[1;33m[WARNING][0m No existing semantic tags found. Starting from v0.0.0
v0.0.1 - Reorganize ISO build tree, add docs/plans/scripts, and stage Phase 2 Slice B+C service integration artifacts
This commit is contained in:
Laan Tungir
6
scratch/deploy.sh
Executable file
6
scratch/deploy.sh
Executable file
@@ -0,0 +1,6 @@
|
||||
|
||||
rsync -v n-os-tr.sh ~/Servers/LaanTungir/WWW/n-os-tr.sh
|
||||
rsync -v test.sh ~/Servers/LaanTungir/WWW/test.sh
|
||||
rsync -v docker.sh ~/Servers/LaanTungir/WWW/docker.sh
|
||||
# rsync -v --delete n_os_tr.sh ~/Servers/LaanTungir/WWW/n-os-tr.sh
|
||||
|
||||
457
scratch/docker.sh
Executable file
457
scratch/docker.sh
Executable file
@@ -0,0 +1,457 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Docker Compose Installation and Nginx Setup Script for Debian
|
||||
set -e
|
||||
|
||||
echo "Starting Docker Compose installation and Nginx setup..."
|
||||
|
||||
# Update package index
|
||||
echo "Updating package index..."
|
||||
sudo apt update
|
||||
|
||||
# Install prerequisites
|
||||
echo "Installing prerequisites..."
|
||||
sudo apt install -y apt-transport-https ca-certificates curl gnupg lsb-release
|
||||
|
||||
# Add Docker's official GPG key
|
||||
echo "Adding Docker's GPG key..."
|
||||
curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
|
||||
|
||||
# Add Docker repository
|
||||
echo "Adding Docker repository..."
|
||||
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
|
||||
|
||||
# Update package index again
|
||||
echo "Updating package index with Docker repository..."
|
||||
sudo apt update
|
||||
|
||||
# Install Docker Engine
|
||||
echo "Installing Docker Engine..."
|
||||
sudo apt install -y docker-ce docker-ce-cli containerd.io
|
||||
|
||||
# Start and enable Docker service
|
||||
echo "Starting Docker service..."
|
||||
sudo systemctl start docker
|
||||
sudo systemctl enable docker
|
||||
|
||||
# Add current user to docker group (optional, requires logout/login to take effect)
|
||||
echo "Adding current user to docker group..."
|
||||
sudo usermod -aG docker $USER
|
||||
|
||||
# Install Docker Compose
|
||||
echo "Installing Docker Compose..."
|
||||
DOCKER_COMPOSE_VERSION=$(curl -s https://api.github.com/repos/docker/compose/releases/latest | grep -Po '"tag_name": "\K.*?(?=")')
|
||||
sudo curl -L "https://github.com/docker/compose/releases/download/${DOCKER_COMPOSE_VERSION}/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
|
||||
sudo chmod +x /usr/local/bin/docker-compose
|
||||
|
||||
# Verify Docker Compose installation
|
||||
echo "Verifying Docker Compose installation..."
|
||||
docker-compose --version
|
||||
|
||||
# Create Docker directory structure
|
||||
echo "Creating Docker directory structure..."
|
||||
mkdir -p Docker
|
||||
cd Docker
|
||||
|
||||
# Create subdirectories
|
||||
mkdir -p strfry/data blossom/data conf.d WWW
|
||||
|
||||
# Create docker-compose.yml
|
||||
echo "Creating docker-compose.yml..."
|
||||
cat > docker-compose.yml << EOF
|
||||
version: '3.8'
|
||||
|
||||
services:
|
||||
nginx:
|
||||
image: nginx:alpine
|
||||
ports:
|
||||
- "80:80"
|
||||
- "443:443"
|
||||
volumes:
|
||||
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||||
- ./conf.d:/etc/nginx/conf.d:ro
|
||||
- ./WWW:/var/www/html:ro
|
||||
- /etc/letsencrypt:/etc/letsencrypt:ro
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- web
|
||||
depends_on:
|
||||
- strfry
|
||||
- blossom
|
||||
|
||||
strfry:
|
||||
image: dockurr/strfry
|
||||
container_name: strfry
|
||||
ports:
|
||||
- "7777:7777" # Internal port for nginx proxy
|
||||
volumes:
|
||||
- ./strfry/data:/app/strfry-db
|
||||
- ./strfry/strfry.conf:/etc/strfry.conf
|
||||
restart: always
|
||||
stop_grace_period: 2m
|
||||
networks:
|
||||
- web
|
||||
|
||||
blossom:
|
||||
image: ghcr.io/hzrd149/blossom-server:master
|
||||
container_name: blossom
|
||||
ports:
|
||||
- "3000:3000" # Internal port for nginx proxy
|
||||
volumes:
|
||||
- ./blossom/data:/app/data
|
||||
- ./blossom/config.yml:/app/config.yml
|
||||
restart: always
|
||||
networks:
|
||||
- web
|
||||
|
||||
networks:
|
||||
web:
|
||||
driver: bridge
|
||||
|
||||
EOF
|
||||
|
||||
# Create nginx main configuration
|
||||
echo "Creating nginx.conf..."
|
||||
cat > nginx.conf << EOF
|
||||
events {
|
||||
worker_connections 1024;
|
||||
}
|
||||
|
||||
http {
|
||||
include /etc/nginx/mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
log_format main '\$remote_addr - \$remote_user [\$time_local] "\$request" '
|
||||
'\$status \$body_bytes_sent "\$http_referer" '
|
||||
'"\$http_user_agent" "\$http_x_forwarded_for"';
|
||||
|
||||
access_log /var/log/nginx/access.log main;
|
||||
sendfile on;
|
||||
keepalive_timeout 65;
|
||||
|
||||
include /etc/nginx/conf.d/*.conf;
|
||||
}
|
||||
EOF
|
||||
|
||||
# Create nginx site configuration
|
||||
echo "Creating nginx site configuration..."
|
||||
cat > conf.d/default.conf << EOF
|
||||
server {
|
||||
listen 80;
|
||||
server_name localhost;
|
||||
|
||||
# Main website
|
||||
location / {
|
||||
root /var/www/html;
|
||||
index index.html index.htm;
|
||||
try_files \$uri \$uri/ =404;
|
||||
}
|
||||
|
||||
# Strfry Nostr relay proxy
|
||||
location /strfry {
|
||||
rewrite ^/strfry(.*) \$1 break;
|
||||
proxy_pass http://strfry:7777;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade \$http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header Host \$host;
|
||||
proxy_set_header X-Real-IP \$remote_addr;
|
||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||
proxy_cache_bypass \$http_upgrade;
|
||||
proxy_read_timeout 86400;
|
||||
}
|
||||
|
||||
# Blossom blob storage proxy
|
||||
location /blossom {
|
||||
rewrite ^/blossom(.*) \$1 break;
|
||||
proxy_pass http://blossom:3000;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade \$http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header Host \$host;
|
||||
proxy_set_header X-Real-IP \$remote_addr;
|
||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||
proxy_cache_bypass \$http_upgrade;
|
||||
client_max_body_size 100M;
|
||||
}
|
||||
}
|
||||
EOF
|
||||
|
||||
# Create strfry configuration
|
||||
echo "Creating strfry configuration..."
|
||||
cat > strfry/strfry.conf << EOF
|
||||
##
|
||||
## Default strfry config
|
||||
##
|
||||
|
||||
# Directory that contains the strfry LMDB database (restart required)
|
||||
db = "./strfry-db/"
|
||||
|
||||
dbParams {
|
||||
# Maximum number of threads/processes that can simultaneously have LMDB transactions open (restart required)
|
||||
maxreaders = 256
|
||||
|
||||
# Size of mmap() to use when loading LMDB (restart required)
|
||||
mapsize = 512MB
|
||||
}
|
||||
|
||||
relay {
|
||||
# Interface to listen on. Use 0.0.0.0 to listen on all interfaces (restart required)
|
||||
bind = "0.0.0.0"
|
||||
|
||||
# Port to open for the nostr websocket protocol (restart required)
|
||||
port = 7777
|
||||
|
||||
# Set OS-limit on maximum number of open files/sockets (if 0, don't attempt to set) (restart required)
|
||||
nofiles = 1000000
|
||||
|
||||
# HTTP header that contains the client's real IP, before reverse proxying (ie x-real-ip) (MUST be all lower-case)
|
||||
realIpHeader = "x-real-ip"
|
||||
|
||||
info {
|
||||
# NIP-11: Name of this server. Short/descriptive (< 30 characters)
|
||||
name = "strfry default"
|
||||
|
||||
# NIP-11: Detailed plain-text description of relay
|
||||
description = "This is a strfry instance."
|
||||
|
||||
# NIP-11: Administrative nostr pubkey, for contact purposes
|
||||
pubkey = ""
|
||||
|
||||
# NIP-11: Alternative administrative contact (email, website, etc)
|
||||
contact = ""
|
||||
}
|
||||
|
||||
# Maximum accepted incoming websocket frame size (should be larger than max event and yesstr msg size)
|
||||
maxWebsocketPayloadSize = 131072
|
||||
|
||||
# Websocket-level PING message frequency (should be less than any reverse proxy idle timeouts)
|
||||
autoPingSeconds = 55
|
||||
|
||||
# If TCP keep-alive should be enabled (detect dropped connections to upstream reverse proxy)
|
||||
enableTcpKeepalive = false
|
||||
|
||||
# How much uninterrupted CPU time a REQ query should get during its DB scan
|
||||
queryTimesliceBudgetMicroseconds = 10000
|
||||
|
||||
# Maximum records that can be returned per filter
|
||||
maxFilterLimit = 500
|
||||
|
||||
# Maximum number of subscriptions (concurrent REQs) a connection can have open at any time
|
||||
maxSubsPerConnection = 20
|
||||
|
||||
writePolicy {
|
||||
# If non-empty, path to an executable script that implements the writePolicy plugin logic
|
||||
plugin = ""
|
||||
}
|
||||
|
||||
compression {
|
||||
# Use permessage-deflate compression if supported by client. Reduces bandwidth, but uses more CPU (restart required)
|
||||
enabled = true
|
||||
|
||||
# Maintain a sliding window buffer for each connection. Improves compression, but uses more memory (restart required)
|
||||
slidingWindow = true
|
||||
}
|
||||
|
||||
logging {
|
||||
# Dump all incoming messages
|
||||
dumpInAll = false
|
||||
|
||||
# Dump all incoming EVENT messages
|
||||
dumpInEvents = false
|
||||
|
||||
# Dump all incoming REQ/CLOSE messages
|
||||
dumpInReqs = false
|
||||
|
||||
# Log performance metrics for initial REQ database scans
|
||||
dbScanPerf = false
|
||||
}
|
||||
|
||||
numThreads {
|
||||
# Ingester threads: route incoming requests, validate events/sigs (restart required)
|
||||
ingester = 3
|
||||
|
||||
# reqWorker threads: Handle initial DB scan for REQ queries (restart required)
|
||||
reqWorker = 3
|
||||
|
||||
# reqMonitor threads: Handle filtering of new events (restart required)
|
||||
reqMonitor = 3
|
||||
|
||||
# yesstr threads: Experimental yesstr protocol (restart required)
|
||||
yesstr = 1
|
||||
}
|
||||
}
|
||||
EOF
|
||||
|
||||
# Create blossom configuration
|
||||
echo "Creating blossom configuration..."
|
||||
cat > blossom/config.yml << EOF
|
||||
# Blossom Server Configuration
|
||||
|
||||
# Server settings
|
||||
server:
|
||||
port: 3000
|
||||
host: "0.0.0.0"
|
||||
|
||||
# Storage settings
|
||||
storage:
|
||||
# Directory to store uploaded files
|
||||
directory: "/app/data"
|
||||
|
||||
# Maximum file size in bytes (100MB)
|
||||
maxFileSize: 104857600
|
||||
|
||||
# Allowed file types (empty array allows all types)
|
||||
allowedTypes: []
|
||||
|
||||
# Enable file deduplication
|
||||
deduplicate: true
|
||||
|
||||
# Authentication settings (optional)
|
||||
auth:
|
||||
# Require authentication for uploads
|
||||
required: false
|
||||
|
||||
# Admin public keys (if auth is enabled)
|
||||
adminKeys: []
|
||||
|
||||
# Rate limiting
|
||||
rateLimit:
|
||||
# Enable rate limiting
|
||||
enabled: true
|
||||
|
||||
# Requests per minute per IP
|
||||
requestsPerMinute: 100
|
||||
|
||||
# Upload requests per minute per IP
|
||||
uploadsPerMinute: 10
|
||||
|
||||
# Logging
|
||||
logging:
|
||||
# Log level: debug, info, warn, error
|
||||
level: "info"
|
||||
|
||||
# Enable access logs
|
||||
accessLogs: true
|
||||
|
||||
# CORS settings
|
||||
cors:
|
||||
# Enable CORS
|
||||
enabled: true
|
||||
|
||||
# Allowed origins (* for all)
|
||||
origins: ["*"]
|
||||
|
||||
# Allowed methods
|
||||
methods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"]
|
||||
|
||||
# Allowed headers
|
||||
headers: ["Content-Type", "Authorization"]
|
||||
|
||||
# Cleanup settings
|
||||
cleanup:
|
||||
# Enable automatic cleanup of old files
|
||||
enabled: false
|
||||
|
||||
# Maximum age of files in days
|
||||
maxAge: 30
|
||||
|
||||
# Cleanup interval in hours
|
||||
interval: 24
|
||||
EOF
|
||||
|
||||
# Create sample HTML content
|
||||
echo "Creating sample HTML content..."
|
||||
cat > WWW/index.html << EOF
|
||||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<title>Nostr Services - Docker Setup</title>
|
||||
<style>
|
||||
body {
|
||||
font-family: Arial, sans-serif;
|
||||
text-align: center;
|
||||
margin-top: 50px;
|
||||
background-color: #f5f5f5;
|
||||
}
|
||||
.container {
|
||||
max-width: 800px;
|
||||
margin: 0 auto;
|
||||
background: white;
|
||||
padding: 2rem;
|
||||
border-radius: 10px;
|
||||
box-shadow: 0 2px 10px rgba(0,0,0,0.1);
|
||||
}
|
||||
h1 { color: #333; }
|
||||
.service {
|
||||
margin: 20px 0;
|
||||
padding: 15px;
|
||||
border: 1px solid #ddd;
|
||||
border-radius: 5px;
|
||||
background-color: #f9f9f9;
|
||||
}
|
||||
.service h3 { margin-top: 0; color: #555; }
|
||||
a { color: #007bff; text-decoration: none; }
|
||||
a:hover { text-decoration: underline; }
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="container">
|
||||
<h1>Nostr Services - Docker Setup</h1>
|
||||
<p>Your Nostr infrastructure is running successfully!</p>
|
||||
|
||||
<div class="service">
|
||||
<h3>🔗 Strfry Nostr Relay</h3>
|
||||
<p>Nostr relay for storing and retrieving events</p>
|
||||
<p><strong>Endpoint:</strong> <a href="/strfry" target="_blank">ws://localhost/strfry</a></p>
|
||||
</div>
|
||||
|
||||
<div class="service">
|
||||
<h3>🌸 Blossom Blob Storage</h3>
|
||||
<p>Decentralized blob storage for media files</p>
|
||||
<p><strong>Endpoint:</strong> <a href="/blossom" target="_blank">http://localhost/blossom</a></p>
|
||||
</div>
|
||||
|
||||
<div style="margin-top: 30px; padding-top: 20px; border-top: 1px solid #eee;">
|
||||
<p><em>Services are proxied through Nginx and running in Docker containers</em></p>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
EOF
|
||||
|
||||
# Start services using Docker Compose
|
||||
echo "Starting Docker services..."
|
||||
sudo docker-compose up -d
|
||||
|
||||
# Go back to original directory
|
||||
cd ..
|
||||
|
||||
# Show running containers
|
||||
echo "Docker containers status:"
|
||||
sudo docker ps
|
||||
|
||||
echo ""
|
||||
echo "Installation and setup completed!"
|
||||
echo ""
|
||||
echo "Docker directory structure created with:"
|
||||
echo "- Strfry Nostr relay configuration and data directory"
|
||||
echo "- Blossom blob storage configuration and data directory"
|
||||
echo "- Nginx reverse proxy configuration"
|
||||
echo "- Sample website content"
|
||||
echo ""
|
||||
echo "Services are now running and accessible at:"
|
||||
echo "- Main site: http://localhost"
|
||||
echo "- Strfry relay: ws://localhost/strfry"
|
||||
echo "- Blossom storage: http://localhost/blossom"
|
||||
echo "- External IP: http://$(hostname -I | awk '{print $1}')"
|
||||
echo ""
|
||||
echo "Docker management commands (run from Docker/ directory):"
|
||||
echo "- Stop services: cd Docker && sudo docker-compose down"
|
||||
echo "- View logs: cd Docker && sudo docker-compose logs [service_name]"
|
||||
echo "- Restart services: cd Docker && sudo docker-compose restart"
|
||||
echo "- View status: sudo docker ps"
|
||||
echo ""
|
||||
echo "Note: You may need to logout and login again for docker group permissions to take effect."
|
||||
700
scratch/n-os-tr.sh
Executable file
700
scratch/n-os-tr.sh
Executable file
@@ -0,0 +1,700 @@
|
||||
#!/bin/bash
|
||||
|
||||
# To download and execute
|
||||
# curl -s https://corpum.com/root.sh | bash
|
||||
|
||||
# To set up larger font on system
|
||||
# dpkg-reconfigure console-setup
|
||||
|
||||
echo "";
|
||||
echo " ██████ ███████ ";
|
||||
echo " ██ ██ ██ ";
|
||||
echo " ███████ ██ ██ ███████ ██████ █████ ";
|
||||
echo " ██ ██ ██ ██ ██ ██ ██ ██ ";
|
||||
echo " ██ ██ █████ ██████ ███████ █████ ██ ██ ";
|
||||
echo "";
|
||||
|
||||
|
||||
printf "\n\n
|
||||
#############################################################################
|
||||
# Setup System
|
||||
#############################################################################
|
||||
\n\n"
|
||||
|
||||
sudo hostnamectl set-hostname nostr
|
||||
|
||||
#CREATE MY DIRECTORIES
|
||||
mkdir -p ~/Downloads
|
||||
mkdir -p ~/Applications
|
||||
mkdir -p ~/Pictures
|
||||
mkdir -p ~/Music
|
||||
mkdir -p ~/Temp
|
||||
mkdir -p ~/Trash
|
||||
|
||||
# ALIAI
|
||||
#############################################################################
|
||||
echo "alias ll='ls -l'" >> ~/.bashrc
|
||||
echo "alias la='ls -a'" >> ~/.bashrc
|
||||
echo "alias lla='ls -al'" >> ~/.bashrc
|
||||
echo "alias l='ls -CF'" >> ~/.bashrc
|
||||
echo "alias ss='gnome-screenshot -a'" >> ~/.bashrc
|
||||
echo "alias untargz='tar -xzf'" >> ~/.bashrc
|
||||
|
||||
|
||||
# (DE)COMPRESSION
|
||||
#############################################################################
|
||||
echo "alias un.tar.bz2='tar xvjf'" >> ~/.bashrc
|
||||
echo "alias un.tar.gz='tar -xzf'" >> ~/.bashrc
|
||||
echo "alias un.gz=gunzip" >> ~/.bashrc
|
||||
|
||||
|
||||
|
||||
printf "\n\n
|
||||
#############################################################################
|
||||
# INSTALL GENERAL SOFTWARE BEFORE WE GO DARK ...
|
||||
#############################################################################
|
||||
\n\n"
|
||||
|
||||
#UPDATE THE SYTEM
|
||||
sudo add-apt-repository ppa:arduino-team/arduino-stable
|
||||
sudo apt update -y;
|
||||
# sudo apt upgrade -y;
|
||||
|
||||
#GENERAL TOOLS
|
||||
sudo apt install htop -y
|
||||
sudo apt install ranger -y
|
||||
sudo apt install sshfs -y
|
||||
sudo apt install curl -y
|
||||
sudo apt install vim -y
|
||||
sudo apt install secure-delete -y
|
||||
sudo apt install jq -y
|
||||
sudo apt install wget -y
|
||||
sudo apt install arduino -y
|
||||
sudo apt install font-manager -y
|
||||
sudo apt install moreutils -y;
|
||||
#FUN
|
||||
sudo apt install cmatrix -y
|
||||
|
||||
printf "\n\n
|
||||
#############################################################################
|
||||
# BRAVE BROWSER
|
||||
#############################################################################
|
||||
\n\n"
|
||||
sudo curl -fsS https://dl.brave.com/install.sh | sh
|
||||
|
||||
|
||||
printf "\n
|
||||
|
||||
#############################################################################
|
||||
# CODIUM
|
||||
#############################################################################
|
||||
|
||||
\n
|
||||
"
|
||||
# Detect system architecture
|
||||
ARCH=$(dpkg --print-architecture)
|
||||
|
||||
# Get the latest release info and extract the appropriate .deb download URL
|
||||
CODIUM_URL=$(curl -s https://api.github.com/repos/vscodium/vscodium/releases/latest \
|
||||
| grep "browser_download_url.*codium_.*_${ARCH}\.deb" \
|
||||
| grep -v "\.sha" \
|
||||
| cut -d'"' -f4)
|
||||
|
||||
echo "Found VSCodium URL: $CODIUM_URL"
|
||||
|
||||
# Check if URL was found
|
||||
if [ -z "$CODIUM_URL" ]; then
|
||||
echo "Error: Could not find VSCodium .deb download URL"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Download the .deb file using curl
|
||||
echo "Downloading VSCodium..."
|
||||
curl -L -o "codium_${ARCH}.deb" "$CODIUM_URL"
|
||||
|
||||
# Check if download was successful
|
||||
if [ $? -ne 0 ]; then
|
||||
echo "Error: Failed to download VSCodium"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Install the .deb package
|
||||
echo "Installing VSCodium..."
|
||||
sudo apt update
|
||||
sudo apt install -y "./codium_${ARCH}.deb"
|
||||
|
||||
# Clean up the downloaded file
|
||||
sudo rm "codium_${ARCH}.deb"
|
||||
|
||||
echo "VSCodium installation completed!"
|
||||
|
||||
|
||||
|
||||
|
||||
printf "\n\n
|
||||
#############################################################################
|
||||
# TIME TO GO DARK
|
||||
#############################################################################
|
||||
\n\n
|
||||
#############################################################################
|
||||
# INSTALL TOR
|
||||
#############################################################################
|
||||
\n\n"
|
||||
|
||||
|
||||
# apt update;
|
||||
sudo apt install -y tor;
|
||||
sudo apt install -y apt-transport-tor;
|
||||
|
||||
sudo sed -i 's/#ControlPort 9051/ControlPort 9051/' /etc/tor/torrc
|
||||
sudo sed -i 's/#CookieAuthentication 1/CookieAuthentication 0/' /etc/tor/torrc
|
||||
sudo /etc/init.d/tor restart
|
||||
|
||||
|
||||
printf "\n\n****** Current IP******"
|
||||
curl ifconfig.me
|
||||
|
||||
printf "\n\n****** Tor IP ******"
|
||||
# torify curl ifconfig.me 2>/dev/null
|
||||
torify curl checkip.amazonaws.com
|
||||
|
||||
echo "Press any key to continue..."
|
||||
read -n 1 -s
|
||||
printf "\n"
|
||||
|
||||
|
||||
printf "\n\n
|
||||
#############################################################################
|
||||
# MULLVAD
|
||||
#############################################################################
|
||||
\n\n"
|
||||
|
||||
|
||||
sudo torify curl -fsSLo /usr/share/keyrings/mullvad-keyring.asc https://repository.mullvad.net/deb/mullvad-keyring.asc;
|
||||
printf "deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg --print-architecture )] https://repository.mullvad.net/deb/stable $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/mullvad.list;
|
||||
|
||||
sudo apt update;
|
||||
sudo apt install mullvad-vpn;
|
||||
|
||||
mullvad account login 6627506529903776;
|
||||
mullvad lockdown-mode set on;
|
||||
mullvad relay set location ch;
|
||||
mullvad connect;
|
||||
|
||||
while true; do
|
||||
# Run the command
|
||||
mullvad status;
|
||||
|
||||
# Ask for confirmation to run it again
|
||||
read -p "Run again? It may take a couple tries (y/n) " answer
|
||||
|
||||
# Check the answer and break the loop if it's not "y"
|
||||
case $answer in
|
||||
y|Y) continue ;;
|
||||
n|N) break ;;
|
||||
*) echo "Invalid input. Please enter y or n." ;;
|
||||
esac
|
||||
done
|
||||
|
||||
printf "\n\n
|
||||
#############################################################################
|
||||
# NAK - Nostr Army Knife
|
||||
#############################################################################
|
||||
\n\n"
|
||||
|
||||
# Detect architecture for NAK
|
||||
if [ "$ARCH" = "amd64" ]; then
|
||||
NAK_ARCH="amd64"
|
||||
elif [ "$ARCH" = "arm64" ]; then
|
||||
NAK_ARCH="arm64"
|
||||
else
|
||||
NAK_ARCH="amd64" # fallback
|
||||
fi
|
||||
|
||||
NAK_URL=$(curl -s https://api.github.com/repos/fiatjaf/nak/releases/latest \
|
||||
| grep "browser_download_url" \
|
||||
| grep "linux-${NAK_ARCH}" \
|
||||
| cut -d'"' -f4)
|
||||
|
||||
echo "Found NAK URL: $NAK_URL"
|
||||
sudo curl -s -L $NAK_URL -o /usr/local/bin/nak
|
||||
sudo chmod +x /usr/local/bin/nak
|
||||
echo "NAK deployed. Thank you FiatJaf!"
|
||||
|
||||
|
||||
printf "\n\n
|
||||
#############################################################################
|
||||
# DOCKER - NGINX - STRFRY - BLOSSOM
|
||||
#############################################################################
|
||||
\n\n"
|
||||
|
||||
#!/bin/bash
|
||||
|
||||
# Docker Compose Installation and Nginx Setup Script for Debian
|
||||
set -e
|
||||
|
||||
echo "Starting Docker Compose installation and Nginx setup..."
|
||||
|
||||
# Install prerequisites
|
||||
echo "Installing prerequisites..."
|
||||
sudo apt install -y apt-transport-https ca-certificates curl gnupg lsb-release
|
||||
|
||||
# Add Docker's official GPG key
|
||||
echo "Adding Docker's GPG key..."
|
||||
curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
|
||||
|
||||
# Add Docker repository
|
||||
echo "Adding Docker repository..."
|
||||
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
|
||||
|
||||
# Update package index again
|
||||
echo "Updating package index with Docker repository..."
|
||||
sudo apt update
|
||||
|
||||
# Install Docker Engine
|
||||
echo "Installing Docker Engine..."
|
||||
sudo apt install -y docker-ce docker-ce-cli containerd.io
|
||||
|
||||
# Start and enable Docker service
|
||||
echo "Starting Docker service..."
|
||||
sudo systemctl start docker
|
||||
sudo systemctl enable docker
|
||||
|
||||
# Add current user to docker group (optional, requires logout/login to take effect)
|
||||
echo "Adding current user to docker group..."
|
||||
sudo usermod -aG docker $USER
|
||||
|
||||
# Install Docker Compose
|
||||
echo "Installing Docker Compose..."
|
||||
DOCKER_COMPOSE_VERSION=$(curl -s https://api.github.com/repos/docker/compose/releases/latest | grep -Po '"tag_name": "\K.*?(?=")')
|
||||
sudo curl -L "https://github.com/docker/compose/releases/download/${DOCKER_COMPOSE_VERSION}/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
|
||||
sudo chmod +x /usr/local/bin/docker-compose
|
||||
|
||||
# Verify Docker Compose installation
|
||||
echo "Verifying Docker Compose installation..."
|
||||
docker-compose --version
|
||||
|
||||
# Create Docker directory structure
|
||||
echo "Creating Docker directory structure..."
|
||||
mkdir -p Docker
|
||||
cd Docker
|
||||
|
||||
# Create subdirectories
|
||||
mkdir -p strfry/data blossom/data conf.d WWW
|
||||
|
||||
# Create docker-compose.yml
|
||||
echo "Creating docker-compose.yml..."
|
||||
cat > docker-compose.yml << EOF
|
||||
version: '3.8'
|
||||
|
||||
services:
|
||||
nginx:
|
||||
image: nginx
|
||||
ports:
|
||||
- "80:80"
|
||||
- "443:443"
|
||||
volumes:
|
||||
- ./nginx.conf:/etc/nginx/nginx.conf:ro
|
||||
- ./conf.d:/etc/nginx/conf.d:ro
|
||||
- ./WWW:/var/www/html:ro
|
||||
- /etc/letsencrypt:/etc/letsencrypt:ro
|
||||
restart: unless-stopped
|
||||
networks:
|
||||
- web
|
||||
depends_on:
|
||||
- strfry
|
||||
- blossom
|
||||
|
||||
strfry:
|
||||
image: dockurr/strfry
|
||||
container_name: strfry
|
||||
ports:
|
||||
- "7777:7777" # Internal port for nginx proxy
|
||||
volumes:
|
||||
- ./strfry/data:/app/strfry-db
|
||||
- ./strfry/strfry.conf:/etc/strfry.conf
|
||||
restart: always
|
||||
stop_grace_period: 2m
|
||||
networks:
|
||||
- web
|
||||
|
||||
blossom:
|
||||
image: ghcr.io/hzrd149/blossom-server:master
|
||||
container_name: blossom
|
||||
ports:
|
||||
- "3000:3000" # Internal port for nginx proxy
|
||||
volumes:
|
||||
- ./blossom/data:/app/data
|
||||
- ./blossom/config.yml:/app/config.yml
|
||||
restart: always
|
||||
networks:
|
||||
- web
|
||||
|
||||
networks:
|
||||
web:
|
||||
driver: bridge
|
||||
|
||||
EOF
|
||||
|
||||
# Create nginx main configuration
|
||||
echo "Creating nginx.conf..."
|
||||
cat > nginx.conf << EOF
|
||||
events {
|
||||
worker_connections 1024;
|
||||
}
|
||||
|
||||
http {
|
||||
include /etc/nginx/mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
log_format main '\$remote_addr - \$remote_user [\$time_local] "\$request" '
|
||||
'\$status \$body_bytes_sent "\$http_referer" '
|
||||
'"\$http_user_agent" "\$http_x_forwarded_for"';
|
||||
|
||||
access_log /var/log/nginx/access.log main;
|
||||
sendfile on;
|
||||
keepalive_timeout 65;
|
||||
|
||||
include /etc/nginx/conf.d/*.conf;
|
||||
}
|
||||
EOF
|
||||
|
||||
# Create nginx site configuration
|
||||
echo "Creating nginx site configuration..."
|
||||
cat > conf.d/default.conf << EOF
|
||||
server {
|
||||
listen 80;
|
||||
server_name localhost;
|
||||
|
||||
# Main website
|
||||
location / {
|
||||
root /var/www/html;
|
||||
index index.html index.htm;
|
||||
try_files \$uri \$uri/ =404;
|
||||
}
|
||||
|
||||
# Strfry Nostr relay proxy
|
||||
location /strfry {
|
||||
rewrite ^/strfry(.*) \$1 break;
|
||||
proxy_pass http://strfry:7777;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade \$http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header Host \$host;
|
||||
proxy_set_header X-Real-IP \$remote_addr;
|
||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||
proxy_cache_bypass \$http_upgrade;
|
||||
proxy_read_timeout 86400;
|
||||
}
|
||||
|
||||
# Blossom blob storage proxy
|
||||
location /blossom {
|
||||
rewrite ^/blossom(.*) \$1 break;
|
||||
proxy_pass http://blossom:3000;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade \$http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header Host \$host;
|
||||
proxy_set_header X-Real-IP \$remote_addr;
|
||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||
proxy_cache_bypass \$http_upgrade;
|
||||
client_max_body_size 100M;
|
||||
}
|
||||
}
|
||||
EOF
|
||||
|
||||
# Create strfry configuration
|
||||
echo "Creating strfry configuration..."
|
||||
cat > strfry/strfry.conf << EOF
|
||||
##
|
||||
## Default strfry config
|
||||
##
|
||||
|
||||
# Directory that contains the strfry LMDB database (restart required)
|
||||
db = "./strfry-db/"
|
||||
|
||||
dbParams {
|
||||
# Maximum number of threads/processes that can simultaneously have LMDB transactions open (restart required)
|
||||
maxreaders = 256
|
||||
|
||||
# Size of mmap() to use when loading LMDB (restart required)
|
||||
mapsize = 512MB
|
||||
}
|
||||
|
||||
relay {
|
||||
# Interface to listen on. Use 0.0.0.0 to listen on all interfaces (restart required)
|
||||
bind = "0.0.0.0"
|
||||
|
||||
# Port to open for the nostr websocket protocol (restart required)
|
||||
port = 7777
|
||||
|
||||
# Set OS-limit on maximum number of open files/sockets (if 0, don't attempt to set) (restart required)
|
||||
nofiles = 1000000
|
||||
|
||||
# HTTP header that contains the client's real IP, before reverse proxying (ie x-real-ip) (MUST be all lower-case)
|
||||
realIpHeader = "x-real-ip"
|
||||
|
||||
info {
|
||||
# NIP-11: Name of this server. Short/descriptive (< 30 characters)
|
||||
name = "strfry default"
|
||||
|
||||
# NIP-11: Detailed plain-text description of relay
|
||||
description = "This is a strfry instance."
|
||||
|
||||
# NIP-11: Administrative nostr pubkey, for contact purposes
|
||||
pubkey = ""
|
||||
|
||||
# NIP-11: Alternative administrative contact (email, website, etc)
|
||||
contact = ""
|
||||
}
|
||||
|
||||
# Maximum accepted incoming websocket frame size (should be larger than max event and yesstr msg size)
|
||||
maxWebsocketPayloadSize = 131072
|
||||
|
||||
# Websocket-level PING message frequency (should be less than any reverse proxy idle timeouts)
|
||||
autoPingSeconds = 55
|
||||
|
||||
# If TCP keep-alive should be enabled (detect dropped connections to upstream reverse proxy)
|
||||
enableTcpKeepalive = false
|
||||
|
||||
# How much uninterrupted CPU time a REQ query should get during its DB scan
|
||||
queryTimesliceBudgetMicroseconds = 10000
|
||||
|
||||
# Maximum records that can be returned per filter
|
||||
maxFilterLimit = 500
|
||||
|
||||
# Maximum number of subscriptions (concurrent REQs) a connection can have open at any time
|
||||
maxSubsPerConnection = 20
|
||||
|
||||
writePolicy {
|
||||
# If non-empty, path to an executable script that implements the writePolicy plugin logic
|
||||
plugin = ""
|
||||
}
|
||||
|
||||
compression {
|
||||
# Use permessage-deflate compression if supported by client. Reduces bandwidth, but uses more CPU (restart required)
|
||||
enabled = true
|
||||
|
||||
# Maintain a sliding window buffer for each connection. Improves compression, but uses more memory (restart required)
|
||||
slidingWindow = true
|
||||
}
|
||||
|
||||
logging {
|
||||
# Dump all incoming messages
|
||||
dumpInAll = false
|
||||
|
||||
# Dump all incoming EVENT messages
|
||||
dumpInEvents = false
|
||||
|
||||
# Dump all incoming REQ/CLOSE messages
|
||||
dumpInReqs = false
|
||||
|
||||
# Log performance metrics for initial REQ database scans
|
||||
dbScanPerf = false
|
||||
}
|
||||
|
||||
numThreads {
|
||||
# Ingester threads: route incoming requests, validate events/sigs (restart required)
|
||||
ingester = 3
|
||||
|
||||
# reqWorker threads: Handle initial DB scan for REQ queries (restart required)
|
||||
reqWorker = 3
|
||||
|
||||
# reqMonitor threads: Handle filtering of new events (restart required)
|
||||
reqMonitor = 3
|
||||
|
||||
# yesstr threads: Experimental yesstr protocol (restart required)
|
||||
yesstr = 1
|
||||
}
|
||||
}
|
||||
EOF
|
||||
|
||||
# Create blossom configuration
|
||||
echo "Creating blossom configuration..."
|
||||
cat > blossom/config.yml << EOF
|
||||
# Blossom Server Configuration
|
||||
|
||||
# Server settings
|
||||
server:
|
||||
port: 3000
|
||||
host: "0.0.0.0"
|
||||
|
||||
# Storage settings
|
||||
storage:
|
||||
# Directory to store uploaded files
|
||||
directory: "/app/data"
|
||||
|
||||
# Maximum file size in bytes (100MB)
|
||||
maxFileSize: 104857600
|
||||
|
||||
# Allowed file types (empty array allows all types)
|
||||
allowedTypes: []
|
||||
|
||||
# Enable file deduplication
|
||||
deduplicate: true
|
||||
|
||||
# Authentication settings (optional)
|
||||
auth:
|
||||
# Require authentication for uploads
|
||||
required: false
|
||||
|
||||
# Admin public keys (if auth is enabled)
|
||||
adminKeys: []
|
||||
|
||||
# Rate limiting
|
||||
rateLimit:
|
||||
# Enable rate limiting
|
||||
enabled: true
|
||||
|
||||
# Requests per minute per IP
|
||||
requestsPerMinute: 100
|
||||
|
||||
# Upload requests per minute per IP
|
||||
uploadsPerMinute: 10
|
||||
|
||||
# Logging
|
||||
logging:
|
||||
# Log level: debug, info, warn, error
|
||||
level: "info"
|
||||
|
||||
# Enable access logs
|
||||
accessLogs: true
|
||||
|
||||
# CORS settings
|
||||
cors:
|
||||
# Enable CORS
|
||||
enabled: true
|
||||
|
||||
# Allowed origins (* for all)
|
||||
origins: ["*"]
|
||||
|
||||
# Allowed methods
|
||||
methods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"]
|
||||
|
||||
# Allowed headers
|
||||
headers: ["Content-Type", "Authorization"]
|
||||
|
||||
# Cleanup settings
|
||||
cleanup:
|
||||
# Enable automatic cleanup of old files
|
||||
enabled: false
|
||||
|
||||
# Maximum age of files in days
|
||||
maxAge: 30
|
||||
|
||||
# Cleanup interval in hours
|
||||
interval: 24
|
||||
EOF
|
||||
|
||||
# Create sample HTML content
|
||||
echo "Creating sample HTML content..."
|
||||
cat > WWW/index.html << EOF
|
||||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<title>Nostr Services - Docker Setup</title>
|
||||
<style>
|
||||
body {
|
||||
font-family: Arial, sans-serif;
|
||||
text-align: center;
|
||||
margin-top: 50px;
|
||||
background-color: #f5f5f5;
|
||||
}
|
||||
.container {
|
||||
max-width: 800px;
|
||||
margin: 0 auto;
|
||||
background: white;
|
||||
padding: 2rem;
|
||||
border-radius: 10px;
|
||||
box-shadow: 0 2px 10px rgba(0,0,0,0.1);
|
||||
}
|
||||
h1 { color: #333; }
|
||||
.service {
|
||||
margin: 20px 0;
|
||||
padding: 15px;
|
||||
border: 1px solid #ddd;
|
||||
border-radius: 5px;
|
||||
background-color: #f9f9f9;
|
||||
}
|
||||
.service h3 { margin-top: 0; color: #555; }
|
||||
a { color: #007bff; text-decoration: none; }
|
||||
a:hover { text-decoration: underline; }
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<div class="container">
|
||||
<h1>Nostr Services - Docker Setup</h1>
|
||||
<p>Your Nostr infrastructure is running successfully!</p>
|
||||
|
||||
<div class="service">
|
||||
<h3>🔗 Strfry Nostr Relay</h3>
|
||||
<p>Nostr relay for storing and retrieving events</p>
|
||||
<p><strong>Endpoint:</strong> <a href="/strfry" target="_blank">ws://localhost/strfry</a></p>
|
||||
</div>
|
||||
|
||||
<div class="service">
|
||||
<h3>🌸 Blossom Blob Storage</h3>
|
||||
<p>Decentralized blob storage for media files</p>
|
||||
<p><strong>Endpoint:</strong> <a href="/blossom" target="_blank">http://localhost/blossom</a></p>
|
||||
</div>
|
||||
|
||||
<div style="margin-top: 30px; padding-top: 20px; border-top: 1px solid #eee;">
|
||||
<p><em>Services are proxied through Nginx and running in Docker containers</em></p>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
EOF
|
||||
|
||||
# Start services using Docker Compose
|
||||
echo "Starting Docker services..."
|
||||
sudo docker-compose up -d
|
||||
|
||||
# Go back to original directory
|
||||
cd ..
|
||||
|
||||
# Show running containers
|
||||
echo "Docker containers status:"
|
||||
sudo docker ps
|
||||
|
||||
echo ""
|
||||
echo "Installation and setup completed!"
|
||||
echo ""
|
||||
echo "Docker directory structure created with:"
|
||||
echo "- Strfry Nostr relay configuration and data directory"
|
||||
echo "- Blossom blob storage configuration and data directory"
|
||||
echo "- Nginx reverse proxy configuration"
|
||||
echo "- Sample website content"
|
||||
echo ""
|
||||
echo "Services are now running and accessible at:"
|
||||
echo "- Main site: http://localhost"
|
||||
echo "- Strfry relay: ws://localhost/strfry"
|
||||
echo "- Blossom storage: http://localhost/blossom"
|
||||
echo "- External IP: http://$(hostname -I | awk '{print $1}')"
|
||||
echo ""
|
||||
echo "Docker management commands (run from Docker/ directory):"
|
||||
echo "- Stop services: cd Docker && sudo docker-compose down"
|
||||
echo "- View logs: cd Docker && sudo docker-compose logs [service_name]"
|
||||
echo "- Restart services: cd Docker && sudo docker-compose restart"
|
||||
echo "- View status: sudo docker ps"
|
||||
echo ""
|
||||
echo "Note: You may need to logout and login again for docker group permissions to take effect."
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
printf "\n\n
|
||||
#############################################################################
|
||||
# CLEAR COMMAND LINE HISTORY
|
||||
#############################################################################
|
||||
\n\n"
|
||||
history -c
|
||||
# sudo -u root gnome-terminal --working-directory=/root & exit
|
||||
BIN
scratch/nak
Normal file
BIN
scratch/nak
Normal file
Binary file not shown.
9
scratch/nginx.sh
Normal file
9
scratch/nginx.sh
Normal file
@@ -0,0 +1,9 @@
|
||||
#!/bin/bash
|
||||
|
||||
mkdir ~/Nginx;
|
||||
ln -s /var/www/ ~/Nginx/www
|
||||
ln -s /etc/nginx/nginx.conf ~/Nginx/nginx.conf
|
||||
ln -s /etc/nginx/sites-available ~/Nginx/sites-available
|
||||
ln -s /etc/nginx/sites-enabled ~/Nginx/sites-enabled
|
||||
|
||||
mkdir ~/Strfry;
|
||||
200
scratch/root.sh
Executable file
200
scratch/root.sh
Executable file
@@ -0,0 +1,200 @@
|
||||
#!/bin/bash
|
||||
|
||||
# To download and execute
|
||||
# curl -s https://corpum.com/root.sh | bash
|
||||
|
||||
# To set up larger font on system
|
||||
# dpkg-reconfigure console-setup
|
||||
|
||||
|
||||
#CHANGE HOSTNAME
|
||||
#EDIT /etc/hostname
|
||||
#EDIT /etc/hosts
|
||||
# or
|
||||
hostnamectl set-hostname nostr;
|
||||
|
||||
|
||||
#CREATE MY DIRECTORIES
|
||||
mkdir /root/Downloads;
|
||||
mkdir /root/Applications;
|
||||
mkdir /root/Temp;
|
||||
mkdir /root/Trash;
|
||||
|
||||
|
||||
#UPDATE THE SYTEM
|
||||
apt update -y;
|
||||
# apt upgrade -y;
|
||||
|
||||
#GENERAL TOOLS
|
||||
apt install htop -y
|
||||
apt install ranger -y
|
||||
apt install sshfs -y
|
||||
apt install curl -y
|
||||
apt install vim -y
|
||||
apt install secure-delete -y
|
||||
apt install jq -y
|
||||
apt install wget -y
|
||||
# apt-get install syncthing -y
|
||||
add-apt-repository ppa:arduino-team/arduino-stable
|
||||
apt update
|
||||
apt install arduino -y
|
||||
apt install font-manager -y
|
||||
apt install -y docker.io
|
||||
systemctl start docker
|
||||
apt install moreutils -y;
|
||||
|
||||
#NODE
|
||||
# curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.2/install.sh | bash
|
||||
|
||||
# nvm install node
|
||||
|
||||
|
||||
#FUN
|
||||
apt install cmatrix -y
|
||||
|
||||
#############################################################################
|
||||
# ALIAI
|
||||
#############################################################################
|
||||
|
||||
# BASIC COMMANDS
|
||||
#############################################################################
|
||||
echo "alias ll='ls -l'" >> ~/.bashrc
|
||||
echo "alias la='ls -a'" >> ~/.bashrc
|
||||
echo "alias lla='ls -al'" >> ~/.bashrc
|
||||
echo "alias l='ls -CF'" >> ~/.bashrc
|
||||
echo "alias ss='gnome-screenshot -a'" >> ~/.bashrc
|
||||
echo "alias untargz='tar -xzf'" >> ~/.bashrc
|
||||
|
||||
|
||||
# (DE)COMPRESSION
|
||||
#############################################################################
|
||||
echo "alias un.tar.bz2='tar xvjf'" >> ~/.bashrc
|
||||
echo "alias un.tar.gz='tar -xzf'" >> ~/.bashrc
|
||||
echo "alias un.gz=gunzip" >> ~/.bashrc
|
||||
|
||||
|
||||
# FINAL
|
||||
#############################################################################
|
||||
echo "Run 'source .bashrc' to load aliai."
|
||||
|
||||
# BACKGROUND COLOR
|
||||
#############################################################################
|
||||
gsettings set org.gnome.desktop.background picture-options 'none'
|
||||
gsettings set org.gnome.desktop.background primary-color '#000000'
|
||||
|
||||
|
||||
|
||||
printf "
|
||||
|
||||
#############################################################################
|
||||
# TOR
|
||||
#############################################################################
|
||||
|
||||
"
|
||||
# apt update;
|
||||
apt install -y tor;
|
||||
apt install -y apt-transport-tor;
|
||||
|
||||
sed -i 's/#ControlPort 9051/ControlPort 9051/' /etc/tor/torrc
|
||||
sed -i 's/#CookieAuthentication 1/CookieAuthentication 0/' /etc/tor/torrc
|
||||
/etc/init.d/tor restart
|
||||
|
||||
|
||||
printf "\n\n****** Current IP******"
|
||||
curl ifconfig.me
|
||||
|
||||
printf "\n\n****** Tor IP ******"
|
||||
# torify curl ifconfig.me 2>/dev/null
|
||||
torify curl checkip.amazonaws.com
|
||||
|
||||
echo "Press any key to continue..."
|
||||
read -n 1 -s
|
||||
|
||||
|
||||
|
||||
|
||||
printf "\n
|
||||
|
||||
|
||||
#############################################################################
|
||||
# MULLVAD
|
||||
#############################################################################
|
||||
|
||||
|
||||
\n
|
||||
"
|
||||
#torify wget http://o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion/en/download/app/deb/latest
|
||||
|
||||
torify curl -fsSLo /usr/share/keyrings/mullvad-keyring.asc https://repository.mullvad.net/deb/mullvad-keyring.asc;
|
||||
printf "deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg --print-architecture )] https://repository.mullvad.net/deb/stable $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/mullvad.list;
|
||||
|
||||
apt update;
|
||||
apt install mullvad-vpn;
|
||||
|
||||
mullvad account login 6627506529903776;
|
||||
mullvad lockdown-mode set on;
|
||||
mullvad relay set location ch;
|
||||
mullvad connect;
|
||||
|
||||
while true; do
|
||||
# Run the command
|
||||
mullvad status;
|
||||
|
||||
# Ask for confirmation to run it again
|
||||
read -p "Run again? (y/n) " answer
|
||||
|
||||
# Check the answer and break the loop if it's not "y"
|
||||
case $answer in
|
||||
y|Y) continue ;;
|
||||
n|N) break ;;
|
||||
*) echo "Invalid input. Please enter y or n." ;;
|
||||
esac
|
||||
done
|
||||
|
||||
|
||||
|
||||
# echo "Press any key to continue..."
|
||||
# read -n 1 -s
|
||||
|
||||
|
||||
|
||||
printf "\n
|
||||
|
||||
|
||||
#############################################################################
|
||||
# NOSTR
|
||||
#############################################################################
|
||||
"
|
||||
|
||||
# Nostr Army Knife (NAK)
|
||||
curl -L -o /usr/local/bin/nak https://github.com/fiatjaf/nak/releases/download/v0.11.3/nak-v0.11.3-linux-amd64
|
||||
chmod +x /usr/local/bin/nak
|
||||
|
||||
# Stirfry Nostr Relay
|
||||
# sudo apt install -y git g++ make libssl-dev zlib1g-dev liblmdb-dev libflatbuffers-dev libsecp256k1-dev libzstd-dev
|
||||
# cd /usr/local/bin
|
||||
# git clone https://github.com/hoytech/strfry && cd strfry/
|
||||
# git submodule update --init
|
||||
# make setup-golpe
|
||||
# make -j4
|
||||
|
||||
|
||||
|
||||
# Nostr Alai
|
||||
timestamp=$(date +%s); nak req -s $timestamp -k 1 --stream $nak_relays_read | jq -r '"\n\(.pubkey[-5:])\n \(.content)\n"'
|
||||
echo "alias un.gz=gunzip" >> ~/.bashrc
|
||||
alias nostr_all='timestamp=$(date +%s); nak req -s $timestamp -k 1 --stream $nak_relays_read | jq -r '\''"\n\(.pubkey[-5:])\n \(.content)\n"'\'''
|
||||
|
||||
echo "alias nostr_all='timestamp=\$(date +%s); nak req -s \$timestamp -k 1 --stream \$nak_relays_read | jq -r '\''\"\n\(.pubkey[-5:])\n \(.content)\n\"'\''" >> ~/.bashrc
|
||||
|
||||
# Nostr terminal
|
||||
curl -L -o /usr/local/bin/nt https://corpum.com/nt
|
||||
chmod +x /usr/local/bin/nt
|
||||
|
||||
printf "
|
||||
#############################################################################
|
||||
# CLEAR COMMAND LINE HISTORY
|
||||
#############################################################################
|
||||
"
|
||||
history -c
|
||||
|
||||
168
scratch/strfry.sh
Normal file
168
scratch/strfry.sh
Normal file
@@ -0,0 +1,168 @@
|
||||
|
||||
|
||||
[Unit]
|
||||
Description=strfry service
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=user
|
||||
WorkingDirectory=/media/teknari/Storage/Strfry
|
||||
ExecStart=/media/user/Storage/Strfry/strfry --config=./strfry.conf relay
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
##
|
||||
## Default strfry config
|
||||
##
|
||||
|
||||
# Directory that contains the strfry LMDB database (restart required)
|
||||
db = "./strfry-db/"
|
||||
|
||||
dbParams {
|
||||
# Maximum number of threads/processes that can simultaneously have LMDB transactions open (restart required)
|
||||
maxreaders = 256
|
||||
|
||||
# Size of mmap() to use when loading LMDB (default is 10TB, does *not* correspond to disk-space used) (restart required)
|
||||
mapsize = 10995116277760
|
||||
|
||||
# Disables read-ahead when accessing the LMDB mapping. Reduces IO activity when DB size is larger than RAM. (restart required)
|
||||
noReadAhead = false
|
||||
}
|
||||
|
||||
events {
|
||||
# Maximum size of normalised JSON, in bytes
|
||||
maxEventSize = 65536
|
||||
|
||||
# Events newer than this will be rejected
|
||||
rejectEventsNewerThanSeconds = 900
|
||||
|
||||
# Events older than this will be rejected
|
||||
rejectEventsOlderThanSeconds = 94608000
|
||||
|
||||
# Ephemeral events older than this will be rejected
|
||||
rejectEphemeralEventsOlderThanSeconds = 60
|
||||
|
||||
# Ephemeral events will be deleted from the DB when older than this
|
||||
ephemeralEventsLifetimeSeconds = 300
|
||||
|
||||
# Maximum number of tags allowed
|
||||
maxNumTags = 2000
|
||||
|
||||
# Maximum size for tag values, in bytes
|
||||
maxTagValSize = 1024
|
||||
}
|
||||
|
||||
relay {
|
||||
# Interface to listen on. Use 0.0.0.0 to listen on all interfaces (restart required)
|
||||
bind = "127.0.0.1"
|
||||
|
||||
# Port to open for the nostr websocket protocol (restart required)
|
||||
port = 7776
|
||||
|
||||
# Set OS-limit on maximum number of open files/sockets (if 0, don't attempt to set) (restart required)
|
||||
nofiles = 524288
|
||||
|
||||
# HTTP header that contains the client's real IP, before reverse proxying (ie x-real-ip) (MUST be all lower-case)
|
||||
realIpHeader = ""
|
||||
|
||||
info {
|
||||
# NIP-11: Name of this server. Short/descriptive (< 30 characters)
|
||||
name = "Laan Tungir"
|
||||
|
||||
# NIP-11: Detailed information about relay, free-form
|
||||
description = "This is a strfry instance."
|
||||
|
||||
# NIP-11: Administrative nostr pubkey, for contact purposes
|
||||
pubkey = "1ec454734dcbf6fe54901ce25c0c7c6bca5edd89443416761fadc321d38df139"
|
||||
|
||||
# NIP-11: Alternative administrative contact (email, website, etc)
|
||||
contact = ""
|
||||
|
||||
# NIP-11: URL pointing to an image to be used as an icon for the relay
|
||||
icon = ""
|
||||
|
||||
# List of supported lists as JSON array, or empty string to use default. Example: "[1,2]"
|
||||
nips = ""
|
||||
}
|
||||
|
||||
# Maximum accepted incoming websocket frame size (should be larger than max event) (restart required)
|
||||
maxWebsocketPayloadSize = 131072
|
||||
|
||||
# Maximum number of filters allowed in a REQ
|
||||
maxReqFilterSize = 200
|
||||
|
||||
# Websocket-level PING message frequency (should be less than any reverse proxy idle timeouts) (restart required)
|
||||
autoPingSeconds = 55
|
||||
|
||||
# If TCP keep-alive should be enabled (detect dropped connections to upstream reverse proxy)
|
||||
enableTcpKeepalive = false
|
||||
|
||||
# How much uninterrupted CPU time a REQ query should get during its DB scan
|
||||
queryTimesliceBudgetMicroseconds = 10000
|
||||
|
||||
# Maximum records that can be returned per filter
|
||||
maxFilterLimit = 500
|
||||
|
||||
# Maximum number of subscriptions (concurrent REQs) a connection can have open at any time
|
||||
maxSubsPerConnection = 20
|
||||
|
||||
writePolicy {
|
||||
# If non-empty, path to an executable script that implements the writePolicy plugin logic
|
||||
plugin = ""
|
||||
}
|
||||
|
||||
compression {
|
||||
# Use permessage-deflate compression if supported by client. Reduces bandwidth, but slight increase in CPU (restart required)
|
||||
enabled = true
|
||||
|
||||
# Maintain a sliding window buffer for each connection. Improves compression, but uses more memory (restart required)
|
||||
slidingWindow = true
|
||||
}
|
||||
|
||||
logging {
|
||||
# Dump all incoming messages
|
||||
dumpInAll = false
|
||||
|
||||
# Dump all incoming EVENT messages
|
||||
dumpInEvents = false
|
||||
|
||||
# Dump all incoming REQ/CLOSE messages
|
||||
dumpInReqs = false
|
||||
|
||||
# Log performance metrics for initial REQ database scans
|
||||
dbScanPerf = false
|
||||
|
||||
# Log reason for invalid event rejection? Can be disabled to silence excessive logging
|
||||
invalidEvents = true
|
||||
}
|
||||
|
||||
numThreads {
|
||||
# Ingester threads: route incoming requests, validate events/sigs (restart required)
|
||||
ingester = 3
|
||||
|
||||
# reqWorker threads: Handle initial DB scan for events (restart required)
|
||||
reqWorker = 3
|
||||
|
||||
# reqMonitor threads: Handle filtering of new events (restart required)
|
||||
reqMonitor = 3
|
||||
|
||||
# negentropy threads: Handle negentropy protocol messages (restart required)
|
||||
negentropy = 2
|
||||
}
|
||||
|
||||
negentropy {
|
||||
# Support negentropy protocol messages
|
||||
enabled = true
|
||||
|
||||
# Maximum records that sync will process before returning an error
|
||||
maxSyncEvents = 1000000
|
||||
}
|
||||
}
|
||||
1
scratch/test.sh
Executable file
1
scratch/test.sh
Executable file
@@ -0,0 +1 @@
|
||||
5b968086-503c-43b9-9df0-2ca7efc4614c
|
||||
Reference in New Issue
Block a user