26 karma · joined August 18, 2010
I think you are very brave to make this document available to the world - it is not something i would like to do.
EDIT: I think of it like the browser history for your daily work.
EDIT 2: It seems quite a lot of people think it is a good idea to store their bash_history on github, who knew! google dork: "inurl:github.com intitle:bash_history"
[0] https://github.com/NixOS/nix [1] https://nixos.org/nix/manual/#ch-expression-language
services.nginx.virtualHosts."myhost.org" = {
enableSSL = true;
enableACME = true;
root = "/var/www/myhost.org";
}
Put that in your host configuration and the nginx will be configured to start up the nginx with SSL enabled. All other locations required for the acme request are automatically configured. Systemd timers are also added for automatic renewal.
IMHO it does not get any better than this.edit1: no extra location required
I have been using tinc for quite a long time and it feels pretty stable, but the configuration of new nodes is quite a PITA. For that reason a lot of bootstrapping scripts have been built around this [2]. Also, i love the possibility to easily dump the whole (known) network graph and create great graphs from this info [3].
I am using it mostly for reaching hosts behind NAT and creating a secure environment for these hosts.I never have tried the 'connect whole network' feature.
[1] http://www.tinc-vpn.org/security/
[2] https://github.com/krebscode/painload/blob/master/retiolum/s...