diff options
-rw-r--r-- | etc/.cfgl/config | 4 | ||||
-rw-r--r-- | etc/fstab | 8 | ||||
-rw-r--r-- | etc/hostname | 2 | ||||
-rw-r--r-- | etc/myconf/cfgl_meta | 9 | ||||
-rw-r--r-- | etc/nftables.conf | 9 | ||||
-rw-r--r-- | etc/postfix/main.cf | 2 | ||||
-rw-r--r-- | etc/services | 5 | ||||
-rw-r--r-- | etc/systemd/network/10-cloud-init-eth0.network | 35 | ||||
l--------- | etc/systemd/system/multi-user.target.wants/qbittorrent-nox@xyz.service | 1 | ||||
-rw-r--r-- | etc/systemd/system/paccache.service.d/10-remove-all.conf | 8 | ||||
-rw-r--r-- | etc/systemd/system/paccache.service.d/20-remove-all-uninstalled.conf | 9 | ||||
-rw-r--r-- | home/xyz/.bashrc | 2 | ||||
-rw-r--r-- | home/xyz/.config/myconf/pacman_Qqme | 1 | ||||
-rw-r--r-- | home/xyz/.config/myconf/pacman_Qqne | 2 | ||||
-rw-r--r-- | home/xyz/.config/myconf/sye | 1 | ||||
-rw-r--r-- | home/xyz/.local/share/qBittorrent/nova3/engines/jackett.json | 6 |
16 files changed, 48 insertions, 56 deletions
diff --git a/etc/.cfgl/config b/etc/.cfgl/config index 608699e2..cf863b03 100644 --- a/etc/.cfgl/config +++ b/etc/.cfgl/config @@ -11,6 +11,6 @@ fetch = +refs/heads/*:refs/remotes/origin/* [commit] gpgsign = false -[branch "ca"] +[branch "ib"] remote = origin - merge = refs/heads/ca + merge = refs/heads/ib @@ -2,4 +2,10 @@ # See fstab(5) for details. # <file system> <dir> <type> <options> <dump> <pass> -/swap/swapfile none swap defaults 0 0 +# /dev/sda1 LABEL=root +UUID=ed61e67e-7605-4383-ac16-fe54ee2ede87 / ext4 rw,relatime,errors=remount-ro 0 1 + +# /dev/sdb1 +UUID=57bd9dcd-6024-4e7e-a5c7-811269c13078 /home ext4 rw,relatime 0 2 + +/swapfile none swap defaults 0 0 diff --git a/etc/hostname b/etc/hostname index 8eb04e15..89dfb421 100644 --- a/etc/hostname +++ b/etc/hostname @@ -1 +1 @@ -xyzca +xyzib diff --git a/etc/myconf/cfgl_meta b/etc/myconf/cfgl_meta index 04ff1f47..44110548 100644 --- a/etc/myconf/cfgl_meta +++ b/etc/myconf/cfgl_meta @@ -41,7 +41,6 @@ 644 root root //etc/sysctl.d/99-sysctl.conf 755 root root //etc/systemd 755 root root //etc/systemd/network -644 systemd-network systemd-network //etc/systemd/network/10-cloud-init-eth0.network 755 root root //etc/systemd/system 755 root root //etc/systemd/system/acme.sh.service.d 644 root root //etc/systemd/system/acme.sh.service.d/override.conf @@ -50,7 +49,7 @@ 755 root root //etc/systemd/system/opendmarc.service.d 644 root root //etc/systemd/system/opendmarc.service.d/override.conf 755 root root //etc/systemd/system/paccache.service.d -644 root root //etc/systemd/system/paccache.service.d/20-remove-all-uninstalled.conf +644 root root //etc/systemd/system/paccache.service.d/10-remove-all.conf 755 root root //etc/tmpfiles.d 644 root root //etc/tmpfiles.d/opendmarc.conf 755 root root //home @@ -72,6 +71,12 @@ 755 xyz wheel //home/xyz/.config/nvim 644 xyz wheel //home/xyz/.config/nvim/init.vim 600 xyz wheel //home/xyz/.config/user-dirs.dirs +755 xyz wheel //home/xyz/.local +755 xyz wheel //home/xyz/.local/share +755 xyz wheel //home/xyz/.local/share/qBittorrent +755 xyz wheel //home/xyz/.local/share/qBittorrent/nova3 +755 xyz wheel //home/xyz/.local/share/qBittorrent/nova3/engines +644 xyz wheel //home/xyz/.local/share/qBittorrent/nova3/engines/jackett.json 644 xyz wheel //home/xyz/.profile 700 xyz wheel //home/xyz/.ssh 600 xyz wheel //home/xyz/.ssh/authorized_keys diff --git a/etc/nftables.conf b/etc/nftables.conf index b824edee..da1f2f44 100644 --- a/etc/nftables.conf +++ b/etc/nftables.conf @@ -3,7 +3,10 @@ # IPv4/IPv6 Simple & Safe firewall ruleset. # More examples in /usr/share/nftables/ and /usr/share/doc/nftables/examples/. -# some codes from https://wiki.archlinux.org/title/Nftables +# references, some codes from: +# https://wiki.archlinux.org/title/Nftables +# https://www.procustodibus.com/blog/2021/11/wireguard-nftables +# https://wiki.gentoo.org/wiki/Nftables/Examples#Basic_NAT # needed for reload config using `sudo systemctl restart nftables` or `sudo nft -f /etc/nftables.conf` flush ruleset @@ -25,8 +28,8 @@ table inet my_table { tcp dport ssh accept #tcp dport qbt-nox accept - #tcp dport qbt accept - #udp dport qbt accept + tcp dport qbt accept + udp dport qbt accept #tcp dport iperf3 accept udp dport wireguard accept udp dport swgp accept diff --git a/etc/postfix/main.cf b/etc/postfix/main.cf index fe83cc82..f5cc794d 100644 --- a/etc/postfix/main.cf +++ b/etc/postfix/main.cf @@ -7,7 +7,7 @@ # `man postconf.5` # print config: `postconf` # default config: `postconf -d` -myhostname = mail.flylightning.xyz +myhostname = mail2.flylightning.xyz # fix "relay access denied" error when receiving emails # I choose to follow `man postconf.5` instruction to only add $mydomain diff --git a/etc/services b/etc/services index 45722821..5081b2a3 100644 --- a/etc/services +++ b/etc/services @@ -11522,3 +11522,8 @@ wireguard 49432/udp ssh-isp 49812/tcp iperf3 53497/tcp swgp 54635/udp +# qbittorrent-nox web ui port for remote access browser gui +qbt-nox 57151/tcp +# qbittorrent/ options/ connection/ listening port +qbt 57737/tcp +qbt 57737/udp diff --git a/etc/systemd/network/10-cloud-init-eth0.network b/etc/systemd/network/10-cloud-init-eth0.network deleted file mode 100644 index 7829f528..00000000 --- a/etc/systemd/network/10-cloud-init-eth0.network +++ /dev/null @@ -1,35 +0,0 @@ -# not fully understood -# https://unix.stackexchange.com/q/509430/ -# man `systemd.network` -# https://superuser.com/q/1562380 -# https://docs.netgate.com/pfsense/en/latest/network/ipv6/subnets.html - -[Match] -Name=eth0 - -[Address] -Address=38.175.201.185/22 - -[Address] -Address=2606:a8c0:3::75f/128 - -[Address] -# another ipv6 address for aa wireguard+swgp into -# not sure if it is corret, but it works -Address=2606:a8c0:3:773::b/64 - -[Address] -# the last address seems is the default? -# ...:1/64 also works, but I use ...:a/64 because crunchbits panel reverse DNS support this address -# 2024-06-27, ...:1/64 seems doe not work any more, not sure why -Address=2606:a8c0:3:773::a/64 -# use the following will not need GatewayOnLink=yes in [Route] section, but I'm not sure if it is correct, I'm not sure if those ips could be accessed without gateway, more see https://superuser.com/q/1562380 -#Address=2606:a8c0:3:773::a/48 - -[Route] -Gateway=38.175.200.1 - -[Route] -Gateway=2606:a8c0:3::1 -# GatewayOnLink=yes needed for 2606:a8c0:3::1 gateway, maybe because 2606:a8c0:3::1 is not in the same subnet as 2606:a8c0:3:38d::a/64? see: https://serverfault.com/q/814419 -GatewayOnLink=yes diff --git a/etc/systemd/system/multi-user.target.wants/qbittorrent-nox@xyz.service b/etc/systemd/system/multi-user.target.wants/qbittorrent-nox@xyz.service new file mode 120000 index 00000000..41aa9f51 --- /dev/null +++ b/etc/systemd/system/multi-user.target.wants/qbittorrent-nox@xyz.service @@ -0,0 +1 @@ +/usr/lib/systemd/system/qbittorrent-nox@.service
\ No newline at end of file diff --git a/etc/systemd/system/paccache.service.d/10-remove-all.conf b/etc/systemd/system/paccache.service.d/10-remove-all.conf new file mode 100644 index 00000000..a33a36a2 --- /dev/null +++ b/etc/systemd/system/paccache.service.d/10-remove-all.conf @@ -0,0 +1,8 @@ +[Service] +# may need `sudo systemctl daemon-reload` afterward +# need a line of `ExecStart=` to clear the list first, +# more about drop-in dir see `man systemd.unit`, more about ExecStart see `man systemd.service` +# https://wiki.archlinux.org/title/Systemd#Drop-in_files +# https://wiki.archlinux.org/title/Systemd#Examples +ExecStart= +ExecStart=/usr/bin/paccache -rk0 diff --git a/etc/systemd/system/paccache.service.d/20-remove-all-uninstalled.conf b/etc/systemd/system/paccache.service.d/20-remove-all-uninstalled.conf deleted file mode 100644 index 38d3c2d0..00000000 --- a/etc/systemd/system/paccache.service.d/20-remove-all-uninstalled.conf +++ /dev/null @@ -1,9 +0,0 @@ -[Service] -# keep original `ExecStart=/usr/bin/paccache -r` while adding to the list -# because I want the default behavior and also remove all uninstalled pacman package cache -# may need `sudo systemctl daemon-reload` afterward -# if I want to clear the list first, I should do a line of `ExecStart=` first -# more about drop-in dir see `man systemd.unit`, more about ExecStart see `man systemd.service` -# https://wiki.archlinux.org/title/Systemd#Drop-in_files -# https://wiki.archlinux.org/title/Systemd#Examples -ExecStart=/usr/bin/paccache -ruk0 diff --git a/home/xyz/.bashrc b/home/xyz/.bashrc index 8b1dff90..d1755bc6 100644 --- a/home/xyz/.bashrc +++ b/home/xyz/.bashrc @@ -29,7 +29,7 @@ esac # tput is better for different terminals? # but also need \[ and \] around color code for PS1! but seems no need for printf in script? why? # setaf and sgr0 see `man terminfo`, also it seems can have 256 different colors -PS1="\[$(tput setaf 6)\][\u@\h \W]\$ \[$(tput sgr0)\]" +PS1="\[$(tput setaf 5)\][\u@\h \W]\$ \[$(tput sgr0)\]" # https://github.com/LukeSmithxyz/voidrice/blob/master/.config/shell/aliasrc for cmd in hardcode-fixer ventoy units_cur fbgrab powertop nft rpi-imager fdisk dmesg; do diff --git a/home/xyz/.config/myconf/pacman_Qqme b/home/xyz/.config/myconf/pacman_Qqme index 1ae88691..026331c3 100644 --- a/home/xyz/.config/myconf/pacman_Qqme +++ b/home/xyz/.config/myconf/pacman_Qqme @@ -5,6 +5,7 @@ bash-complete-alias dashbinsh grub-hook htop-vim +jackett-bin librespeed-cli-bin neovim-plug paru-bin diff --git a/home/xyz/.config/myconf/pacman_Qqne b/home/xyz/.config/myconf/pacman_Qqne index 961590a5..7efe7697 100644 --- a/home/xyz/.config/myconf/pacman_Qqne +++ b/home/xyz/.config/myconf/pacman_Qqne @@ -1,7 +1,6 @@ base base-devel bash-completion -btrfs-progs dash devtools dovecot @@ -38,6 +37,7 @@ posix-user-portability posix-xsi postfix python-pip +qbittorrent-nox rebuild-detector reflector shellcheck diff --git a/home/xyz/.config/myconf/sye b/home/xyz/.config/myconf/sye index a47a970f..576c1d39 100644 --- a/home/xyz/.config/myconf/sye +++ b/home/xyz/.config/myconf/sye @@ -1,6 +1,7 @@ UNIT FILE STATE PRESET dovecot.service enabled disabled getty@.service enabled enabled +jackett.service enabled disabled nftables.service enabled disabled opendkim.service enabled disabled opendmarc.service enabled disabled diff --git a/home/xyz/.local/share/qBittorrent/nova3/engines/jackett.json b/home/xyz/.local/share/qBittorrent/nova3/engines/jackett.json new file mode 100644 index 00000000..b79246d6 --- /dev/null +++ b/home/xyz/.local/share/qBittorrent/nova3/engines/jackett.json @@ -0,0 +1,6 @@ +{ + "api_key": "1a6rfhe9xw7fzgu640vnymriq00lbyav", + "thread_count": 20, + "tracker_first": false, + "url": "http://127.0.0.1:9117" +} |