commit 1a887ea384358ba360f3660485d3d1664272da6f Author: David Sorber Date: Sun Sep 8 16:52:16 2019 -0400 Adding networking configuration for brutus and phalanx. diff --git a/configs/brutus/01-netcfg.yaml b/configs/brutus/01-netcfg.yaml new file mode 100644 index 0000000..ab3ff67 --- /dev/null +++ b/configs/brutus/01-netcfg.yaml @@ -0,0 +1,17 @@ +# This file describes the network interfaces available on your system +# For more information, see netplan(5). +network: + version: 2 + renderer: networkd + ethernets: + enp4s0: + dhcp4: yes + enp1s0d1: + dhcp4: yes + mtu: 9000 + dhcp4-overrides: + route-metric: 200 + routes: + - to: 192.168.250.0/24 + via: 0.0.0.0 + metric: 20 diff --git a/configs/brutus/network_tweaks_brutus.sh b/configs/brutus/network_tweaks_brutus.sh new file mode 100755 index 0000000..73e3d60 --- /dev/null +++ b/configs/brutus/network_tweaks_brutus.sh @@ -0,0 +1,12 @@ +#!/bin/bash + +sleep 2 + +# Delete the default route for enp1s0d1, we only want to use it for 10G +# traffic. NOTE: netplan/networkd correctly is setting the route. +/sbin/route del -net 192.168.0.0 netmask 255.255.0.0 dev enp1s0d1 + +# Set 9000 MTU for the 10G interface enp1s0d1 +/sbin/ifconfig enp1s0d1 mtu 9000 + +exit 0 diff --git a/configs/brutus/networking-tweaks.service b/configs/brutus/networking-tweaks.service new file mode 100644 index 0000000..e573dbc --- /dev/null +++ b/configs/brutus/networking-tweaks.service @@ -0,0 +1,17 @@ +[Unit] +Description=Tweak Some Networking Settings +Wants=network-online.target +After=network-online.target + +[Service] +ExecStart=/home/dsorber/network_tweaks_brutus.sh + +[Install] +WantedBy=multi-user.target + +# Setup +# +# Install network_tweaks_brutus.sh script. +# Copy networking-tweaks.service to /lib/systemd/system/ +# Start it: sudo systemctl start networking-tweaks.service +# Enable it: sudo systemctl enable networking-tweaks.service diff --git a/configs/phalanx/01-netcfg.yaml b/configs/phalanx/01-netcfg.yaml new file mode 100644 index 0000000..97cfbc7 --- /dev/null +++ b/configs/phalanx/01-netcfg.yaml @@ -0,0 +1,19 @@ +# This file describes the network interfaces available on your system +# For more information, see netplan(5). +network: + version: 2 + renderer: networkd + ethernets: + enp1s0f1: + dhcp4: yes + mtu: 9000 + enp1s0f0: + dhcp4: yes + mtu: 9000 + routes: + - to: 192.168.250.0/24 + via: 0.0.0.0 + metric: 20 + enp4s0: + dhcp4: yes + diff --git a/configs/phalanx/apache/baikal.conf b/configs/phalanx/apache/baikal.conf new file mode 100644 index 0000000..2524508 --- /dev/null +++ b/configs/phalanx/apache/baikal.conf @@ -0,0 +1,12 @@ +Alias /calendar /var/www/baikal/html +Alias /calendar/ /var/www/baikal/html/ + + + Options -Indexes + + + + Options None + Options +FollowSymlinks + AllowOverride All + diff --git a/configs/phalanx/apache/main.conf b/configs/phalanx/apache/main.conf new file mode 100644 index 0000000..86c9e4b --- /dev/null +++ b/configs/phalanx/apache/main.conf @@ -0,0 +1,42 @@ + + Redirect permanent / https://10.0.0.6 + + + + ServerName https://10.0.0.6:443 + ServerAdmin webmaster@localhost + + DocumentRoot /var/www + + Options FollowSymLinks + AllowOverride None + + + Options Indexes FollowSymLinks MultiViews + AllowOverride None + Require all granted + + + Alias /htdocs /var/htdocs + + Require all granted + + + #WSGIScriptAlias /bfcs /home/dsorber/bfcs/app.wsgi + + ErrorDocument 403 /error_pages/404.html + ErrorDocument 404 /error_pages/404.html + + CustomLog ${APACHE_LOG_DIR}/access.log combined + ErrorLog ${APACHE_LOG_DIR}/error.log + + # Possible values include: debug, info, notice, warn, error, crit, + # alert, emerg. + LogLevel warn + + SSLEngine On + SSLCertificateFile /etc/apache2/ssl/baranovich.crt + SSLCertificateKeyFile /etc/apache2/ssl/baranovich.key + SSLProtocol -all +TLSv1.2 + SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown + diff --git a/configs/phalanx/apache/nextcloud.conf b/configs/phalanx/apache/nextcloud.conf new file mode 100644 index 0000000..b693da9 --- /dev/null +++ b/configs/phalanx/apache/nextcloud.conf @@ -0,0 +1,14 @@ +Alias /nextcloud "/var/www/nextcloud/" + + + Options +FollowSymlinks + AllowOverride All + + + Dav off + + + SetEnv HOME /var/www/nextcloud + SetEnv HTTP_HOME /var/www/nextcloud + + diff --git a/configs/phalanx/apache/stuff.conf b/configs/phalanx/apache/stuff.conf new file mode 100644 index 0000000..9d9900b --- /dev/null +++ b/configs/phalanx/apache/stuff.conf @@ -0,0 +1,7 @@ + + AuthType Digest + AuthName "stuff" + AuthDigestProvider file + AuthUserFile /home/dsorber/web_users + Require valid-user + diff --git a/configs/phalanx/apache/trac.conf b/configs/phalanx/apache/trac.conf new file mode 100644 index 0000000..1e02b65 --- /dev/null +++ b/configs/phalanx/apache/trac.conf @@ -0,0 +1,21 @@ +WSGIScriptAlias /trac /home/dsorber/trac/projects/headquarters/trac.wsgi + + + WSGIApplicationGroup %{GLOBAL} + Require all granted + + + + AuthType Digest + AuthName "trac" + AuthDigestProvider file + AuthUserFile /home/dsorber/web_users + Require valid-user + + +Alias /trac/chrome/common /home/dsorber/trac/projects/headquarters/htdocs/common +Alias /trac/chrome/site /home/dsorber/trac/projects/headquarters/htdocs/site + + + Require all granted + diff --git a/configs/phalanx/apache/transmission.conf b/configs/phalanx/apache/transmission.conf new file mode 100644 index 0000000..e72b064 --- /dev/null +++ b/configs/phalanx/apache/transmission.conf @@ -0,0 +1,10 @@ +ProxyRequests Off + + AuthType Digest + AuthName "engine" + AuthDigestProvider file + AuthUserFile /home/dsorber/web_users + Require valid-user + ProxyPass http://192.168.8.6:9565/transmission + ProxyPassReverse http://192.168.8.6:9565/transmission + diff --git a/configs/phalanx/network_tweaks_phalanx.sh b/configs/phalanx/network_tweaks_phalanx.sh new file mode 100755 index 0000000..4c02eba --- /dev/null +++ b/configs/phalanx/network_tweaks_phalanx.sh @@ -0,0 +1,12 @@ +#!/bin/bash + +sleep 2 + +# Delete the default route for enp1s0f0, we only want to use it for 10G +# traffic. NOTE: netplan/networkd correctly is setting the route. +/sbin/route del -net 192.168.0.0 netmask 255.255.0.0 dev enp1s0f0 + +# Set 9000 MTU for the 10G interface enp1s0f0 +/sbin/ifconfig enp1s0f0 mtu 9000 + +exit 0 diff --git a/configs/phalanx/networking-tweaks.service b/configs/phalanx/networking-tweaks.service new file mode 100644 index 0000000..0ed4f3e --- /dev/null +++ b/configs/phalanx/networking-tweaks.service @@ -0,0 +1,17 @@ +[Unit] +Description=Tweak Some Networking Settings +Wants=network-online.target +After=network-online.target + +[Service] +ExecStart=/home/dsorber/network_tweaks_phalanx.sh + +[Install] +WantedBy=multi-user.target + +# Setup +# +# Install network_tweaks_phalanx.sh script. +# Copy networking-tweaks.service to /lib/systemd/system/ +# Start it: sudo systemctl start networking-tweaks.service +# Enable it: sudo systemctl enable networking-tweaks.service diff --git a/configs/phalanx/settings.json b/configs/phalanx/settings.json new file mode 100644 index 0000000..f4d4260 --- /dev/null +++ b/configs/phalanx/settings.json @@ -0,0 +1,73 @@ +{ + "alt-speed-down": 3072, + "alt-speed-enabled": false, + "alt-speed-time-begin": 540, + "alt-speed-time-day": 127, + "alt-speed-time-enabled": false, + "alt-speed-time-end": 1020, + "alt-speed-up": 256, + "bind-address-ipv4": "0.0.0.0", + "bind-address-ipv6": "::", + "blocklist-enabled": true, + "blocklist-url": "http://list.iblocklist.com/?list=bt_level1&fileformat=p2p&archiveformat=gz", + "cache-size-mb": 4, + "dht-enabled": true, + "download-dir": "/var/lib/transmission-daemon/downloads", + "download-limit": 100, + "download-limit-enabled": 0, + "download-queue-enabled": true, + "download-queue-size": 5, + "encryption": 1, + "idle-seeding-limit": 30, + "idle-seeding-limit-enabled": false, + "incomplete-dir": "/home/debian-transmission/Downloads", + "incomplete-dir-enabled": false, + "lpd-enabled": false, + "max-peers-global": 200, + "message-level": 1, + "peer-congestion-algorithm": "", + "peer-id-ttl-hours": 6, + "peer-limit-global": 1200, + "peer-limit-per-torrent": 280, + "peer-port": 61993, + "peer-port-random-high": 65535, + "peer-port-random-low": 49152, + "peer-port-random-on-start": false, + "peer-socket-tos": "default", + "pex-enabled": true, + "port-forwarding-enabled": false, + "preallocation": 1, + "prefetch-enabled": true, + "queue-stalled-enabled": true, + "queue-stalled-minutes": 30, + "ratio-limit": 2, + "ratio-limit-enabled": false, + "rename-partial-files": true, + "rpc-authentication-required": false, + "rpc-bind-address": "0.0.0.0", + "rpc-enabled": true, + "rpc-host-whitelist": "", + "rpc-host-whitelist-enabled": true, + "rpc-password": "{8728a1e529016b129773c32f8a5e959c78199d62nqZcItFf", + "rpc-port": 9565, + "rpc-url": "/transmission/", + "rpc-username": "dsorber", + "rpc-whitelist": "192.168.8.*", + "rpc-whitelist-enabled": true, + "scrape-paused-torrents-enabled": true, + "script-torrent-done-enabled": false, + "script-torrent-done-filename": "", + "seed-queue-enabled": false, + "seed-queue-size": 10, + "speed-limit-down": 100, + "speed-limit-down-enabled": false, + "speed-limit-up": 1024, + "speed-limit-up-enabled": true, + "start-added-torrents": true, + "trash-original-torrent-files": false, + "umask": 18, + "upload-limit": 100, + "upload-limit-enabled": 0, + "upload-slots-per-torrent": 14, + "utp-enabled": true +}