Advanced Search
Search Results
82 total results found
Enterprise
Public Guides
Public Guides
Deployment Guides
Development
Articles
DRAFT
Publicly Accessible
Self Hosting Blueprints
Multi-Tier Self Hosted Services Core with Docker
Templates
a book to contain templates
Stack : 3-Tier NPM/Tailscale Gateway
Scripting
CIS Compliant Images
notflix.pknw1.co.uk - WebUI via Docker NOTFLIX
tba
Platform Overview
Bare Metal Server Base
Vendor Access Vendor Control Panel Vendor Dedicated Hardware Deployment Vendor Assigned Access
Bare Metal Server Post-Install
initial login additional users/groups core folder structure OS base services disable OS update & required services enable OS core networking config OS core apr repositories Webmin Docker-CE gitlab hashicorp ntop tailscale
Bare Metal Server Management Components
install & config tailscale install & config webmin install & config docker
Base docker ecosystem
Docker Stack: Core Services
Docker Stack: Netflix WebUI
Docker Stack: Notflix Backend
Docker Stack: User Networking Apps
Tailscale: Bare Metal & Containers
Streaming Service basics
Streaming Services Users
Summary
Components
Requirements Definition
Organization Core
2. Initial Login
[root user/secure/user defaults] Once the server is deployed, a number of configuration steps are followed to ensure base install pre-installed packages are appropriate base install is configured for secure remote access for root user templating of the ...
3. System Defaults
creation of basic folder structure installation of components required for folder merging via FUSE post-reboot tasks and disk mount automation /etc/fstab
4. Core System Packages Config
SSH Config Tailscale fail2ban UFW + custom scripts for automation
5. Core Application Services
docker XRDP
APT Sources
1. Vendor Setup
PKNW1 Documentation
Public Registered Users Only Administrators Only
Audience & Scope
Hardware and OS
Initial Post-Install Access & Recovery Access
SSH & Baseline Account Security
Checklists
Discovery & Scope Doxxed minimising personal or identifiable info footprint Communication Payments Verification SMS Hiding your location & identity VPN Tor Encryption BAU Admin access
New Page
DNS CloudFlare Inbound Traffic nic Public IP Tailscale IP ufw iptables fail2ban Docker Docker Networks NGI...
Template: code
/usr/local/bin/template-name.shScript HeadlineLorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry's standard dummy text ever since the 1500s, when an unknown printer took a galley of type and scrambled i...
Summary
This book details how to create a cheap and secure utility server includingCheapest OVH VPS Server in country of your choiceOVH Domain Name for your servicesSquid Proxy ServerPiHole AdBlocking DNSHomer Homepagesdfsddocker-compose.ymlservices: tailscale_full...
Setup
The included configurationconfigure tailscale API key and update envconfigure drkno/plexsso config.jsonconfig.jsondocker-conmpose up -dobtain the Tailscale IP address from the logsdocker logs tailscale | grep fulllaunch your browser to http://tailscale-ip:81lo...
docker compose helper scripts
/usr/local/bin/uplogHelper ScriptsThe docker helper scripts are to allow more rapid access to frequent requestscreate /usr/local/bin/uplogchmod +x /usr/local/bin/uplog#!/bin/bash # /usr/local/bin/uplog if [[ $# -eq 0 ]] then docker compose up -d && doc...
SSL Wildcard Letsencrypt Certificate Renewal
/usr/local/bin/renew-ssl-wildcard.shSSL Check and Renew Wildcarduses Letsencrypt with OVH api to request a wildcard certificate #@pknw1 #!/bin/bash # renew wildcard SSL certs DOMAIN=$1 function renew() { sudo docker run -it --rm --name certbot \ -v...
ntfy.sh notification wrapper
/usr/local/bin/ntfy.shCustom ntfy wrapperLorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry's standard dummy text ever since the 1500s, when an unknown printer took a galley of type and scrambled it to ...
folder-backup configurable folder backup wrapper
/usr/local/bin/folder-backupCustom Backup ScriptCustom script using a configurable persistent local config to archive and compress the folder contents while excluding any file/folder patterns#!/bin/bash TARGET='/dev/shm' LOGPATH='/dev/shm' if [[ $# -eq 0 ...
mkv2mp4 ffmpeg/ffprobe wrapper
/usr/local/bin/mkv2mp4.shQuick MKV to MP4 conversion with FFMPEGConverts from MKV to MP4 to allow rapid streaming for media#!/bin/bash # mkv2mp4.sh function quit() { echo "[FAIL] - ${1}" exit } function success() { echo "[ OK ] - ${1}" } ...
Docker Container Execute on Host Client/Server App
/usr/local/bin/pipe-exec/usr/local/bin/pipe-responseClient Server App for Host execution from within dockerThe app runs in the container and uses fifo pipes to pass commands to the server side of the app running on the docker host; the commands are executed an...
Movie Update TimeStamp to Theatrical Release Date
/usr/local/bin/releaseDateMovie File Date/Time modifierReads the selected movie theatrical release date from previously stored metadata and sets the movie date and time to the release date so that it displays orderly in Plex#!/bin/bash # set releaseDate T...
Simple Log File Reset/Wipe
/usr/local/bin/wipeScript Headlinea simple wrapper to truncate any log file or open file by cat'ing /dev/null into the file#!/bin/bash # /usr/local/bin/wipe cat /dev/null > $1sdfsdwipe /var/log/auth.logservice rsyslog restartfurther infoProduct HomeLinkDoc...
docker-compose create helper script (dialog)
/usr/local/bin/create-compose.shScript HeadlineLorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry's standard dummy text ever since the 1500s, when an unknown printer took a galley of type and scrambled ...