]

Mini Ubuntu - Pictures

2022-01-03T20:15:49Z

Bart:

<gallery mode="slideshow" showfilename="yes">
File:Ubuntu Mini install 000.png
File:Ubuntu Mini install 001.png
File:Ubuntu Mini install 002.png
File:Ubuntu Mini install 003.png
File:Ubuntu Mini install 004.png
File:Ubuntu Mini install 005.png
File:Ubuntu Mini install 006.png
File:Ubuntu Mini install 007.png
File:Ubuntu Mini install 008.png
File:Ubuntu Mini install 009.png
File:Ubuntu Mini install 010.png
File:Ubuntu Mini install 011.png
File:Ubuntu Mini install 012.png
File:Ubuntu Mini install 013.png
File:Ubuntu Mini install 014.png
File:Ubuntu Mini install 015.png
File:Ubuntu Mini install 016.png
File:Ubuntu Mini install 017.png
File:Ubuntu Mini install 018.png
File:Ubuntu Mini install 019.png
File:Ubuntu Mini install 020.png
</gallery>

[[Category:Linux]]

Mini Ubunto

2022-01-03T20:15:38Z

Bart:

Much like [[Linux - Mini Debian]], but done with Ubuntu...

=Installing a minimal Ubuntu=
[[File:Ubuntu Mini install 000.png{{!}}300px{{!}}right{{!}}thumb{{!}}Installer Menu]]
[[File:Ubuntu Mini install 011.png{{!}}300px{{!}}right{{!}}thumb{{!}}SSH Setup]]
[[File:Ubuntu Mini install 013.png{{!}}300px{{!}}right{{!}}thumb{{!}}Installation Not ActuallyComplete]]
[[File:Ubuntu Mini install 014.png{{!}}300px{{!}}right{{!}}thumb{{!}}Installation Complete]]
[[File:Ubuntu Mini install 017.png{{!}}300px{{!}}right{{!}}thumb{{!}}Boot Screen]]
[[File:Ubuntu Mini install 018.png{{!}}300px{{!}}right{{!}}thumb{{!}}Success!]]

* Insert the [https://releases.ubuntu.com/20.04.3/ubuntu-20.04.3-live-server-amd64.iso CD/ISO/whatever] & boot the machine/VM from it.
** I'm running it as VMs under ESXi
*** "ESXi 6.7 VM", "Linux", "Ubuntu Linux (64-bit)"
*** 4 CPUs, 4GB memory, 16GB storage
* Ubuntu Server defaults to a non-GUI install
* Cruze along configuring the system to your liking until you reach the screen titled "'''SSH Setup'''"
* Make sure '''Install OpenSSH server''' is selected, then continue
* Keep cruzing along until it tells you '''Install complete''' <big>'''AND'''</big> you get the '''Reboot Now''' option at the bottom
* When you tell it to continue, the system will reboot.
* It'll probably fail to unmount the CD/ISO. Just hit Enter
* During bootup, Ubunto appears to call home & set up some sort of cloud stuff... :(
* When it's done booting, you won't see a login prompt until you smack the Enter key again.

All done

[[Linux - Mini Ubuntu - Pictures{{!}}The sequence in pictures...]]

=Configuring the minimal Ubuntu=

=Usage notes=

[[Category:Linux]]

Mini Debian - Pictures

2022-01-03T20:15:17Z

Bart:

<gallery mode="slideshow" showfilename="yes">
File:Debian Mini Install 000.png
File:Debian Mini Install 001.png
File:Debian Mini Install 002.png
File:Debian Mini Install 003.png
File:Debian Mini Install 004.png
File:Debian Mini Install 005.png
File:Debian Mini Install 006.png
File:Debian Mini Install 007.png
File:Debian Mini Install 008.png
File:Debian Mini Install 009.png
File:Debian Mini Install 010.png
File:Debian Mini Install 011.png
File:Debian Mini Install 012.png
File:Debian Mini Install 013.png
File:Debian Mini Install 014.png
File:Debian Mini Install 015.png
File:Debian Mini Install 016.png
File:Debian Mini Install 017.png
File:Debian Mini Install 018.png
File:Debian Mini Install 019.png
File:Debian Mini Install 020.png
File:Debian Mini Install 021.png
File:Debian Mini Install 022.png
File:Debian Mini Install 023-a.png
File:Debian Mini Install 023-b.png
File:Debian Mini Install 024.png
File:Debian Mini Install 025.png
File:Debian Mini Install 026.png
File:Debian Mini Install 027.png
File:Debian Mini Install 028.png
</gallery>

[[Category:Linux]]

Mini Debian

2022-01-03T20:14:38Z

Bart:

So...

A full desktop system as a server VM really is a bit silly.

Let's do something different.

= Installing a minimal Debian =
[[File:Debian Mini Install 000.png{{!}}300px{{!}}right{{!}}thumb{{!}}Installer Menu]]
[[File:Debian Mini Install 023-b.png{{!}}300px{{!}}right{{!}}thumb{{!}}Software selection]]
[[File:Debian Mini Install 026.png{{!}}300px{{!}}right{{!}}thumb{{!}}Installation Complete]]
[[File:Debian Mini Install 027.png{{!}}300px{{!}}right{{!}}thumb{{!}}Boot Screen]]
[[File:Debian Mini Install 028.png{{!}}300px{{!}}right{{!}}thumb{{!}}Great Success!]]

* Insert the [https://www.debian.org/download CD/ISO/whatever] & boot the machine/VM from it.
** I'm running it as VMs under ESXi
*** "ESXi 6.7 VM", "Linux", "Debian GNU/Linux 10 (64-bit)"
*** 4 CPUs, 4GB memory, 16GB storage
* When the installer menu appears, select "'''Install'''" rather than the default "'''Graphical Install'''" option
* Cruze along configuring the system to your liking until you reach the screen titled "'''[!] Software selection'''"
* Make sure that only '''SSH server''' and '''standard system utilities''' are selected, then continue
* Keep cruzing along until it tells you '''Installation complete'''
* When you tell it to continue, the system will reboot.
All done

[[Linux - Mini Debian - Pictures{{!}}The sequence in pictures...]]

=Configuring the minimal Debian=
==Install & configure '''sudo'''==
By default, root account is not enabled to login to Debian. As a result, a sudo authentication is needed. (But it doesn't seem to be installed by default...)

# Log in to the Debian machine and switch to root using the <code>su</code> command.
#* <code>su -</code>
#* (remember that root pasword you picked during install?)
# If <code>sudo</code> is not installed, install the sudo package using the following command:
#* <code>apt install sudo</code>
# Add an existing user with id='''USER''' to group=sudo:
#* <code>adduser '''USER''' sudo</code>
# Log into the '''USER''' shell, and type the following command to verify that the user is authorized:
#* <code>sudo -v</code>

You have successfully configured <code>sudo</code> in Debian.

==Install & configure '''vim'''==

* <code>sudo apt install vim</code>

Then fix the '''Visual Mode''' silliness...

* <code>sudo vim ~/.vimrc</code>

set mouse-=a
syntax on

==Aliases for ls==

ls needs it's aliases set. (Who in heck doesn't use '''ll''' for <code>ls -l</code>???)

* <code>vi ~/.bashrc</code>

Scroll down & you'll see:

# some more ls aliases
#alias ll='ls -l'
#alias la='ls -A'
#alias l='ls -CF'

Un-comment those aliases!

* <code>source ~/.bashrc</code>

=More Configurations=
==Samba==
Basic Samba install & minimal configuration

Create a test folder & file to be shared. (Assuming you'll replace '''USER''' with your own username...)
* mkdir ~'''USER'''/share
* touch ~'''USER'''/share/Foo

Install Samba
* sudo apt install samba -y

Configure the test share
* sudo vi /etc/samba/smb.conf

[New_share]
comment= my share
path = /home/'''USER'''/share
browseable = yes
Read only = no
guest ok = no
valid users = '''USER'''

* sudo systemctl restart smbd

Set up username & password for Samba acess
* sudo smbpasswd -a '''USER'''

Additional bits to install (Client & utils & such...)
* sudo apt install cifs-utils samba-client -y

'''NOTE:''' At this point, the share can be accessed, but you need to know where it is because Samba does not advertise it's presence.

You '''can''' see the shares from the machine by entering <code>smb://'''MACHINENAME'''/</code> into the address bar of your file browser.

=Usage notes=
==Missing commands==
If you're used to Ubuntu-derived Linuxes, you may note that a lot of commands cannot be found while signed in as a regular user. Before attempting to install them, check with '''sudo''' or while signed in as '''root'''. The root user account has a different search path that includes the programs that are normally not allowed to regular users anyhow.

'''One good example:'''

<code>ifconfig</code> results in'''-bash: ifconfig: command not found'''

but...

<code>sudo ifconfig</code> results in details about your network connection(s)

[[Category:Linux]]

Name-based Virtual Host Support

2022-01-03T20:13:20Z

Bart:

The Apache web server Can easily be configured to serve up different content based on the '''name''' it was called as.

This allows fun stuff like giving your machine multiple names via DNS and making it look like a whole server farm.

This also makes life easier if you're using it to proxy for other machines internal to your network.

In these notes, we'll be setting up 4 names for the server. '''foo.bar''' & '''www.foo.bar''' which will be the default web site. '''Wiki.foo.bar''' which will be served up by the same install of Apache, but still independant of the default web site. '''Proxy.foo.bar''' which is on another machine completely & wouldn't otherwise be reachable.

You will need to set up external DNS for '''Wiki.foo.bar''' & '''Proxy.foo.bar''' (which are NOT the same as your normal webserver name as far as the outside world is concerned)

<big>'''NOTE:'''</big> It is probably smartest to put the <code>VirtualHost</code> sections in separate files in the <code>/etc/apache2/sites-available/</code> folder, then make symbolic links to them in <code>/etc/apache2/sites-enabled</code> This will simplify maintenance down the road...

(But, if you really want to, they can simply be added to <code>/etc/apache2/apache2.conf)</code>

=A sample set of files for <code>/etc/apache2/sites-available</code>:=

Note the <code>SSLCertificateFile</code> & <code>SSLCertificateKeyFile</code> lines... In these examples, they are based on the self-signed certs built into Apache. If you have proper certs, these will reflect that.

==www.foo.bar.conf==

##########################
# WWW.foo.bar #
# our default web server #
##########################

<VirtualHost *:80>
ServerName foo.bar
Redirect permanent / <nowiki>https://www.foo.bar/</nowiki>
</VirtualHost>

<VirtualHost *:80>
ServerName www.foo.bar
Redirect permanent / <nowiki>https://www.foo.bar/</nowiki>
</VirtualHost>

<VirtualHost _default_:443>
ServerName www.foo.bar
DocumentRoot "/var/www/html"
SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
</VirtualHost>

==wiki.foo.bar.conf==

#########################
# Wiki.foo.bar #
# our Wiki server #
#########################

<VirtualHost *:80>
ServerName wiki.foo.bar
Redirect permanent / <nowiki>https://wiki.foo.bar/</nowiki>
</VirtualHost>

<VirtualHost _default_:443>
ServerName wiki.foo.bar
DocumentRoot "/var/www/wiki"
SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
</VirtualHost>

==proxy.foo.bar.conf==

################################################
# Proxy for proxy.foo.bar #
# an ESXi-based server on our internal network #
################################################

<VirtualHost *:80>
ServerName proxy.foo.bar
Redirect permanent / <nowiki>https://proxy.foo.bar/</nowiki>
</VirtualHost>

<VirtualHost _default_:443>
ServerName proxy.foo.bar
ProxyRequests on
SSLEngine On
SSLProxyEngine On
ProxyPreserveHost On

# Redirect WSS traffic (Needed if this is a proxy for ESXi)
ProxyPass /ticket/ wss://proxy.foo.bar/ticket/
ProxyPassReverse /ticket/ wss://proxy.foo.bar/ticket/

# Redirect HTTPS traffic
ProxyPass / <nowiki>https://proxy.foo.bar/</nowiki>
ProxyPassReverse / <nowiki>https://proxy.foo.bar/</nowiki>

SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
<Proxy "*">
Order allow,deny
Allow from all
</Proxy>
ErrorLog /var/log/apache2/Proxy/proxy_log
CustomLog /var/log/apache2/Proxy/proxy-access_log combined

</VirtualHost>

=Enabling the Virtual Hosts=

'''<big>NOTE:</big>''' Whichever '''VirtualHost''' gets configured '''FIRST''' becomes the default host. Any name that successfully resolves to the server but is not among the names explicitly handled will be served this '''VirtualHost'''. (It may help to start the filename with a '0'. eg: '''0-www.foo.bar.conf''')

create the links

*<code>cd /etc/apache2/sites-enabled</code>
*<code>sudo ln -s ../sites-available/www.foo.bar.conf .</code>
*<code>sudo ln -s ../sites-available/wiki.foo.bar.conf .</code>
*<code>sudo ln -s ../sites-available/proxy.foo.bar.conf .</code>

and restart Apache:

*<code>sudo systemctl restart apache2</code>

[[Category:ServerBuilding]]
[[Category:WebServers]]

HowTo - vi

2022-01-03T20:12:07Z

Bart:

So far... Just some links.

But they are ones that I consider reasonably good.

*[https://www.cs.colostate.edu/helpdocs/vi.html Basic vi Commands] (CSU)
*[https://www.ccsf.edu/Pub/Fac/vi.html UNIX: vi Editor] (City College of SF)
*[https://www.guru99.com/the-vi-editor.html VI Text Editor with Commands: Linux/Unix Tutorial] (Guru99)

[[Category:Linux]]
[[Category:SoftwareTools]]

UserDir

2022-01-03T20:05:28Z

Bart:

Sometimes, you might want individual users with accounts on the webserver to have personal pages...

*<code>sudo a2enmod userdir</code>
*<code>sudo systemctl restart apache2</code>
To set up a personal page for the currently logged-in user:

*<code>mkdir ~/public_html</code>
*<code>chmod ugo+rX ~/public_html</code>
*create an index.html file in ~/public_html
*<code>vi ~/public_html/index.html</code>
Assuming this users name is '''fred''', his page can now be reached at '''MYSERVER.MYDOMAIN.NET/~fred/'''

[[Category:WebServers]]

WebServer - UserDir

2022-01-03T20:04:54Z

Bart: Bart moved page WebServer - UserDir to UserDir: Cleanup

#REDIRECT [[UserDir]]

UserDir

2022-01-03T20:04:54Z

Bart: Bart moved page WebServer - UserDir to UserDir: Cleanup

WebServer - Name-based Virtual Host Support

2022-01-03T20:00:26Z

Bart: Bart moved page WebServer - Name-based Virtual Host Support to Name-based Virtual Host Support: Cleanup

#REDIRECT [[Name-based Virtual Host Support]]

Name-based Virtual Host Support

2022-01-03T20:00:26Z

Bart: Bart moved page WebServer - Name-based Virtual Host Support to Name-based Virtual Host Support: Cleanup

Category:ObsoleteStuff

2022-01-03T19:58:39Z

Bart: Created page with "Things in this category exist here to help with maintaining things that really should just be upgraded."

Things in this category exist here to help with maintaining things that really should just be upgraded.

WebServer - Mint 19.3

2022-01-03T19:57:49Z

Bart:

'''Note:''' On Mint 19.3, the instructions here for [[WebServer - Basic LAMP Stack Install{{!}}installing the LAMP stack]] installs php 7.2.24. On Mint 20, this installs php 7.4.3. This ''MIGHT'' be an important point to keep in mind for later...

If you expect to need php newer than 7.2.24 on a Mint 19.3 server, force it to upgrade before you move on to installing the packages:

*<code>sudo add-apt-repository ppa:ondrej/php # Press enter to confirm.</code>
*<code>sudo apt update</code>
*<code>sudo apt upgrade</code>
*<code>php -v</code>
(Verify that it's showing a suitable version of php. I'm seeing 7.4.10 in testing...)

[[Category:ServerBuilding]]
[[Category:WebServers]]
[[Category:ObsoleteStuff]]

Category:DBServers

2022-01-03T19:55:03Z

Bart: Created page with "Build & maintain a Database Server."

Build & maintain a Database Server.

MySQL

2022-01-03T19:45:54Z

Bart: Created page with "= MySQL on Debian = Debian does not have MySQL in its repositories... :( We can solve this! Check the [https://dev.mysql.com/downloads/repo/apt/ MySQL download page] for current version... If you're happy with '''8.0.27''', go ahead, download & install. * <code>wget <nowiki>https://dev.mysql.com/get/mysql-apt-config_0.8.20-1_all.deb</nowiki></code> * <code>sudo apt install ./mysql-apt-config_0.8.20-1_all.deb</code> It may ask about distro version. On LMDE 4 or Sparky..."

= MySQL on Debian =

Debian does not have MySQL in its repositories... :(

We can solve this!

Check the [https://dev.mysql.com/downloads/repo/apt/ MySQL download page] for current version...

If you're happy with '''8.0.27''', go ahead, download & install.
* <code>wget <nowiki>https://dev.mysql.com/get/mysql-apt-config_0.8.20-1_all.deb</nowiki></code>
* <code>sudo apt install ./mysql-apt-config_0.8.20-1_all.deb</code>
It may ask about distro version. On LMDE 4 or SparkyLinux 5, Select '''"debian buster"''' (It won't ask on Debian...)

Select '''"Ok"'''

Select '''"Ok"'''

Some versions will also ask about Configuring mysql-community-server
*Pick a good '''root''' password...
*I tend to select '''Use Legacy Authentication Method''' because '''Use Strong Password Encryption''' is annoying as hell. (Your choice here...)
Update & Upgrade everything now...
* <code>sudo apt update</code>
* <code>sudo apt upgrade</code>
Now you can go ahead & pretend they haven't dropped MySQL from the Debian repos...

[[Category:ServerBuilding]]
[[Category:WebServers]]
[[Category:DBServers]]

Category:SoftwareTools

2022-01-03T19:43:33Z

Bart: Created page with "Utility type software..."

Utility type software...

Category:Linux

2022-01-03T19:42:57Z

Bart: Created page with "Things related to Linux..."

Things related to Linux...

Linux Stuff

2022-01-03T19:41:52Z

Bart: /* Linux Applications & Tools */

[http://strangehorizons.com/non-fiction/articles/installing-linux-on-a-dead-badger-users-notes/ Installing Linux on a Dead Badger: User's Notes]

= Installation Assistance =
== Non-GUI Linux ==
* [[Linux - Mini Debian{{!}}Minimal Debian]]
* [[Linux - Mini Ubunto{{!}}Minimal Ubuntu]]
* [[Linux - LFS{{!}}Linux From Scratch]]

= Linux Applications & Tools =
* [[Fixing vim{{!}}vim]]

= Linux for the Desktop =
All Linux distros should attempt to be as user friendly as possible, that's the sign of a polished well made OS. And no distro should ever become complacent about the quality of it's UX, all distros should always strive to make things better, every time a new user becomes confused, their experience should be used to refine the UX design to make the OS better.I like Linux Mint because it attempts to be as user friendly as possible. Some people call this approach "A beginner Linux distro". I disagree. Linux Mint is a distro for all users, new and experienced. From mums who spend all day on Facebook, to programmers. - grady_vuckovic (reddit)

= Bunches of other stuff =
*'''<big>[[Linux - N00b tips!{{!}}n00b tips!]]</big>'''
*[[Linux - Distributions{{!}}Distributions]]
**[[Linux - Desktop Environments{{!}}Desktop Environments]]
**[[Linux - Window Managers{{!}}Window Managers]]
**[[Linux - File Managers{{!}}File Managers]]
*[[Linux - How-Tos{{!}}How-Tos]]
**[[Linux - Tutorials{{!}}Tutorials]]
**File Sharing
***[[Linux - AutoMounting the stock network shares{{!}}AutoMounting the stock network shares (SMB) on Linux]]
***[[Linux - NFS{{!}}NFS]]
**[[Linux - Remote Desktop{{!}}Remote Desktop]]
**[[Linux - Multimedia{{!}}Multimedia]]
*[[Linux - Smart Linux Tricks{{!}}<s>Stupid</s> Smart Linux Tricks]]
*[[Linux - Tricks{{!}}Tricks]]
*[[Linux - Customizations{{!}}Customizations]]
*[[Linux - Shell Scripts{{!}}Shell Scripts]]
*[[Linux - Troubleshooting{{!}}Troubleshooting]]
**
*[[Linux - Reference Links{{!}}Linux Reference Links]]
*[[Linux - Useful (or maybe just fun) Applications & Utilities{{!}}Useful (or maybe just fun) Applications & Utilities]]
*[[Linux - Getting rid of the Software Rendering Mode message{{!}}VMs - Software Rendering Mode]]
*[[Linux - How to use vi (or vim){{!}}How to use vi (or vim)]]
*[[Linux - Stats over MQTT{{!}}Stats over MQTT]]

[[Category:Linux]]

Linux Stuff

2022-01-03T19:41:13Z

Bart:

[http://strangehorizons.com/non-fiction/articles/installing-linux-on-a-dead-badger-users-notes/ Installing Linux on a Dead Badger: User's Notes]

= Installation Assistance =
== Non-GUI Linux ==
* [[Linux - Mini Debian{{!}}Minimal Debian]]
* [[Linux - Mini Ubunto{{!}}Minimal Ubuntu]]
* [[Linux - LFS{{!}}Linux From Scratch]]

= Linux Applications & Tools =
* vim

= Linux for the Desktop =
All Linux distros should attempt to be as user friendly as possible, that's the sign of a polished well made OS. And no distro should ever become complacent about the quality of it's UX, all distros should always strive to make things better, every time a new user becomes confused, their experience should be used to refine the UX design to make the OS better.I like Linux Mint because it attempts to be as user friendly as possible. Some people call this approach "A beginner Linux distro". I disagree. Linux Mint is a distro for all users, new and experienced. From mums who spend all day on Facebook, to programmers. - grady_vuckovic (reddit)

= Bunches of other stuff =
*'''<big>[[Linux - N00b tips!{{!}}n00b tips!]]</big>'''
*[[Linux - Distributions{{!}}Distributions]]
**[[Linux - Desktop Environments{{!}}Desktop Environments]]
**[[Linux - Window Managers{{!}}Window Managers]]
**[[Linux - File Managers{{!}}File Managers]]
*[[Linux - How-Tos{{!}}How-Tos]]
**[[Linux - Tutorials{{!}}Tutorials]]
**File Sharing
***[[Linux - AutoMounting the stock network shares{{!}}AutoMounting the stock network shares (SMB) on Linux]]
***[[Linux - NFS{{!}}NFS]]
**[[Linux - Remote Desktop{{!}}Remote Desktop]]
**[[Linux - Multimedia{{!}}Multimedia]]
*[[Linux - Smart Linux Tricks{{!}}<s>Stupid</s> Smart Linux Tricks]]
*[[Linux - Tricks{{!}}Tricks]]
*[[Linux - Customizations{{!}}Customizations]]
*[[Linux - Shell Scripts{{!}}Shell Scripts]]
*[[Linux - Troubleshooting{{!}}Troubleshooting]]
**
*[[Linux - Reference Links{{!}}Linux Reference Links]]
*[[Linux - Useful (or maybe just fun) Applications & Utilities{{!}}Useful (or maybe just fun) Applications & Utilities]]
*[[Linux - Getting rid of the Software Rendering Mode message{{!}}VMs - Software Rendering Mode]]
*[[Linux - How to use vi (or vim){{!}}How to use vi (or vim)]]
*[[Linux - Stats over MQTT{{!}}Stats over MQTT]]

[[Category:Linux]]

Linux Stuff

2022-01-03T19:40:37Z

Bart:

[http://strangehorizons.com/non-fiction/articles/installing-linux-on-a-dead-badger-users-notes/ Installing Linux on a Dead Badger: User's Notes]

= Installation Assistance =
== Non-GUI Linux ==
* [[Linux - Mini Debian{{!}}Minimal Debian]]
* [[Linux - Mini Ubunto{{!}}Minimal Ubuntu]]
* [[Linux - LFS{{!}}Linux From Scratch]]

= Linux Applications & Tools =
vim
= Linux for the Desktop =
All Linux distros should attempt to be as user friendly as possible, that's the sign of a polished well made OS. And no distro should ever become complacent about the quality of it's UX, all distros should always strive to make things better, every time a new user becomes confused, their experience should be used to refine the UX design to make the OS better.I like Linux Mint because it attempts to be as user friendly as possible. Some people call this approach "A beginner Linux distro". I disagree. Linux Mint is a distro for all users, new and experienced. From mums who spend all day on Facebook, to programmers. - grady_vuckovic (reddit)

= Bunches of other stuff =
*'''<big>[[Linux - N00b tips!{{!}}n00b tips!]]</big>'''
*[[Linux - Distributions{{!}}Distributions]]
**[[Linux - Desktop Environments{{!}}Desktop Environments]]
**[[Linux - Window Managers{{!}}Window Managers]]
**[[Linux - File Managers{{!}}File Managers]]
*[[Linux - How-Tos{{!}}How-Tos]]
**[[Linux - Tutorials{{!}}Tutorials]]
**File Sharing
***[[Linux - AutoMounting the stock network shares{{!}}AutoMounting the stock network shares (SMB) on Linux]]
***[[Linux - NFS{{!}}NFS]]
**[[Linux - Remote Desktop{{!}}Remote Desktop]]
**[[Linux - Multimedia{{!}}Multimedia]]
*[[Linux - Smart Linux Tricks{{!}}<s>Stupid</s> Smart Linux Tricks]]
*[[Linux - Tricks{{!}}Tricks]]
*[[Linux - Customizations{{!}}Customizations]]
*[[Linux - Shell Scripts{{!}}Shell Scripts]]
*[[Linux - Troubleshooting{{!}}Troubleshooting]]
**
*[[Linux - Reference Links{{!}}Linux Reference Links]]
*[[Linux - Useful (or maybe just fun) Applications & Utilities{{!}}Useful (or maybe just fun) Applications & Utilities]]
*[[Linux - Getting rid of the Software Rendering Mode message{{!}}VMs - Software Rendering Mode]]
*[[Linux - How to use vi (or vim){{!}}How to use vi (or vim)]]
*[[Linux - Stats over MQTT{{!}}Stats over MQTT]]

Fixing vim

2022-01-03T19:38:06Z

Bart: Created page with "= VIM (& fixing it on Debian) = (as installed on Debian) has mouse weirdness. Selecting text with the mouse automatically enters '''visual mode'''. This prevents useful things like using the mouse to copy/paste while editing in the terminal. ('''Visual Mode''' is stupid...) ==== Solution ==== Either enter: *<code>:set mouse-=a</code> during an editing session, or even better, put it (without the leading colon) in your <code>~/.vimrc</code> file. (create the <code>.vim..."

= VIM (& fixing it on Debian) =
(as installed on Debian) has mouse weirdness. Selecting text with the mouse automatically enters '''visual mode'''. This prevents useful things like using the mouse to copy/paste while editing in the terminal. ('''Visual Mode''' is stupid...)

==== Solution ====
Either enter:

*<code>:set mouse-=a</code>

during an editing session, or even better, put it (without the leading colon) in your <code>~/.vimrc</code> file. (create the <code>.vimrc</code> file if it's not already there...)

*<code>vim ~/.vimrc</code>

set mouse-=a

If you tend to use vim via sudo a lot... (duh... Who doesn't?)

*<code>sudo vim ~root/.vimrc</code>

Sadly, this seems to turn off the colour syntax hilighting.

But!

add

syntax on

to the '''.vimrc''' files & it's back.

[[Category:Linux]]
[[Category:SoftwareTools]]

Category:WebServers

2022-01-03T19:34:04Z

Bart: Created page with "Build & maintain a WebServer."

Build & maintain a WebServer.

Category:ServerBuilding

2022-01-03T19:32:45Z

Bart: Created page with "Clear help in building various sorts of servers."

Clear help in building various sorts of servers.

Server Building

2022-01-03T19:29:10Z

Bart:

This section is slowly being moved over from my [[TinkerWiki:SBN - Building Notes{{!}}General Wiki]]. Please be patient.

*[[Building Web Servers]]

[[Category:ServerBuilding]]

WebServer - Basic LAMP Stack Install

2022-01-03T19:26:41Z

Bart:

*Proven on
**Mint 19.3 ... (Seems to get MySQL 5.7)
**Mint 20 ... (Gets MySQL 8.0)
**SparkyLinux 5.11 ... (Debian based)
**LMDE 4 ... (Debian based)
**Debian minimal ... (Debian based)

=== Install the LAMP Stack ===
* [[WebServer - Mint 19.3{{!}}If you are running Mint 19.3]]
* [[WebServer - Debian based Linux{{!}}If you are running a Debian based Linux]]
** (Debian itself, LMDE, SparkyLinux, others...)

==== Install the packages ====

*<code>sudo apt install apache2 libapache2-mod-php php-xml php-mbstring php-apcu php-intl imagemagick inkscape php-gd php-cli php-cgi php mysql-server mysql-client php-mysql</code>
**Say Yes to Continue
**Configuring mysql-community-server (Doesn't happen on Mint but DOES happen on LMDE)
***Pick a good '''root''' password...
***I tend to select '''Use Legacy Authentication Method''' because '''Use Strong Password Encryption''' is annoying as hell. (Your choice here...)

==== Configure MySQL ====

*<code>sudo mysql_secure_installation</code>
**Would you like to setup VALIDATE PASSWORD component?
***I select No (because I'd rather manage my own password policies, thanks...)
**'''''root password'''''
***Please set the password for root here.
****Pick a good '''root''' password...
**or... (depends on install...)
***Using existing password for root.
****Say No
**Remove anonymous users?
***Duh... Yes
**Disallow root login remotely?
***Your choice, but I tend to say No.
**Remove test database and access to it?
***Duh... Yes again.
**Reload privilege tables now?
***Yes
*([[MySQL - Initial Configuration{{!}}Extra Instructions if you've never configured MySQL before]])

==== & Test it ====

*<code>sudo vi /var/www/html/info.php</code>

Browse to http://ServerAddress/ & you should see the default page.

Browse to [http://ServerAddress/ http://ServerAddress/info.php] & you should see a whole bunch of info about your PHP subsystem.

'''Notice that those 2 addresses are HTTP, and NOT HTTPS. This is important and Chrome will mess with you.'''

==== Set up at least one user in mysql ====

*<code>sudo mysql -u root -p</code>
CREATE USER 'someone'@'localhost' IDENTIFIED BY 'password';
FLUSH PRIVILEGES;
EXIT;
('''Hint:''' This'd be a good time to create yourself as that user with your non-admin password of choice...)

[[Category:ServerBuilding]]
[[Category:WebServers]]

Building Web Servers

2022-01-03T19:25:39Z

Bart:

*[[WebServer - Basic LAMP Stack Install{{!}}Basic LAMP Stack Install]]
*[[NetMan - SSL Certs{{!}}SSL]]
*[[WebServer - UserDir{{!}}Enabling User Web Directories]]
*[[WebServer - Name-based Virtual Host Support{{!}}Name-based Virtual Host Support]]
*[[SBN - Proxy Server Notes{{!}}Proxy Server Notes]]
*[[WebServer - Important Files on The Server{{!}}Important Files on The Server]]
*[[WebServer - CORS{{!}}CORS]]
'''Note:''' Pretty much any time you've edited the configuration files for Apache, You'll need to restart it.

*<code>sudo service apache2 restart</code>
You can check on the status of Apache by:

* <code>sudo apache2ctl -S</code>

[[Category:ServerBuilding]]