For some reason, Ubuntu Server thinks it's fine to sleep after 20mins.
We fix that in /etc/systemd/sleep.conf by setting
[Sleep]
AllowSuspend=no
AllowSuspendThenHibernate=no
Lately we used the server with dhcp and managed the "static" IP via the Unifi Controller. This is therefore obsolete:
#iface enp3s0 inet dhcp
iface enp3s0 inet static
address 192.168.0.7
netmask 255.255.255.0
gateway 192.168.0.1
dns-nameservers 192.168.0.1
ssh-keygen -o -a 100 -t ed25519 -f ~/.ssh/githubAdd to .ssh/config to use:
Host github.com
IdentityFile ~/.ssh/github
#PasswordAuthentication yes
PasswordAuthentication no
Using these instructions:
snap list # shows snaps installed
sudo snap remove <package> # remove the installed snaps
sudo snap remove lxd
sudo snap remove core18
sudo snap remove snapd
sudo apt purge snapd # remove snapd itselfsudo apt install pv dos2unix jq ncdu p7zip smartmontools nfs-common nfs-kernel-server pdftk ffmpeg zfsutils-linux samba python3-pip certbot eyed3
#sudo -H pip3 install --upgrade youtube-dl
sudo -H pip3 install --upgrade youtube-dlcNot available anymore: libav-tools, zfstools-linux
Using ffmpeg instead of avconv for now: sudo apt install ffmpeg
Using zfsutils-linux instead of zfstools-linux now.
Probably not needed anymore, as duckdns is done via Unifi Controller.
sudo apt install ddclientRequires information from ddclient.conf. It's easiest to replace /etc/ddclient.conf with the one from this repo.
TODO: Add pasword to KeePass :)
sudo timedatectl set-timezone "Europe/Berlin"alias t='tmux new-session -A -s remote'
alias mp3='youtube-dlc -x --audio-format mp3 --audio-quality 0'
alias mp3p='youtube-dlc -x --audio-format mp3 --audio-quality 0 -o "%(playlist_index)s-%(title)s.%(ext)s" --yes-playlist'Some good advise and best practices from this site: https://sanctum.geek.nz/arabesque/better-bash-history/
shopt -s histappend
HISTFILESIZE=1000000
HISTSIZE=1000000
HISTCONTROL=ignoreboth
HISTIGNORE='ls:bg:fg:history'
HISTTIMEFORMAT='%F %T '
shopt -s cmdhist
PROMPT_COMMAND='history -a'sudo zpool import tankIf it was not exported on the old system, we need to force the import:
sudo zpool import -f tanksudo zfs set sharenfs="rw=@192.168.0.0/24" tank
sudo zfs set sharesmb=on tank
sudo smbpasswd -L -a bertow
sudo smbpasswd -L -e bertow
Our printer doesn't like speak newer SMB versions, so accessing the share will only work with this addition to the etc/samba/smb.conf under the workgroup = WORKGROUP line:
server min protocol = NT1Then restart smbd (sudo systemctl restart smbd)
Using these instructions:
sudo apt install apt-transport-https ca-certificates gnupg-agent software-properties-common
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
sudo apt update
sudo apt install docker-ce docker-ce-cli containerd.io
sudo usermod -aG docker $USER
newgrp dockerAdd Docker Compose from current releases:
sudo curl -L "https://github.com/docker/compose/releases/download/1.26.2/docker-compose-Linux-x86_64" -o /usr/local/bin/docker-compose
sudo chmod +x /usr/local/bin/docker-composeAutomatic cleanup:
Run crontab -e and add 0 3 * * * /usr/bin/docker system prune -f
First, create new CNAME entries in DNS for e.g. whoami.bertow.com and _acme-challenge.whoami.bertow.com.
# start process
sudo certbot --server https://acme-v02.api.letsencrypt.org/directory -d whoami.bertow.com --manual --preferred-challenges dns-01 certonly
# create entry
curl "https://www.duckdns.org/update?domains=XXXXXXXXX.duckdns.org&token=TTTTTTTT-TTTT-TTTT-TTTT-TTTTTTTTTTTT&txt=challenge-text-token"
#check
dig -t txt ha.bertow.com
# remove
curl "https://www.duckdns.org/update?domains=XXXXXXXXX.duckdns.org&token=TTTTTTTT-TTTT-TTTT-TTTT-TTTTTTTTTTTT&txt=challenge-text-token&clear=true"https://www.edvpfau.de/wildcard-zertifikat-mit-duckdns-erstellen/
sudo certbot --server https://acme-v02.api.letsencrypt.org/directory -d whoami.bertow.com --manual-auth-hook=/etc/letsencrypt/duckdns/set_acme_challenge.sh --manual-cleanup-hook=/etc/letsencrypt/duckdns/cleanup_acme_challenge.sh --manual --preferred-challenges dns-01 certonlyMove hook scripts to /etc/letsencrypt/duckdns
sudo certbot renew --manual-auth-hook=/etc/letsencrypt/duckdns/set_acme_challenge.sh --manual-cleanup-hook=/etc/letsencrypt/duckdns/cleanup_acme_challenge.sh --manual-public-ip-logging-ok --deploy-hook="docker-compose -f /tank/misc/docker/traefik/docker-compose.yaml restart"https://www.edvpfau.de/automatische-erneuerung-der-letsencrypt-wildcard-zertifikate-mit-duckdns/
Setup to /tank/misc/Dropbox as instructed on https://www.linuxbabe.com/ubuntu/install-dropbox-headless-ubuntu-server and https://www.how2shout.com/linux/install-dropbox-gui-or-headless-on-ubuntu-20-04-lts/
wget https://www.dropbox.com/download?plat=lnx.x86_64 -O dropbox-linux.tar.gz
sudo mkdir /opt/dropbox/
sudo tar xvf dropbox-linux.tar.gz --strip 1 -C /opt/dropbox
sudo apt install libc6 libglapi-mesa libxdamage1 libxfixes3 libxcb-glx0 libxcb-dri2-0 libxcb-dri3-0 libxcb-present0 libxcb-sync1 libxshmfence1 libxxf86vm1
ln -s /tank/misc/Dropbox ~/Dropbox
/opt/dropbox/dropboxdSudo Add /etc/systemd/system/dropbox.service:
[Unit]
Description=Dropbox Daemon
After=network.target
[Service]
Type=simple
User=bertow
ExecStart=/usr/bin/env "/home/bertow/.dropbox-dist/dropboxd"
Restart=on-failure
RestartSec=1
[Install]
WantedBy=multi-user.target
Enable autostart:
sudo systemctl start dropbox
sudo systemctl enable dropbox
systemctl status dropboxInstall CLI tool:
sudo wget -O /usr/local/bin/dropbox "https://www.dropbox.com/download?dl=packages/dropbox.py"
sudo chmod +x /usr/local/bin/dropbox