exit cd ls ls .ssh ls ~/.ssh/ ls -lag ls -la sudo chown -R jawz:jawz ./ ls -lag ls -la ls .ssh/ ls .ssh/ -la sudo systemctl enable --now wg-quick@wg0 sudo nano /etc/sysctl.d/99-ipforward.conf ls sudo -i sudo systemctl status sshd.service sudo systemctl restart sshd.service journalctl -xeu sshd sudo -i sudo systemctl status sshd sudo ss -ltnp | grep ssh sudo semanage port -l | grep ssh_port_t sudo ss -ltnp | grep 3456 || sudo ss -ltnp | grep sshd ping google.com sudo systemctl stop wg-quick@wg0.service ping google.com sudo systemctl disable wg-quick@wg0.service exi exit sudo rmdir /etc/caddy/Caddyfile.d/ sudo -i exit ls rm histfile rm iptables* ls rm sudo_histfile cat syncthingblocked rm syncthingblocked ls exit sudoedit /etc/wireguard/wg0.conf export TERM=xterm-256color sudoedit /etc/wireguard/wg0.conf sudo systemctl restart wg-quick sudo systemctl restart wg-quick@wg0.service sudoedit /etc/wireguard/wg0.conf sudo -i sudo tcpdump sudo dnf install tcpdump sudo tcpdump -i wg0 host 10.77.0.2 -n -v sudoedit /etc/sysconfig/iptables export TERM=xterm-256color sudoedit /etc/sysconfig/iptables sudo systemctl restart iptables.service ping google.com sudo ss -ltnp | grep 3456 || sudo ss -ltnp | grep sshd sudo sed -n '1,200p' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf 2>/dev/null | egrep -n '^(Port|ListenAddress)' sudo iptables -S cat /etc/sysconfig/iptables sudo cat /etc/sysconfig/iptables sudo systemctl enable --now iptables sudo systemctl start iptables sudo systemctl restart iptables sudo iptables -S sudo systemctl enable wg-quick@wg0 sudo systemctl start wg-quick@wg0 ping google.com sudo -i sudo wg sow sudo wg show ls cd /etc/caddy/Caddyfile.d/ ls cat fun.caddyfile__ ls clear mv portfolio.caddyfile_bkp portfolio.caddyfile sudo mv portfolio.caddyfile_bkp portfolio.caddyfile sudo systemctl restart caddy clear export TERM=xterm-256color iptables-s sudo iptables -S sudo iptables -s sudo iptables -S clear cat /etc/sysconfig/iptables sudo cat /etc/sysconfig/iptables sudo -i sudo reboot exit ping google.com sudo systemctl restart iptables sudo systemctl enable iptables exit sudo -i exit sudo iptables -vnL FORWARD | grep 22000 sudo -i sudo iptables -L FORWARD -n -v --line-numbers cat /etc/sysconfig/iptables sudo cat /etc/sysconfig/iptables sudoedit /etc/sysconfig/iptables export TERM=xterm-256color sudoedit /etc/sysconfig/iptables clear sudo cat /etc/sysconfig/iptables sudoedit /etc/sysconfig/iptables sudo systemctl restart iptables.service sudoedit /etc/sysconfig/iptables wg show sudo wg show ping -c 3 10.8.0.2 nc -zv 10.77.0.2 22000 sudo -i exit sudo -i exit sudo systemctl disable iptables sudo systemctl enable iptables sudo systemctl status iptables sudo systemctl start iptables sudo -i exit sudo dnf install starship sudo dnf copr enable atim/starship sudo dnf install starship nano .bashrc export TERM=xterm-256color nano .bashrc bash exit nano /etc/hostname export TERM=xterm-256color nano /etc/hostname sudoedit /etc/hostname exit sudoedit /etc/caddy/Caddyfile.d/20-servers.caddyfile export TERM=xterm-256color sudoedit /etc/caddy/Caddyfile.d/20-servers.caddyfile export EDITOR=neovim sudoedit /etc/caddy/Caddyfile.d/20-servers.caddyfile EDITOR=neovim sudoedit /etc/caddy/Caddyfile.d/20-servers.caddyfile EDITOR=nvim sudoedit /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo -i exit sudoedit /etc/caddy/Caddyfile.d/20-servers.caddyfile exit sudoedit /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo -i exit export TERM=xterm-256color sudoedit /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo systemctl restart caddy export TERM=xterm-256color sudoedit /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo systemctl restart caddy sudo -i exit sudo mkdir -p /var/www/html sudo mkdir -p /var/www/html/lidarr-mb-gap sudo useradd -m -s /bin/bash lidarr-reports sudo chown -R lidarr-reports:lidarr-reports /var/www/html/lidarr-mb-gap/ exit sudo -u lidarr-reports bash exit sudo -u lidarr-reports sudo -u lidarr-reports bash sudo -i exit sudo -u lidarr-mb-gap cat /var/lib/lidarr-mb-gap/.ssh/id_ed25519.pub exit sudo -u lidarr-reports sudo -u lidarr-reports bash exit sudo -u lidarr-reports ssh-keygen -l -f /home/lidarr-reports/.ssh/ed25519_lidarr-mb-gap.pub exit sudo -u lidarr-reports -u bash sudo -u lidarr-reports bash exit sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile exit sudo dnf install rsync sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy.service ls cd /var/www/html/lidarr-mb-gap/ ls sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy.service nc -zv 10.77.0.2 8999 sudo nvim /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo nvim /etc/caddy/Caddyfile.d/5-keycloak.caddyfile sudo nvim /etc/caddy/Caddyfile.d/10-nextcloud.caddyfile sudo nvim /etc/caddy/Caddyfile.d/5-keycloak.caddyfile sudo systemctl restart caddy ls cd /etc/wireguard/ sudo -i exit cd /etc/caddy/Caddyfile.d/ ls nvim 15-private.caddyfile mv 15-private.caddyfile 15-private.caddyfile_ sudo mv 15-private.caddyfile 15-private.caddyfile_ nvim 15-private.caddyfile sudo nvim 15-private.caddyfile sudo systemctl restart caddy exit cd /etc/caddy/Caddyfile.d/ sudo nvim 15-private.caddyfile sudo systemctl restart caddy exit cd /etc/caddy/Caddyfile.d/ sudo nvim 15-private.caddyfile sudo systemctl restart caddy sudo nvim 15-private.caddyfile sudo systemctl restart caddy exit sudo nvim /etc/caddy/Caddyfile.d/5-keycloak.caddyfile sudo nvim /etc/caddy/Caddyfile.d/10-nextcloud.caddyfile sudo nvim /etc/caddy/Caddyfile.d/5-keycloak.caddyfile sudo systemctl restart caddy sudo nvim 15-private.caddyfile cd /etc/caddy/Caddyfile.d/ sudo nvim 15-private.caddyfile sudo systemctl restart caddy sudo nvim 15-private.caddyfile cat 15-private.caddyfile sudo nvim 15-private.caddyfile sudo systemctl restart caddy sudo nvim 15-private.caddyfile sudo nvim 15-private.caddyfile_ sudo nvim 15-private.caddyfile sudo systemctl restart caddy exit sudo systemctl restart caddy sudo nvim cd /etc/caddy/Caddyfile.d/ sudo nvim 15-private.caddyfile cat 15-private.caddyfile_ sudo nvim 15-private.caddyfile cat 15-private.caddyfile sudo nvim 15-private.caddyfile sudo systemctl restart caddy sudo nvim 15-private.caddyfile sudo nvim /etc/caddy/Caddyfile.d/15-private.caddyfile sudo systemctl restart caddy systemctl status caddy sudo nvim /etc/caddy/Caddyfile.d/15-private.caddyfile sudo systemctl restart caddy cd /etc/caddy/Caddyfile.d/ ls sudo nvim 20-servers.caddyfile sudo nvim 40-jellyfin.caddyfile sudo systemctl restart jel sudo systemctl restart caddy cd /etc/caddy/Caddyfile.d/ ls mv 15-private.caddyfile 15-private.caddyfile__ sudo mv 15-private.caddyfile 15-private.caddyfile__ sudo mv 15-private.caddyfile_ 15-private.caddyfile sudo systemctl restart caddy exit dig servidos.lat A sudo dnf install dig dig servidos.lat A exit curl servidos.lat exit curl servidos.lat dig servidos.lat A curl -v 130.211.27.102 curl -v 130.211.27.102:443 curl -v https://130.211.27.102 curl servidos.lat curl https://servidos.lat curl-v https://servidos.lat curl -v https://servidos.lat dig servidos.lat A exit dig servidos.lat A exit dig servidos.lat A exit dig servidos.lat A exit dig servidos.lat A exit dig servidos.lat A curl -v https://servidos.lat exit sudo useradd -m -s /bin/bash deploy sudo groupadd -f www-data sudo usermod -aG www-data deploy ls -lag /var/www/html/ sudo mkdir /var/www/html/portfolio sudo chown -R root:www-data /var/www/html/portfolio/ sudo chmod -R 775 /var/www/html/portfolio/ ssh-keygen -t ed25519 -C "deploy@portfolio" -f ~/.ssh/portfolio_deploy cat ~/.ssh/portfolio_deploy.pub sudo -u deploy sudo -u deploy bash ls ls -lag cat ~/.ssh/portfolio_deploy exit su sudo -u sudo -i cat ~/.ssh/portfolio_deploy exit sudo systemctl restart iptables exit ls ls ~/.ssh/authorized_keys cat ~/.ssh/authorized_keys sudo systemctl restart iptables.service sudo systemctl status iptables.service cat /etc/sysconfig/iptables sudo cat /etc/sysconfig/iptables exit ls exit cd /var/www/html/portfolio/ ls -lag ls sudo -u deploy bash ls exit sudo systemctl restart caddy cd /var/www/html/portfolio/ ls sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy sudo chown -R deploy:www-data /var/www/html/portfo sudo chown -R deploy:www-data /var/www/html/portfolio/ exit sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo mkdir /var/www/html/blog sudo chown deploy:www-data /var/www/html/blog/ -R sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo cat /etc/caddy/Caddyfile.d/25-static.caddyfile sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy sudo chmod -R 775 /var/www/html/portfolio ls -la /var/www/html/portfolio/ sudo chown -$ deploy:www-data /var/www/html/portfolio/ sudo chown -R deploy:www-data /var/www/html/portfolio/ sudo -i ls -la /var/www/html/portfolio/friends/ | grep "001_chicken_hu" sudo cat /etc/caddy/Caddyfile.d/25-static.caddyfile df -h sudo nvim /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo systemctl restart caddy && exit sudo nvim /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo systemctl restart caddy && exit sudo nvim /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy journalctl -xeu caddy.service sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy journalctl -xeu caddy.service sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy sudo nvim /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo systemctl restart caddy sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo nvim /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo systemctl restart caddy && exit sudo nvim /etc/caddy/Caddyfile.d/20-servers.caddyfile curl -sI "https://danilo-reyes.com/isso/js/embed.min.js" sudo nvim /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy && exit curl -sI "https://danilo-reyes.com/isso/js/embed.min.js" curl -vkI https://blog.danilo-reyes.com/isso/js/embed.min.js sudo cat /etc/caddy/Caddyfile.d/25-static.caddyfile sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy sudo cat /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy curl -vkI https://blog.danilo-reyes.com/isso/ curl -vkI https://blog.danilo-reyes.com/isso/js/embed.min.js curl -vkI http://10.77.0.2:8180/ curl -vkI http://10.77.0.2:8180/js/embed.min.js curl -vkI http://10.77.0.2:8180/ curl -vkI http://10.77.0.2:8180/js/embed.min.js curl -vkI https://blog.danilo-reyes.com/isso/js/embed.min.js curl -vkI https://blog.danilo-reyes.com/isso/ curl -vkI https://blog.danilo-reyes.com/isso 9;6u timedatectl status date-u date -u sudo nvim /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo systemctl restart caddy sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy exit sudo cat /etc/caddy/Caddyfile.d/25-static.caddyfile sudo nvim /etc/caddy/Caddyfile.d/25-static.caddyfile sudo systemctl restart caddy exit sudo cat /etc/caddy/Caddyfile.d/25-static.caddyfile sudo cat /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo dnf search opentracker sudo dnf install -y git gcc make libowfat-devel git clone https://erdgeist.org/gitweb/opentracker cd opentracker/ make sudo dnf install -y libowfat-devel make clean make CFLAGS="-I/usr/include/libowfat" sudo dnf install -y zlib-devel make CFLAGS="-I/usr/include/libowfat" git submodule update --init make clean make ls cd .. git clone git@github.com:masroore/libowfat.git sudo dnf install libowfat git clone git@github.com:masroore/libowfat.git podman docker exit sudo dnf copr enable dlk/rpms sudo dnf install opentracker rm opentracker/ rm opentracker/ -rf sudo systemctl enable --now opentracker sudo systemctl status opentracker sudo cat /etc/opentracker.conf sudo nvim /etc/opentracker.conf sudo nvim /etc/caddy/Caddyfile.d/15-private.caddyfile sudo grep -r 6969 /etc/caddy/Caddyfile.d/ sudo nvim /etc/opentracker.conf sudo systemctl restart opentracker.service sudo systemctl status opentracker sudo nvim /etc/opentracker.conf sudo systemctl restart opentracker.service sudo systemctl status opentracker sudo install -d -m 0750 /var/lib/opentracker sudo install -m 0640 /dev/null /var/lib/opentracker/whitelist sudo install -m 0640 /dev/null /var/lib/opentracker/blacklist sudo systemctl restart opentracker.service sudo systemctl status opentracker ls -lag /var/lib/opentracker/ sudo ls -lag /var/lib/opentracker/ sudo nvim /etc/opentracker.conf sudo systemctl restart opentracker.service sudo systemctl status opentracker sudo chmod 666 /var/lib/opentracker/blacklist sudo systemctl restart opentracker.service sudo systemctl status opentracker sudo iptables -A INPUT -p tcp --dport 6969 -j ACCEPT sudo iptables -A INPUT -p udp --dport 6969 -j ACCEPT sudo iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT sudo iptables -L INPUT -n -v --line-numbers | grep 6969 sudo service iptables save exit ls /etc/wireguard/ sudo ls /etc/wireguard/ sudo cat /etc/wireguard/wg0.conf cat /etc/sysctl.d/99-forward.conf sudo ls /etc/sysctl.d cat /etc/sysctl.d/99-ipforward.conf sudo sysctl net.ipv4.ip_forward sudo -i sudo systemctl status opentracker journalctl -xefu opentracker ss -tnp | grep 6969 sudo sysctl -w net.ipv4.conf.all.rp_filter=0 sudo sysctl -w net.ipv4.conf.eth0.rp_filter=0 sudo sysctl -w net.ipv4.conf.wg0.rp_filter=0 journalctl -xefu opentracker sudo cat /etc/sysconfig/iptables sysctl -w net.ipv4.ip_forward=1 # ---- NAT (insert at top) ---- iptables -t nat -I PREROUTING 1 -i eth0 -p tcp --dport 51412 -j DNAT --to-destination 10.77.0.2:51412 iptables -t nat -I PREROUTING 2 -i eth0 -p udp --dport 51412 -j DNAT --to-destination 10.77.0.2:51412 iptables -t nat -I POSTROUTING 1 -s 10.77.0.0/24 -o eth0 -j MASQUERADE # ---- FORWARD ---- iptables -I FORWARD 1 -i eth0 -o wg0 -p tcp -d 10.77.0.2 --dport 51412 -m conntrack --ctstate NEW,ESTABLISHED,RELATED -j ACCEPT iptables -I FORWARD 2 -i eth0 -o wg0 -p udp -d 10.77.0.2 --dport 51412 -j ACCEPT iptables -I FORWARD 3 -i wg0 -o eth0 -s 10.77.0.2 -p tcp --sport 51412 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT iptables -I FORWARD 4 -i wg0 -o eth0 -s 10.77.0.2 -p udp --sport 51412 -j ACCEPT iptables -I FORWARD 5 -i wg0 -o eth0 -j ACCEPT iptables -I FORWARD 6 -i eth0 -o wg0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT net.ipv4.ip_forward = 1 sudo -i mkfs.ext4 "/dev/disk/by-id/scsi-0Linode_Volume_box" sudo -i mkdir /mnt/box/downloads sudo mkdir /mnt/box/downloads sudo chown jawz:users /mnt/box/downloads/ ls -la sudo chown jawz:jawz /mnt/box/downloads/ qbittorrent-nox sudo useradd --system --create-home --home-dir /var/lib/qbittorrent --shell /sbin/nologin qbittorrent sudo mkdir -p /srv/torrents/{downloads,incomplete,watch} sudo chown -R qbittorrent:qbittorrent /srv/torrents /var/lib/qbittorrent sudo tee /etc/systemd/system/qbittorrent-nox.service >/dev/null <<'EOF' [Unit] Description=qBittorrent (nox) After=network-online.target Wants=network-online.target [Service] Type=simple User=qbittorrent Group=qbittorrent UMask=0027 WorkingDirectory=/var/lib/qbittorrent ExecStart=/usr/bin/qbittorrent-nox --profile=/var/lib/qbittorrent Restart=on-failure RestartSec=3 LimitNOFILE=65536 [Install] WantedBy=multi-user.target EOF sudo systemctl daemon-reload sudo systemctl enable --now qbittorrent-nox sudo systemctl status qbittorrent-nox --no-pager sudo -u qbittorrent nano /var/lib/qbittorrent/qBittorrent/config/qBittorrent.conf sudo systemctl restart qbittorrent-nox sudo nvim /etc/caddy/Caddyfile.d/75-qbittorrent.caddyfile sudo -u qbittorrent nano /var/lib/qbittorrent/qBittorrent/config/qBittorrent.conf sudo systemctl stop qbittorrent-nox sudo -u qbittorrent nano /var/lib/qbittorrent/qBittorrent/config/qBittorrent.conf sudo systemctl start qbittorrent-nox sudo -u qbittorrent nano /var/lib/qbittorrent/qBittorrent/config/qBittorrent.conf sudo nvim /etc/caddy/Caddyfile.d/75-qbittorrent.caddyfile sudo systemctl restart caddy sudo systemctl status qbittorrent-nox --no-pager ls cat /etc/sysconfig/iptables sudo cat /etc/sysconfig/iptables ls /mnt/ ls /mnt/box/ rm /mnt/box/downloads/ rmdir /mnt/box/downloads/ sudo rmdir /mnt/box/downloads/ sudo mv /srv/torrents/* /mnt/box/ sudo umount /mnt/box sudo nvim /etc/fstab sudo mount -a sudo systemctl daemon-reload sudo mount -a ls -lag /srv/torrents/ sudo -u qbittorrent nano /var/lib/qbittorrent/qBittorrent/config/qBittorrent.conf cd /var/lib/qbittorrent/ sudo -i exit sudo -i ssh server exitr exit ls /srv/torrents/ sudo mkdir /srv/torrents/tits sudo chown jawz:jawz /srv/torrents/tits/ ls /srv/torrents/tits/ sudo -i sudo nvim /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo systemctl restart caddy exit ls df -h ssh server exit clear sudoedit /etc/sysconfig/iptables exit sudo grep 6060 /etc/ sudo grep 6060 /etc/ -r sudo grep -r 6969 /etc/ sudo cat /etc/ssh/sshd_config ls clear exit cat /etc/sysconfig/iptables sudo cat /etc/sysconfig/iptables sudo ls /etc/wireguard/ sudo cat /etc/wireguard/wg0.conf sudo -i exit sudo -i sudo -i sudo -i iptables -S sudo iptables -S sudo nvim /etc/wireguard/wg0.conf exit curl # Test paperless (should fail) curl -v --connect-timeout 5 http://192.168.100.15:8000 # Test sabnzbd (should fail) curl -v --connect-timeout 5 http://192.168.100.15:3399 curl -v --connect-timeout 5 http://192.168.100.15:8686 sudo wg show exit sudo systemctl restart wg-quick@wg0.service exit sudo nvim /etc/wireguard/wg0.conf sudo systemctl restart wg-quick@wg0.service sudo nvim /etc/wireguard/wg0.conf exit sudo wg show exit sudo nvim /etc/sysconfig/iptables sudo systemctl restart iptables.service exit sudo systemctl restart wg-quick@wg0.service sudo nvim /etc/caddy/Caddyfile.d/20-servers.caddyfile sudo systemctl restart caddy z nixos exit cat .ssh/id_ed25519.pub cat .ssh/id_ed25519 exit cat /etc/sysconfig/iptables sudo cat /etc/sysconfig/iptables exit sudo -i ls cat vps_public.key ls .ssh/authorized_keys cat .ssh/authorized_keys exit