Docs are here.

You will need DNS set up before proceeding.

Install agate.

yay -S agate

Be root!

In my case the domain is 'splint.rs'.

DOMAIN1=splint.rs

You can set up any number of domain names.

DOMAIN2=ttrpgs.com

Make a directory to serve the gemini files from:

GEMDIR=/srv/gemini

mkdir -p $GEMDIR/$DOMAIN1

mkdir -p …

Set up a file like this, called troubleshooting.txt.

[ Is there an IP address? ] -- no --> [ Check NIC driver, dmesg ]

[ Is there an IP address? ] -- yes --> [ Can you ping the router? ]

[ Can you ping the router? ] -- no --> [ Check cables, router, and switches ]

[ Can you ping the router? ] -- yes --> [ …

SSH Daemon Jail

1sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.d/ssh.local

1[sshd]
2enabled = true
3
4ignoreip = 127.0.0.1/8 ::1,192.168.0.0/16 ::1

1sudo systemctl restart fail2ban

1sudo fail2ban-client status

1sudo fail2ban-client status sshd

Intro

This is a basic Linux firewall program.

Look at your firewalls:

1iptables -L

We see the output of input, output and forwarding rules.

Forward

I don't need any forwarding, so I'm going to drop all forwarding:

1iptables -P FORWARD DROP

Input

Let's 'A'dd, or 'A'ppend a rule with -A. Let's drop all input from a …

Install nginx:

1sudo apt-get install nginx

1sudo apt-get enable --now nginx

Put a website somewhere:

1mkdir /var/www/html/mysite/

Put an index file there:

1vim /var/www/html/mysite/index.html

Make the owner www-data

1chown -R www-data:www-data /var/www/html/mysite/

Make a configuration file for nginx:

1vim …

Example:

1nmap 192.168.1.1/24

Flags:

Look for a web server, which has ports 80 and 443 open:

1nmap 192.168.1.1/24 -p 80,443 --open

The manpage's 'Synopsis' provides a fast reference.

1
2We'll assume a folder in Google Drive called 'test', and local folder called 'foo'.
3
4Generate a config file with:
5
6```bash
7rclone config

Look at the contents of Google Drive:

1rclone ls gd:/

If rclone loses authorization:

1rclone …

Basic ssh

Try out basic ssh by accessing git.charm.sh, without needing authentication:

1ssh git.charm.sh

Start an ssh server to try it out. The ssh server is sometimes in a package called openssh, and sometimes only in openssh-server.

Once it's installed, check it's working:

1sudo systemctl status ssh

If that doesn't …

1. Install fdroid on phone.
2. Install termux.
3. Open fdroid, and run:

1pkg upgrade
2pkg install busybox termux-services openssh openssh-sftp-server
3source $PREFIX/etc/profile.d/start-services.sh

openssh-sftp-server will mount the phone's file-system, and show you some directories in ~/storage/.

4. Copy your PC's ssh public …