Howto on WormBytes

free

 AllowedPublicKeys: [
"desktop-public-key"
"laptop-public-key"
]

 Listen: [
tls://PUBLIC-IP-ADDRESS:56603
]

---
title:

# # Rest are optional
# categories:
# tags:
# permalink:
# excerpt: # Markdown description before the story
# description: # SEO `<meta>` description (requires an `excerpt`)
# header:
# image: # Path to the full image for the size (1280x...)
# image_description: # Custom `alt` tag
# caption: # Photo credit (can be written in markdown)
# teaser: # Path to teaser image (roughly 500x300)
#
# # Hero video image
# video:
# id: 
# provider:
#
# # An image with text overlay and call to action button
# overlay_image: # Path to the full image size
# overlay_filter: 0.5 # opacity between 0.0 and 1.0 (or full `rgba(255, 0, 0, 0.5)`)
# cta_label: # Call to action button label
# cta_url: # URL the call to action button goes to
# overlay_color: # Can be used rather than `overlay_image` as #ccc
#
# NOTE: https://mmistakes.github.io/minimal-mistakes/docs/helpers/
# https://mmistakes.github.io/minimal-mistakes/docs/utility-classes/
---
site draft whatever-the-post-slug-will-be

#!/bin/sh
set -u
set -e

cp _drafts/template.md _drafts/${1}.md
exec $EDITOR _drafts/${1}.md
site serve

#!/bin/sh

set -x
set -e

jekyll serve -D --watch
site publish whatever-the-post-slug-will-be

#! /usr/bin/env ruby
#
# Copy the file from the drafts folder, add the current date, and update the
# filename. Remove any commented out lines from the front matter.
#

now = Time.now
draft = File.basename(ARGV[0], '.md')
draft_filename = File.join('_drafts', "#{draft_filename}.md")
post_filename = File.join('_posts', "#{now.strftime('%Y-%m-%d')}-#{draft}.md")
post = File.open(post_filename, 'w')

state = :start

open(draft_filename).readlines.each do |line|
 if (state == :start || state == :in_front_matter) && line =~ /^---/
 post.puts line

 if state == :start
 post.puts "date: #{now.strftime('%Y-%m-%d %H:%M:%S %:z')}"

 state = :in_front_matter
 else
 state = :body
 end
 elsif state == :in_front_matter && (line =~ /^#/ || line =~ /^\s$/)
 # Skip all the comment lines in the front matter
 next
 else
 post.puts line
 end
end

post.close

File.unlink(draft_filename) if File.exist?(post_filename)
site deploy

#!/bin/sh

$_SITE_ROOT/bin/site build
rsync -crvz --delete-after --delete-excluded _site/ wormbytes:/var/www/wormbytes.ca/
#!/bin/sh

set -u
set -e

jekyll build
sudo apt-get install software-properties-common
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update

sudo apt-get install certbot

sudo mkdir -p /etc/nginx/snippets/

location ^~ /.well-known/acme-challenge/ {
default_type "text/plain";
root /var/www/letsencrypt;
}

sudo mkdir -p /var/www/letsencrypt/.well-known/acme-challenge

sudo apt-get install openssl
sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048

ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_session_tickets off;
ssl_protocols TLSv1.2;
# Use the "Modern" cipher suite recommended by Mozilla
# https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility
ssl_ciphers
'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
ssl_ecdh_curve secp384r1;
ssl_prefer_server_ciphers on;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
ssl_stapling on;
ssl_stapling_verify on;
# Enable HTST to ensure communication is only over SSL
add_header Strict-Transport-Security "max-age=15768000; includeSubdomains;
preload";
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;

include /etc/nginx/snippets/letsencrypt.conf;

sudo rm /etc/nginx/sites-enabled/default
sudo ln -s /etc/nginx/sites-available/example.com.conf /etc/nginx/sites-enabled/example.com.conf

sudo systemctl reload nginx

certbot certonly --webroot --agree-tos --no-eff-email --email YOUR@EMAIL.COM -w /var/www/letsencrypt -d www.example.com -d example.com

## http://example.com redirects to https://example.com
server {
listen 80;
listen [::]:80;
server_name example.com;
include /etc/nginx/snippets/letsencrypt.conf;
location / {
return 301 https://example.com$request_uri;
}
}
## http://www.example.com redirects to https://www.example.com
server {
listen 80 default_server;
listen [::]:80 default_server ipv6only=on;
server_name www.example.com;
include /etc/nginx/snippets/letsencrypt.conf;
location / {
return 301 https://www.example.com$request_uri;
}
}
## https://example.com redirects to https://www.example.com
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name example.com;
ssl_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;
location / {
return 301 https://www.example.com$request_uri;
}
}
## Serves https://www.example.com
server {
server_name www.example.com;
listen 443 ssl default_server;
listen [::]:443 ssl default_server ipv6only=on;
ssl_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;
# The rest of your previous HTTP virtual server configuration. Below is an
# example:
root /var/www/example.com;
index index.html;
location / {
try_files $uri $uri/ =404;
}
}

sudo systemctl reload nginx

sudo certbot renew --dry-run

#!/bin/bash
systemctl reload nginx

# If you have other services that use the certificates add reloads here:
sudo chmod +x /usr/local/sbin/letsencrypt.sh

sudo crontab -e

20 3 * * * certbot renew --noninteractive --renew-hook /usr/local/sbin/letsencrypt.sh

smtphm.sympatico.ca
apt-get install postfix libsasl2-modules
/etc/postfix
smtphm.sympatico.ca
cd /etc/postfix
mkdir sasl && cd sasl
echo "[smtphm.sympatico.ca] USERNAME@symaptico.ca:PASSWORD" > passwd
postmap hash:passwd
USERNAME
PASSWORD
main.cf
relayhost = [smtphm.sympatico.ca]
main.cf
# Enable TLS/SASL for the smtphm.sympatico.ca server
smtp_use_tls = yes
smtp_tls_note_starttls_offer = yes
tls_random_source = dev:/dev/urandom
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl/passwd
smtp_sasl_security_options = 

Howto on WormBytes

Yggdrasil VPN

Function Key Snipping with Raycast

Step 1

Step 2

Step 3

Managing Site Content with Sub

Create Draft Posts

Previewing Drafts on Localhost

Publishing

Deploy Updates to Production

Let's Encrypt and Nginx on Ubuntu

Prerequisites

Step 1 - Installing Certbot

Step 2 - Create Nginx Configs

Step 3 - Configure Domain to Respond to ACME Challenge

Step 4 - Obtaining an SSL Certificate

Step 5 - Setup HTTPS-Only Virtual Hosts

Step 6 - Automatic Renewal using Cron

Conclusion

Relaying Mail through Sympatico Using Postfix

Installation

Configuration