63a5afda03 · cmc/cleberg.net

.gitignore +1 −1

	@@ -1,3 +1,3 @@
1	.DS_Store	1	.DS_Store
2	.build
3	.vscode	2	.vscode
		3	public\ No newline at end of file

README.md added +39

@@ -0,0 +1,39 @@
	1	# cleberg.net
	2
	3	[cleberg.net](https://cleberg.net) is my personal webpage.
	4
	5	This README is viewable on [git.cleberg.net](https://git.cleberg.net/?p=cleberg.net.git;a=blob;f=README.org;h=155f4696a09503411730afc422b7fb49acbef8f3;hb=HEAD).
	6
	7	## Overview
	8
	9	This website & blog uses [Markdown](https://spec.commonmark.org/current/), published with [Zola](https://www.getzola.org/).
	10
	11	## Configuration
	12
	13	All configuration options are available within the `config.toml` file. Refer to the Zola documentation for further configuration options.
	14
	15	## Building
	16
	17	To get running:
	18
	19	```sh
	20	git clone https://git.cleberg.net/cleberg.net.git && \
	21	cd cleberg.net && \
	22	zola build
	23	```
	24
	25	## Publishing
	26
	27	Use `zola build` and deploy to whichever deployment target you prefer.
	28
	29	## Tasks
	30
	31	- [ ] Format all blog posts
	32	- [ ] 2018
	33	- [ ] 2019
	34	- [ ] 2020
	35	- [ ] 2021
	36	- [ ] 2022
	37	- [ ] 2023
	38	- [ ] 2024
	39	- [ ] Figure out how to get file tags to show up

README.org deleted −61

	@@ -1,61 +0,0 @@
1	#+title: README
2	#+description: Project README.
3
4	* cleberg.net
5
6	[[https://cleberg.net][cleberg.net]] is my personal webpage.
7
8	This README is viewable on [[https://git.cleberg.net/?p=cleberg.net.git;a=blob;f=README.org;h=155f4696a09503411730afc422b7fb49acbef8f3;hb=HEAD][git.cleberg.net]].
9
10	** Overview
11
12	This website & blog uses [[https://orgmode.org/][Org-Mode]], published with [[https://github.com/emacs-love/weblorg][weblorg]].
13
14	** Configuration
15
16	All configuration options are available within the =publish.el= file. Refer to
17	the weblorg documentation for further configuration options.
18
19	** Building
20
21	Local testing is available via [[https://www.gnu.org/software/emacs/][Emacs]] or through the command line.
22
23	To get running:
24
25	#+begin_src shell
26	git clone https://git.cleberg.net/cleberg.net.git && \
27	cd cleberg.net && \
28	emacs -nw
29	#+end_src
30
31	Within Emacs, open any of the repository files. In Doom, I do this with =Spc f
32	f= and selecting =README.org=. Make any changes necessary to customize the
33	project.
34
35	To publish, you can use the =build.sh= script (change the deployment target!) or
36	you can run the following commands.
37
38	Use the =ENV= environment variable to determine which base URL weblorg will use.
39	If ENV is ommitted, it will default to =localhost:8000=. If =ENV=prod=, weblorg
40	will look in the =publish.el= file for the production base URL.
41
42	#+begin_src sh
43	ENV=prod emacs --script publish.el
44	#+end_src
45
46	The files will be published to the =.build= directory. You can deploy these
47	files to the target through any number of methods, such as =scp= or SFTP.
48
49	** Tasks
50
51	*** DONE Create RSS feed
52	*** TODO Format all blog posts with =M q=
53	**** DONE 2018
54	**** DONE 2019
55	**** DONE 2020
56	**** TODO 2021
57	**** TODO 2022
58	**** TODO 2023
59	**** TODO 2024
60	*** DONE Create script to auto-generate the =/blog/= list and =/= most recent posts
61	*** TODO Figure out how to get filetags to show up

build.sh +5 −4

 #!/bin/bash
 if [ "$ENV" == "prod" ]; then
-	echo "Environment = Production"              && \
+	echo "Environment: Production"               && \
 	rm -rf .build/*                              && \
-	emacs --script publish.el                    && \
+	zola build                                   && \
 	rsync -avzP .build/ ubuntu:/var/www/cleberg.net/
 else
-	echo "Environment = Development"             && \
+	echo "Environment: Development"              && \
 	rm -rf .build/*                              && \
-	emacs --script publish.el
+	zola build                                   && \
+	zola serve
 fi

config.toml added +21

@@ -0,0 +1,21 @@
	1	# Site settings
	2	base_url = "https://cleberg.net"
	3	title = "cleberg.net"
	4	description = "The personal website of Christian Cleberg."
	5	author = "Christian Cleberg"
	6
	7	# RSS settings
	8	generate_feed = true
	9	feed_filename = "atom.xml"
	10
	11	[markdown]
	12	highlight_code = true
	13	highlight_theme = "css"
	14	highlight_themes_css = [
	15	{ theme = "ayu-dark", filename = "syntax-theme-dark.css" },
	16	{ theme = "inspired-github", filename = "syntax-theme-light.css" },
	17	]
	18	external_links_target_blank = true
	19	lazy_async_image = true
	20
	21	[extra]

content/blog/2018-11-28-aes-encryption.md added +125

@@ -0,0 +1,125 @@
	1	+++
	2	date = 2018-11-28
	3	title = "AES Encryption"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Basic AES
	9
	10	If you\'re not familiar with encryption techniques,
	11	[AES](https://en.wikipedia.org/wiki/Advanced_Encryption_Standard) is the
	12	Advanced Encryption Standard. This specification was established by
	13	the National Institute of Standards and Technology, sub-selected from
	14	the Rijndael family of ciphers (128, 192, and 256 bits) in 2001.
	15	Furthering its popularity and status, the US government chose AES as
	16	their default encryption method for top-secret data, removing the
	17	previous standard which had been in place since 1977.
	18
	19	AES has proven to be an extremely safe encryption method, with 7-round
	20	and 8-round attacks making no material improvements since the release of
	21	this encryption standard almost two decades ago.
	22
	23	> Though many papers have been published on the cryptanalysis of AES,
	24	> the fastest single-key attacks on round-reduced AES variants \[20,
	25	> 33\] so far are only slightly more powerful than those proposed 10
	26	> years ago \[23,24\].
	27	>
	28	> - [Bogdonav, et
	29	> al.](http://research.microsoft.com/en-us/projects/cryptanalysis/aesbc.pdf)
	30
	31	# How Secure is AES?
	32
	33	In theory, AES-256 is non-crackable due to the massive number of
	34	combinations that can be produced. However, AES-128 is no longer
	35	recommended as a viable implementation to protect important data.
	36
	37	A semi-short [comic
	38	strip](http://www.moserware.com/2009/09/stick-figure-guide-to-advanced.html)
	39	from Moserware quickly explains AES for the public to understand.
	40	Basically AES encrypts the data by obscuring the relationship between
	41	the data and the encrypted data. Additionally, this method spreads the
	42	message out. Lastly, the key produced by AES is the secret to decrypting
	43	it. Someone may know the method of AES, but without the key, they are
	44	powerless.
	45
	46	To obscure and spread the data out, AES creates a
	47	substitution-permutation network. Wikipedia has a wonderful [example of
	48	an SP
	49	network](https://upload.wikimedia.org/wikipedia/commons/thumb/c/cd/SubstitutionPermutationNetwork2.png/468px-SubstitutionPermutationNetwork2.png)
	50	available. This network sends the data through a set of S boxes (using
	51	the unique key) to substitute the bits with another block of bits. Then,
	52	a P box will permutate, or rearrange, the bits. This is done over and
	53	over, with the key being derived from the last round. For AES, the key
	54	size specifies the number of transformation rounds: 10, 12, and 14
	55	rounds for 128-bit, 192-bit, and 256-bit keys, respectively.
	56
	57	# The Process
	58
	59	1. \*KeyExpansion=: Using [Rijndael\'s key
	60	schedule](https://en.m.wikipedia.org/wiki/Advanced_Encryption_Standard),
	61	the keys are dynamically generated.
	62	2. AddRoundKey: Each byte of the data is combined with this key
	63	using bitwise xor.
	64	3. SubBytes: This is followed by the substitution of each byte of
	65	data.
	66	4. ShiftRows: Then, the final three rows are shifted a certain
	67	number of steps, dictated by the cipher.
	68	5. MixColumns: After the rows have been shifted, the columns are
	69	mixed and combined.
	70
	71	This process does not necessarily stop after one full round. Steps 2
	72	through 5 will repeat for the number of rounds specified by the key.
	73	However, the final round excludes the MixColumns step. As you can see,
	74	this is a fairly complex process. One must have a solid understanding of
	75	general mathematic principles to fully understand how the sequence works
	76	(and to even attempt to find a weakness).
	77
	78	According to research done by Bogdanov et al., it would take billions of
	79	years to brute force a 126-bit key with current hardware. Additionally,
	80	this brute force attack would require storing 2^88^ bits of data!
	81	However, there are a few different attacks that have been used to show
	82	vulnerabilities with the use of this technology. Side-channel attacks
	83	use inadvertent leaks of data from the hardware or software, which can
	84	allow attackers to obtain the key or run programs on a user\'s hardware.
	85
	86	Please note that this is not something you should run out and try to
	87	implement in your `Hello, World!` app after only a few hours
	88	of research. While AES (basically all encryption methods) is extremely
	89	efficient in what it does, it takes a lot of time and patience to
	90	understand. If you\'re looking for something which currently implements
	91	AES, check out the [Legion of the Bouncy
	92	Castle](https://www.bouncycastle.org/documentation.html) for Java
	93	implementations of cryptographic algorithms.
	94
	95	# Why Does Encryption Matter?
	96
	97	There are limitless reasons to enable encryption at-rest or in-transit
	98	for various aspects of your digital life. You can research specific
	99	examples, such as [Australia passes new law to thwart strong
	100	encryption](https://arstechnica.com/tech-policy/2018/12/australia-passes-new-law-to-thwart-strong-encryption/).
	101	However, I will simply list a few basic reasons to always enable
	102	encryption, where feasible:
	103
	104	1. Privacy is a human right and is recognized as a national right in
	105	some countries (e.g., [US Fourth
	106	Amendment](https://www.law.cornell.edu/wex/fourth_amendment)).
	107	2. \"Why not?\" Encryption rarely affects performance or speed, so
	108	there\'s usually not a reason to avoid it in the first place.
	109	3. Your digital identity and activity (texts, emails, phone calls,
	110	online accounts, etc.) are extremely valuable and can result in
	111	terrible consequences, such as identity theft, if leaked to other
	112	parties. Encrypting this data prevents such leaks from ruining
	113	lives.
	114	4. Wiping or factory-resetting does not actually wipe all data from the
	115	storage device. There are methods to read data from the physical
	116	disks/boards inside devices.
	117	5. Corporations, governments, and other nefarious groups/individuals
	118	are actively looking for ways to collect personal information about
	119	anyone they can. If someone\'s data is unencrypted, that person may
	120	become a target due to the ease of data collection.
	121
	122	Read More:
	123
	124	- [Federal Information Processing Standards Publication
	125	197](http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.197.pdf)

content/blog/2018-11-28-aes-encryption.org deleted −103

	@@ -1,103 +0,0 @@
1	#+title: AES Encryption
2	#+description: Learn how the AES Encryption algorithm works.
3	#+date: <2018-11-28 Wed>
4	#+filetags: :security:
5
6	* Basic AES
7	If you're not familiar with encryption techniques, [[https://en.wikipedia.org/wiki/Advanced_Encryption_Standard][AES]] is the *Advanced
8	Encryption Standard*. This specification was established by the National
9	Institute of Standards and Technology, sub-selected from the Rijndael family of
10	ciphers (128, 192, and 256 bits) in 2001. Furthering its popularity and status,
11	the US government chose AES as their default encryption method for top-secret
12	data, removing the previous standard which had been in place since 1977.
13
14	AES has proven to be an extremely safe encryption method, with 7-round and
15	8-round attacks making no material improvements since the release of this
16	encryption standard almost two decades ago.
17
18	#+begin_quote
19	Though many papers have been published on the cryptanalysis of AES, the fastest
20	single-key attacks on round-reduced AES variants [20, 33] so far are only
21	slightly more powerful than those proposed 10 years ago [23,24].
22
23	- [[http://research.microsoft.com/en-us/projects/cryptanalysis/aesbc.pdf][Bogdonav, et al.]]
24	#+end_quote
25
26	* How Secure is AES?
27	In theory, AES-256 is non-crackable due to the massive number of combinations
28	that can be produced. However, AES-128 is no longer recommended as a viable
29	implementation to protect important data.
30
31	A semi-short [[http://www.moserware.com/2009/09/stick-figure-guide-to-advanced.html][comic strip]] from Moserware quickly explains AES for the public to
32	understand. Basically AES encrypts the data by obscuring the relationship
33	between the data and the encrypted data. Additionally, this method spreads the
34	message out. Lastly, the key produced by AES is the secret to decrypting it.
35	Someone may know the method of AES, but without the key, they are powerless.
36
37	To obscure and spread the data out, AES creates a substitution-permutation
38	network. Wikipedia has a wonderful [[https://upload.wikimedia.org/wikipedia/commons/thumb/c/cd/SubstitutionPermutationNetwork2.png/468px-SubstitutionPermutationNetwork2.png][example of an SP network]] available. This
39	network sends the data through a set of S boxes (using the unique key) to
40	substitute the bits with another block of bits. Then, a P box will permutate, or
41	rearrange, the bits. This is done over and over, with the key being derived from
42	the last round. For AES, the key size specifies the number of transformation
43	rounds: 10, 12, and 14 rounds for 128-bit, 192-bit, and 256-bit keys,
44	respectively.
45
46	* The Process
47	1. *KeyExpansion=: Using [[https://en.m.wikipedia.org/wiki/Advanced_Encryption_Standard][Rijndael's key schedule]], the keys are dynamically
48	generated.
49	2. AddRoundKey: Each byte of the data is combined with this key using bitwise
50	xor.
51	3. SubBytes: This is followed by the substitution of each byte of data.
52	4. ShiftRows: Then, the final three rows are shifted a certain number of
53	steps, dictated by the cipher.
54	5. MixColumns: After the rows have been shifted, the columns are mixed and
55	combined.
56
57	This process does not necessarily stop after one full round. Steps 2 through 5
58	will repeat for the number of rounds specified by the key. However, the final
59	round excludes the MixColumns step. As you can see, this is a fairly complex
60	process. One must have a solid understanding of general mathematic principles to
61	fully understand how the sequence works (and to even attempt to find a
62	weakness).
63
64	According to research done by Bogdanov et al., it would take billions of years
65	to brute force a 126-bit key with current hardware. Additionally, this brute
66	force attack would require storing 2^{88} bits of data! However, there are a few
67	different attacks that have been used to show vulnerabilities with the use of
68	this technology. Side-channel attacks use inadvertent leaks of data from the
69	hardware or software, which can allow attackers to obtain the key or run
70	programs on a user's hardware.
71
72	Please note that this is not something you should run out and try to implement
73	in your =Hello, World!= app after only a few hours of research. While AES
74	(basically all encryption methods) is extremely efficient in what it does, it
75	takes a lot of time and patience to understand. If you're looking for something
76	which currently implements AES, check out the [[https://www.bouncycastle.org/documentation.html][Legion of the Bouncy Castle]] for
77	Java implementations of cryptographic algorithms.
78
79	* Why Does Encryption Matter?
80	There are limitless reasons to enable encryption at-rest or in-transit for
81	various aspects of your digital life. You can research specific examples, such
82	as [[https://arstechnica.com/tech-policy/2018/12/australia-passes-new-law-to-thwart-strong-encryption/][Australia passes new law to thwart strong encryption]]. However, I will simply
83	list a few basic reasons to always enable encryption, where feasible:
84
85	1. Privacy is a human right and is recognized as a national right in some
86	countries (e.g., [[https://www.law.cornell.edu/wex/fourth_amendment][US Fourth Amendment]]).
87	2. "Why not?" Encryption rarely affects performance or speed, so there's usually
88	not a reason to avoid it in the first place.
89	3. Your digital identity and activity (texts, emails, phone calls, online
90	accounts, etc.) are extremely valuable and can result in terrible
91	consequences, such as identity theft, if leaked to other parties. Encrypting
92	this data prevents such leaks from ruining lives.
93	4. Wiping or factory-resetting does not actually wipe all data from the storage
94	device. There are methods to read data from the physical disks/boards inside
95	devices.
96	5. Corporations, governments, and other nefarious groups/individuals are
97	actively looking for ways to collect personal information about anyone they
98	can. If someone's data is unencrypted, that person may become a target due to
99	the ease of data collection.
100
101	Read More:
102
103	- [[http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.197.pdf][Federal Information Processing Standards Publication 197]]

content/blog/2018-11-28-cpp-compiler.md added +140

@@ -0,0 +1,140 @@
	1	+++
	2	date = 2018-11-28
	3	title = "The C++ Compiler"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# A Brief Introduction
	9
	10	[C++](https://en.wikipedia.org/wiki/C%2B%2B) is a general-purpose
	11	programming language with object-oriented, generic, and functional
	12	features in addition to facilities for low-level memory manipulation.
	13
	14	The source code, shown in the snippet below, must be compiled before it
	15	can be executed. There are many steps and intricacies to the compilation
	16	process, and this post was a personal exercise to learn and remember as
	17	much information as I can.
	18
	19	``` cpp
	20	#include <iostream>
	21
	22	int main()
	23	{
	24	std::cout << "Hello, world!\n";
	25	}
	26	```
	27
	28	## Compilation Process
	29
	30	### An Overview
	31
	32	Compiling C++ projects is a frustrating task most days. Seemingly
	33	nonexistent errors keeping your program from successfully compiling can
	34	be annoying (especially since you know you wrote it perfectly the first
	35	time, right?).
	36
	37	I\'m learning more and more about C++ these days and decided to write
	38	this concept down so that I can cement it even further in my own head.
	39	However, C++ is not the only compiled language. Check out [the Wikipedia
	40	entry for compiled
	41	languages](https://en.wikipedia.org/wiki/Compiled_language) for more
	42	examples of compiled languages.
	43
	44	I\'ll start with a wonderful, graphical way to conceptualize the C++
	45	compiler. View [The C++ Compilation
	46	Process](https://web.archive.org/web/20190419035048/http://faculty.cs.niu.edu/~mcmahon/CS241/Notes/compile.html)
	47	by Kurt MacMahon, an NIU professor, to see the graphic and an
	48	explanation. The goal of the compilation process is to take the C++ code
	49	and produce a shared library, dynamic library, or an executable file.
	50
	51	## Compilation Phases
	52
	53	Let\'s break down the compilation process. There are four major steps to
	54	compiling C++ code.
	55
	56	### Step 1
	57
	58	The first step is to expand the source code file to meet all
	59	dependencies. The C++ preprocessor includes the code from all the header
	60	files, such as `#include
	61	<iostream>`. Now, what does that mean? The previous example
	62	includes the `iostream` header. This tells the computer that
	63	you want to use the `iostream` standard library, which
	64	contains classes and functions written in the core language. This
	65	specific header allows you to manipulate input/output streams. After all
	66	this, you\'ll end up which a temporary file that contains the expanded
	67	source code.
	68
	69	In the example of the C++ code above, the `iostream` class
	70	would be included in the expanded code.
	71
	72	### Step 2
	73
	74	After the code is expanded, the compiler comes into play. The compiler
	75	takes the C++ code and converts this code into the assembly language,
	76	understood by the platform. You can see this in action if you head over
	77	to the [GodBolt Compiler Explorer](https://godbolt.org), which shows C++
	78	being converted into assembly dynamically.
	79
	80	For example, the `Hello, world!` code snippet above compiles
	81	into the following assembly code:
	82
	83	``` asm
	84	.LC0:
	85	.string "Hello, world!\n"
	86	main:
	87	push rbp
	88	mov rbp, rsp
	89	mov esi, OFFSET FLAT:.LC0
	90	mov edi, OFFSET FLAT:_ZSt4cout
	91	call std::basic_ostream<char, std::char_traits<char> >& std::operator<< <std::char_traits<char> >(std::basic_ostream<char, std::char_traits<char> >&, char const*)
	92	mov eax, 0
	93	pop rbp
	94	ret
	95	__static_initialization_and_destruction_0(int, int):
	96	push rbp
	97	mov rbp, rsp
	98	sub rsp, 16
	99	mov DWORD PTR [rbp-4], edi
	100	mov DWORD PTR [rbp-8], esi
	101	cmp DWORD PTR [rbp-4], 1
	102	jne .L5
	103	cmp DWORD PTR [rbp-8], 65535
	104	jne .L5
	105	mov edi, OFFSET FLAT:_ZStL8__ioinit
	106	call std::ios_base::Init::Init() [complete object constructor]
	107	mov edx, OFFSET FLAT:__dso_handle
	108	mov esi, OFFSET FLAT:_ZStL8__ioinit
	109	mov edi, OFFSET FLAT:_ZNSt8ios_base4InitD1Ev
	110	call __cxa_atexit
	111	.L5:
	112	nop
	113	leave
	114	ret
	115	_GLOBAL__sub_I_main:
	116	push rbp
	117	mov rbp, rsp
	118	mov esi, 65535
	119	mov edi, 1
	120	call __static_initialization_and_destruction_0(int, int)
	121	pop rbp
	122	ret
	123	```
	124
	125	### Step 3
	126
	127	Third, the assembly code generated by the compiler is assembled into the
	128	object code for the platform. Essentially, this is when the compiler
	129	takes the assembly code and assembles it into machine code in a binary
	130	format. After researching this online, I figured out that a lot of
	131	compilers will allow you to stop compilation at this step. This would be
	132	useful for compiling each source code file separately. This saves time
	133	later if a single file changes; only that file needs to be recompiled.
	134
	135	### Step 4
	136
	137	Finally, the object code file generated by the assembler is linked
	138	together with the object code files for any library functions used to
	139	produce a shared library, dynamic library, or an executable file. It
	140	replaces all references to undefined symbols with the correct addresses.

content/blog/2018-11-28-cpp-compiler.org deleted −121

	@@ -1,121 +0,0 @@
1	#+title: The C++ Compiler
2	#+date: 2018-11-28
3	#+description: Learn basics about the C++ compilation process.
4	#+filetags: :dev:
5
6	* A Brief Introduction
7	[[https://en.wikipedia.org/wiki/C%2B%2B][C++]] is a general-purpose programming language with object-oriented, generic, and
8	functional features in addition to facilities for low-level memory manipulation.
9
10	The source code, shown in the snippet below, must be compiled before it can be
11	executed. There are many steps and intricacies to the compilation process, and
12	this post was a personal exercise to learn and remember as much information as I
13	can.
14
15	#+begin_src cpp
16	#include <iostream>
17
18	int main()
19	{
20	std::cout << "Hello, world!\n";
21	}
22	#+end_src
23
24	** Compilation Process
25	*** An Overview
26	Compiling C++ projects is a frustrating task most days. Seemingly nonexistent
27	errors keeping your program from successfully compiling can be annoying
28	(especially since you know you wrote it perfectly the first time, right?).
29
30	I'm learning more and more about C++ these days and decided to write this
31	concept down so that I can cement it even further in my own head. However, C++
32	is not the only compiled language. Check out [[https://en.wikipedia.org/wiki/Compiled_language][the Wikipedia entry for compiled
33	languages]] for more examples of compiled languages.
34
35	I'll start with a wonderful, graphical way to conceptualize the C++ compiler.
36	View [[https://web.archive.org/web/20190419035048/http://faculty.cs.niu.edu/~mcmahon/CS241/Notes/compile.html][The C++ Compilation Process]] by Kurt MacMahon, an NIU professor, to see the
37	graphic and an explanation. The goal of the compilation process is to take the
38	C++ code and produce a shared library, dynamic library, or an executable file.
39
40	** Compilation Phases
41	Let's break down the compilation process. There are four major steps to
42	compiling C++ code.
43
44	*** Step 1
45	The first step is to expand the source code file to meet all dependencies. The
46	C++ preprocessor includes the code from all the header files, such as =#include
47	<iostream>=. Now, what does that mean? The previous example includes the
48	=iostream= header. This tells the computer that you want to use the =iostream=
49	standard library, which contains classes and functions written in the core
50	language. This specific header allows you to manipulate input/output streams.
51	After all this, you'll end up which a temporary file that contains the expanded
52	source code.
53
54	In the example of the C++ code above, the =iostream= class would be included in
55	the expanded code.
56
57	*** Step 2
58	After the code is expanded, the compiler comes into play. The compiler takes the
59	C++ code and converts this code into the assembly language, understood by the
60	platform. You can see this in action if you head over to the [[https://godbolt.org][GodBolt Compiler
61	Explorer]], which shows C++ being converted into assembly dynamically.
62
63	For example, the =Hello, world!= code snippet above compiles into the following
64	assembly code:
65
66	#+begin_src asm
67	.LC0:
68	.string "Hello, world!\n"
69	main:
70	push rbp
71	mov rbp, rsp
72	mov esi, OFFSET FLAT:.LC0
73	mov edi, OFFSET FLAT:_ZSt4cout
74	call std::basic_ostream<char, std::char_traits<char> >& std::operator<< <std::char_traits<char> >(std::basic_ostream<char, std::char_traits<char> >&, char const*)
75	mov eax, 0
76	pop rbp
77	ret
78	__static_initialization_and_destruction_0(int, int):
79	push rbp
80	mov rbp, rsp
81	sub rsp, 16
82	mov DWORD PTR [rbp-4], edi
83	mov DWORD PTR [rbp-8], esi
84	cmp DWORD PTR [rbp-4], 1
85	jne .L5
86	cmp DWORD PTR [rbp-8], 65535
87	jne .L5
88	mov edi, OFFSET FLAT:_ZStL8__ioinit
89	call std::ios_base::Init::Init() [complete object constructor]
90	mov edx, OFFSET FLAT:__dso_handle
91	mov esi, OFFSET FLAT:_ZStL8__ioinit
92	mov edi, OFFSET FLAT:_ZNSt8ios_base4InitD1Ev
93	call __cxa_atexit
94	.L5:
95	nop
96	leave
97	ret
98	_GLOBAL__sub_I_main:
99	push rbp
100	mov rbp, rsp
101	mov esi, 65535
102	mov edi, 1
103	call __static_initialization_and_destruction_0(int, int)
104	pop rbp
105	ret
106	#+end_src
107
108	*** Step 3
109	Third, the assembly code generated by the compiler is assembled into the object
110	code for the platform. Essentially, this is when the compiler takes the assembly
111	code and assembles it into machine code in a binary format. After researching
112	this online, I figured out that a lot of compilers will allow you to stop
113	compilation at this step. This would be useful for compiling each source code
114	file separately. This saves time later if a single file changes; only that file
115	needs to be recompiled.
116
117	*** Step 4
118	Finally, the object code file generated by the assembler is linked together with
119	the object code files for any library functions used to produce a shared
120	library, dynamic library, or an executable file. It replaces all references to
121	undefined symbols with the correct addresses.

content/blog/2019-01-07-useful-css.md added +200

@@ -0,0 +1,200 @@
	1	+++
	2	date = 2019-01-07
	3	title = "Useful CSS Snippets"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Introduction to CSS
	9
	10	[CSS](https://en.wikipedia.org/wiki/CSS), the language used to markup
	11	HTML code and make it \"pretty\", is one of the most effective ways to
	12	increase the attractiveness of a website. It can also lead to increased
	13	user engagement, retention, and satisfaction. In fact, there are whole
	14	career fields are dedicated to the improvement of user experiences,
	15	known as UI design and UX design.
	16
	17	Some web developers are used to the common CSS properties, such as
	18	element sizing, fonts, colors, etc., but are not as well versed in
	19	less-used properties and values such as `flexbox`,
	20	`clip-path`, and `transform`. This article will
	21	provide some insight into the less-used and unique CSS properties.
	22
	23	# CSS Variables
	24
	25	The first topic today is CSS variables. Variables are not often used by
	26	smaller developers. CSS variables allow you to give your website a
	27	well-defined structure, where you can easily reuse CSS properties
	28	throughout the project.
	29
	30	You can use variables to define things, such as color palettes. Then,
	31	you can use these colors for backgrounds anywhere else in the HTML. This
	32	could be extended, where extra variables could be defined for
	33	`primary-text`, `quoted-text`, etc. Variables can
	34	also be used to define spacing (e.g. `32px` or
	35	`2rem`), which can then be applied to margins, padding, font
	36	sizes, and more.
	37
	38	For example, here are some variables defined at the root of the website,
	39	which allows for any subsequent CSS rules to use those variables:
	40
	41	``` css
	42	:root {
	43	--primary-color: black;
	44	--secondary-color: white;
	45	}
	46
	47	body {
	48	background-color: var(--primary-color);
	49	color: var(--secondary-color);
	50	}
	51	```
	52
	53	# CSS Box Shadows
	54
	55	Box shadows were once my mortal enemy. No matter how hard I tried, I
	56	just couldn\'t get them to work how I wanted. Because of this, my
	57	favorite discovery has been CSSMatic\'s [box shadow
	58	generator](https://www.cssmatic.com/box-shadow). It provides an
	59	excellent tool to generate box shadows using their simple sliders.
	60	Surprisingly, this is the reason I learned how box shadows work! You can
	61	use the sliders and watch how the CSS code changes in the image that is
	62	displayed. Through this, you should understand that the basic structure
	63	for box shadows is:
	64
	65	``` css
	66	box-shadow: inset horizontal vertical blur spread color;
	67	```
	68
	69	Now, let\'s look at some basic examples! You can copy and paste the
	70	following code into a site like CodePen or your own HTML files. Feel
	71	free to play around with the code, experiment, and learn.
	72
	73	Box Shadow #1
	74
	75	``` html
	76	<div class="shadow-examples">
	77	<div class="box effect1">
	78	<h3>Effect 1</h3>
	79	</div>
	80	</div>
	81	```
	82
	83	``` css
	84	.box h3 {
	85	text-align: center;
	86	position: relative;
	87	top: 80px;
	88	}
	89	.box {
	90	width: 70%;
	91	height: 200px;
	92	background: #fff;
	93	margin: 40px auto;
	94	}
	95	.effect1 {
	96	box-shadow: 0 10px 6px -6px #777;
	97	}
	98	```
	99
	100	Box Shadow #2
	101
	102	``` html
	103	<div class="shadow-examples">
	104	<div class="box effect2">
	105	<h3>Effect 2</h3>
	106	</div>
	107	</div>
	108	```
	109
	110	``` css
	111	.box h3 {
	112	text-align: center;
	113	position: relative;
	114	top: 80px;
	115	}
	116	.box {
	117	width: 70%;
	118	height: 200px;
	119	background: #fff;
	120	margin: 40px auto;
	121	}
	122	.effect2 {
	123	box-shadow: 10px 10px 5px -5px rgba(0, 0, 0, 0.75);
	124	}
	125	```
	126
	127	Try these box shadows out on your own and see how changing each shadow
	128	value works.
	129
	130	# CSS Flexbox
	131
	132	Now, let\'s move on to the best part of this article: flexbox. The
	133	flexbox is by far my favorite new toy. I originally stumbled across this
	134	solution after looking for more efficient ways of centering content
	135	horizontally AND vertically. I had used a few hack-ish methods before,
	136	but flexbox throws those out the window. The best part of it all is that
	137	flexbox is dead simple.
	138
	139	Flexbox pertains to the parent div of any element. You want the parent
	140	to be the flexbox in which items are arranged to use the flex methods.
	141	It\'s easier to see this in action that explained, so let\'s see an
	142	example.
	143
	144	Flexbox
	145
	146	``` html
	147	<div class="flex-examples">
	148	<div class="sm-box">
	149	<h3>1</h3>
	150	</div>
	151	<div class="sm-box">
	152	<h3>2</h3>
	153	</div>
	154	</div>
	155	```
	156
	157	``` css
	158	.flex-examples {
	159	display: flex;
	160	flex-wrap: wrap;
	161	justify-content: flex-start;
	162	align-items: center;
	163	padding: 10px;
	164	background-color: #f2f2f2;
	165	}
	166	.sm-box {
	167	display: flex;
	168	justify-content: center;
	169	align-items: center;
	170	width: 20%;
	171	height: 100px;
	172	background: #fff;
	173	margin: 40px 10px;
	174	}
	175	```
	176
	177	You may notice that we no longer need to use the `top`
	178	property for the `h3` elements in our code. This is because
	179	we set the display box to be a flex container for the small boxes, AND
	180	we made the small boxes flex containers for their elements (the h3
	181	tags). Flex boxes can be nested like this to center content that is
	182	inside centered content.
	183
	184	For the example above, we designated the `justify-content`
	185	property to be `flex-start` so that the boxes stack from the
	186	left side of the screen. This property can be changed to
	187	`center` to make the boxes appear in the center of the
	188	screen.
	189
	190	For an interactive example, [check out this
	191	CodePen](https://codepen.io/LandonSchropp/pen/KpzzGo) from
	192	[LandonScropp](https://codepen.io/LandonSchropp/). Resize the window
	193	with dice to see how they collapse and re-align.
	194
	195	# Even More CSS
	196
	197	For more inspiration, you can visit [CodePen](https://www.codepen.io),
	198	[Dribbble](https://dribbble.com), or [UI
	199	Movement](https://uimovement.com) to browse the collections of many
	200	amazing web designers.

content/blog/2019-01-07-useful-css.org deleted −178

	@@ -1,178 +0,0 @@
1	#+title: Useful CSS Snippets
2	#+date: 2019-01-07
3	#+description: Explore some useful CSS snippets.
4	#+filetags: :dev:
5
6	* Introduction to CSS
7	[[https://en.wikipedia.org/wiki/CSS][CSS]], the language used to markup HTML code and make it "pretty", is one of the
8	most effective ways to increase the attractiveness of a website. It can also
9	lead to increased user engagement, retention, and satisfaction. In fact, there
10	are whole career fields are dedicated to the improvement of user experiences,
11	known as UI design and UX design.
12
13	Some web developers are used to the common CSS properties, such as element
14	sizing, fonts, colors, etc., but are not as well versed in less-used properties
15	and values such as =flexbox=, =clip-path=, and =transform=. This article will
16	provide some insight into the less-used and unique CSS properties.
17
18	* CSS Variables
19	The first topic today is CSS variables. Variables are not often used by smaller
20	developers. CSS variables allow you to give your website a well-defined
21	structure, where you can easily reuse CSS properties throughout the project.
22
23	You can use variables to define things, such as color palettes. Then, you can
24	use these colors for backgrounds anywhere else in the HTML. This could be
25	extended, where extra variables could be defined for =primary-text=,
26	=quoted-text=, etc. Variables can also be used to define spacing (e.g. =32px= or
27	=2rem=), which can then be applied to margins, padding, font sizes, and more.
28
29	For example, here are some variables defined at the root of the website, which
30	allows for any subsequent CSS rules to use those variables:
31
32	#+begin_src css
33	:root {
34	--primary-color: black;
35	--secondary-color: white;
36	}
37
38	body {
39	background-color: var(--primary-color);
40	color: var(--secondary-color);
41	}
42	#+end_src
43
44	* CSS Box Shadows
45	Box shadows were once my mortal enemy. No matter how hard I tried, I just
46	couldn't get them to work how I wanted. Because of this, my favorite discovery
47	has been CSSMatic's [[https://www.cssmatic.com/box-shadow][box shadow generator]]. It provides an excellent tool to
48	generate box shadows using their simple sliders. Surprisingly, this is the
49	reason I learned how box shadows work! You can use the sliders and watch how the
50	CSS code changes in the image that is displayed. Through this, you should
51	understand that the basic structure for box shadows is:
52
53	#+begin_src css
54	box-shadow: inset horizontal vertical blur spread color;
55	#+end_src
56
57	Now, let's look at some basic examples! You can copy and paste the following
58	code into a site like CodePen or your own HTML files. Feel free to play around
59	with the code, experiment, and learn.
60
61	Box Shadow #1
62
63	#+begin_src html
64	<div class="shadow-examples">
65	<div class="box effect1">
66	<h3>Effect 1</h3>
67	</div>
68	</div>
69	#+end_src
70
71	#+begin_src css
72	.box h3 {
73	text-align: center;
74	position: relative;
75	top: 80px;
76	}
77	.box {
78	width: 70%;
79	height: 200px;
80	background: #fff;
81	margin: 40px auto;
82	}
83	.effect1 {
84	box-shadow: 0 10px 6px -6px #777;
85	}
86	#+end_src
87
88	Box Shadow #2
89
90	#+begin_src html
91	<div class="shadow-examples">
92	<div class="box effect2">
93	<h3>Effect 2</h3>
94	</div>
95	</div>
96	#+end_src
97
98	#+begin_src css
99	.box h3 {
100	text-align: center;
101	position: relative;
102	top: 80px;
103	}
104	.box {
105	width: 70%;
106	height: 200px;
107	background: #fff;
108	margin: 40px auto;
109	}
110	.effect2 {
111	box-shadow: 10px 10px 5px -5px rgba(0, 0, 0, 0.75);
112	}
113	#+end_src
114
115	Try these box shadows out on your own and see how changing each shadow value
116	works.
117
118	* CSS Flexbox
119	Now, let's move on to the best part of this article: flexbox. The flexbox is by
120	far my favorite new toy. I originally stumbled across this solution after
121	looking for more efficient ways of centering content horizontally AND
122	vertically. I had used a few hack-ish methods before, but flexbox throws those
123	out the window. The best part of it all is that flexbox is /dead simple/.
124
125	Flexbox pertains to the parent div of any element. You want the parent to be the
126	flexbox in which items are arranged to use the flex methods. It's easier to see
127	this in action that explained, so let's see an example.
128
129	Flexbox
130
131	#+begin_src html
132	<div class="flex-examples">
133	<div class="sm-box">
134	<h3>1</h3>
135	</div>
136	<div class="sm-box">
137	<h3>2</h3>
138	</div>
139	</div>
140	#+end_src
141
142	#+begin_src css
143	.flex-examples {
144	display: flex;
145	flex-wrap: wrap;
146	justify-content: flex-start;
147	align-items: center;
148	padding: 10px;
149	background-color: #f2f2f2;
150	}
151	.sm-box {
152	display: flex;
153	justify-content: center;
154	align-items: center;
155	width: 20%;
156	height: 100px;
157	background: #fff;
158	margin: 40px 10px;
159	}
160	#+end_src
161
162	You may notice that we no longer need to use the =top= property for the =h3=
163	elements in our code. This is because we set the display box to be a flex
164	container for the small boxes, AND we made the small boxes flex containers for
165	their elements (the h3 tags). Flex boxes can be nested like this to center
166	content that is inside centered content.
167
168	For the example above, we designated the =justify-content= property to be
169	=flex-start= so that the boxes stack from the left side of the screen. This
170	property can be changed to =center= to make the boxes appear in the center of
171	the screen.
172
173	For an interactive example, [[https://codepen.io/LandonSchropp/pen/KpzzGo][check out this CodePen]] from [[https://codepen.io/LandonSchropp/][LandonScropp]]. Resize the
174	window with dice to see how they collapse and re-align.
175
176	* Even More CSS
177	For more inspiration, you can visit [[https://www.codepen.io][CodePen]], [[https://dribbble.com][Dribbble]], or [[https://uimovement.com][UI Movement]] to browse
178	the collections of many amazing web designers.

content/blog/2019-09-09-audit-analytics.md added +233

@@ -0,0 +1,233 @@
	1	+++
	2	date = 2019-09-09
	3	title = "Audit Analytics"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# What Are Data Analytics?
	9
	10	A quick aside before I dive into this post: `data analytics`
	11	is a vague term that has become popular in recent years. Think of a
	12	`data analytic` as the output of any data analysis you
	13	perform. For example, a pivot table or a pie chart could be a data
	14	analytic.
	15
	16	[Data analysis](https://en.wikipedia.org/wiki/Data_analysis) is a
	17	process that utilizes statistics and other mathematical methods to
	18	discover useful information within datasets. This involves examining,
	19	cleaning, transforming, and modeling data so that you can use the data
	20	to support an opinion, create more useful viewpoints, and gain knowledge
	21	to implement into audit planning or risk assessments.
	22
	23	One of the common mistakes that managers (and anyone new to the process)
	24	make is assuming that everything involved with this process is \"data
	25	analytics\". In fact, data analytics are only a small part of the
	26	process.
	27
	28	See Figure 1\* for a more accurate representation of where data
	29	analysis sits within the full process. This means that data analysis
	30	does not include querying or extracting data, selecting samples, or
	31	performing audit tests. These steps can be necessary for an audit (and
	32	may even be performed by the same associates), but they are not data
	33	analytics.
	34
	35	![The Intelligence
	36	Cycle](https://img.cleberg.net/blog/20190909-data-analysis-in-auditing/intelligence_cycle-min.png)
	37
	38	# Current Use of Analytics in Auditing
	39
	40	While data analysis has been an integral part of most businesses and
	41	departments for the better part of the last century, only recently have
	42	internal audit functions been adopting this practice. The internal audit
	43	function works exclusively to provide assurance and consulting services
	44	to the business areas within the firm (except for internal auditing
	45	firms who are hired by different companies to perform their roles).
	46
	47	> Internal Auditing helps an organization accomplish its objectives by
	48	> bringing a systematic, disciplined approach to evaluate and improve
	49	> the effectiveness of risk management, control and governance
	50	> processes.
	51	>
	52	> - The IIA\'s Definition of Internal Audit
	53
	54	Part of the blame for the slow adoption of data analysis can be
	55	attributed to the fact that internal auditing is strongly based on
	56	tradition and following the precedents set by previous auditors.
	57	However, there can be no progress without auditors who are willing to
	58	break the mold and test new audit techniques. In fact, as of 2018, [only
	59	63% of internal audit departments currently utilize data
	60	analytics](https://www.cpapracticeadvisor.com/accounting-audit/news/12404086/internal-audit-groups-are-lagging-in-data-analytics)
	61	in North America. This number should be as close as possible to 100%. I
	62	have never been part of an audit that would not have benefited from data
	63	analytics.
	64
	65	So, how do internal audit functions remedy this situation? It\'s
	66	definitely not as easy as walking into work on Monday and telling your
	67	Chief Audit Executive that you\'re going to start implementing analytics
	68	in the next audit. You need a plan and a system to make the analysis
	69	process as effective as possible.
	70
	71	# The DELTA Model
	72
	73	One of the easiest ways to experiment with data analytics and gain an
	74	understanding of the processes is to implement them within your own
	75	department. But how do we do this if we\'ve never worked with analysis
	76	before? One of the most common places to start is to research some data
	77	analysis models currently available. For this post, we\'ll take a look
	78	at the DELTA model. You can take a look at *\\\Figure 2\\\\**
	79	for a quick overview of the model.
	80
	81	The DELTA model sets a few guidelines for areas wanting to implement
	82	data analytics so that the results can be as comprehensive as possible:
	83
	84	- Data: Must be clean, accessible, and (usually) unique.
	85	- Enterprise-Wide Focus: Key data systems and analytical resources
	86	must be available for use (by the Internal Audit Function).
	87	- Leaders: Must promote a data analytics approach and show the
	88	value of analytical results.
	89	- Targets: Must be set for key areas and risks that the analytics
	90	can be compared against (KPIs).
	91	- Analysts: There must be auditors willing and able to perform
	92	data analytics or else the system cannot be sustained.
	93
	94	![The Delta
	95	Model](https://img.cleberg.net/blog/20190909-data-analysis-in-auditing/delta-min.png)
	96
	97	# Finding the Proper KPIs
	98
	99	Once the Internal Audit Function has decided that they want to start
	100	using data analytics internally and have ensured they\'re properly set
	101	up to do so, they need to figure out what they will be testing against.
	102	Key Performance Indicators (KPIs) are qualitative or quantitative
	103	factors that can be evaluated and assessed to determine if the
	104	department is performing well, usually compared to historical or
	105	industry benchmarks. Once KPIs have been agreed upon and set, auditors
	106	can use data analytics to assess and report on these KPIs. This allows
	107	the person performing the analytics the freedom to express opinions on
	108	the results, whereas the results are ambiguous if no KPIs exist.
	109
	110	It should be noted that tracking KPIs in the department can help ensure
	111	you have a rigorous Quality Assurance and Improvement Program (QAIP) in
	112	accordance with some applicable standards, such as IPPF Standard 1300.
	113
	114	> The chief audit executive must develop and maintain a quality
	115	> assurance and improvement program that covers all aspects of the
	116	> internal audit activity.
	117	>
	118	> - IPPF Standard 1300
	119
	120	Additionally, IPPF Standard 2060 discusses reporting:
	121
	122	> The chief audit executive must report periodically to senior
	123	> management and the board on the internal audit activity\'s purpose,
	124	> authority, responsibility, and performance relative to its plan and on
	125	> its conformance with the Code of Ethics and the Standards. Reporting
	126	> must also include significant risk and control issues, including fraud
	127	> risks, governance issues, and other matters that require the attention
	128	> of senior management and/or the board.
	129	>
	130	> - IPPF Standard 2060
	131
	132	The hardest part of finding KPIs is to determine which KPIs are
	133	appropriate for your department. Since every department is different and
	134	has different goals, KPIs will vary drastically between companies. To
	135	give you an idea of where to look, here are some ideas I came up with
	136	when discussing the topic with a few colleagues.
	137
	138	- Efficiency/Budgeting:
	139	- Audit hours to staff utilization ratio (annual hours divided by
	140	total annual work hours).
	141	- Audit hours compared to the number of audits completed.
	142	- Time between audit steps or to complete the whole audit. E.g.,
	143	time from fieldwork completion to audit report issuance.
	144	- Reputation:
	145	- The frequency that management has requested the services of the
	146	IAF.
	147	- Management, audit committee, or external audit satisfaction
	148	survey results.
	149	- Education, experience, certifications, tenure, and training of
	150	the auditors on staff.
	151	- Quality:
	152	- Number and frequency of audit findings. Assign monetary or
	153	numerical values, if possible.
	154	- Percentage of recommendations issued and implemented.
	155	- Planning:
	156	- Percentage or number of key risks audited per year or per audit.
	157	- Proportion of audit universe audited per year.
	158
	159	# Data Analysis Tools
	160
	161	Finally, to be able to analyze and report on the data analysis, auditors
	162	need to evaluate the tools at their disposal. There are many options
	163	available, but a few of the most common ones can easily get the job
	164	done. For example, almost every auditor already has access to Microsoft
	165	Excel. Excel is more powerful than most people give it credit for and
	166	can accomplish a lot of basic statistics without much work. If you
	167	don\'t know a lot about statistics but still want to see some of the
	168	more basic results, Excel is a great option.
	169
	170	To perform more in-depth statistical analysis or to explore large
	171	datasets that Excel cannot handle, auditors will need to explore other
	172	options. The big three that have had a lot of success in recent years
	173	are Python, R, and ACL. ACL can be used as either a graphical tool
	174	(point and click) or as a scripting tool, where the auditor must write
	175	the scripts manually. Python and the R-language are solely scripting
	176	languages.
	177
	178	The general trend in the data analytics environment is that if the tool
	179	allows you to do everything by clicking buttons or dragging elements,
	180	you won\'t be able to fully utilize the analytics you need. The most
	181	robust solutions are created by those who understand how to write the
	182	scripts manually. It should be noted that as the utility of a tool
	183	increases, it usually means that the learning curve for that tool will
	184	also be higher. It will take auditors longer to learn how to utilize
	185	Python, R, or ACL versus learning how to utilize Excel.
	186
	187	# Visualization
	188
	189	Once an auditor has finally found the right data, KPIs, and tools, they
	190	must report these results so that actions can be taken. Performing
	191	in-depth data analysis is only useful if the results are understood by
	192	the audiences of the data. The best way to create this understanding is
	193	to visualize the results of the data. Let\'s take a look at some of the
	194	best options to visualize and report the results you\'ve found.
	195
	196	Some of the most popular commercial tools for visualization are
	197	Microsoft PowerBI and Tableau Desktop. However, other tools exist such
	198	as JMP, Plotly, Qlikview, Alteryx, or D3. Some require commercial
	199	licenses while others are simply free to use. For corporate data, you
	200	may want to make sure that the tool does not communicate any of the data
	201	outside the company (such as cloud storage). I won\'t be going into
	202	depth on any of these tools since visualization is largely a subjective
	203	and creative experience, but remember to constantly explore new options
	204	as you repeat the process.
	205
	206	Lastly, let\'s take a look at an example of data visualization. This
	207	example comes from a [blog post written by Kushal
	208	Chakrabarti](https://talent.works/2018/03/28/the-science-of-the-job-search-part-iii-61-of-entry-level-jobs-require-3-years-of-experience/)
	209	in 2018 about the percent of entry-level US jobs that require
	210	experience. Figure 3\* shows us an easy-to-digest picture of the
	211	data. We can quickly tell that only about 12.5% of entry-level jobs
	212	don\'t require experience.
	213
	214	This is the kind of result that easily describes the data for you.
	215	However, make sure to include an explanation of what the results mean.
	216	Don\'t let the reader assume what the data means, especially if it
	217	relates to a complex subject. Tell a story about the data and why the
	218	results matter. For example, Figure 4\* shows a part of the
	219	explanation the author gives to illustrate his point.
	220
	221	![Entry-Level
	222	Visualization](https://img.cleberg.net/blog/20190909-data-analysis-in-auditing/vis_example-min.png)
	223
	224	![Visualization
	225	Explanation](https://img.cleberg.net/blog/20190909-data-analysis-in-auditing/vis_example_explanation-min.png)
	226
	227	# Wrap-Up
	228
	229	While this is not an all-encompassing program that you can just adopt
	230	into your department, it should be enough to get anyone started on the
	231	process of understanding and implementing data analytics. Always
	232	remember to continue learning and exploring new options as your
	233	processes grow and evolve.

content/blog/2019-09-09-audit-analytics.org deleted −211

	@@ -1,211 +0,0 @@
1	#+title: Data Analysis in Auditing
2	#+date: 2019-09-09
3	#+description: Learn how to use data analysis in the world of auditing.
4	#+filetags: :audit:
5
6	* What Are Data Analytics?
7	A quick aside before I dive into this post: =data analytics= is a vague term
8	that has become popular in recent years. Think of a =data analytic= as the
9	output of any data analysis you perform. For example, a pivot table or a pie
10	chart could be a data analytic.
11
12	[[https://en.wikipedia.org/wiki/Data_analysis][Data analysis]] is a process that utilizes statistics and other mathematical
13	methods to discover useful information within datasets. This involves examining,
14	cleaning, transforming, and modeling data so that you can use the data to
15	support an opinion, create more useful viewpoints, and gain knowledge to
16	implement into audit planning or risk assessments.
17
18	One of the common mistakes that managers (and anyone new to the process) make is
19	assuming that everything involved with this process is "data analytics". In
20	fact, data analytics are only a small part of the process.
21
22	See Figure 1* for a more accurate representation of where data analysis sits
23	within the full process. This means that data analysis does not include querying
24	or extracting data, selecting samples, or performing audit tests. These steps
25	can be necessary for an audit (and may even be performed by the same
26	associates), but they are not data analytics.
27
28	#+caption: The Intelligence Cycle
29	[[https://img.cleberg.net/blog/20190909-data-analysis-in-auditing/intelligence_cycle-min.png]]
30
31	* Current Use of Analytics in Auditing
32	While data analysis has been an integral part of most businesses and departments
33	for the better part of the last century, only recently have internal audit
34	functions been adopting this practice. The internal audit function works
35	exclusively to provide assurance and consulting services to the business areas
36	within the firm (except for internal auditing firms who are hired by different
37	companies to perform their roles).
38
39	#+begin_quote
40	Internal Auditing helps an organization accomplish its objectives by bringing a
41	systematic, disciplined approach to evaluate and improve the effectiveness of
42	risk management, control and governance processes.
43
44	- The IIA's Definition of Internal Audit
45
46	#+end_quote
47
48	Part of the blame for the slow adoption of data analysis can be attributed to
49	the fact that internal auditing is strongly based on tradition and following the
50	precedents set by previous auditors. However, there can be no progress without
51	auditors who are willing to break the mold and test new audit techniques. In
52	fact, as of 2018, [[https://www.cpapracticeadvisor.com/accounting-audit/news/12404086/internal-audit-groups-are-lagging-in-data-analytics][only 63% of internal audit departments currently utilize data
53	analytics]] in North America. This number should be as close as possible to 100%.
54	I have never been part of an audit that would not have benefited from data
55	analytics.
56
57	So, how do internal audit functions remedy this situation? It's definitely not
58	as easy as walking into work on Monday and telling your Chief Audit Executive
59	that you're going to start implementing analytics in the next audit. You need a
60	plan and a system to make the analysis process as effective as possible.
61
62	* The DELTA Model
63	One of the easiest ways to experiment with data analytics and gain an
64	understanding of the processes is to implement them within your own department.
65	But how do we do this if we've never worked with analysis before? One of the
66	most common places to start is to research some data analysis models currently
67	available. For this post, we'll take a look at the DELTA model. You can take a
68	look at **Figure 2*** for a quick overview of the model.
69
70	The DELTA model sets a few guidelines for areas wanting to implement data
71	analytics so that the results can be as comprehensive as possible:
72
73	- Data: Must be clean, accessible, and (usually) unique.
74	- Enterprise-Wide Focus: Key data systems and analytical resources must be
75	available for use (by the Internal Audit Function).
76	- Leaders: Must promote a data analytics approach and show the value of
77	analytical results.
78	- Targets: Must be set for key areas and risks that the analytics can be
79	compared against (KPIs).
80	- Analysts: There must be auditors willing and able to perform data analytics
81	or else the system cannot be sustained.
82
83	#+caption: The Delta Model
84	[[https://img.cleberg.net/blog/20190909-data-analysis-in-auditing/delta-min.png]]
85
86	* Finding the Proper KPIs
87	Once the Internal Audit Function has decided that they want to start using data
88	analytics internally and have ensured they're properly set up to do so, they
89	need to figure out what they will be testing against. Key Performance Indicators
90	(KPIs) are qualitative or quantitative factors that can be evaluated and
91	assessed to determine if the department is performing well, usually compared to
92	historical or industry benchmarks. Once KPIs have been agreed upon and set,
93	auditors can use data analytics to assess and report on these KPIs. This allows
94	the person performing the analytics the freedom to express opinions on the
95	results, whereas the results are ambiguous if no KPIs exist.
96
97	It should be noted that tracking KPIs in the department can help ensure you have
98	a rigorous Quality Assurance and Improvement Program (QAIP) in accordance with
99	some applicable standards, such as IPPF Standard 1300.
100
101	#+begin_quote
102	The chief audit executive must develop and maintain a quality assurance and
103	improvement program that covers all aspects of the internal audit activity.
104
105	- IPPF Standard 1300
106
107	#+end_quote
108
109	Additionally, IPPF Standard 2060 discusses reporting:
110
111	#+begin_quote
112	The chief audit executive must report periodically to senior management and the
113	board on the internal audit activity's purpose, authority, responsibility, and
114	performance relative to its plan and on its conformance with the Code of Ethics
115	and the Standards. Reporting must also include significant risk and control
116	issues, including fraud risks, governance issues, and other matters that require
117	the attention of senior management and/or the board.
118
119	- IPPF Standard 2060
120
121	#+end_quote
122
123	The hardest part of finding KPIs is to determine which KPIs are appropriate for
124	your department. Since every department is different and has different goals,
125	KPIs will vary drastically between companies. To give you an idea of where to
126	look, here are some ideas I came up with when discussing the topic with a few
127	colleagues.
128
129	- Efficiency/Budgeting:
130	- Audit hours to staff utilization ratio (annual hours divided by total annual
131	work hours).
132	- Audit hours compared to the number of audits completed.
133	- Time between audit steps or to complete the whole audit. E.g., time from
134	fieldwork completion to audit report issuance.
135	- Reputation:
136	- The frequency that management has requested the services of the IAF.
137	- Management, audit committee, or external audit satisfaction survey results.
138	- Education, experience, certifications, tenure, and training of the auditors
139	on staff.
140	- Quality:
141	- Number and frequency of audit findings. Assign monetary or numerical values,
142	if possible.
143	- Percentage of recommendations issued and implemented.
144	- Planning:
145	- Percentage or number of key risks audited per year or per audit.
146	- Proportion of audit universe audited per year.
147
148	* Data Analysis Tools
149	Finally, to be able to analyze and report on the data analysis, auditors need to
150	evaluate the tools at their disposal. There are many options available, but a
151	few of the most common ones can easily get the job done. For example, almost
152	every auditor already has access to Microsoft Excel. Excel is more powerful than
153	most people give it credit for and can accomplish a lot of basic statistics
154	without much work. If you don't know a lot about statistics but still want to
155	see some of the more basic results, Excel is a great option.
156
157	To perform more in-depth statistical analysis or to explore large datasets that
158	Excel cannot handle, auditors will need to explore other options. The big three
159	that have had a lot of success in recent years are Python, R, and ACL. ACL can
160	be used as either a graphical tool (point and click) or as a scripting tool,
161	where the auditor must write the scripts manually. Python and the R-language are
162	solely scripting languages.
163
164	The general trend in the data analytics environment is that if the tool allows
165	you to do everything by clicking buttons or dragging elements, you won't be able
166	to fully utilize the analytics you need. The most robust solutions are created
167	by those who understand how to write the scripts manually. It should be noted
168	that as the utility of a tool increases, it usually means that the learning
169	curve for that tool will also be higher. It will take auditors longer to learn
170	how to utilize Python, R, or ACL versus learning how to utilize Excel.
171
172	* Visualization
173	Once an auditor has finally found the right data, KPIs, and tools, they must
174	report these results so that actions can be taken. Performing in-depth data
175	analysis is only useful if the results are understood by the audiences of the
176	data. The best way to create this understanding is to visualize the results of
177	the data. Let's take a look at some of the best options to visualize and report
178	the results you've found.
179
180	Some of the most popular commercial tools for visualization are Microsoft
181	PowerBI and Tableau Desktop. However, other tools exist such as JMP, Plotly,
182	Qlikview, Alteryx, or D3. Some require commercial licenses while others are
183	simply free to use. For corporate data, you may want to make sure that the tool
184	does not communicate any of the data outside the company (such as cloud
185	storage). I won't be going into depth on any of these tools since visualization
186	is largely a subjective and creative experience, but remember to constantly
187	explore new options as you repeat the process.
188
189	Lastly, let's take a look at an example of data visualization. This example
190	comes from a [[https://talent.works/2018/03/28/the-science-of-the-job-search-part-iii-61-of-entry-level-jobs-require-3-years-of-experience/][blog post written by Kushal Chakrabarti]] in 2018 about the percent
191	of entry-level US jobs that require experience. Figure 3* shows us an
192	easy-to-digest picture of the data. We can quickly tell that only about 12.5% of
193	entry-level jobs don't require experience.
194
195	This is the kind of result that easily describes the data for you. However, make
196	sure to include an explanation of what the results mean. Don't let the reader
197	assume what the data means, especially if it relates to a complex subject. /Tell
198	a story/ about the data and why the results matter. For example, Figure 4*
199	shows a part of the explanation the author gives to illustrate his point.
200
201	#+caption: Entry-Level Visualization
202	[[https://img.cleberg.net/blog/20190909-data-analysis-in-auditing/vis_example-min.png]]
203
204	#+caption: Visualization Explanation
205	[[https://img.cleberg.net/blog/20190909-data-analysis-in-auditing/vis_example_explanation-min.png]]
206
207	* Wrap-Up
208	While this is not an all-encompassing program that you can just adopt into your
209	department, it should be enough to get anyone started on the process of
210	understanding and implementing data analytics. Always remember to continue
211	learning and exploring new options as your processes grow and evolve.

content/blog/2019-12-03-the-ansoff-matrix.md added +128

@@ -0,0 +1,128 @@
	1	+++
	2	date = 2019-12-03
	3	title = "The Ansoff Matrix"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Overview
	9
	10	As the world of business evolves, managers must approach business
	11	planning and strategy with a contemporary mindset. According to Dess,
	12	McNamara, Eisner, and Lee, managers must be willing to adapt to the
	13	modern business environment by going beyond \"\'incremental
	14	management\', whereby they view their job as making a series of small,
	15	minor changes to improve the efficiency of the firm\'s
	16	operations\"(2019).
	17
	18	One reason that strategic management is crucial is because most
	19	businesses that fail in the United States each year fail due to a lack
	20	of strategic focus or direction(2019). The rate of failure for
	21	businesses with poor strategies shows that strategic planning and
	22	management are crucial to a business\'s strength and longevity,
	23	injecting the critical factors of growth and direction into a company\'s
	24	business plan.
	25
	26	One of the most significant strategic planning and management frameworks
	27	that companies can use is the [Ansoff
	28	Matrix](https://en.wikipedia.org/wiki/Ansoff_matrix). While this
	29	framework has unique purposes and use-cases, it can effectively help an
	30	organization grow and compete. Specifically, the Ansoff matrix is one of
	31	the most effective frameworks for companies who want to focus on
	32	increasing sales revenue or profitability(2019).
	33
	34	This framework uses a two-by-two figure to show the four strategic
	35	options for companies to use in this framework: market penetration,
	36	market development, product development, and diversification (see
	37	Figure 1). The x-axis of the matrix focuses on the firm\'s markets
	38	and also determines if the firm is looking to enter new markets or
	39	innovate in its current markets. The y-axis of the matrix focuses on the
	40	firm\'s products and determines if the firm wants to pursue strategies
	41	around their existing products or explore new products.
	42
	43	![The Ansoff Matrix by JaisonAbeySabu, Own work, CC BY-SA
	44	3.0](https://img.cleberg.net/blog/20191203-the-ansoff-matrix/ansoff_matrix-min.png)
	45
	46	# Strategic Options
	47
	48	## Market Penetration
	49
	50	The most straightforward strategy in the Ansoff matrix is to focus on
	51	existing products in existing markets, also known as market
	52	penetration(2019). Companies such as Coca-Cola have used market
	53	penetration successfully by investing a lot of money to get further
	54	value out of their current markets. Coca-Cola does this by introducing
	55	new features such as Christmas-themed bottles, personal names on the
	56	bottles, and other marketing schemes.
	57
	58	## Market Development
	59
	60	Market development extends existing products into new markets in an
	61	attempt to increase the number of buyers. One interesting way that
	62	Coca-Cola used this strategy comes from the stigma that Diet Coke is a
	63	woman\'s drink(2019). Coca-Cola introduced Coca-Cola Zero, which
	64	contained the same nutritional content as Diet Coke, but was packaged in
	65	a dark black can to appear more \"manly\"(2019).
	66
	67	## Product Development
	68
	69	Product development uses existing markets to introduce new products so
	70	that the firm can better meet customer needs(2019). The extreme end of
	71	diversification is home to companies such as Johnson & Johnson, a
	72	healthcare company that has developed a business portfolio of more than
	73	60,000 different products(2019). Johnson & Johnson\'s dedication to
	74	continuous diversification has led them to a balance sheet rating of
	75	\"AAA\", industry recognition for diversification, and increases in
	76	their investor dividends for 57 consecutive years(2019).
	77
	78	## Related Diversification
	79
	80	Diversification, the final strategy of the Ansoff Matrix, is more
	81	difficult than the others since it involves exploring both new markets
	82	and new products. Related diversification is a diversification strategy
	83	that closely relates to the firm\'s core business. Coca-Cola\'s best
	84	example of related diversification is its acquisition of Glaceau and
	85	Vitamin Water, which expanded their drinking lines of business(2019).
	86
	87	## Unrelated Diversification
	88
	89	Unrelated diversification is a diversification strategy that does not
	90	really relate to the firm\'s core business but still diversifies their
	91	business portfolio. A good example of this would be a coffee company who
	92	has decided to enter the market for bicycle sales. The main purpose of
	93	this strategy is to an extremely diverse company that will not go
	94	bankrupt if one market goes through difficult times. However, this
	95	requires a lot of independent skills and heavy investments since the
	96	company most likely cannot easily transfer knowledge between the markets
	97	they compete in.
	98
	99	# Requirements for Success
	100
	101	To use the Ansoff Matrix framework, managers need to formulate corporate
	102	goals and objectives. Without goals and direction, management frameworks
	103	do not present much practical utility. Further, the Ansoff Matrix
	104	requires the managers involved to make tactical decisions and create a
	105	path for the company to take toward their goals. Lastly, both the Ansoff
	106	Matrix needs to consider both internal and external perspectives
	107	throughout the strategy formulation process.
	108
	109	One interesting probability is that companies will be using multiple
	110	strategic planning and management frameworks at the same time. While
	111	this may sound like it could crowd the management process, there are
	112	numerous reasons to do so. For example, the Ansoff Matrix and the
	113	Balanced Scorecard are relatively popular, and they cover entirely
	114	different parts of a company\'s strategy. Using the results from the
	115	Balanced Scorecard could inform a company of the potential product and
	116	market demands, such as from customer or supplier survey results, to
	117	help the company determine which Ansoff Matrix strategy to pursue.
	118	However, a combined approach at this level would require mature
	119	frameworks and focused managers who are able to strategize at a high
	120	level.
	121
	122	Lastly, it should be noted that the author of the Ansoff matrix, Igor
	123	Ansoff, often used the term [paralysis by
	124	analysis](https://en.wikipedia.org/wiki/Analysis_paralysis) to explain
	125	the mistake of companies who overuse analysis and spend too much time
	126	planning. Companies need to understand the utility of a strategic
	127	management framework while ensuring that the company is poised to
	128	execute as efficiently as they have planned.

content/blog/2019-12-03-the-ansoff-matrix.org deleted −105

	@@ -1,105 +0,0 @@
1	#+title: The Ansoff Matrix
2	#+date: 2019-12-03
3	#+description: Learn about the Ansoff Matrix, a strategic management tool.
4	#+filetags: :business:
5
6	* Overview
7	As the world of business evolves, managers must approach business planning and
8	strategy with a contemporary mindset. According to Dess, McNamara, Eisner, and
9	Lee, managers must be willing to adapt to the modern business environment by
10	going beyond "'incremental management', whereby they view their job as making a
11	series of small, minor changes to improve the efficiency of the firm's
12	operations"(2019).
13
14	One reason that strategic management is crucial is because most businesses that
15	fail in the United States each year fail due to a lack of strategic focus or
16	direction(2019). The rate of failure for businesses with poor strategies shows
17	that strategic planning and management are crucial to a business's strength and
18	longevity, injecting the critical factors of growth and direction into a
19	company's business plan.
20
21	One of the most significant strategic planning and management frameworks that
22	companies can use is the [[https://en.wikipedia.org/wiki/Ansoff_matrix][Ansoff Matrix]]. While this framework has unique purposes
23	and use-cases, it can effectively help an organization grow and compete.
24	Specifically, the Ansoff matrix is one of the most effective frameworks for
25	companies who want to focus on increasing sales revenue or profitability(2019).
26
27	This framework uses a two-by-two figure to show the four strategic options for
28	companies to use in this framework: market penetration, market development,
29	product development, and diversification (see Figure 1). The x-axis of the
30	matrix focuses on the firm's markets and also determines if the firm is looking
31	to enter new markets or innovate in its current markets. The y-axis of the
32	matrix focuses on the firm's products and determines if the firm wants to pursue
33	strategies around their existing products or explore new products.
34
35	#+caption: The Ansoff Matrix by JaisonAbeySabu, Own work, CC BY-SA 3.0
36	[[https://img.cleberg.net/blog/20191203-the-ansoff-matrix/ansoff_matrix-min.png]]
37
38	* Strategic Options
39	** Market Penetration
40	The most straightforward strategy in the Ansoff matrix is to focus on existing
41	products in existing markets, also known as market penetration(2019). Companies
42	such as Coca-Cola have used market penetration successfully by investing a lot
43	of money to get further value out of their current markets. Coca-Cola does this
44	by introducing new features such as Christmas-themed bottles, personal names on
45	the bottles, and other marketing schemes.
46
47	** Market Development
48	Market development extends existing products into new markets in an attempt to
49	increase the number of buyers. One interesting way that Coca-Cola used this
50	strategy comes from the stigma that Diet Coke is a woman's drink(2019).
51	Coca-Cola introduced Coca-Cola Zero, which contained the same nutritional
52	content as Diet Coke, but was packaged in a dark black can to appear more
53	"manly"(2019).
54
55	** Product Development
56	Product development uses existing markets to introduce new products so that the
57	firm can better meet customer needs(2019). The extreme end of diversification is
58	home to companies such as Johnson & Johnson, a healthcare company that has
59	developed a business portfolio of more than 60,000 different products(2019).
60	Johnson & Johnson's dedication to continuous diversification has led them to a
61	balance sheet rating of "AAA", industry recognition for diversification, and
62	increases in their investor dividends for 57 consecutive years(2019).
63
64	** Related Diversification
65	Diversification, the final strategy of the Ansoff Matrix, is more difficult than
66	the others since it involves exploring both new markets and new products.
67	Related diversification is a diversification strategy that closely relates to
68	the firm's core business. Coca-Cola's best example of related diversification is
69	its acquisition of Glaceau and Vitamin Water, which expanded their drinking
70	lines of business(2019).
71
72	** Unrelated Diversification
73	Unrelated diversification is a diversification strategy that does not really
74	relate to the firm's core business but still diversifies their business
75	portfolio. A good example of this would be a coffee company who has decided to
76	enter the market for bicycle sales. The main purpose of this strategy is to an
77	extremely diverse company that will not go bankrupt if one market goes through
78	difficult times. However, this requires a lot of independent skills and heavy
79	investments since the company most likely cannot easily transfer knowledge
80	between the markets they compete in.
81
82	* Requirements for Success
83	To use the Ansoff Matrix framework, managers need to formulate corporate goals
84	and objectives. Without goals and direction, management frameworks do not
85	present much practical utility. Further, the Ansoff Matrix requires the managers
86	involved to make tactical decisions and create a path for the company to take
87	toward their goals. Lastly, both the Ansoff Matrix needs to consider both
88	internal and external perspectives throughout the strategy formulation process.
89
90	One interesting probability is that companies will be using multiple strategic
91	planning and management frameworks at the same time. While this may sound like
92	it could crowd the management process, there are numerous reasons to do so. For
93	example, the Ansoff Matrix and the Balanced Scorecard are relatively popular,
94	and they cover entirely different parts of a company's strategy. Using the
95	results from the Balanced Scorecard could inform a company of the potential
96	product and market demands, such as from customer or supplier survey results, to
97	help the company determine which Ansoff Matrix strategy to pursue. However, a
98	combined approach at this level would require mature frameworks and focused
99	managers who are able to strategize at a high level.
100
101	Lastly, it should be noted that the author of the Ansoff matrix, Igor Ansoff,
102	often used the term [[https://en.wikipedia.org/wiki/Analysis_paralysis][paralysis by analysis]] to explain the mistake of companies
103	who overuse analysis and spend too much time planning. Companies need to
104	understand the utility of a strategic management framework while ensuring that
105	the company is poised to execute as efficiently as they have planned.

content/blog/2019-12-16-password-security.md added +127

@@ -0,0 +1,127 @@
	1	+++
	2	date = 2019-12-16
	3	title = "Password Security"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Users
	9
	10	## Why Does It Matter?
	11
	12	Information security, including passwords and identities, has become one
	13	of the most important digital highlights of the last decade. With
	14	[billions of people affected by data breaches each
	15	year](https://www.usatoday.com/story/money/2018/12/28/data-breaches-2018-billions-hit-growing-number-cyberattacks/2413411002/),
	16	there\'s a greater need to introduce strong information security
	17	systems. If you think you\'ve been part of a breach, or you want to
	18	check and see, you can use [Have I Been
	19	Pwned](https://haveibeenpwned.com/) to see if your email has been
	20	involved in any public breaches. Remember that there\'s a possibility
	21	that a company experienced a breach and did not report it to anyone.
	22
	23	## How Do I Protect Myself?
	24
	25	The first place to start with any personal security check-up is to
	26	gather a list of all the different websites, apps, or programs that
	27	require you to have login credentials. Optionally, once you know where
	28	your information is being stored, you can sort the list from the
	29	most-important items such as banks or government logins to less
	30	important items such as your favorite meme site. You will want to ensure
	31	that your critical logins are secure before getting to the others.
	32
	33	Once you think you have a good idea of all your different authentication
	34	methods, I recommend using a password manager such as
	35	[Bitwarden](https://bitwarden.com/). Using a password manager allows you
	36	to automatically save your logins, create randomized passwords, and
	37	transfer passwords across devices. However, you\'ll need to memorize
	38	your \"vault password\" that allows you to open the password manager.
	39	It\'s important to make this something hard to guess since it would
	40	allow anyone who has it to access every password you\'ve stored in
	41	there.
	42
	43	Personally, I recommend using a
	44	[passphrase](https://en.wikipedia.org/wiki/Passphrase) instead of a
	45	[password](https://en.wikipedia.org/wiki/Password) for your vault
	46	password. Instead of using a string of characters (whether random or
	47	simple), use a phrase and add in symbols and a number. For example, your
	48	vault password could be `Racing-Alphabet-Gourd-Parrot3`. Swap
	49	the symbols out for whichever symbol you want, move the number around,
	50	and fine-tune the passphrase until you are confident that you can
	51	remember it whenever necessary.
	52
	53	Once you\'ve stored your passwords, make sure you continually check up
	54	on your account and make sure you aren\'t following bad password
	55	practices. Krebs on Security has a great [blog post on password
	56	recommendations](https://krebsonsecurity.com/password-dos-and-donts/).
	57	Any time that a data breach happens, make sure you check to see if you
	58	were included, and if you need to reset any account passwords.
	59
	60	# Developers
	61
	62	## What Are the Basic Requirements?
	63
	64	When developing any password-protected application, there are a few
	65	basic rules that anyone should follow even if they do not follow any
	66	official guidelines such as NIST. The foremost practice is to require
	67	users to use passwords that are at least 8 characters and cannot easily
	68	be guessed. This sounds extremely simple, but it requires quite a few
	69	different strategies. First, the application should check the potential
	70	passwords against a dictionary of insecure passwords such
	71	`password`, `1234abc`, or
	72	`application_name`.
	73
	74	Next, the application should offer guidance on the strength of passwords
	75	being entered during enrollment. Further, NIST officially recommends
	76	not\* implementing any composition rules that make passwords hard to
	77	remember (e.g. passwords with letters, numbers, and special characters)
	78	and instead encouraging the use of long pass phrases which can include
	79	spaces. It should be noted that to be able to keep spaces within
	80	passwords, all unicode characters should be supported, and passwords
	81	should not be truncated.
	82
	83	## What Does NIST Recommend?
	84
	85	The National Institute of Standards and Technology
	86	([NIST](https://www.nist.gov)) in the US Department of Commerce
	87	regularly publishes information around information security and digital
	88	identity guidelines. Recently, NIST published [Special Publication
	89	800-63b](https://pages.nist.gov/800-63-3/sp800-63b.html): Digital
	90	Identity Guidelines and Authentication and Lifecycle Management.
	91
	92	> A Memorized Secret authenticator - commonly referred to as a password
	93	> or, if numeric, a PIN - is a secret value intended to be chosen and
	94	> memorized by the user. Memorized secrets need to be of sufficient
	95	> complexity and secrecy that it would be impractical for an attacker to
	96	> guess or otherwise discover the correct secret value. A memorized
	97	> secret is something you know.
	98	>
	99	> - NIST Special Publication 800-63B
	100
	101	NIST offers a lot of guidance on passwords, but I\'m going to highlight
	102	just a few of the important factors:
	103
	104	- Require passwords to be a minimum of 8 characters (6 characters if
	105	randomly generated and be generated using an approved random bit
	106	generator).
	107	- Compare potential passwords against a list that contains values
	108	known to be commonly-used, expected, or compromised.
	109	- Offer guidance on password strength, such as a strength meter.
	110	- Implement a rate-limiting mechanism to limit the number of failed
	111	authentication attempts for each user account.
	112	- Do not require composition rules for passwords and do not require
	113	passwords to be changed periodically (unless compromised).
	114	- Allow pasting of user identification and passwords to facilitate the
	115	use of password managers.
	116	- Allow users to view the password as it is being entered.
	117	- Use secure forms of communication and storage, including salting and
	118	hashing passwords using a one-way key derivation function.
	119
	120	NIST offers further guidance on other devices that require specific
	121	security policies, querying for passwords, and more. All the information
	122	discussed so far comes from [NIST
	123	SP800-63b](https://pages.nist.gov/800-63-3/sp800-63b.html) but NIST
	124	offers a lot of information on digital identities, enrollment, identity
	125	proofing, authentication, lifecycle management, federation, and
	126	assertions in the total [NIST SP800-63 Digital Identity
	127	Guidelines](https://pages.nist.gov/800-63-3/).

content/blog/2019-12-16-password-security.org deleted −103

	@@ -1,103 +0,0 @@
1	#+title: Password Security
2	#+date: 2019-12-16
3	#+description: Password security basics.
4	#+filetags: :security:
5
6	* Users
7	** Why Does It Matter?
8	Information security, including passwords and identities, has become one of the
9	most important digital highlights of the last decade. With [[https://www.usatoday.com/story/money/2018/12/28/data-breaches-2018-billions-hit-growing-number-cyberattacks/2413411002/][billions of people
10	affected by data breaches each year]], there's a greater need to introduce strong
11	information security systems. If you think you've been part of a breach, or you
12	want to check and see, you can use [[https://haveibeenpwned.com/][Have I Been Pwned]] to see if your email has
13	been involved in any public breaches. Remember that there's a possibility that a
14	company experienced a breach and did not report it to anyone.
15
16	** How Do I Protect Myself?
17	The first place to start with any personal security check-up is to gather a list
18	of all the different websites, apps, or programs that require you to have login
19	credentials. Optionally, once you know where your information is being stored,
20	you can sort the list from the most-important items such as banks or government
21	logins to less important items such as your favorite meme site. You will want to
22	ensure that your critical logins are secure before getting to the others.
23
24	Once you think you have a good idea of all your different authentication
25	methods, I recommend using a password manager such as [[https://bitwarden.com/][Bitwarden]]. Using a
26	password manager allows you to automatically save your logins, create randomized
27	passwords, and transfer passwords across devices. However, you'll need to
28	memorize your "vault password" that allows you to open the password manager.
29	It's important to make this something hard to guess since it would allow anyone
30	who has it to access every password you've stored in there.
31
32	Personally, I recommend using a [[https://en.wikipedia.org/wiki/Passphrase][passphrase]] instead of a [[https://en.wikipedia.org/wiki/Password][password]] for your vault
33	password. Instead of using a string of characters (whether random or simple),
34	use a phrase and add in symbols and a number. For example, your vault password
35	could be =Racing-Alphabet-Gourd-Parrot3=. Swap the symbols out for whichever
36	symbol you want, move the number around, and fine-tune the passphrase until you
37	are confident that you can remember it whenever necessary.
38
39	Once you've stored your passwords, make sure you continually check up on your
40	account and make sure you aren't following bad password practices. Krebs on
41	Security has a great [[https://krebsonsecurity.com/password-dos-and-donts/][blog post on password recommendations]]. Any time that a data
42	breach happens, make sure you check to see if you were included, and if you need
43	to reset any account passwords.
44
45	* Developers
46	** What Are the Basic Requirements?
47	When developing any password-protected application, there are a few basic rules
48	that anyone should follow even if they do not follow any official guidelines
49	such as NIST. The foremost practice is to require users to use passwords that
50	are at least 8 characters and cannot easily be guessed. This sounds extremely
51	simple, but it requires quite a few different strategies. First, the application
52	should check the potential passwords against a dictionary of insecure passwords
53	such =password=, =1234abc=, or =application_name=.
54
55	Next, the application should offer guidance on the strength of passwords being
56	entered during enrollment. Further, NIST officially recommends not*
57	implementing any composition rules that make passwords hard to remember (e.g.
58	passwords with letters, numbers, and special characters) and instead encouraging
59	the use of long pass phrases which can include spaces. It should be noted that
60	to be able to keep spaces within passwords, all unicode characters should be
61	supported, and passwords should not be truncated.
62
63	** What Does NIST Recommend?
64	The National Institute of Standards and Technology ([[https://www.nist.gov][NIST]]) in the US Department
65	of Commerce regularly publishes information around information security and
66	digital identity guidelines. Recently, NIST published [[https://pages.nist.gov/800-63-3/sp800-63b.html][Special Publication
67	800-63b]]: Digital Identity Guidelines and Authentication and Lifecycle
68	Management.
69
70	#+begin_quote
71	A Memorized Secret authenticator - commonly referred to as a password or, if
72	numeric, a PIN - is a secret value intended to be chosen and memorized by the
73	user. Memorized secrets need to be of sufficient complexity and secrecy that it
74	would be impractical for an attacker to guess or otherwise discover the correct
75	secret value. A memorized secret is something you know.
76
77	- NIST Special Publication 800-63B
78	#+end_quote
79
80	NIST offers a lot of guidance on passwords, but I'm going to highlight just a
81	few of the important factors:
82
83	- Require passwords to be a minimum of 8 characters (6 characters if randomly
84	generated and be generated using an approved random bit generator).
85	- Compare potential passwords against a list that contains values known to be
86	commonly-used, expected, or compromised.
87	- Offer guidance on password strength, such as a strength meter.
88	- Implement a rate-limiting mechanism to limit the number of failed
89	authentication attempts for each user account.
90	- Do not require composition rules for passwords and do not require passwords to
91	be changed periodically (unless compromised).
92	- Allow pasting of user identification and passwords to facilitate the use of
93	password managers.
94	- Allow users to view the password as it is being entered.
95	- Use secure forms of communication and storage, including salting and hashing
96	passwords using a one-way key derivation function.
97
98	NIST offers further guidance on other devices that require specific security
99	policies, querying for passwords, and more. All the information discussed so far
100	comes from [[https://pages.nist.gov/800-63-3/sp800-63b.html][NIST SP800-63b]] but NIST offers a lot of information on digital
101	identities, enrollment, identity proofing, authentication, lifecycle management,
102	federation, and assertions in the total [[https://pages.nist.gov/800-63-3/][NIST SP800-63 Digital Identity
103	Guidelines]].

content/blog/2020-01-25-linux-software.md added +282

@@ -0,0 +1,282 @@
	1	+++
	2	date = 2020-01-25
	3	title = "My Favorite Linux Software"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# GUI Applications
	9
	10	## Etcher
	11
	12	![Etcher
	13	Screenshot](https://img.cleberg.net/blog/20200125-the-best-linux-software/etcher.png)
	14
	15	[Etcher](https://www.balena.io/etcher/) is a quick and easy way to burn
	16	ISO images to CDs and USB devices. There are two different ways you can
	17	install this program. First, you can navigate to the [official
	18	website](https://www.balena.io/etcher/) and download the AppImage file,
	19	which can run without installation.
	20
	21	However, AppImage files are not executable by default, so you\'ll either
	22	need to right-click to open the properties of the file and click the
	23	\"Allow executing file as program\" box in the Permissions tab or use
	24	the following command:
	25
	26	```sh
	27	chmod u+x FILE_NAME
	28	```
	29
	30	If you don\'t like AppImage files or just prefer repositories, you can
	31	use the following commands to add the author\'s repository and install
	32	it through the command-line only.
	33
	34	First, you\'ll have to echo the repo and write it to a list file:
	35
	36	```sh
	37	echo "deb https://deb.etcher.io stable etcher" \| sudo tee /etc/apt/sources.list.d/balena-etcher.list
	38	```
	39
	40	Next, add the application keys to Ubuntu\'s keyring:
	41
	42	```sh
	43	sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 379CE192D401AB61
	44	```
	45
	46	Finally, update the repositories and install the app.
	47
	48	```sh
	49	sudo apt update && sudo apt install balena-etcher-electron
	50	```
	51
	52	Using Arch, Manjaro, or another distro using the AUR? Use this command
	53	instead:
	54
	55	```sh
	56	sudo pacman -S etcher
	57	```
	58
	59	## Atom
	60
	61	![Atom
	62	Screenshot](https://img.cleberg.net/blog/20200125-the-best-linux-software/atom.png)
	63
	64	[Atom](https://atom.io) is the self-proclaimed \"hackable text editor
	65	for the 21st century\". This text editor is made by GitHub, [now owned
	66	by
	67	Microsoft](https://news.microsoft.com/2018/06/04/microsoft-to-acquire-github-for-7-5-billion/),
	68	and has some of the best add-ons available to customize the layout and
	69	abilities of the app.
	70
	71	First, add the Atom repository to your sources.
	72
	73	```sh
	74	sudo add-apt-repository ppa:webupd8team/atom
	75	```
	76
	77	Next, update your package listings and install atom.
	78
	79	```sh
	80	sudo apt update && sudo apt install atom
	81	```
	82
	83	If you have issues updating your packages with the Atom repository,
	84	you\'ll need to use the snap package described below instead of the
	85	repository. To remove the repository we just added, use this command:
	86
	87	```sh
	88	sudo add-apt-repository -r ppa:webupd8team/atom
	89	```
	90
	91	You can also install Atom as a snap package, but it must be installed
	92	with the `--classic` flag. A [full explanation is
	93	available](https://language-bash.com/blog/how-to-snap-introducing-classic-confinement)
	94	if you\'d like to read more about why you need the classic flag.
	95
	96	```sh
	97	snap install atom --classic
	98	```
	99
	100	Using Arch, Manjaro, or another distro using the AUR? Use this command
	101	instead:
	102
	103	```sh
	104	sudo pacman -S atom
	105	```
	106
	107	## Visual Studio Code
	108
	109	![Visual Studio Code
	110	Code](https://img.cleberg.net/blog/20200125-the-best-linux-software/vscode.png)
	111
	112	[Visual Studio Code](https://code.visualstudio.com) is yet another
	113	fantastic choice for programming on Linux, especially if you need those
	114	extra add-ons to spice up your late-night coding sessions. The theme
	115	used in the screenshot is
	116	[Mars](https://marketplace.visualstudio.com/items?itemName=EliverLara.mars)
	117	by theme creator [Eliver Lara](https://github.com/EliverLara), who makes
	118	a ton of great themes for VS Code, Atom, and various Linux desktop
	119	environments.
	120
	121	To install VS Code, you\'ll need to download the `.deb` file
	122	from the official website. Once you\'ve downloaded the file, either
	123	double-click it to install through the Software Center or run the
	124	following command:
	125
	126	```sh
	127	sudo dpkg -i FILE_NAME.deb
	128	```
	129
	130	You can also install VS Code as a snap package, but it must be installed
	131	with the `--classic` flag. A [full explanation is
	132	available](https://language-bash.com/blog/how-to-snap-introducing-classic-confinement)
	133	if you\'d like to read more about why you need the classic flag.
	134
	135	```sh
	136	snap install code --classic
	137	```
	138
	139	Using Arch, Manjaro, or another distro using the AUR? Use these commands
	140	instead:
	141
	142	```sh
	143	sudo pacman -S yay binutils make gcc pkg-config fakeroot yay -S visual-studio-code-bin
	144	```
	145
	146	## GNOME Tweaks
	147
	148	![Gnome Tweaks
	149	Screenshot](https://img.cleberg.net/blog/20200125-the-best-linux-software/gnome-tweaks.png)
	150
	151	[Gnome Tweaks](https://gitlab.gnome.org/GNOME/gnome-tweaks) is the
	152	ultimate tool to use if you want to customize your GNOME desktop
	153	environment. This is how you can switch application themes (GTK), shell
	154	themes, icons, fonts, and more. To install GNOME Tweaks on Ubuntu, you
	155	just need to install the official package.
	156
	157	```sh
	158	sudo apt install gnome-tweaks
	159	```
	160
	161	If you\'ve installed Manjaro or Arch with Gnome, you should have the
	162	tweak tool pre-installed. If you\'re on Fedora, this tool is available
	163	as an official package:
	164
	165	```sh
	166	sudo dnf install gnome-tweaks
	167	```
	168
	169	## Steam
	170
	171	![Steam
	172	Screenshot](https://img.cleberg.net/blog/20200125-the-best-linux-software/steam.png)
	173
	174	[Steam](https://steampowered.com) is one of the most popular gaming
	175	libraries for computers and is one of the main reasons that many people
	176	have been able to switch to Linux in recent years, thanks to Steam
	177	Proton, which makes it easier to play games not officially created for
	178	Linux platforms.
	179
	180	To install Steam on Ubuntu, you just need to install the official
	181	package.
	182
	183	```sh
	184	sudo apt install steam-installer
	185	```
	186
	187	For Arch-based systems, you\'ll simply need to install the
	188	`steam` package. However, this requires that you enable the
	189	`multilib` source. To do so, use the following command:
	190
	191	```sh
	192	sudo nano /etc/pacman.conf
	193	```
	194
	195	Now, scroll down and uncomment the `multilib` section.
	196
	197	``` config
	198	# Before:
	199	#[multilib]
	200	#Include = /etc/pacman.d/mirrorlist
	201
	202	# After:
	203	[multilib]
	204	Include = /etc/pacman.d/mirrorlist
	205	```
	206
	207	Finally, install the program:
	208
	209	```sh
	210	sudo pacman -S steam
	211	```
	212
	213	[Problem Launching Steam Games? Click
	214	Here.](./2020-01-26-steam-on-ntfs-drives.html)
	215
	216	# Command-Line Packages
	217
	218	## neofetch
	219
	220	![Neofetch
	221	Screenshot](https://img.cleberg.net/blog/20200125-the-best-linux-software/neofetch.png)
	222
	223	[Neofetch](https://github.com/dylanaraps/neofetch) is a customizable
	224	tool used in the command-line to show system information. This is
	225	exceptionally useful if you want to see your system\'s information
	226	quickly without the clutter of some resource-heavy GUI apps.
	227
	228	This is an official package if you\'re running Ubuntu 17.04 or later, so
	229	simply use the following command:
	230
	231	```sh
	232	sudo apt install neofetch
	233	```
	234
	235	If you\'re running Ubuntu 16.10 or earlier, you\'ll have to use a series
	236	of commands:
	237
	238	```sh
	239	sudo add-apt-repository ppa:dawidd0811/neofetch; sudo apt update; sudo apt install neofetch
	240	```
	241
	242	Using Arch, Manjaro, or another distro using the AUR? Use this command
	243	instead:
	244
	245	```sh
	246	sudo pacman -S neofetch
	247	```
	248
	249	## yt-dlp
	250
	251	![yt-dlp
	252	Screenshot](https://img.cleberg.net/blog/20200125-the-best-linux-software/yt-dlp.png)
	253
	254	[yt-dlp](https://github.com/yt-dlp/yt-dlp) is an extremely handy
	255	command-line tool that allows you to download video or audio files from
	256	various websites, such as YouTube. There are a ton of different options
	257	when running this package, so be sure to run `yt-dlp --help`
	258	first to look through everything you can do (or give up and search for
	259	the best config online).
	260
	261	While this shouldn\'t be a problem for most users, yt-dlp requires
	262	Python 2.6, 2.7, or 3.2+ to work correctly, so install Python if you
	263	don\'t have it already. You can check to see if you have Python
	264	installed by running:
	265
	266	```sh
	267	python -V
	268	```
	269
	270	To get the youtube-dl package, simply curl the URL and output the
	271	results.
	272
	273	```sh
	274	sudo curl -L https://github.com/yt-dlp/yt-dlp/releases/latest/download/yt-dlp -o /usr/local/bin/yt-dlp
	275	```
	276
	277	Finally, make the file executable so that it can be run from the
	278	command-line.
	279
	280	```sh
	281	sudo chmod a+rx /usr/local/bin/yt-dlp
	282	```

content/blog/2020-01-25-linux-software.org deleted −249

	@@ -1,249 +0,0 @@
1	#+title: Linux Software
2	#+date: 2020-01-25
3	#+description: A look at some useful Linux applications.
4	#+filetags: :linux:
5
6	* GUI Applications
7	** Etcher
8	#+caption: Etcher Screenshot
9	[[https://img.cleberg.net/blog/20200125-the-best-linux-software/etcher.png]]
10
11	[[https://www.balena.io/etcher/][Etcher]] is a quick and easy way to burn ISO images to CDs and USB devices. There
12	are two different ways you can install this program. First, you can navigate to
13	the [[https://www.balena.io/etcher/][official website]] and download the AppImage file, which can run without
14	installation.
15
16	However, AppImage files are not executable by default, so you'll either need to
17	right-click to open the properties of the file and click the "Allow executing
18	file as program" box in the Permissions tab or use the following command:
19
20	#+begin_src sh
21	chmod u+x FILE_NAME
22	#+end_src
23
24	If you don't like AppImage files or just prefer repositories, you can use the
25	following commands to add the author's repository and install it through the
26	command-line only.
27
28	First, you'll have to echo the repo and write it to a list file:
29
30	#+begin_src sh
31	echo "deb https://deb.etcher.io stable etcher" \| sudo tee /etc/apt/sources.list.d/balena-etcher.list
32	#+end_src
33
34	Next, add the application keys to Ubuntu's keyring:
35
36	#+begin_src sh
37	sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 379CE192D401AB61
38	#+end_src
39
40	Finally, update the repositories and install the app.
41
42	#+begin_src sh
43	sudo apt update && sudo apt install balena-etcher-electron
44	#+end_src
45
46	Using Arch, Manjaro, or another distro using the AUR? Use this command instead:
47
48	#+begin_src sh
49	sudo pacman -S etcher
50	#+end_src
51
52	** Atom
53	#+caption: Atom Screenshot
54	[[https://img.cleberg.net/blog/20200125-the-best-linux-software/atom.png]]
55
56	[[https://atom.io][Atom]] is the self-proclaimed "hackable text editor for the 21st century". This
57	text editor is made by GitHub, [[https://news.microsoft.com/2018/06/04/microsoft-to-acquire-github-for-7-5-billion/][now owned by Microsoft]], and has some of the best
58	add-ons available to customize the layout and abilities of the app.
59
60	First, add the Atom repository to your sources.
61
62	#+begin_src sh
63	sudo add-apt-repository ppa:webupd8team/atom
64	#+end_src
65
66	Next, update your package listings and install atom.
67
68	#+begin_src sh
69	sudo apt update && sudo apt install atom
70	#+end_src
71
72	If you have issues updating your packages with the Atom repository, you'll need
73	to use the snap package described below instead of the repository. To remove the
74	repository we just added, use this command:
75
76	#+begin_src sh
77	sudo add-apt-repository -r ppa:webupd8team/atom
78	#+end_src
79
80	You can also install Atom as a snap package, but it must be installed with the
81	=--classic= flag. A [[https://language-bash.com/blog/how-to-snap-introducing-classic-confinement][full explanation is available]] if you'd like to read more
82	about why you need the classic flag.
83
84	#+begin_src sh
85	snap install atom --classic
86	#+end_src
87
88	Using Arch, Manjaro, or another distro using the AUR? Use this command instead:
89
90	#+begin_src sh
91	sudo pacman -S atom
92	#+end_src
93
94	** Visual Studio Code
95	#+caption: Visual Studio Code Code
96	[[https://img.cleberg.net/blog/20200125-the-best-linux-software/vscode.png]]
97
98	[[https://code.visualstudio.com][Visual Studio Code]] is yet another fantastic choice for programming on Linux,
99	especially if you need those extra add-ons to spice up your late-night coding
100	sessions. The theme used in the screenshot is [[https://marketplace.visualstudio.com/items?itemName=EliverLara.mars][Mars]] by theme creator [[https://github.com/EliverLara][Eliver Lara]],
101	who makes a ton of great themes for VS Code, Atom, and various Linux desktop
102	environments.
103
104	To install VS Code, you'll need to download the =.deb= file from the official
105	website. Once you've downloaded the file, either double-click it to install
106	through the Software Center or run the following command:
107
108	#+begin_src sh
109	sudo dpkg -i FILE_NAME.deb
110	#+end_src
111
112	You can also install VS Code as a snap package, but it must be installed with
113	the =--classic= flag. A [[https://language-bash.com/blog/how-to-snap-introducing-classic-confinement][full explanation is available]] if you'd like to read more
114	about why you need the classic flag.
115
116	#+begin_src sh
117	snap install code --classic
118	#+end_src
119
120	Using Arch, Manjaro, or another distro using the AUR? Use these commands
121	instead:
122
123	#+begin_src sh
124	sudo pacman -S yay binutils make gcc pkg-config fakeroot yay -S visual-studio-code-bin
125	#+end_src
126
127	** GNOME Tweaks
128	#+caption: Gnome Tweaks Screenshot
129	[[https://img.cleberg.net/blog/20200125-the-best-linux-software/gnome-tweaks.png]]
130
131	[[https://gitlab.gnome.org/GNOME/gnome-tweaks][Gnome Tweaks]] is the ultimate tool to use if you want to customize your GNOME
132	desktop environment. This is how you can switch application themes (GTK), shell
133	themes, icons, fonts, and more. To install GNOME Tweaks on Ubuntu, you just need
134	to install the official package.
135
136	#+begin_src sh
137	sudo apt install gnome-tweaks
138	#+end_src
139
140	If you've installed Manjaro or Arch with Gnome, you should have the tweak tool
141	pre-installed. If you're on Fedora, this tool is available as an official
142	package:
143
144	#+begin_src sh
145	sudo dnf install gnome-tweaks
146	#+end_src
147
148	** Steam
149	#+caption: Steam Screenshot
150	[[https://img.cleberg.net/blog/20200125-the-best-linux-software/steam.png]]
151
152	[[https://steampowered.com][Steam]] is one of the most popular gaming libraries for computers and is one of
153	the main reasons that many people have been able to switch to Linux in recent
154	years, thanks to Steam Proton, which makes it easier to play games not
155	officially created for Linux platforms.
156
157	To install Steam on Ubuntu, you just need to install the official package.
158
159	#+begin_src sh
160	sudo apt install steam-installer
161	#+end_src
162
163	For Arch-based systems, you'll simply need to install the =steam= package.
164	However, this requires that you enable the =multilib= source. To do so, use the
165	following command:
166
167	#+begin_src sh
168	sudo nano /etc/pacman.conf
169	#+end_src
170
171	Now, scroll down and uncomment the =multilib= section.
172
173	#+begin_src config
174	# Before:
175	#[multilib]
176	#Include = /etc/pacman.d/mirrorlist
177
178	# After:
179	[multilib]
180	Include = /etc/pacman.d/mirrorlist
181	#+end_src
182
183	Finally, install the program:
184
185	#+begin_src sh
186	sudo pacman -S steam
187	#+end_src
188
189	[[./2020-01-26-steam-on-ntfs-drives.html][Problem Launching Steam Games?
190	Click Here.]]
191
192	* Command-Line Packages
193	** neofetch
194	#+caption: Neofetch Screenshot
195	[[https://img.cleberg.net/blog/20200125-the-best-linux-software/neofetch.png]]
196
197	[[https://github.com/dylanaraps/neofetch][Neofetch]] is a customizable tool used in the command-line to show system
198	information. This is exceptionally useful if you want to see your system's
199	information quickly without the clutter of some resource-heavy GUI apps.
200
201	This is an official package if you're running Ubuntu 17.04 or later, so simply
202	use the following command:
203
204	#+begin_src sh
205	sudo apt install neofetch
206	#+end_src
207
208	If you're running Ubuntu 16.10 or earlier, you'll have to use a series of
209	commands:
210
211	#+begin_src sh
212	sudo add-apt-repository ppa:dawidd0811/neofetch; sudo apt update; sudo apt install neofetch
213	#+end_src
214
215	Using Arch, Manjaro, or another distro using the AUR? Use this command instead:
216
217	#+begin_src sh
218	sudo pacman -S neofetch
219	#+end_src
220
221	** yt-dlp
222	#+caption: yt-dlp Screenshot
223	[[https://img.cleberg.net/blog/20200125-the-best-linux-software/yt-dlp.png]]
224
225	[[https://github.com/yt-dlp/yt-dlp][yt-dlp]] is an extremely handy command-line tool that allows you to download video
226	or audio files from various websites, such as YouTube. There are a ton of
227	different options when running this package, so be sure to run =yt-dlp --help=
228	first to look through everything you can do (or give up and search for the best
229	config online).
230
231	While this shouldn't be a problem for most users, yt-dlp requires Python 2.6,
232	2.7, or 3.2+ to work correctly, so install Python if you don't have it already.
233	You can check to see if you have Python installed by running:
234
235	#+begin_src sh
236	python -V
237	#+end_src
238
239	To get the youtube-dl package, simply curl the URL and output the results.
240
241	#+begin_src sh
242	sudo curl -L https://github.com/yt-dlp/yt-dlp/releases/latest/download/yt-dlp -o /usr/local/bin/yt-dlp
243	#+end_src
244
245	Finally, make the file executable so that it can be run from the command-line.
246
247	#+begin_src sh
248	sudo chmod a+rx /usr/local/bin/yt-dlp
249	#+end_src

content/blog/2020-01-26-steam-on-ntfs.md added +97

@@ -0,0 +1,97 @@
	1	+++
	2	date = 2020-01-26
	3	title = "Linux Gaming Tweak: Steam on NTFS Drives"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Auto-Mount Steam Drives
	9
	10	![Steam
	11	Screenshot](https://img.cleberg.net/blog/20200125-the-best-linux-software/steam.png)
	12
	13	If you want to see how to install Steam on Linux, see my other post:
	14	[Linux Software](../linux-software/).
	15
	16	Are you having trouble launching games, even though they\'ve installed
	17	correctly? This may happen if you\'re storing your games on an
	18	NTFS-formatted drive. This shouldn\'t be an issue if you\'re storing
	19	your games on the same drive that Steam is on, but some gamers prefer to
	20	put Steam on their main drive and game files on another SSD or HDD.
	21
	22	To fix this problem, you\'ll need to try a few things. First, you\'ll
	23	need to install the `ntfs-3g` package, which is meant for
	24	better interoperability with Linux.
	25
	26	```sh
	27	sudo apt install ntfs-3g
	28	```
	29
	30	Next, you should set up the `/etc/fstab` file to
	31	automatically mount your drives on boot. To automatically mount your
	32	drives when the computer boots up, you\'ll have to create the folders
	33	you want to mount your drive to first. I store mine in the
	34	`/mnt` folder using names that I\'ll recognize, but you can
	35	create your folders wherever you want.
	36
	37	```sh
	38	mkdir /path/to/folder
	39	```
	40
	41	For example:
	42
	43	```sh
	44	mkdir /mnt/steam_library
	45	```
	46
	47	To automatically mount drives upon system boot, you will need to collect
	48	a few items. The UUID is the identification number connected to
	49	whichever drive you\'re using to store Steam games.
	50
	51	Drives are usually labeled similar to `/dev/nvme0n1p1` or
	52	`/dev/sda1`, so you\'ll need to find the line in the output
	53	of the command below that correlates to your drive and copy the UUID
	54	over to the `/etc/fstab` file.
	55
	56	```sh
	57	sudo blkid \| grep UUID=
	58	```
	59
	60	Next, you\'ll need your `uid` and `gid`. To find
	61	these, run the following command:
	62
	63	```sh
	64	id -u && id -g
	65	```
	66
	67	Now that you have collected the necessary information, open the
	68	`/etc/fstab` file:
	69
	70	```sh
	71	sudo nano /etc/fstab
	72	```
	73
	74	Each drive you want to mount on boot should have its own line in the
	75	`/etc/fstab` file that looks similar to this:
	76
	77	``` config
	78	UUID=B64E53824E5339F7 /mnt/steam_library ntfs-3g uid=1000,gid=1000 0 0
	79	```
	80
	81	Now all you need to do is unmount your drive and re-mount it. You can
	82	unmount the drive by doing this (be sure to use the correct drive name
	83	here):
	84
	85	```sh
	86	sudo umount /dev/sdxX
	87	```
	88
	89	You can re-mount all your drives by executing the following:
	90
	91	```sh
	92	sudo mount -a
	93	```
	94
	95	If you don\'t know what your drive name is, or you\'re nervous about
	96	unmounting and re-mounting, simply reboot your computer, and it will be
	97	done for you automatically.

content/blog/2020-01-26-steam-on-ntfs.org deleted −91

	@@ -1,91 +0,0 @@
1	#+title: Linux Gaming Tweak: Steam on NTFS Drives
2	#+date: 2020-01-26
3	#+description: Learn how to fix Steam NTFS issues on Linux.
4	#+filetags: :gaming:linux:
5
6	* Auto-Mount Steam Drives
7	#+caption: Steam Screenshot
8	[[https://img.cleberg.net/blog/20200125-the-best-linux-software/steam.png]]
9
10	If you want to see how to install Steam on Linux, see my other post: [[../linux-software/][Linux
11	Software]].
12
13	Are you having trouble launching games, even though they've installed correctly?
14	This may happen if you're storing your games on an NTFS-formatted drive. This
15	shouldn't be an issue if you're storing your games on the same drive that Steam
16	is on, but some gamers prefer to put Steam on their main drive and game files on
17	another SSD or HDD.
18
19	To fix this problem, you'll need to try a few things. First, you'll need to
20	install the =ntfs-3g= package, which is meant for better interoperability with
21	Linux.
22
23	#+begin_src sh
24	sudo apt install ntfs-3g
25	#+end_src
26
27	Next, you should set up the =/etc/fstab= file to automatically mount your drives
28	on boot. To automatically mount your drives when the computer boots up, you'll
29	have to create the folders you want to mount your drive to first. I store mine
30	in the =/mnt= folder using names that I'll recognize, but you can create your
31	folders wherever you want.
32
33	#+begin_src sh
34	mkdir /path/to/folder
35	#+end_src
36
37	For example:
38
39	#+begin_src sh
40	mkdir /mnt/steam_library
41	#+end_src
42
43	To automatically mount drives upon system boot, you will need to collect a few
44	items. The UUID is the identification number connected to whichever drive you're
45	using to store Steam games.
46
47	Drives are usually labeled similar to =/dev/nvme0n1p1= or =/dev/sda1=, so you'll
48	need to find the line in the output of the command below that correlates to your
49	drive and copy the UUID over to the =/etc/fstab= file.
50
51	#+begin_src sh
52	sudo blkid \| grep UUID=
53	#+end_src
54
55	Next, you'll need your =uid= and =gid=. To find these, run the following
56	command:
57
58	#+begin_src sh
59	id -u && id -g
60	#+end_src
61
62	Now that you have collected the necessary information, open the =/etc/fstab=
63	file:
64
65	#+begin_src sh
66	sudo nano /etc/fstab
67	#+end_src
68
69	Each drive you want to mount on boot should have its own line in the
70	=/etc/fstab= file that looks similar to this:
71
72	#+begin_src config
73	UUID=B64E53824E5339F7 /mnt/steam_library ntfs-3g uid=1000,gid=1000 0 0
74	#+end_src
75
76	Now all you need to do is unmount your drive and re-mount it. You can unmount
77	the drive by doing this (be sure to use the correct drive name here):
78
79	#+begin_src sh
80	sudo umount /dev/sdxX
81	#+end_src
82
83	You can re-mount all your drives by executing the following:
84
85	#+begin_src sh
86	sudo mount -a
87	#+end_src
88
89	If you don't know what your drive name is, or you're nervous about unmounting
90	and re-mounting, simply reboot your computer, and it will be done for you
91	automatically.

content/blog/2020-02-09-cryptography-basics.md added +180

@@ -0,0 +1,180 @@
	1	+++
	2	date = 2020-02-09
	3	title = "Cryptography Basics"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Similar Article Available
	9
	10	If you haven\'t already, feel free to read my post on [AES
	11	Encryption](../aes-encryption/).
	12
	13	# What is Cryptography?
	14
	15	In layman\'s terms, cryptography is a process that can change data from
	16	a readable format into an unreadable format (and vice-versa) through a
	17	series of processes and secrets. More technically, this is the Internet
	18	Security Glossary\'s definition:
	19
	20	> \[Cryptography is\] the mathematical science that deals with
	21	> transforming data to render its meaning unintelligible (i.e., to hide
	22	> its semantic content), prevent its undetected alteration, or prevent
	23	> its unauthorized use. If the transformation is reversible,
	24	> cryptography also deals with restoring encrypted data to an
	25	> intelligible form.
	26	>
	27	> - [Internet Security Glossary
	28	> (2000)](https://tools.ietf.org/html/rfc2828)
	29
	30	Cryptography cannot offer protection against the loss of data; it simply
	31	offers encryption methods to protect data at-rest and data in-traffic.
	32	At a high-level, encrypted is when plaintext data is encrypted to
	33	ciphertext (a secure form of text that cannot be understood unless
	34	decrypted back to plaintext). The encryption process is completed
	35	through the use of a mathematical function that utilizes one or more
	36	values called keys to encrypt or decrypt the data.
	37
	38	# Key Elements of Cryptographic Systems
	39
	40	To create or evaluate a cryptographic system, you need to know the
	41	essential pieces to the system:
	42
	43	- Encryption Algorithm (Primitive):\* A mathematical process that
	44	encrypts and decrypts data.
	45	- Encryption Key:\* A string of bits used within the encryption
	46	algorithm as the secret that allows successful encryption or
	47	decryption of data.
	48	- Key Length (Size):\* The maximum number of bits within the
	49	encryption key. It\'s important to remember that key size is
	50	regulated in many countries.
	51	- Message Digest:\* A smaller, fixed-size bit string version of
	52	the original message. This is practically infeasible to reverse,
	53	which is why it\'s commonly used to verify integrity.
	54
	55	# Symmetric Systems (Secret Key Cryptography)
	56
	57	Symmetric cryptography utilizes a secret, bidirectional key to perform
	58	both encryption and decryption of the data. The most common
	59	implementation of symmetric cryptography is the Advanced Encryption
	60	Standard, which uses keys that are 128 bits to 256 bits in size. This
	61	standard came after the National Institute of Standards and Technology
	62	(NIST) decided to retire the Data Encryption Standard (DES) in 2001.
	63
	64	Since brute force attacks strongly correlate with key length, the 56-bit
	65	key length of DES was considered insecure after it was publicly broken
	66	in under 24 hours. However, there is a modern implementation of DES
	67	called Triple DES where the DES method is applied three times to each
	68	data block.
	69
	70	The main advantages to symmetric systems are the ease of use, since only
	71	one key is required for both encryption and decryption, and the
	72	simplicity of the algorithms. This helps with bulk data encryption that
	73	may unnecessarily waste time and power using asymmetric systems.
	74
	75	However, symmetric systems have disadvantages to keep in mind. Since the
	76	key is private, it can be difficult to safely distribute keys to
	77	communication partners. Additionally, the key cannot be used to sign
	78	messages since it\'s necessary to keep the key private.
	79
	80	# Asymmetric Systems (Public Key Cryptography)
	81
	82	Asymmetric cryptography utilizes two keys within the system: a secret
	83	key that is privately-held and a public key that can be distributed
	84	freely. The interesting aspect of asymmetric cryptography is that either
	85	key can be used to encrypt the data, there\'s no rule that dictates
	86	which key must be used for encryption. Once one key is used to encrypt
	87	the data, only the other key can be used to decrypt the data. This means
	88	that if the private key encrypts the data, only the public key can
	89	decrypt the data.
	90
	91	An advantage of this system is that if you successfully decrypt data
	92	using one of the keys, you can be sure of the sender since only the
	93	other key could have encrypted the data.
	94
	95	One of the major implementations of an asymmetric system is a digital
	96	signature. A digital signature can be generated using the sender\'s
	97	private key, or a one-way hash function and is used to provide assurance
	98	for the integrity and authenticity of the message. A couple common
	99	message digest algorithms are SHA-256 and SHA-512, which securely
	100	compress data and produce a 128-bit message digest.
	101
	102	It should be noted that man-in-the-middle attacks are one of the risks
	103	with digital signatures and public keys. To combat this, applications
	104	often use a public key infrastructure (PKI) to independently
	105	authenticate the validity of signatures and keys.
	106
	107	Due to the large key size and [inefficient mathematical
	108	functions](https://crypto.stackexchange.com/a/591) of asymmetric
	109	encryption, elliptical curve cryptography (ECC) is often used to
	110	increase security while using fewer resources.
	111
	112	# Applications of Cryptographic Systems
	113
	114	There are quite a few implementations of cryptographic systems around
	115	the world. Here are a few popular examples:
	116
	117	Transport Layer Security (TLS):\* One of the most famous
	118	cryptographic solutions created is TLS, a session-layered or
	119	connection-layered internet protocol that allows for secure
	120	communications between browsers and servers. Using handshakes, peer
	121	negotiation, and authentication allows TLS to prevent eavesdropping and
	122	malicious transformation of data. The major reason for TLS popularity is
	123	that a major vulnerability was found in the SSL protocol in 2014.
	124	Instead of SSL, TLS can be used with HTTP to form HTTPS and is the
	125	preferred method for modern web development due to its increased
	126	security.
	127
	128	Secure Hypertext Transfer Protocol (HTTPS):\* An application layer
	129	protocol that allows for secure transport of data between servers and
	130	web clients. One of the unique parts of HTTPS is that it uses a secured
	131	port number instead of the default web port address.
	132
	133	Virtual Private Network (VPN):\* VPNs are made to securely extend a
	134	private network across public networks by utilizing an encrypted layered
	135	tunneling protocol paired with an authentication method, such as
	136	usernames and passwords. This technology originally allowed remote
	137	employees to access their company\'s data but have evolved into one of
	138	the top choices for anyone who wishes to mask their sensitive personal
	139	data.
	140
	141	Internet Protocol Security (IPSec):\* This protocol suite
	142	facilitates communication between two or more hosts or subnets by
	143	authenticating and encrypting the data packets. IPSec is used in a lot
	144	of VPNs to establish the VPN connection through the transport and tunnel
	145	mode encryption methods. IPSec encrypts just the data portion of packets
	146	in the transport methods, but it encrypts both the data and headers in
	147	the tunnel method (introducing an additional header for authentication).
	148
	149	Secure Shell (SSH):\* SSH is another network protocol used to
	150	protect network services by authenticating users through a secure
	151	channel. This protocol is often used for command-line (shell) functions
	152	such as remote shell commands, logins, and file transfers.
	153
	154	Kerberos:\* Developed by MIT, Kerberos is a computer-network
	155	authentication protocol that works on the basis of tickets to allow
	156	nodes communicating over a non-secure network to prove their identity to
	157	one another securely. This is most commonly used in business
	158	environments when used as the authentication and encryption method for
	159	Windows Active Directory (AD).
	160
	161	# Cybersecurity Controls
	162
	163	If you\'re someone who needs solutions on how to control risks
	164	associated with utilizing a crytograhpic system, start with a few basic
	165	controls:
	166
	167	- Policies:\* A policy on the use of cryptographic controls for
	168	protection of information is implemented and is in accordance with
	169	organizational objectives.
	170	- Key management:\* A policy on the use, protection and lifetime
	171	of cryptographic keys is implemented through the entire application
	172	lifecycle.
	173	- Key size:\* The organization has researched the optimal key size
	174	for their purposes, considering national laws, required processing
	175	power, and longevity of the solution.
	176	- Algorithm selection:\* Implemented algorithms are sufficiently
	177	appropriate for the business of the organization, robust, and align
	178	with recommended guidelines.
	179	- Protocol configuration:\* Protocols have been reviewed and
	180	configured suitable to the purpose of the business.

content/blog/2020-02-09-cryptography-basics.org deleted −158

	@@ -1,158 +0,0 @@
1	#+title: Cryptography Basics
2	#+date: 2020-02-09
3	#+description: Learn about the basics of cryptography.
4	#+filetags: :security:
5
6	* Similar Article Available
7	If you haven't already, feel free to read my post on [[../aes-encryption/][AES Encryption]].
8
9	* What is Cryptography?
10	In layman's terms, cryptography is a process that can change data from a
11	readable format into an unreadable format (and vice-versa) through a series of
12	processes and secrets. More technically, this is the Internet Security
13	Glossary's definition:
14
15	#+begin_quote
16	[Cryptography is] the mathematical science that deals with transforming data to
17	render its meaning unintelligible (i.e., to hide its semantic content), prevent
18	its undetected alteration, or prevent its unauthorized use. If the
19	transformation is reversible, cryptography also deals with restoring encrypted
20	data to an intelligible form.
21
22	- [[https://tools.ietf.org/html/rfc2828][Internet Security Glossary (2000)]]
23	#+end_quote
24
25	Cryptography cannot offer protection against the loss of data; it simply offers
26	encryption methods to protect data at-rest and data in-traffic. At a high-level,
27	encrypted is when plaintext data is encrypted to ciphertext (a secure form of
28	text that cannot be understood unless decrypted back to plaintext). The
29	encryption process is completed through the use of a mathematical function that
30	utilizes one or more values called keys to encrypt or decrypt the data.
31
32	* Key Elements of Cryptographic Systems
33	To create or evaluate a cryptographic system, you need to know the essential
34	pieces to the system:
35
36	- Encryption Algorithm (Primitive):* A mathematical process that encrypts and
37	decrypts data.
38	- Encryption Key:* A string of bits used within the encryption algorithm as
39	the secret that allows successful encryption or decryption of data.
40	- Key Length (Size):* The maximum number of bits within the encryption key.
41	It's important to remember that key size is regulated in many countries.
42	- Message Digest:* A smaller, fixed-size bit string version of the original
43	message. This is practically infeasible to reverse, which is why it's commonly
44	used to verify integrity.
45
46	* Symmetric Systems (Secret Key Cryptography)
47	Symmetric cryptography utilizes a secret, bidirectional key to perform both
48	encryption and decryption of the data. The most common implementation of
49	symmetric cryptography is the Advanced Encryption Standard, which uses keys that
50	are 128 bits to 256 bits in size. This standard came after the National
51	Institute of Standards and Technology (NIST) decided to retire the Data
52	Encryption Standard (DES) in 2001.
53
54	Since brute force attacks strongly correlate with key length, the 56-bit key
55	length of DES was considered insecure after it was publicly broken in under 24
56	hours. However, there is a modern implementation of DES called Triple DES where
57	the DES method is applied three times to each data block.
58
59	The main advantages to symmetric systems are the ease of use, since only one key
60	is required for both encryption and decryption, and the simplicity of the
61	algorithms. This helps with bulk data encryption that may unnecessarily waste
62	time and power using asymmetric systems.
63
64	However, symmetric systems have disadvantages to keep in mind. Since the key is
65	private, it can be difficult to safely distribute keys to communication
66	partners. Additionally, the key cannot be used to sign messages since it's
67	necessary to keep the key private.
68
69	* Asymmetric Systems (Public Key Cryptography)
70	Asymmetric cryptography utilizes two keys within the system: a secret key that
71	is privately-held and a public key that can be distributed freely. The
72	interesting aspect of asymmetric cryptography is that either key can be used to
73	encrypt the data, there's no rule that dictates which key must be used for
74	encryption. Once one key is used to encrypt the data, only the other key can be
75	used to decrypt the data. This means that if the private key encrypts the data,
76	only the public key can decrypt the data.
77
78	An advantage of this system is that if you successfully decrypt data using one
79	of the keys, you can be sure of the sender since only the other key could have
80	encrypted the data.
81
82	One of the major implementations of an asymmetric system is a digital signature.
83	A digital signature can be generated using the sender's private key, or a
84	one-way hash function and is used to provide assurance for the integrity and
85	authenticity of the message. A couple common message digest algorithms are
86	SHA-256 and SHA-512, which securely compress data and produce a 128-bit message
87	digest.
88
89	It should be noted that man-in-the-middle attacks are one of the risks with
90	digital signatures and public keys. To combat this, applications often use a
91	public key infrastructure (PKI) to independently authenticate the validity of
92	signatures and keys.
93
94	Due to the large key size and [[https://crypto.stackexchange.com/a/591][inefficient mathematical functions]] of asymmetric
95	encryption, elliptical curve cryptography (ECC) is often used to increase
96	security while using fewer resources.
97
98	* Applications of Cryptographic Systems
99	There are quite a few implementations of cryptographic systems around the world.
100	Here are a few popular examples:
101
102	Transport Layer Security (TLS):* One of the most famous cryptographic
103	solutions created is TLS, a session-layered or connection-layered internet
104	protocol that allows for secure communications between browsers and servers.
105	Using handshakes, peer negotiation, and authentication allows TLS to prevent
106	eavesdropping and malicious transformation of data. The major reason for TLS
107	popularity is that a major vulnerability was found in the SSL protocol in 2014.
108	Instead of SSL, TLS can be used with HTTP to form HTTPS and is the preferred
109	method for modern web development due to its increased security.
110
111	Secure Hypertext Transfer Protocol (HTTPS):* An application layer protocol
112	that allows for secure transport of data between servers and web clients. One of
113	the unique parts of HTTPS is that it uses a secured port number instead of the
114	default web port address.
115
116	Virtual Private Network (VPN):* VPNs are made to securely extend a private
117	network across public networks by utilizing an encrypted layered tunneling
118	protocol paired with an authentication method, such as usernames and passwords.
119	This technology originally allowed remote employees to access their company's
120	data but have evolved into one of the top choices for anyone who wishes to mask
121	their sensitive personal data.
122
123	Internet Protocol Security (IPSec):* This protocol suite facilitates
124	communication between two or more hosts or subnets by authenticating and
125	encrypting the data packets. IPSec is used in a lot of VPNs to establish the VPN
126	connection through the transport and tunnel mode encryption methods. IPSec
127	encrypts just the data portion of packets in the transport methods, but it
128	encrypts both the data and headers in the tunnel method (introducing an
129	additional header for authentication).
130
131	Secure Shell (SSH):* SSH is another network protocol used to protect network
132	services by authenticating users through a secure channel. This protocol is
133	often used for command-line (shell) functions such as remote shell commands,
134	logins, and file transfers.
135
136	Kerberos:* Developed by MIT, Kerberos is a computer-network authentication
137	protocol that works on the basis of tickets to allow nodes communicating over a
138	non-secure network to prove their identity to one another securely. This is most
139	commonly used in business environments when used as the authentication and
140	encryption method for Windows Active Directory (AD).
141
142	* Cybersecurity Controls
143	If you're someone who needs solutions on how to control risks associated with
144	utilizing a crytograhpic system, start with a few basic controls:
145
146	- Policies:* A policy on the use of cryptographic controls for protection of
147	information is implemented and is in accordance with organizational
148	objectives.
149	- Key management:* A policy on the use, protection and lifetime of
150	cryptographic keys is implemented through the entire application lifecycle.
151	- Key size:* The organization has researched the optimal key size for their
152	purposes, considering national laws, required processing power, and longevity
153	of the solution.
154	- Algorithm selection:* Implemented algorithms are sufficiently appropriate
155	for the business of the organization, robust, and align with recommended
156	guidelines.
157	- Protocol configuration:* Protocols have been reviewed and configured
158	suitable to the purpose of the business.

content/blog/2020-03-25-session-manager.org deleted −120

	@@ -1,120 +0,0 @@
1	#+title: Session Private Messenger
2	#+date: 2020-03-25
3	#+description: Exploring the Session Private Messenger application.
4	#+filetags: :privacy:
5
6	* Privacy Warning
7	The company behind Session (Loki Foundation) is from Australia. If you didn't
8	know, Australia has introduced [[https://parlinfo.aph.gov.au/parlInfo/download/legislation/bills/r6195_aspassed/toc_pdf/18204b01.pdf][legislation]] mandating companies comply with
9	government requests to build backdoor access into applications. For more
10	information, read my article on [[./2020-01-25-aes-encryption.html][AES Encryption]].
11
12	* About Session
13	[[https://getsession.org][Session]] is a private, cross-platform messaging app from the [[https://loki.foundation][Loki Foundation]]. As
14	someone who has spent years looking for quality alternatives to major messaging
15	apps, I was excited when I first heard about Session. Reading through [[https://arxiv.org/pdf/2002.04609.pdf][Session's
16	white paper]], you can learn the technologies behind the Session app. Part of the
17	security of Session comes from the Signal protocol, which was forked as the
18	origin of Session.
19
20	#+begin_quote
21	Session is an end-to-end encrypted messenger that removes sensitive metadata
22	collection, and is designed for people who want privacy and freedom from any
23	forms of surveillance.
24	#+end_quote
25
26	In general, this app promises security through end-to-end encryption,
27	decentralized onion routing, and private identities. The biggest change that the
28	Loki Foundation has made to the Signal protocol is removing the need for a phone
29	number. Instead, a random identification string is generated for any session you
30	create. This means you can create a new session for each device if you want to,
31	or link new devices with your ID.
32
33	Since Session's website and white paper describe the details of Session's
34	security, I'm going to focus on using the app in this post.
35
36	* Features
37	Since most people are looking for an alternative to a popular chat app, I am
38	going to list out the features that Session has so that you are able to
39	determine if the app would suit your needs:
40
41	- Multiple device linking (via QR code or ID)
42	- App locking via device screen lock, password, or fingerprint
43	- Screenshot blocking
44	- Incognito keyboard
45	- Read receipts and typing indicators
46	- Mobile notification customization
47	- Old message deletion and conversation limit
48	- Backups
49	- Recovery phrase
50	- Account deletion, including ID, messages, sessions, and contacts
51
52	* Downloads
53	I have tested this app on Ubuntu 19.10, Android 10, macOS Monterey, and iOS 15.
54	All apps have worked well without many issues.
55
56	Below is a brief overview of the Session app on Linux. To get this app, you'll
57	need to go to the [[https://getsession.org/download/][Downloads]] page and click to link to the operating system
58	you're using.
59
60	For Linux, it will download an AppImage that you'll need to enable with the
61	following command:
62
63	#+begin_src sh
64	sudo chmod u+x session-messenger-desktop-linux-x86_64-1.0.5.AppImage
65	#+end_src
66
67	#+caption: Session Download Options
68	[[https://img.cleberg.net/blog/20200325-session-private-messenger/session_downloads.png]]
69
70	* Creating an Account
71	Once you've installed the app, simply run the app and create your unique Session
72	ID. It will look something like this:
73	=05af1835afdd63c947b47705867501d6373f486aa1ae05b1f2f3fcd24570eba608=.
74
75	You'll need to set a display name and, optionally, a password. If you set a
76	password, you will need to enter it every time you open the app.
77
78	#+caption: Session Login (Linux)
79	[[https://img.cleberg.net/blog/20200325-session-private-messenger/session_linux_login.png]]
80
81	#+caption: Session Login (macOS)
82	[[https://img.cleberg.net/blog/20200325-session-private-messenger/session_macos_login.png]]
83
84	#+caption: Password Authentication
85	[[https://img.cleberg.net/blog/20200325-session-private-messenger/session_password_authentication.png]]
86
87	* Start Messaging
88	Once you've created your account and set up your profile details, the next step
89	is to start messaging other people. To do so, you'll need to share your Session
90	ID with other people. From this point, it's fairly straightforward and acts like
91	any other messaging app, so I won't dive into much detail here.
92
93	** macOS
94	#+caption: macOS Conversations
95	[[https://img.cleberg.net/blog/20200325-session-private-messenger/session_macos_conversations.png]]
96
97	One key feature to note is that the desktop application now provides a helpful
98	pop-up box explaining the process that Session uses to hide your IP address:
99
100	#+caption: IP Address Help Box
101	[[https://img.cleberg.net/blog/20200325-session-private-messenger/session_ip.png]]
102
103	** iOS
104	The mobile app is quite simple and effective, giving you all the standard mobile
105	messaging options you'd expect.
106
107	#+caption: iOS App
108	[[https://img.cleberg.net/blog/20200325-session-private-messenger/session_ios.png]]
109
110	* Potential Issues
111	I've discovered one annoying issue that would prevent from using this app
112	regularly. On a mobile device, there have been issues with receiving messages on
113	time. Even with battery optimization disabled and no network restrictions,
114	Session notifications sometimes do not display until I open the app or the
115	conversation itself and wait a few moments. This is actually one of the reasons
116	I stopped using Signal (this seems fixed as of my updates in 2021/2022, so I
117	wouldn't worry about this issue anymore).
118
119	Looking for another messenger instead of Session? I recommend Signal, Matrix,
120	and IRC.

content/blog/2020-03-25-session-messenger.md added +137

@@ -0,0 +1,137 @@
	1	+++
	2	date = 2020-03-25
	3	title = "Session Private Messenger"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Privacy Warning
	9
	10	The company behind Session (Loki Foundation) is from Australia. If you
	11	didn\'t know, Australia has introduced
	12	[legislation](https://parlinfo.aph.gov.au/parlInfo/download/legislation/bills/r6195_aspassed/toc_pdf/18204b01.pdf)
	13	mandating companies comply with government requests to build backdoor
	14	access into applications. For more information, read my article on [AES
	15	Encryption](./2020-01-25-aes-encryption.html).
	16
	17	# About Session
	18
	19	[Session](https://getsession.org) is a private, cross-platform messaging
	20	app from the [Loki Foundation](https://loki.foundation). As someone who
	21	has spent years looking for quality alternatives to major messaging
	22	apps, I was excited when I first heard about Session. Reading through
	23	[Session\'s white paper](https://arxiv.org/pdf/2002.04609.pdf), you can
	24	learn the technologies behind the Session app. Part of the security of
	25	Session comes from the Signal protocol, which was forked as the origin
	26	of Session.
	27
	28	> Session is an end-to-end encrypted messenger that removes sensitive
	29	> metadata collection, and is designed for people who want privacy and
	30	> freedom from any forms of surveillance.
	31
	32	In general, this app promises security through end-to-end encryption,
	33	decentralized onion routing, and private identities. The biggest change
	34	that the Loki Foundation has made to the Signal protocol is removing the
	35	need for a phone number. Instead, a random identification string is
	36	generated for any session you create. This means you can create a new
	37	session for each device if you want to, or link new devices with your
	38	ID.
	39
	40	Since Session\'s website and white paper describe the details of
	41	Session\'s security, I\'m going to focus on using the app in this post.
	42
	43	# Features
	44
	45	Since most people are looking for an alternative to a popular chat app,
	46	I am going to list out the features that Session has so that you are
	47	able to determine if the app would suit your needs:
	48
	49	- Multiple device linking (via QR code or ID)
	50	- App locking via device screen lock, password, or fingerprint
	51	- Screenshot blocking
	52	- Incognito keyboard
	53	- Read receipts and typing indicators
	54	- Mobile notification customization
	55	- Old message deletion and conversation limit
	56	- Backups
	57	- Recovery phrase
	58	- Account deletion, including ID, messages, sessions, and contacts
	59
	60	# Downloads
	61
	62	I have tested this app on Ubuntu 19.10, Android 10, macOS Monterey, and
	63	iOS 15. All apps have worked well without many issues.
	64
	65	Below is a brief overview of the Session app on Linux. To get this app,
	66	you\'ll need to go to the [Downloads](https://getsession.org/download/)
	67	page and click to link to the operating system you\'re using.
	68
	69	For Linux, it will download an AppImage that you\'ll need to enable with
	70	the following command:
	71
	72	```sh
	73	sudo chmod u+x session-messenger-desktop-linux-x86_64-1.0.5.AppImage
	74	```
	75
	76	![Session Download
	77	Options](https://img.cleberg.net/blog/20200325-session-private-messenger/session_downloads.png)
	78
	79	# Creating an Account
	80
	81	Once you\'ve installed the app, simply run the app and create your
	82	unique Session ID. It will look something like this:
	83	`05af1835afdd63c947b47705867501d6373f486aa1ae05b1f2f3fcd24570eba608`.
	84
	85	You\'ll need to set a display name and, optionally, a password. If you
	86	set a password, you will need to enter it every time you open the app.
	87
	88	![Session Login
	89	(Linux)](https://img.cleberg.net/blog/20200325-session-private-messenger/session_linux_login.png)
	90
	91	![Session Login
	92	(macOS)](https://img.cleberg.net/blog/20200325-session-private-messenger/session_macos_login.png)
	93
	94	![Password
	95	Authentication](https://img.cleberg.net/blog/20200325-session-private-messenger/session_password_authentication.png)
	96
	97	# Start Messaging
	98
	99	Once you\'ve created your account and set up your profile details, the
	100	next step is to start messaging other people. To do so, you\'ll need to
	101	share your Session ID with other people. From this point, it\'s fairly
	102	straightforward and acts like any other messaging app, so I won\'t dive
	103	into much detail here.
	104
	105	## macOS
	106
	107	![macOS
	108	Conversations](https://img.cleberg.net/blog/20200325-session-private-messenger/session_macos_conversations.png)
	109
	110	One key feature to note is that the desktop application now provides a
	111	helpful pop-up box explaining the process that Session uses to hide your
	112	IP address:
	113
	114	![IP Address Help
	115	Box](https://img.cleberg.net/blog/20200325-session-private-messenger/session_ip.png)
	116
	117	## iOS
	118
	119	The mobile app is quite simple and effective, giving you all the
	120	standard mobile messaging options you\'d expect.
	121
	122	![iOS
	123	App](https://img.cleberg.net/blog/20200325-session-private-messenger/session_ios.png)
	124
	125	# Potential Issues
	126
	127	I\'ve discovered one annoying issue that would prevent from using this
	128	app regularly. On a mobile device, there have been issues with receiving
	129	messages on time. Even with battery optimization disabled and no network
	130	restrictions, Session notifications sometimes do not display until I
	131	open the app or the conversation itself and wait a few moments. This is
	132	actually one of the reasons I stopped using Signal (this seems fixed as
	133	of my updates in 2021/2022, so I wouldn\'t worry about this issue
	134	anymore).
	135
	136	Looking for another messenger instead of Session? I recommend Signal,
	137	Matrix, and IRC.

content/blog/2020-05-03-homelab.md added +166

@@ -0,0 +1,166 @@
	1	+++
	2	date = 2020-05-03
	3	title = "An Inside Look at My Home Lab"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# What is a Homelab?
	9
	10	Starting as a developer, I have largely stayed away from hardware-based
	11	hobbies (other than building a gaming desktop). However, as the
	12	quarantine for COVID-19 stretches out further and further, I found
	13	myself bored and in search of new hobbies. After spending the last few
	14	months browsing the [r/homelab](https://www.reddit.com/r/homelab/)
	15	subreddit, I decided it was time to jump in and try things out for
	16	myself.
	17
	18	Since I am a beginner and just recently graduated from college,
	19	everything I\'ve done so far in my homelab is fairly low-budget.
	20
	21	# Hardware
	22
	23	![HomeLab
	24	Diagram](https://img.cleberg.net/blog/20200503-homelab/homelab-min.png)
	25
	26	### Raspberry Pi 4
	27
	28	Luckily, I had actually purchased a [Raspberry Pi
	29	4](https://www.raspberrypi.org/products/raspberry-pi-4-model-b/) before
	30	the quarantine started so that I could try to keep Plex Media Center
	31	running, even while my desktop computer was turned off. I started here,
	32	using the Pi to hold Plex and Pi-hole until I grew tired with the slow
	33	performance.
	34
	35	Here are the specifications for the Pi 4:
	36
	37	- Broadcom BCM2711, Quad core Cortex-A72 (ARM v8) 64-bit SoC @ 1.5GHz
	38	- 4GB LPDDR4-3200 SDRAM
	39	- Gigabit Ethernet
	40	- H.265 (4kp60 decode), H264 (1080p60 decode, 1080p30 encode)
	41	- 64 GB MicroSD Card
	42
	43	## Dell Optiplex 5040
	44
	45	Since I wasn\'t happy with the Pi as my main server, I turned to
	46	Craigslist. I know a lot of other homelabbers use Ebay, but I can\'t
	47	seem to ever trust it enough to purchase items on there. So I used
	48	Craigslist and found a Dell Optiplex 5040 desktop computer on sale for
	49	\$90. While this computer might be underpowered, it was one of the few
	50	computers under \$100 that was available during quarantine.
	51
	52	Here are the specifications for the Dell Optiplex 5040:
	53
	54	- Intel Core i3 6100
	55	- 8GB RAM DDR3
	56	- Intel HD Graphics
	57	- Gigabit Ethernet
	58	- 500GB Hard Drive
	59
	60	While this hardware would be awful for a work computer or a gaming rig,
	61	it turned out to be wonderful for my server purposes. The only
	62	limitation I have found so far is the CPU. The i3-6100 only has enough
	63	power for a single 4k video transcode at a time. I haven\'t tested more
	64	than three 1080p streams at a time, but the maximum amount of streams
	65	I\'ve ever actually used is two.
	66
	67	## WD easystore 10TB & 8TB
	68
	69	Application storage and temporary files are stored on the internal hard
	70	drive of the server, but all media files (movies, tv, games, books, etc)
	71	are stored externally on my WD easystore hard drive. Creating auto-boot
	72	configurations in the `/etc/fstab` file on my server allows
	73	the hard drives to automatically mount whenever I need to restart my
	74	server.
	75
	76	> Update: In March 2022, I shucked the hard drives out of their external
	77	> cases, put some Kapton tape on the third power pin to prevent power
	78	> shutdowns, and stuck them inside my server tower using internal SATA
	79	> cables.
	80
	81	## Netgear Unmanaged Switch
	82
	83	To manage all the ethernet cords used by my homelab, my desktop, and my
	84	living room media center, I purchased an 8-port gigabit ethernet switch
	85	for \$50 at my local computer store. This is probably much more than I
	86	should have spent on an unmanaged switch, but I am comfortable with the
	87	choice.
	88
	89	## TP-Link Managed Switch
	90
	91	Since I use the unmanaged switch to group all living room devices
	92	together, I use the managed switch to configure VLANs and secure my
	93	network.
	94
	95	## Arris TM1602A Modem & Sagecom Fast 5280 Router
	96
	97	My default modem and router, provided by my ISP, are fairly standard.
	98	The Arris modem supports DOCSIS 3.0, which is something that I
	99	definitely wanted as a minimum. The Sagecom router is also standard, no
	100	fancy bells or whistles. However, it does support DHCP and DHCPv6, which
	101	is something you can use to route all household traffic through a
	102	pi-hole or firewall.
	103
	104	## TP-Link EAP
	105
	106	In order to gain better control over the network, I use my own wireless
	107	access point instead of the one included in the Sagecom router above.
	108	Now I can control and organize all of my ethernet connections through
	109	the VLANs on the managed switch and wireless connections through the
	110	VLANS on the EAP.
	111
	112	## Generic Printer
	113
	114	The last piece to my homelab is a standard wireless printer. Nothing
	115	special here.
	116
	117	# Software
	118
	119	## Ubuntu Server 20.04
	120
	121	While the 20.04 version of Ubuntu was just released, I always like to
	122	experiment with new features (and I don\'t mind breaking my system - it
	123	just gives me more experience learning how to fix things). So, I have
	124	Ubuntu Server 20.04 installed on the Dell Optiplex server and Ubuntu
	125	Server 19.10 installed on the Raspberry Pi. Once I find an acceptable
	126	use for the Pi, I will most likely switch the operating system.
	127
	128	## Docker
	129
	130	I am very new to Docker, but I have had a lot of fun playing with it
	131	so far. Docker is used to create containers that can hold all the
	132	contents of a system without interfering with other software on the same
	133	system. So far, I have successfully installed pi-hole, GitLab, Gogs, and
	134	Nextcloud in containers. However, I opted to delete all of those so that
	135	I can reconfigure them more professionally at a later time.
	136
	137	## Plex Media Server
	138
	139	Plex is a media center software that allows you to organize your movies,
	140	TV shows, music, photos, and videos automatically. It will even download
	141	metadata for you so that you can easily browse these collections.
	142
	143	## Pi-hole
	144
	145	Pi-hole is an alternative ad-blocker that runs at the DNS level,
	146	allowing you to block traffic when it hits your network, so that you can
	147	reject any traffic you deem to be bad. Pi-hole uses blacklists and
	148	whitelists to decide which traffic block and, luckily, there are a lot
	149	of pre-made lists out there on Reddit, GitHub, etc.
	150
	151	## Nextcloud
	152
	153	While I had trouble with the Docker version of Nextcloud, I was very
	154	successful when setting up the snap version. Using this, I was able to
	155	map Nextcloud to a subdomain of a domain I own in Namecheap.
	156	Additionally, Nextcloud has an integration with Let\'s Encrypt that
	157	allows me to issue certificates automatically to any new domain I
	158	authorize.
	159
	160	## Webmin
	161
	162	To monitor my servers, and the processes running on them, I use the
	163	Webmin dashboard. This was fairly painless to set up, and I currently
	164	access it straight through the server\'s IP address. In the future, I
	165	will be looking to configure Webmin to use a custom domain just like
	166	Nextcloud.

content/blog/2020-05-03-homelab.org deleted −136

	@@ -1,136 +0,0 @@
1	#+title: An Inside Look at My Homelab
2	#+date: 2020-05-03
3	#+description: A retrospective on the first iteration of my home lab.
4	#+filetags: :sysadmin:
5
6	* What is a Homelab?
7	Starting as a developer, I have largely stayed away from hardware-based hobbies
8	(other than building a gaming desktop). However, as the quarantine for COVID-19
9	stretches out further and further, I found myself bored and in search of new
10	hobbies. After spending the last few months browsing the [[https://www.reddit.com/r/homelab/][r/homelab]] subreddit, I
11	decided it was time to jump in and try things out for myself.
12
13	Since I am a beginner and just recently graduated from college, everything I've
14	done so far in my homelab is fairly low-budget.
15
16	* Hardware
17	#+caption: HomeLab Diagram
18	[[https://img.cleberg.net/blog/20200503-homelab/homelab-min.png]]
19
20	*** Raspberry Pi 4
21	Luckily, I had actually purchased a [[https://www.raspberrypi.org/products/raspberry-pi-4-model-b/][Raspberry Pi 4]] before the quarantine started
22	so that I could try to keep Plex Media Center running, even while my desktop
23	computer was turned off. I started here, using the Pi to hold Plex and Pi-hole
24	until I grew tired with the slow performance.
25
26	Here are the specifications for the Pi 4:
27
28	- Broadcom BCM2711, Quad core Cortex-A72 (ARM v8) 64-bit SoC @ 1.5GHz
29	- 4GB LPDDR4-3200 SDRAM
30	- Gigabit Ethernet
31	- H.265 (4kp60 decode), H264 (1080p60 decode, 1080p30 encode)
32	- 64 GB MicroSD Card
33
34	** Dell Optiplex 5040
35	Since I wasn't happy with the Pi as my main server, I turned to Craigslist. I
36	know a lot of other homelabbers use Ebay, but I can't seem to ever trust it
37	enough to purchase items on there. So I used Craigslist and found a Dell
38	Optiplex 5040 desktop computer on sale for $90. While this computer might be
39	underpowered, it was one of the few computers under $100 that was available
40	during quarantine.
41
42	Here are the specifications for the Dell Optiplex 5040:
43
44	- Intel Core i3 6100
45	- 8GB RAM DDR3
46	- Intel HD Graphics
47	- Gigabit Ethernet
48	- 500GB Hard Drive
49
50	While this hardware would be awful for a work computer or a gaming rig, it
51	turned out to be wonderful for my server purposes. The only limitation I have
52	found so far is the CPU. The i3-6100 only has enough power for a single 4k video
53	transcode at a time. I haven't tested more than three 1080p streams at a time,
54	but the maximum amount of streams I've ever actually used is two.
55
56	** WD easystore 10TB & 8TB
57	Application storage and temporary files are stored on the internal hard drive of
58	the server, but all media files (movies, tv, games, books, etc) are stored
59	externally on my WD easystore hard drive. Creating auto-boot configurations in
60	the =/etc/fstab= file on my server allows the hard drives to automatically mount
61	whenever I need to restart my server.
62
63	#+begin_quote
64	Update: In March 2022, I shucked the hard drives out of their external cases,
65	put some Kapton tape on the third power pin to prevent power shutdowns, and
66	stuck them inside my server tower using internal SATA cables.
67	#+end_quote
68
69	** Netgear Unmanaged Switch
70	To manage all the ethernet cords used by my homelab, my desktop, and my living
71	room media center, I purchased an 8-port gigabit ethernet switch for $50 at my
72	local computer store. This is probably much more than I should have spent on an
73	unmanaged switch, but I am comfortable with the choice.
74
75	** TP-Link Managed Switch
76	Since I use the unmanaged switch to group all living room devices together, I
77	use the managed switch to configure VLANs and secure my network.
78
79	** Arris TM1602A Modem & Sagecom Fast 5280 Router
80	My default modem and router, provided by my ISP, are fairly standard. The Arris
81	modem supports DOCSIS 3.0, which is something that I definitely wanted as a
82	minimum. The Sagecom router is also standard, no fancy bells or whistles.
83	However, it does support DHCP and DHCPv6, which is something you can use to
84	route all household traffic through a pi-hole or firewall.
85
86	** TP-Link EAP
87	In order to gain better control over the network, I use my own wireless access
88	point instead of the one included in the Sagecom router above. Now I can control
89	and organize all of my ethernet connections through the VLANs on the managed
90	switch and wireless connections through the VLANS on the EAP.
91
92	** Generic Printer
93	The last piece to my homelab is a standard wireless printer. Nothing special
94	here.
95
96	* Software
97	** Ubuntu Server 20.04
98	While the 20.04 version of Ubuntu was just released, I always like to experiment
99	with new features (and I don't mind breaking my system - it just gives me more
100	experience learning how to fix things). So, I have Ubuntu Server 20.04 installed
101	on the Dell Optiplex server and Ubuntu Server 19.10 installed on the Raspberry
102	Pi. Once I find an acceptable use for the Pi, I will most likely switch the
103	operating system.
104
105	** Docker
106	I am /very/ new to Docker, but I have had a lot of fun playing with it so far.
107	Docker is used to create containers that can hold all the contents of a system
108	without interfering with other software on the same system. So far, I have
109	successfully installed pi-hole, GitLab, Gogs, and Nextcloud in containers.
110	However, I opted to delete all of those so that I can reconfigure them more
111	professionally at a later time.
112
113	** Plex Media Server
114	Plex is a media center software that allows you to organize your movies, TV
115	shows, music, photos, and videos automatically. It will even download metadata
116	for you so that you can easily browse these collections.
117
118	** Pi-hole
119	Pi-hole is an alternative ad-blocker that runs at the DNS level, allowing you to
120	block traffic when it hits your network, so that you can reject any traffic you
121	deem to be bad. Pi-hole uses blacklists and whitelists to decide which traffic
122	block and, luckily, there are a lot of pre-made lists out there on Reddit,
123	GitHub, etc.
124
125	** Nextcloud
126	While I had trouble with the Docker version of Nextcloud, I was very successful
127	when setting up the snap version. Using this, I was able to map Nextcloud to a
128	subdomain of a domain I own in Namecheap. Additionally, Nextcloud has an
129	integration with Let's Encrypt that allows me to issue certificates
130	automatically to any new domain I authorize.
131
132	** Webmin
133	To monitor my servers, and the processes running on them, I use the Webmin
134	dashboard. This was fairly painless to set up, and I currently access it
135	straight through the server's IP address. In the future, I will be looking to
136	configure Webmin to use a custom domain just like Nextcloud.

content/blog/2020-05-19-customizing-ubuntu.md added +211

@@ -0,0 +1,211 @@
	1	+++
	2	date = 2020-05-19
	3	title = "A Beginner's Guide: Customizing Ubuntu"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# More Information
	9
	10	For inspiration on designing your \*nix computer, check out the
	11	[r/unixporn](https://libredd.it/r/unixporn) subreddit!
	12
	13	# Customizing Ubuntu
	14
	15	New to Linux and want to add a personal touch to your machine? One of
	16	the best perks of Linux is that it is extremely\* customizable. You
	17	can change the styles of the windows, shell (status bars/docks), icons,
	18	fonts, terminals, and more.
	19
	20	In this post, I\'m going to go through customization on Ubuntu 20.04
	21	(GNOME) since most new users tend to choose Ubuntu-based distros. If
	22	you\'ve found a way to install Arch with i3-gaps, I\'m assuming you know
	23	how to find more advanced tutorials out there on customizations.
	24
	25	## Required Tools
	26
	27	![Gnome
	28	Tweaks](https://img.cleberg.net/blog/20200519-customizing-ubuntu/gnome-tweaks-min.png)
	29
	30	Ubuntu 20.04 ships with the default desktop environment
	31	[Gnome](https://www.gnome.org/), which includes the handy
	32	`gnome-tweaks` tool to quickly change designs. To install
	33	this, just open your terminal and enter the following command:
	34
	35	```sh
	36	sudo apt install gnome-tweaks
	37	```
	38
	39	After you\'ve finished installing the tool, simply launch the Tweaks
	40	application, and you\'ll be able to access the various customization
	41	options available by default on Ubuntu. You might even like some of the
	42	pre-installed options.
	43
	44	## GNOME Application Themes
	45
	46	To change the themes applied to applications in GNOME, you will need to
	47	change the Applications dropdown in the Appearance section of Tweaks. To
	48	add more themes, you will have to find your preferred theme online and
	49	follow the steps below to have it show up in the Tweaks tool. While you
	50	may find themes anywhere, one of the most popular sites for GNOME themes
	51	is [gnome-look.org](https://www.gnome-look.org/). This website contains
	52	themes for applications, shells, icons, and cursors.
	53
	54	Steps to import themes into Tweaks:
	55
	56	1. Download the theme.
	57	2. These files are usually compressed (.zip, .tar.gz, .tar.xz), so you
	58	will need to extract the contents. This is easiest when opening the
	59	file explorer, right-clicking the compressed file, and choosing
	60	\"Extract here.\"
	61	3. Move the theme folder to `/usr/share/themes/`. You can do
	62	so with the following command:
	63	`sudo mv theme-folder/ /usr/share/themes/`.
	64	- Icons and cursors will be moved to the
	65	`/usr/share/icons/` folder.
	66	- Fonts will be moved to the `/usr/share/fonts/` folder
	67	Alternatively, you can move them to the
	68	`/usr/share/fonts/opentype/` or
	69	`/usr/share/fonts/opentype/` folders, if you have a
	70	specific font type.
	71	4. Close tweaks if it is open. Re-open Tweaks and your new theme will
	72	be available in the Applications dropdown in the Appearance section
	73	of Tweaks.
	74
	75	If the theme is not showing up after you\'ve moved it into the themes
	76	folder, you may have uncompressed the folder into a sub-folder. You can
	77	check this by entering the theme folder and listing the contents:
	78
	79	```sh
	80	cd /usr/share/themes/Mojave-Dark && ls -la
	81	```
	82
	83	This is an example of what the contents of your theme folder should look
	84	like. If you just see another folder there, you should move that folder
	85	up into the `/usr/share/themes/` folder.
	86
	87	```sh
	88	cinnamon COPYING gnome-shell gtk-2.0 gtk-3.0 index.theme metacity-1 plank xfwm4
	89	```
	90
	91	## GNOME Shell Themes
	92
	93	To change the appearance of the title bar, default dock, app menu, and
	94	other parts of the GNOME shell, you\'ll need to install the [user
	95	themes](https://extensions.gnome.org/extension/19/user-themes/)
	96	extension on [Gnome Extensions](https://extensions.gnome.org/). To be
	97	able to install extensions, you will first need to install the browser
	98	extension that the website instructs you to. See this screenshot for the
	99	blue box with a link to the extension.
	100
	101	![Gnome
	102	Extensions](https://img.cleberg.net/blog/20200519-customizing-ubuntu/gnome-extensions-min.png)
	103
	104	After the browser extension is installed, you will need to install the
	105	native host connector:
	106
	107	```sh
	108	sudo apt install chrome-gnome-shell
	109	```
	110
	111	Finally, you can go the [user
	112	themes](https://extensions.gnome.org/extension/19/user-themes/)
	113	extension page and click the installation button. This will enable the
	114	Shell option in Tweaks. Now you can move shell themes to the
	115	`/usr/share/themes` directory, using the same steps mentioned
	116	in the previous section, and enable the new theme in Tweaks.
	117
	118	## Icons & Cursors
	119
	120	Icons and cursors are installed exactly the same way, so I\'m grouping
	121	these together in this post. Both of these items will need to follow the
	122	same process as installing themes, except you will want to move your
	123	font folders to the `/usr/share/icons/` directory instead.
	124
	125	## Fonts
	126
	127	Fonts are one of the overlooked parts of customization, but a good font
	128	can make the whole screen look different. For example, I have installed
	129	the [IBM Plex](https://github.com/IBM/plex/releases) fonts on my system.
	130	This follows the same process as installing themes, except you will want
	131	to move your font folders to the `/usr/share/fonts/`
	132	directory instead.
	133
	134	## Terminal
	135
	136	If you spend a lot of time typing commands, you know how important the
	137	style and functionality of the terminal is. After spending a lot of time
	138	using the default GNOME terminal with [unix
	139	shell](https://en.wikipedia.org/wiki/Bash_(Unix_shell)), I decided to
	140	try some different options. I ended up choosing
	141	[Terminator](https://terminator-gtk3.readthedocs.io/en/latest/) with
	142	[zsh](https://en.wikipedia.org/wiki/Z_shell).
	143
	144	Terminator is great if you need to open multiple terminals at one time
	145	by simply right-clicking and splitting the screen into as many terminals
	146	as you want. While this project hasn\'t been updated in a while, [it is
	147	coming under new
	148	development](https://github.com/gnome-terminator/terminator/issues/1).
	149	However, this terminal is great and I haven\'t experienced any errors
	150	yet.
	151
	152	For the shell choice, I decided to choose zsh after trying it out on a
	153	fresh Manjaro installation. Zsh is great if you like to change the
	154	themes of your terminal, include icons, or add plugins.
	155
	156	The desktop uses the
	157	[zsh-autosuggestions](https://github.com/zsh-users/zsh-autosuggestions)
	158	to suggest past commands as you type. In addition, it suggests
	159	corrections if you misspell a command. Lastly, it uses the
	160	`af-magic` theme, which adds dashed lines between commands,
	161	moving the user@host tag to the right side of the terminal, and changes
	162	the colors. There are plenty of plugins and themes to choose from. Just
	163	figure out what you like and add it to your `~/.zshrc` file!
	164
	165	### Steps to Replicate My Terminal
	166
	167	To install zsh on Ubuntu, enter the following command into a terminal:
	168
	169	```sh
	170	sudo apt install zsh
	171	```
	172
	173	Then, enter the next command to activate zsh:
	174
	175	```sh
	176	sudo chsh -s $(which zsh) $(whoami)
	177	```
	178
	179	To install Terminator on Ubuntu:
	180
	181	```sh
	182	sudo apt install terminator
	183	```
	184
	185	To install Oh My Zsh on Ubuntu:
	186
	187	```sh
	188	sh -c "$(curl -fsSL https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"
	189	```
	190
	191	To install zsh-autosuggestions via Oh My Zsh:
	192
	193	```sh
	194	git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions
	195	```
	196
	197	Then, add the following plugin wording to your `~/.zshrc`
	198	file (the default config usually has the `git` plugin
	199	activated, so just add any other plugins to the parentheses separated by
	200	a space):
	201
	202	```sh
	203	nano ~/.zshrc
	204	```
	205
	206	```sh
	207	plugins=(git zsh-autosuggestions)
	208	```
	209
	210	Finally, you need to log out of your computer and log back in so your
	211	user shell can refresh.

content/blog/2020-05-19-customizing-ubuntu.org deleted −178

	@@ -1,178 +0,0 @@
1	#+title: Beginner's Guide: Customizing Ubuntu
2	#+date: 2020-05-19
3	#+description: A beginner's guide to customizing the Ubuntu operating system.
4	#+filetags: :linux:
5
6	* More Information
7	For inspiration on designing your *nix computer, check out the
8	[[https://libredd.it/r/unixporn][r/unixporn]] subreddit!
9
10	* Customizing Ubuntu
11	New to Linux and want to add a personal touch to your machine? One of the best
12	perks of Linux is that it is extremely* customizable. You can change the
13	styles of the windows, shell (status bars/docks), icons, fonts, terminals, and
14	more.
15
16	In this post, I'm going to go through customization on Ubuntu 20.04 (GNOME)
17	since most new users tend to choose Ubuntu-based distros. If you've found a way
18	to install Arch with i3-gaps, I'm assuming you know how to find more advanced
19	tutorials out there on customizations.
20
21	** Required Tools
22	#+caption: Gnome Tweaks
23	[[https://img.cleberg.net/blog/20200519-customizing-ubuntu/gnome-tweaks-min.png]]
24
25	Ubuntu 20.04 ships with the default desktop environment [[https://www.gnome.org/][Gnome]], which includes
26	the handy =gnome-tweaks= tool to quickly change designs. To install this, just
27	open your terminal and enter the following command:
28
29	#+begin_src sh
30	sudo apt install gnome-tweaks
31	#+end_src
32
33	After you've finished installing the tool, simply launch the Tweaks application,
34	and you'll be able to access the various customization options available by
35	default on Ubuntu. You might even like some of the pre-installed options.
36
37	** GNOME Application Themes
38	To change the themes applied to applications in GNOME, you will need to change
39	the Applications dropdown in the Appearance section of Tweaks. To add more
40	themes, you will have to find your preferred theme online and follow the steps
41	below to have it show up in the Tweaks tool. While you may find themes anywhere,
42	one of the most popular sites for GNOME themes is [[https://www.gnome-look.org/][gnome-look.org]]. This website
43	contains themes for applications, shells, icons, and cursors.
44
45	Steps to import themes into Tweaks:
46
47	1. Download the theme.
48	2. These files are usually compressed (.zip, .tar.gz, .tar.xz), so you will need
49	to extract the contents. This is easiest when opening the file explorer,
50	right-clicking the compressed file, and choosing "Extract here."
51	3. Move the theme folder to =/usr/share/themes/=. You can do so with the
52	following command: =sudo mv theme-folder/ /usr/share/themes/=.
53	- Icons and cursors will be moved to the =/usr/share/icons/= folder.
54	- Fonts will be moved to the =/usr/share/fonts/= folder Alternatively, you
55	can move them to the =/usr/share/fonts/opentype/= or
56	=/usr/share/fonts/opentype/= folders, if you have a specific font type.
57	4. Close tweaks if it is open. Re-open Tweaks and your new theme will be
58	available in the Applications dropdown in the Appearance section of Tweaks.
59
60	If the theme is not showing up after you've moved it into the themes folder, you
61	may have uncompressed the folder into a sub-folder. You can check this by
62	entering the theme folder and listing the contents:
63
64	#+begin_src sh
65	cd /usr/share/themes/Mojave-Dark && ls -la
66	#+end_src
67
68	This is an example of what the contents of your theme folder should look like.
69	If you just see another folder there, you should move that folder up into the
70	=/usr/share/themes/= folder.
71
72	#+begin_src sh
73	cinnamon COPYING gnome-shell gtk-2.0 gtk-3.0 index.theme metacity-1 plank xfwm4
74	#+end_src
75
76	** GNOME Shell Themes
77	To change the appearance of the title bar, default dock, app menu, and other
78	parts of the GNOME shell, you'll need to install the [[https://extensions.gnome.org/extension/19/user-themes/][user themes]] extension on
79	[[https://extensions.gnome.org/][Gnome Extensions]]. To be able to install extensions, you will first need to
80	install the browser extension that the website instructs you to. See this
81	screenshot for the blue box with a link to the extension.
82
83	#+caption: Gnome Extensions
84	[[https://img.cleberg.net/blog/20200519-customizing-ubuntu/gnome-extensions-min.png]]
85
86	After the browser extension is installed, you will need to install the native
87	host connector:
88
89	#+begin_src sh
90	sudo apt install chrome-gnome-shell
91	#+end_src
92
93	Finally, you can go the [[https://extensions.gnome.org/extension/19/user-themes/][user themes]] extension page and click the installation
94	button. This will enable the Shell option in Tweaks. Now you can move shell
95	themes to the =/usr/share/themes= directory, using the same steps mentioned in
96	the previous section, and enable the new theme in Tweaks.
97
98	** Icons & Cursors
99	Icons and cursors are installed exactly the same way, so I'm grouping these
100	together in this post. Both of these items will need to follow the same process
101	as installing themes, except you will want to move your font folders to the
102	=/usr/share/icons/= directory instead.
103
104	** Fonts
105	Fonts are one of the overlooked parts of customization, but a good font can make
106	the whole screen look different. For example, I have installed the [[https://github.com/IBM/plex/releases][IBM Plex]]
107	fonts on my system. This follows the same process as installing themes, except
108	you will want to move your font folders to the =/usr/share/fonts/= directory
109	instead.
110
111	** Terminal
112	If you spend a lot of time typing commands, you know how important the style and
113	functionality of the terminal is. After spending a lot of time using the default
114	GNOME terminal with [[https://en.wikipedia.org/wiki/Bash_(Unix_shell)][unix shell]], I decided to try some different options. I ended
115	up choosing [[https://terminator-gtk3.readthedocs.io/en/latest/][Terminator]] with [[https://en.wikipedia.org/wiki/Z_shell][zsh]].
116
117	Terminator is great if you need to open multiple terminals at one time by simply
118	right-clicking and splitting the screen into as many terminals as you want.
119	While this project hasn't been updated in a while, [[https://github.com/gnome-terminator/terminator/issues/1][it is coming under new
120	development]]. However, this terminal is great and I haven't experienced any
121	errors yet.
122
123	For the shell choice, I decided to choose zsh after trying it out on a fresh
124	Manjaro installation. Zsh is great if you like to change the themes of your
125	terminal, include icons, or add plugins.
126
127	The desktop uses the [[https://github.com/zsh-users/zsh-autosuggestions][zsh-autosuggestions]] to suggest past commands as you type.
128	In addition, it suggests corrections if you misspell a command. Lastly, it uses
129	the =af-magic= theme, which adds dashed lines between commands, moving the
130	user@host tag to the right side of the terminal, and changes the colors. There
131	are plenty of plugins and themes to choose from. Just figure out what you like
132	and add it to your =~/.zshrc= file!
133
134	*** Steps to Replicate My Terminal
135	To install zsh on Ubuntu, enter the following command into a terminal:
136
137	#+begin_src sh
138	sudo apt install zsh
139	#+end_src
140
141	Then, enter the next command to activate zsh:
142
143	#+begin_src sh
144	sudo chsh -s $(which zsh) $(whoami)
145	#+end_src
146
147	To install Terminator on Ubuntu:
148
149	#+begin_src sh
150	sudo apt install terminator
151	#+end_src
152
153	To install Oh My Zsh on Ubuntu:
154
155	#+begin_src sh
156	sh -c "$(curl -fsSL https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"
157	#+end_src
158
159	To install zsh-autosuggestions via Oh My Zsh:
160
161	#+begin_src sh
162	git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions
163	#+end_src
164
165	Then, add the following plugin wording to your =~/.zshrc= file (the default
166	config usually has the =git= plugin activated, so just add any other plugins to
167	the parentheses separated by a space):
168
169	#+begin_src sh
170	nano ~/.zshrc
171	#+end_src
172
173	#+begin_src sh
174	plugins=(git zsh-autosuggestions)
175	#+end_src
176
177	Finally, you need to log out of your computer and log back in so your user shell
178	can refresh.

content/blog/2020-07-20-video-game-sales.md added +183

@@ -0,0 +1,183 @@
	1	+++
	2	date = 2020-07-20
	3	title = "Data Exploration: Video Games Sales"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Background Information
	9
	10	This dataset (obtained from
	11	[Kaggle](https://www.kaggle.com/gregorut/videogamesales/data)) contains
	12	a list of video games with sales greater than 100,000 copies. It was
	13	generated by a scrape of vgchartz.com.
	14
	15	Fields include:
	16
	17	- Rank: Ranking of overall sales
	18	- Name: The game name
	19	- Platform: Platform of the game release (i.e. PC,PS4, etc.)
	20	- Year: Year of the game\'s release
	21	- Genre: Genre of the game
	22	- Publisher: Publisher of the game
	23	- NA~Sales~: Sales in North America (in millions)
	24	- EU~Sales~: Sales in Europe (in millions)
	25	- JP~Sales~: Sales in Japan (in millions)
	26	- Other~Sales~: Sales in the rest of the world (in millions)
	27	- Global~Sales~: Total worldwide sales.
	28
	29	There are 16,598 records. 2 records were dropped due to incomplete
	30	information.
	31
	32	# Import the Data
	33
	34	``` python
	35	# Import the Python libraries we will be using
	36	import pandas as pd
	37	import numpy as np
	38	import seaborn as sns; sns.set()
	39	import matplotlib.pyplot as plt
	40
	41	# Load the file using the path to the downloaded file
	42	file = r'video_game_sales.csv'
	43	df = pd.read_csv(file)
	44	df
	45	```
	46
	47	![Dataframe
	48	Results](https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/01_dataframe-min.png)
	49
	50	# Explore the Data
	51
	52	``` python
	53	# With the description function, we can see the basic stats. For example, we can
	54	# also see that the 'Year' column has some incomplete values.
	55	df.describe()
	56	```
	57
	58	![df.describe()](https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/02_describe-min.png)
	59
	60	``` python
	61	# This function shows the rows and columns of NaN values. For example, df[179,3] = nan
	62	np.where(pd.isnull(df))
	63
	64	(array([179, ..., 16553], dtype=int64),
	65	array([3, ..., 5], dtype=int64))
	66	```
	67
	68	# Visualize the Data
	69
	70	``` python
	71	# This function plots the global sales by platform
	72	sns.catplot(x='Platform', y='Global_Sales', data=df, jitter=False).set_xticklabels(rotation=90)
	73	```
	74
	75	![Plot of Global Sales by
	76	Platform](https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/03_plot-min.png)
	77
	78	``` python
	79	# This function plots the global sales by genre
	80	sns.catplot(x='Genre', y='Global_Sales', data=df, jitter=False).set_xticklabels(rotation=45)
	81	```
	82
	83	![Plot of Global Sales by
	84	Genre](https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/04_plot-min.png)
	85
	86	``` python
	87	# This function plots the global sales by year
	88	sns.lmplot(x='Year', y='Global_Sales', data=df).set_xticklabels(rotation=45)
	89	```
	90
	91	![Plot of Global Sales by
	92	Year](https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/05_plot-min.png)
	93
	94	``` python
	95	# This function plots four different lines to show sales from different regions.
	96	# The global sales plot line is commented-out, but can be included for comparison
	97	df2 = df.groupby('Year').sum()
	98	years = range(1980,2019)
	99
	100	a = df2['NA_Sales']
	101	b = df2['EU_Sales']
	102	c = df2['JP_Sales']
	103	d = df2['Other_Sales']
	104	# e = df2['Global_Sales']
	105
	106	fig, ax = plt.subplots(figsize=(12,12))
	107	ax.set_ylabel('Region Sales (in Millions)')
	108	ax.set_xlabel('Year')
	109
	110	ax.plot(years, a, label='NA_Sales')
	111	ax.plot(years, b, label='EU_Sales')
	112	ax.plot(years, c, label='JP_Sales')
	113	ax.plot(years, d, label='Other_Sales')
	114	# ax.plot(years, e, label='Global_Sales')
	115
	116	ax.legend()
	117	plt.show()
	118	```
	119
	120	![Plot of Regional Sales by
	121	Year](https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/06_plot-min.png)
	122
	123	## Investigate Outliers
	124
	125	``` python
	126	# Find the game with the highest sales in North America
	127	df.loc[df['NA_Sales'].idxmax()]
	128
	129	Rank 1
	130	Name Wii Sports
	131	Platform Wii
	132	Year 2006
	133	Genre Sports
	134	Publisher Nintendo
	135	NA_Sales 41.49
	136	EU_Sales 29.02
	137	JP_Sales 3.77
	138	Other_Sales 8.46
	139	Global_Sales 82.74
	140	Name: 0, dtype: object
	141
	142	# Explore statistics in the year 2006 (highest selling year)
	143	df3 = df[(df['Year'] == 2006)]
	144	df3.describe()
	145	```
	146
	147	![Descriptive Statistics of 2006
	148	Sales](https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/07_2006_stats-min.png)
	149
	150	``` python
	151	# Plot the results of the previous dataframe (games from 2006) - we can see the year's results were largely carried by Wii Sports
	152	sns.catplot(x="Genre", y="Global_Sales", data=df3, jitter=False).set_xticklabels(rotation=45)
	153	```
	154
	155	![Plot of 2006
	156	Sales](https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/08_plot-min.png)
	157
	158	``` python
	159	# We can see 4 outliers in the graph above, so let's get the top 5 games from that dataframe
	160	# The results below show that Nintendo had all top 5 games (3 on the Wii and 2 on the DS)
	161	df3.sort_values(by=['Global_Sales'], ascending=False).head(5)
	162	```
	163
	164	![Outliers of 2006
	165	Sales](https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/09_outliers-min.png)
	166
	167	# Discussion
	168
	169	The purpose of exploring datasets is to ask questions, answer questions,
	170	and discover intelligence that can be used to inform decision-making.
	171	So, what have we found in this dataset?
	172
	173	Today we simply explored a publicly-available dataset to see what kind
	174	of information it contained. During that exploration, we found that
	175	video game sales peaked in 2006. That peak was largely due to Nintendo,
	176	who sold the top 5 games in 2006 and has a number of games in the top-10
	177	list for the years 1980-2020. Additionally, the top four platforms by
	178	global sales (Wii, NES, GB, DS) are owned by Nintendo.
	179
	180	We didn\'t explore everything this dataset has to offer, but we can tell
	181	from a brief analysis that Nintendo seems to rule sales in the video
	182	gaming world. Further analysis could provide insight into which genres,
	183	regions, publishers, or world events are correlated with sales.

content/blog/2020-07-20-video-game-sales.org deleted −173

	@@ -1,173 +0,0 @@
1	#+title: Data Exploration: Video Game Sales
2	#+date: 2020-07-20
3	#+description: Exploring and visualizing data with Python.
4	#+filetags: :data:
5
6	* Background Information
7	This dataset (obtained from [[https://www.kaggle.com/gregorut/videogamesales/data][Kaggle]]) contains a list of video games with sales
8	greater than 100,000 copies. It was generated by a scrape of vgchartz.com.
9
10	Fields include:
11
12	- Rank: Ranking of overall sales
13	- Name: The game name
14	- Platform: Platform of the game release (i.e. PC,PS4, etc.)
15	- Year: Year of the game's release
16	- Genre: Genre of the game
17	- Publisher: Publisher of the game
18	- NA_{Sales}: Sales in North America (in millions)
19	- EU_{Sales}: Sales in Europe (in millions)
20	- JP_{Sales}: Sales in Japan (in millions)
21	- Other_{Sales}: Sales in the rest of the world (in millions)
22	- Global_{Sales}: Total worldwide sales.
23
24	There are 16,598 records. 2 records were dropped due to incomplete information.
25
26	* Import the Data
27	#+begin_src python
28	# Import the Python libraries we will be using
29	import pandas as pd
30	import numpy as np
31	import seaborn as sns; sns.set()
32	import matplotlib.pyplot as plt
33
34	# Load the file using the path to the downloaded file
35	file = r'video_game_sales.csv'
36	df = pd.read_csv(file)
37	df
38	#+end_src
39
40	#+caption: Dataframe Results
41	[[https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/01_dataframe-min.png]]
42
43	* Explore the Data
44	#+begin_src python
45	# With the description function, we can see the basic stats. For example, we can
46	# also see that the 'Year' column has some incomplete values.
47	df.describe()
48	#+end_src
49
50	#+caption: df.describe()
51	[[https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/02_describe-min.png]]
52
53	#+begin_src python
54	# This function shows the rows and columns of NaN values. For example, df[179,3] = nan
55	np.where(pd.isnull(df))
56
57	(array([179, ..., 16553], dtype=int64),
58	array([3, ..., 5], dtype=int64))
59	#+end_src
60
61	* Visualize the Data
62	#+begin_src python
63	# This function plots the global sales by platform
64	sns.catplot(x='Platform', y='Global_Sales', data=df, jitter=False).set_xticklabels(rotation=90)
65	#+end_src
66
67	#+caption: Plot of Global Sales by Platform
68	[[https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/03_plot-min.png]]
69
70	#+begin_src python
71	# This function plots the global sales by genre
72	sns.catplot(x='Genre', y='Global_Sales', data=df, jitter=False).set_xticklabels(rotation=45)
73	#+end_src
74
75	#+caption: Plot of Global Sales by Genre
76	[[https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/04_plot-min.png]]
77
78	#+begin_src python
79	# This function plots the global sales by year
80	sns.lmplot(x='Year', y='Global_Sales', data=df).set_xticklabels(rotation=45)
81	#+end_src
82
83	#+caption: Plot of Global Sales by Year
84	[[https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/05_plot-min.png]]
85
86	#+begin_src python
87	# This function plots four different lines to show sales from different regions.
88	# The global sales plot line is commented-out, but can be included for comparison
89	df2 = df.groupby('Year').sum()
90	years = range(1980,2019)
91
92	a = df2['NA_Sales']
93	b = df2['EU_Sales']
94	c = df2['JP_Sales']
95	d = df2['Other_Sales']
96	# e = df2['Global_Sales']
97
98	fig, ax = plt.subplots(figsize=(12,12))
99	ax.set_ylabel('Region Sales (in Millions)')
100	ax.set_xlabel('Year')
101
102	ax.plot(years, a, label='NA_Sales')
103	ax.plot(years, b, label='EU_Sales')
104	ax.plot(years, c, label='JP_Sales')
105	ax.plot(years, d, label='Other_Sales')
106	# ax.plot(years, e, label='Global_Sales')
107
108	ax.legend()
109	plt.show()
110	#+end_src
111
112	#+caption: Plot of Regional Sales by Year
113	[[https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/06_plot-min.png]]
114
115	** Investigate Outliers
116	#+begin_src python
117	# Find the game with the highest sales in North America
118	df.loc[df['NA_Sales'].idxmax()]
119
120	Rank 1
121	Name Wii Sports
122	Platform Wii
123	Year 2006
124	Genre Sports
125	Publisher Nintendo
126	NA_Sales 41.49
127	EU_Sales 29.02
128	JP_Sales 3.77
129	Other_Sales 8.46
130	Global_Sales 82.74
131	Name: 0, dtype: object
132
133	# Explore statistics in the year 2006 (highest selling year)
134	df3 = df[(df['Year'] == 2006)]
135	df3.describe()
136	#+end_src
137
138	#+caption: Descriptive Statistics of 2006 Sales
139	[[https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/07_2006_stats-min.png]]
140
141	#+begin_src python
142	# Plot the results of the previous dataframe (games from 2006) - we can see the year's results were largely carried by Wii Sports
143	sns.catplot(x="Genre", y="Global_Sales", data=df3, jitter=False).set_xticklabels(rotation=45)
144	#+end_src
145
146	#+caption: Plot of 2006 Sales
147	[[https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/08_plot-min.png]]
148
149	#+begin_src python
150	# We can see 4 outliers in the graph above, so let's get the top 5 games from that dataframe
151	# The results below show that Nintendo had all top 5 games (3 on the Wii and 2 on the DS)
152	df3.sort_values(by=['Global_Sales'], ascending=False).head(5)
153	#+end_src
154
155	#+caption: Outliers of 2006 Sales
156	[[https://img.cleberg.net/blog/20200720-data-exploration-video-game-sales/09_outliers-min.png]]
157
158	* Discussion
159	The purpose of exploring datasets is to ask questions, answer questions, and
160	discover intelligence that can be used to inform decision-making. So, what have
161	we found in this dataset?
162
163	Today we simply explored a publicly-available dataset to see what kind of
164	information it contained. During that exploration, we found that video game
165	sales peaked in 2006. That peak was largely due to Nintendo, who sold the top 5
166	games in 2006 and has a number of games in the top-10 list for the years
167	1980-2020. Additionally, the top four platforms by global sales (Wii, NES, GB,
168	DS) are owned by Nintendo.
169
170	We didn't explore everything this dataset has to offer, but we can tell from a
171	brief analysis that Nintendo seems to rule sales in the video gaming world.
172	Further analysis could provide insight into which genres, regions, publishers,
173	or world events are correlated with sales.

content/blog/2020-07-26-business-analysis.org → content/blog/2020-07-26-business-analysis.md renamed +121 −106

	@@ -1,28 +1,32 @@
1	#+title: Algorithmically Analyzing Local Businesses	1	+++
2	#+date: 2020-07-26	2	date = 2020-07-26
3	#+description: Exploring and visualizing data with Python.	3	title = "Algorithmically Analyzing Local Businesses "
4	#+filetags: :data:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Background Information	8	# Background Information
7	This project aims to help investors learn more about a random city in order to	9
8	determine optimal locations for business investments. The data used in this	10	This project aims to help investors learn more about a random city in
9	project was obtained using Foursquare's developer API.	11	order to determine optimal locations for business investments. The data
		12	used in this project was obtained using Foursquare\'s developer API.
10		13
11	Fields include:	14	Fields include:
12		15
13	- Venue Name	16	- Venue Name
14	- Venue Category	17	- Venue Category
15	- Venue Latitude	18	- Venue Latitude
16	- Venue Longitude	19	- Venue Longitude
		20
		21	There are 232 records found using the center of Lincoln as the area of
		22	interest with a radius of 10,000.
17		23
18	There are 232 records found using the center of Lincoln as the area of interest	24	# Import the Data
19	with a radius of 10,000.
20		25
21	* Import the Data	26	The first step is the simplest: import the applicable libraries. We will
22	The first step is the simplest: import the applicable libraries. We will be	27	be using the libraries below for this project.
23	using the libraries below for this project.
24		28
25	#+begin_src python	29	``` python
26	# Import the Python libraries we will be using	30	# Import the Python libraries we will be using
27	import pandas as pd	31	import pandas as pd
28	import requests	32	import requests
	@@ -31,32 +35,32 @@ import math
31	import json	35	import json
32	from pandas.io.json import json_normalize	36	from pandas.io.json import json_normalize
33	from sklearn.cluster import KMeans	37	from sklearn.cluster import KMeans
34	#+end_src	38	```
35		39
36	To begin our analysis, we need to import the data for this project. The data we	40	To begin our analysis, we need to import the data for this project. The
37	are using in this project comes directly from the Foursquare API. The first step	41	data we are using in this project comes directly from the Foursquare
38	is to get the latitude and longitude of the city being studied (Lincoln, NE) and	42	API. The first step is to get the latitude and longitude of the city
39	setting up the folium map.	43	being studied (Lincoln, NE) and setting up the folium map.
40		44
41	#+begin_src python	45	``` python
42	# Define the latitude and longitude, then map the results	46	# Define the latitude and longitude, then map the results
43	latitude = 40.806862	47	latitude = 40.806862
44	longitude = -96.681679	48	longitude = -96.681679
45	map_LNK = folium.Map(location=[latitude, longitude], zoom_start=12)	49	map_LNK = folium.Map(location=[latitude, longitude], zoom_start=12)
46		50
47	map_LNK	51	map_LNK
48	#+end_src	52	```
49		53
50	#+caption: Blank Map	54	![Blank
51	[[https://img.cleberg.net/blog/20200726-ibm-data-science/01_blank_map-min.png]]	55	Map](https://img.cleberg.net/blog/20200726-ibm-data-science/01_blank_map-min.png)
52		56
53	Now that we have defined our city and created the map, we need to go get the	57	Now that we have defined our city and created the map, we need to go get
54	business data. The Foursquare API will limit the results to 100 per API call, so	58	the business data. The Foursquare API will limit the results to 100 per
55	we use our first API call below to determine the total results that Foursquare	59	API call, so we use our first API call below to determine the total
56	has found. Since the total results are 232, we perform the API fetching process	60	results that Foursquare has found. Since the total results are 232, we
57	three times (100 + 100 + 32 = 232).	61	perform the API fetching process three times (100 + 100 + 32 = 232).
58		62
59	#+begin_src python	63	``` python
60	# Foursquare API credentials	64	# Foursquare API credentials
61	CLIENT_ID = 'your-client-id'	65	CLIENT_ID = 'your-client-id'
62	CLIENT_SECRET = 'your-client-secret'	66	CLIENT_SECRET = 'your-client-secret'
	@@ -114,17 +118,19 @@ url3 = 'https://api.foursquare.com/v2/venues/explore?&client_id={}&client_secret
114		118
115	# Fetch the final results (201 - 232)	119	# Fetch the final results (201 - 232)
116	results3 = requests.get(url3).json()	120	results3 = requests.get(url3).json()
117	#+end_src	121	```
118		122
119	* Clean the Data	123	# Clean the Data
120	Now that we have our data in three separate dataframes, we need to combine them
121	into a single dataframe and make sure to reset the index so that we have a
122	unique ID for each business. The =get~categorytype~= function below will pull
123	the categories and name from each business's entry in the Foursquare data
124	automatically. Once all the data has been labeled and combined, the results are
125	stored in the =nearby_venues= dataframe.
126		124
127	#+begin_src python	125	Now that we have our data in three separate dataframes, we need to
		126	combine them into a single dataframe and make sure to reset the index so
		127	that we have a unique ID for each business. The
		128	`get~categorytype~` function below will pull the categories
		129	and name from each business\'s entry in the Foursquare data
		130	automatically. Once all the data has been labeled and combined, the
		131	results are stored in the `nearby_venues` dataframe.
		132
		133	``` python
128	# This function will extract the category of the venue from the API dictionary	134	# This function will extract the category of the venue from the API dictionary
129	def get_category_type(row):	135	def get_category_type(row):
130	try:	136	try:
	@@ -187,17 +193,18 @@ nearby_venues3.columns = [col.split(".")[-1] for col in nearby_venues3.columns]
187	nearby_venues = nearby_venues.append(nearby_venues3)	193	nearby_venues = nearby_venues.append(nearby_venues3)
188	nearby_venues = nearby_venues.reset_index(drop=True)	194	nearby_venues = nearby_venues.reset_index(drop=True)
189	nearby_venues	195	nearby_venues
190	#+end_src	196	```
		197
		198	![Clean
		199	Data](https://img.cleberg.net/blog/20200726-ibm-data-science/02_clean_data-min.png)
191		200
192	#+caption: Clean Data	201	# Visualize the Data
193	[[https://img.cleberg.net/blog/20200726-ibm-data-science/02_clean_data-min.png]]
194		202
195	* Visualize the Data	203	We now have a complete, clean data set. The next step is to visualize
196	We now have a complete, clean data set. The next step is to visualize this data	204	this data onto the map we created earlier. We will be using folium\'s
197	onto the map we created earlier. We will be using folium's =CircleMarker()=	205	`CircleMarker()` function to do this.
198	function to do this.
199		206
200	#+begin_src python	207	``` python
201	# add markers to map	208	# add markers to map
202	for lat, lng, name, categories in zip(nearby_venues['lat'], nearby_venues['lng'], nearby_venues['name'], nearby_venues['categories']):	209	for lat, lng, name, categories in zip(nearby_venues['lat'], nearby_venues['lng'], nearby_venues['name'], nearby_venues['categories']):
203	label = '{} ({})'.format(name, categories)	210	label = '{} ({})'.format(name, categories)
	@@ -213,22 +220,24 @@ for lat, lng, name, categories in zip(nearby_venues['lat'], nearby_venues['lng']
213	).add_to(map_LNK)	220	).add_to(map_LNK)
214		221
215	map_LNK	222	map_LNK
216	#+end_src	223	```
217		224
218	![[https://img.cleberg.net/blog/20200726-ibm-data-science/03_data_map-min.png][Initial	225	\![Initial data
219	data map]]	226	map](https://img.cleberg.net/blog/20200726-ibm-data-science/03_data_map-min.png)
220		227
221	* Clustering: /k-means/	228	# Clustering: k-means
222	To cluster the data, we will be using the /k-means/ algorithm. This algorithm is
223	iterative and will automatically make sure that data points in each cluster are
224	as close as possible to each other, while being as far as possible away from
225	other clusters.
226		229
227	However, we first have to figure out how many clusters to use (defined as the	230	To cluster the data, we will be using the k-means algorithm. This
228	variable /'k'/). To do so, we will use the next two functions to calculate the	231	algorithm is iterative and will automatically make sure that data points
229	sum of squares within clusters and then return the optimal number of clusters.	232	in each cluster are as close as possible to each other, while being as
		233	far as possible away from other clusters.
230		234
231	#+begin_src python	235	However, we first have to figure out how many clusters to use (defined
		236	as the variable \'k\'). To do so, we will use the next two functions
		237	to calculate the sum of squares within clusters and then return the
		238	optimal number of clusters.
		239
		240	``` python
232	# This function will return the sum of squares found in the data	241	# This function will return the sum of squares found in the data
233	def calculate_wcss(data):	242	def calculate_wcss(data):
234	wcss = []	243	wcss = []
	@@ -262,13 +271,13 @@ def optimal_number_of_clusters(wcss):
262		271
263	# calculating the optimal number of clusters	272	# calculating the optimal number of clusters
264	n = optimal_number_of_clusters(sum_of_squares)	273	n = optimal_number_of_clusters(sum_of_squares)
265	#+end_src	274	```
266		275
267	Now that we have found that our optimal number of clusters is six, we need to	276	Now that we have found that our optimal number of clusters is six, we
268	perform k-means clustering. When this clustering occurs, each business is	277	need to perform k-means clustering. When this clustering occurs, each
269	assigned a cluster number from 0 to 5 in the dataframe.	278	business is assigned a cluster number from 0 to 5 in the dataframe.
270		279
271	#+begin_src python	280	``` python
272	# set number of clusters equal to the optimal number	281	# set number of clusters equal to the optimal number
273	kclusters = n	282	kclusters = n
274		283
	@@ -277,12 +286,13 @@ kmeans = KMeans(n_clusters=kclusters, random_state=0).fit(cluster_df)
277		286
278	# add clustering labels to dataframe	287	# add clustering labels to dataframe
279	nearby_venues.insert(0, 'Cluster Labels', kmeans.labels_)	288	nearby_venues.insert(0, 'Cluster Labels', kmeans.labels_)
280	#+end_src	289	```
281		290
282	Success! We now have a dataframe with clean business data, along with a cluster	291	Success! We now have a dataframe with clean business data, along with a
283	number for each business. Now let's map the data using six different colors.	292	cluster number for each business. Now let\'s map the data using six
		293	different colors.
284		294
285	#+begin_src python	295	``` python
286	# create map with clusters	296	# create map with clusters
287	map_clusters = folium.Map(location=[latitude, longitude], zoom_start=12)	297	map_clusters = folium.Map(location=[latitude, longitude], zoom_start=12)
288	colors = ['#0F9D58', '#DB4437', '#4285F4', '#800080', '#ce12c0', '#171717']	298	colors = ['#0F9D58', '#DB4437', '#4285F4', '#800080', '#ce12c0', '#171717']
	@@ -301,35 +311,37 @@ for lat, lng, name, categories, cluster in zip(nearby_venues['lat'], nearby_venu
301	fill_opacity=0.7).add_to(map_clusters)	311	fill_opacity=0.7).add_to(map_clusters)
302		312
303	map_clusters	313	map_clusters
304	#+end_src	314	```
		315
		316	![Clustered
		317	Map](https://img.cleberg.net/blog/20200726-ibm-data-science/04_clusters-min.png)
305		318
306	#+caption: Clustered Map	319	# Investigate Clusters
307	[[https://img.cleberg.net/blog/20200726-ibm-data-science/04_clusters-min.png]]
308		320
309	* Investigate Clusters	321	Now that we have figured out our clusters, let\'s do a little more
310	Now that we have figured out our clusters, let's do a little more analysis to	322	analysis to provide more insight into the clusters. With the information
311	provide more insight into the clusters. With the information below, we can see	323	below, we can see which clusters are more popular for businesses and
312	which clusters are more popular for businesses and which are less popular. The	324	which are less popular. The results below show us that clusters 0
313	results below show us that clusters 0 through 3 are popular, while clusters 4	325	through 3 are popular, while clusters 4 and 5 are not very popular at
314	and 5 are not very popular at all.	326	all.
315		327
316	#+begin_src python	328	``` python
317	# Show how many venues are in each cluster	329	# Show how many venues are in each cluster
318	color_names = ['Dark Green', 'Red', 'Blue', 'Purple', 'Pink', 'Black']	330	color_names = ['Dark Green', 'Red', 'Blue', 'Purple', 'Pink', 'Black']
319	for x in range(0,6):	331	for x in range(0,6):
320	print("Color of Cluster", x, ":", color_names[x])	332	print("Color of Cluster", x, ":", color_names[x])
321	print("Venues found in Cluster", x, ":", nearby_venues.loc[nearby_venues['Cluster Labels'] == x, nearby_venues.columns[:]].shape[0])	333	print("Venues found in Cluster", x, ":", nearby_venues.loc[nearby_venues['Cluster Labels'] == x, nearby_venues.columns[:]].shape[0])
322	print("---")	334	print("---")
323	#+end_src	335	```
324		336
325	#+caption: Venues per Cluster	337	![Venues per
326	[[https://img.cleberg.net/blog/20200726-ibm-data-science/05_venues_per_cluster-min.png]]	338	Cluster](https://img.cleberg.net/blog/20200726-ibm-data-science/05_venues_per_cluster-min.png)
327		339
328	Our last piece of analysis is to summarize the categories of businesses within	340	Our last piece of analysis is to summarize the categories of businesses
329	each cluster. With these results, we can clearly see that restaurants, coffee	341	within each cluster. With these results, we can clearly see that
330	shops, and grocery stores are the most popular.	342	restaurants, coffee shops, and grocery stores are the most popular.
331		343
332	#+begin_src python	344	``` python
333	# Calculate how many venues there are in each category	345	# Calculate how many venues there are in each category
334	# Sort from largest to smallest	346	# Sort from largest to smallest
335	temp_df = nearby_venues.drop(columns=['name', 'lat', 'lng'])	347	temp_df = nearby_venues.drop(columns=['name', 'lat', 'lng'])
	@@ -349,26 +361,29 @@ with pd.option_context('display.max_rows', None, 'display.max_columns', None):
349	print("\n\n", "Cluster 3:", "\n", cluster3_grouped.loc[cluster3_grouped['Cluster Labels'] > 1])	361	print("\n\n", "Cluster 3:", "\n", cluster3_grouped.loc[cluster3_grouped['Cluster Labels'] > 1])
350	print("\n\n", "Cluster 4:", "\n", cluster4_grouped.loc[cluster4_grouped['Cluster Labels'] > 1])	362	print("\n\n", "Cluster 4:", "\n", cluster4_grouped.loc[cluster4_grouped['Cluster Labels'] > 1])
351	print("\n\n", "Cluster 5:", "\n", cluster5_grouped.loc[cluster5_grouped['Cluster Labels'] > 1])	363	print("\n\n", "Cluster 5:", "\n", cluster5_grouped.loc[cluster5_grouped['Cluster Labels'] > 1])
352	#+end_src	364	```
		365
		366	![Venues per Cluster, pt.
		367	1](https://img.cleberg.net/blog/20200726-ibm-data-science/06_categories_per_cluster_pt1-min.png)
353		368
354	#+caption: Venues per Cluster, pt. 1	369	![Venues per Cluster, pt.
355	[[https://img.cleberg.net/blog/20200726-ibm-data-science/06_categories_per_cluster_pt1-min.png]]	370	2](https://img.cleberg.net/blog/20200726-ibm-data-science/07_categories_per_cluster_pt2-min.png)
356		371
357	#+caption: Venues per Cluster, pt. 2	372	# Discussion
358	[[https://img.cleberg.net/blog/20200726-ibm-data-science/07_categories_per_cluster_pt2-min.png]]
359		373
360	* Discussion	374	In this project, we gathered location data for Lincoln, Nebraska, USA
361	In this project, we gathered location data for Lincoln, Nebraska, USA and	375	and clustered the data using the k-means algorithm in order to identify
362	clustered the data using the k-means algorithm in order to identify the unique	376	the unique clusters of businesses in Lincoln. Through these actions, we
363	clusters of businesses in Lincoln. Through these actions, we found that there	377	found that there are six unique business clusters in Lincoln and that
364	are six unique business clusters in Lincoln and that two of the clusters are	378	two of the clusters are likely unsuitable for investors. The remaining
365	likely unsuitable for investors. The remaining four clusters have a variety of	379	four clusters have a variety of businesses, but are largely dominated by
366	businesses, but are largely dominated by restaurants and grocery stores.	380	restaurants and grocery stores.
367		381
368	Using this project, investors can now make more informed decisions when deciding	382	Using this project, investors can now make more informed decisions when
369	the location and category of business in which to invest.	383	deciding the location and category of business in which to invest.
370		384
371	Further studies may involve other attributes for business locations, such as	385	Further studies may involve other attributes for business locations,
372	population density, average wealth across the city, or crime rates. In addition,	386	such as population density, average wealth across the city, or crime
373	further studies may include additional location data and businesses by utilizing	387	rates. In addition, further studies may include additional location data
374	multiple sources, such as Google Maps and OpenStreetMap.	388	and businesses by utilizing multiple sources, such as Google Maps and
		389	OpenStreetMap.

content/blog/2020-08-22-redirect-github-pages.md added +137

@@ -0,0 +1,137 @@
	1	+++
	2	date = 2020-08-22
	3	title = "Redirect GitHub Pages from Subdomain to the Top-Level Domain"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Short answer
	9
	10	## Step 1
	11
	12	Add a new file CNAME to your GitHub Pages repository containing only one
	13	line: your top-level domain name. E.g.: `example.com`
	14
	15	## Step 2
	16
	17	\[Optional\] but highly recommended
	18
	19	2.1: Remove all other top-level records (prefixed with @) of type A from
	20	your DNS configuration.
	21
	22	2.2: Remove a CNAME record for the second-level domain www if it is
	23	present.
	24
	25	## Step 3
	26
	27	Add these 5 entries to the very top of your DNS configuration:
	28
	29	``` txt
	30	@ A 185.199.108.153
	31	@ A 185.199.109.153
	32	@ A 185.199.110.153
	33	@ A 185.199.111.153
	34	www CNAME your_github_username.github.io.
	35	```
	36
	37	Replace `your_github_username` with your actual GitHub
	38	username.
	39
	40	## Step 4
	41
	42	Wait for your DNS changes to propagate. DNS changes aren\'t effective
	43	immediately. They can take up to a full day to propagate.
	44
	45	# Long answer
	46
	47	This issue has two sides. One is the DNS configuration itself. Another
	48	one is the way GitHub Pages will forward HTTP requests.
	49
	50	We need to know a few things to understand what GitHub is trying to say
	51	in their documentation.
	52
	53	## DNS Entry Types
	54
	55	There are two types of DNS records which interest us: CNAME and A.
	56
	57	`A` is also known as `Apex` or sometimes as
	58	`root entry`. It forwards requests to a specified fixed IP
	59	address. `CNAME` entry forwards requests to a specified URL
	60	(actual valid plain text URL, not an IP address).
	61
	62	## DNS Load balancing
	63
	64	GitHub has one central URL address which accepts all DNS requests for
	65	GitHub Pages: `http://username.github.io`. That URL is
	66	resolved to different IP addresses based on your geographical location.
	67	Website hosted on GitHub Pages is a simple collection of
	68	`HTML`, `CSS` and `JS` files. GitHub
	69	distributes these files to different servers across the globe. So that
	70	when your browser sends a request from Europe, it receives data from a
	71	server in Europe. The same is valid for the requests from Asia and the
	72	USA.
	73
	74	## What GitHub is trying to say
	75
	76	Since `A` records in DNS must contain IP addresses, and they
	77	must be either `185.199.108.153` or
	78	`185.199.109.153` or `185.199.110.153` or
	79	`185.199.111.153`, there is no way to forward requests to a
	80	server located somewhere in Europe or Asia. Your website hosted at
	81	GitHub Pages will be downloaded from a central GitHub Pages server.
	82	There is a minor risk that if GitHub Pages DNS servers
	83	(`x.x.x.153`) are down for some reason, all custom domains
	84	which use fixed GitHub Pages IP addresses will not be accessible (their
	85	DNS requests will not be resolvable).
	86
	87	That is why GitHub strongly suggests to either use a second-level domain
	88	for your GitHub Pages (e.g. `blog.example.com`) or use a DNS
	89	service provider that supports a record type `ALIAS` that
	90	acts as `A` record but forwards request to a URL address
	91	(e.g. `username.github.io`) instead of a fixed IP address.
	92
	93	## How GitHub Pages treats HTTP requests
	94
	95	After a DNS request for `your_github_username.github.io` is
	96	resolved into an IP address, e.g. `185.199.108.153` your
	97	browser sends an HTTP request to that server with an HTTP header
	98	`Host`. Below are `curl` examples that load the
	99	same website (these examples might not work if you are behind a proxy
	100	server):
	101
	102	```sh
	103	curl --header "Host: your_github_username.github.io" http://185.199.108.153/
	104	curl --header "Host: www.example.com" http://185.199.108.153/
	105	curl --header "Host: example.com" http://185.199.108.153/
	106	```
	107
	108	This way GitHub Pages servers know which user website to serve.
	109
	110	> GitHub Pages server will automatically redirect HTTP requests to the
	111	> top-level domain if your `CNAME` file contains
	112	> `example.com` but `www.example.com` is
	113	> requested.
	114	>
	115	> The same is valid if your `CNAME` file contains
	116	> `www.example.com` but the header `Host` in the
	117	> `HTTP` request contains `example.com`.
	118
	119	## Why can\'t I add a `CNAME` record entry that accepts a top-level request (`@`) to my DNS configuration?
	120
	121	Quote from the GitHub Pages documentation:
	122
	123	> Warning: Do not create a CNAME record for your custom apex domain!
	124	> Doing so may cause issues with other services, such as email, on that
	125	> domain.
	126
	127	## References:
	128
	129	1. [Setting up a custom domain with GitHub
	130	Pages](https://docs.github.com/en/github/working-with-github-pages/configuring-a-custom-domain-for-your-github-pages-site)
	131	2. [My custom domain isn\'t
	132	working](https://docs.github.com/en/github/working-with-github-pages/troubleshooting-custom-domains-and-github-pages)
	133	3. [Cannot access my GitHub Pages website by IP
	134	Address](https://serverfault.com/questions/589370/cannot-access-my-github-pages-website-by-ip-address)
	135	4. [How do I set up GitHub Pages to redirect DNS requests from a
	136	subdomain (e.g. www) to the top-level domain (TLD, Apex
	137	record)?](https://stackoverflow.com/questions/23375422/how-do-i-set-up-github-pages-to-redirect-dns-requests-from-a-subdomain-e-g-www)

content/blog/2020-08-22-redirect-github-pages.org deleted −110

	@@ -1,110 +0,0 @@
1	#+title: Redirect GitHub Pages from Subdomain to the Top-Level Domain
2	#+date: 2020-08-22
3	#+description: Learn how to redirect Github pages to the TLD.
4	#+filetags: :sysadmin:
5
6	* Short answer
7	** Step 1
8	Add a new file CNAME to your GitHub Pages repository containing only one line:
9	your top-level domain name. E.g.: =example.com=
10
11	** Step 2
12	[Optional] but highly recommended
13
14	2.1: Remove all other top-level records (prefixed with @) of type A from your
15	DNS configuration.
16
17	2.2: Remove a CNAME record for the second-level domain www if it is present.
18
19	** Step 3
20	Add these 5 entries to the very top of your DNS configuration:
21
22	#+begin_src txt
23	@ A 185.199.108.153
24	@ A 185.199.109.153
25	@ A 185.199.110.153
26	@ A 185.199.111.153
27	www CNAME your_github_username.github.io.
28	#+end_src
29
30	Replace =your_github_username= with your actual GitHub username.
31
32	** Step 4
33	Wait for your DNS changes to propagate. DNS changes aren't effective
34	immediately. They can take up to a full day to propagate.
35
36	* Long answer
37	This issue has two sides. One is the DNS configuration itself. Another one is
38	the way GitHub Pages will forward HTTP requests.
39
40	We need to know a few things to understand what GitHub is trying to say in their
41	documentation.
42
43	** DNS Entry Types
44	There are two types of DNS records which interest us: CNAME and A.
45
46	=A= is also known as =Apex= or sometimes as =root entry=. It forwards requests
47	to a specified fixed IP address. =CNAME= entry forwards requests to a specified
48	URL (actual valid plain text URL, not an IP address).
49
50	** DNS Load balancing
51	GitHub has one central URL address which accepts all DNS requests for GitHub
52	Pages: =http://username.github.io=. That URL is resolved to different IP
53	addresses based on your geographical location. Website hosted on GitHub Pages is
54	a simple collection of =HTML=, =CSS= and =JS= files. GitHub distributes these
55	files to different servers across the globe. So that when your browser sends a
56	request from Europe, it receives data from a server in Europe. The same is valid
57	for the requests from Asia and the USA.
58
59	** What GitHub is trying to say
60	Since =A= records in DNS must contain IP addresses, and they must be either
61	=185.199.108.153= or =185.199.109.153= or =185.199.110.153= or
62	=185.199.111.153=, there is no way to forward requests to a server located
63	somewhere in Europe or Asia. Your website hosted at GitHub Pages will be
64	downloaded from a central GitHub Pages server. There is a minor risk that if
65	GitHub Pages DNS servers (=x.x.x.153=) are down for some reason, all custom
66	domains which use fixed GitHub Pages IP addresses will not be accessible (their
67	DNS requests will not be resolvable).
68
69	That is why GitHub strongly suggests to either use a second-level domain for
70	your GitHub Pages (e.g. =blog.example.com=) or use a DNS service provider that
71	supports a record type =ALIAS= that acts as =A= record but forwards request to a
72	URL address (e.g. =username.github.io=) instead of a fixed IP address.
73
74	** How GitHub Pages treats HTTP requests
75	After a DNS request for =your_github_username.github.io= is resolved into an IP
76	address, e.g. =185.199.108.153= your browser sends an HTTP request to that
77	server with an HTTP header =Host=. Below are =curl= examples that load the same
78	website (these examples might not work if you are behind a proxy server):
79
80	#+begin_src sh
81	curl --header "Host: your_github_username.github.io" http://185.199.108.153/
82	curl --header "Host: www.example.com" http://185.199.108.153/
83	curl --header "Host: example.com" http://185.199.108.153/
84	#+end_src
85
86	This way GitHub Pages servers know which user website to serve.
87
88	#+begin_quote
89	GitHub Pages server will automatically redirect HTTP requests to the top-level
90	domain if your =CNAME= file contains =example.com= but =www.example.com= is
91	requested.
92
93	The same is valid if your =CNAME= file contains =www.example.com= but the header
94	=Host= in the =HTTP= request contains =example.com=.
95	#+end_quote
96
97	** Why can't I add a =CNAME= record entry that accepts a top-level request (=@=) to my DNS configuration?
98	Quote from the GitHub Pages documentation:
99
100	#+begin_quote
101	Warning: Do not create a CNAME record for your custom apex domain! Doing so may
102	cause issues with other services, such as email, on that domain.
103	#+end_quote
104
105	** References:
106	1. [[https://docs.github.com/en/github/working-with-github-pages/configuring-a-custom-domain-for-your-github-pages-site][Setting up a custom domain with GitHub Pages]]
107	2. [[https://docs.github.com/en/github/working-with-github-pages/troubleshooting-custom-domains-and-github-pages][My custom domain isn't working]]
108	3. [[https://serverfault.com/questions/589370/cannot-access-my-github-pages-website-by-ip-address][Cannot access my GitHub Pages website by IP Address]]
109	4. [[https://stackoverflow.com/questions/23375422/how-do-i-set-up-github-pages-to-redirect-dns-requests-from-a-subdomain-e-g-www][How do I set up GitHub Pages to redirect DNS requests from a subdomain (e.g.
110	www) to the top-level domain (TLD, Apex record)?]]

content/blog/2020-08-29-php-auth-flow.org → content/blog/2020-08-29-php-auth-flow.md renamed +81 −66

	@@ -1,20 +1,24 @@
1	#+title: PHP Authentication Flow	1	+++
2	#+date: 2020-08-29	2	date = 2020-08-29
3	#+description: Learn how to establish and maintain a basic user authentication flow in PHP.	3	title = "PHP Authentication Flow"
4	#+filetags: :dev:	4	description = ""
5		5	draft = false
6	* Introduction	6	+++
7	When creating websites that will allow users to create accounts, the developer	7
8	always needs to consider the proper authentication flow for their app. For	8	# Introduction
9	example, some developers will utilize an API for authentication, some will use	9
10	OAuth, and some may just use their own simple database.	10	When creating websites that will allow users to create accounts, the
11		11	developer always needs to consider the proper authentication flow for
12	For those using pre-built libraries, authentication may simply be a problem of	12	their app. For example, some developers will utilize an API for
13	copying and pasting the code from their library's documentation. For example,	13	authentication, some will use OAuth, and some may just use their own
14	here's the code I use to authenticate users with the Tumblr OAuth API for my	14	simple database.
15	Tumblr client, Vox Populi:	15
16		16	For those using pre-built libraries, authentication may simply be a
17	#+begin_src php	17	problem of copying and pasting the code from their library\'s
		18	documentation. For example, here\'s the code I use to authenticate users
		19	with the Tumblr OAuth API for my Tumblr client, Vox Populi:
		20
		21	``` php
18	// Start the session	22	// Start the session
19	session_start();	23	session_start();
20		24
	@@ -35,26 +39,28 @@ $client = new Tumblr\API\Client(
35	$token,	39	$token,
36	$token_secret	40	$token_secret
37	);	41	);
38	#+end_src	42	```
39		43
40	However, developers creating authentication flows from scratch will need to	44	However, developers creating authentication flows from scratch will need
41	think carefully about when to make sure a web page will check the user's	45	to think carefully about when to make sure a web page will check the
42	authenticity.	46	user\'s authenticity.
43		47
44	In this article, we're going to look at a simple authentication flow using a	48	In this article, we\'re going to look at a simple authentication flow
45	MySQL database and PHP.	49	using a MySQL database and PHP.
46		50
47	* Creating User Accounts	51	# Creating User Accounts
48	The beginning to any type of user authentication is to create a user account.
49	This process can take many formats, but the simplest is to accept user input
50	from a form (e.g., username and password) and send it over to your database. For
51	example, here's a snippet that shows how to get username and password parameters
52	that would come when a user submits a form to your PHP script.
53		52
54	Note: Ensure that your password column is large enough to hold the hashed	53	The beginning to any type of user authentication is to create a user
55	value (at least 60 characters or longer).	54	account. This process can take many formats, but the simplest is to
		55	accept user input from a form (e.g., username and password) and send it
		56	over to your database. For example, here\'s a snippet that shows how to
		57	get username and password parameters that would come when a user submits
		58	a form to your PHP script.
56		59
57	#+begin_src php	60	Note: Ensure that your password column is large enough to hold the
		61	hashed value (at least 60 characters or longer).
		62
		63	``` php
58	// Get the values from the URL	64	// Get the values from the URL
59	$username = $_POST['username'];	65	$username = $_POST['username'];
60	$raw_password = $_POST['password'];	66	$raw_password = $_POST['password'];
	@@ -87,14 +93,15 @@ if ($conn->query($sql) === TRUE) {
87	}	93	}
88		94
89	$conn->close();	95	$conn->close();
90	#+end_src	96	```
		97
		98	## Validate Returning Users
91		99
92	** Validate Returning Users	100	To be able to verify that a returning user has a valid username and
93	To be able to verify that a returning user has a valid username and password in	101	password in your database is as simple as having users fill out a form
94	your database is as simple as having users fill out a form and comparing their	102	and comparing their inputs to your database.
95	inputs to your database.
96		103
97	#+begin_src php	104	``` php
98	// Query the database for username and password	105	// Query the database for username and password
99	// ...	106	// ...
100		107
	@@ -105,39 +112,42 @@ if(password_verify($password_input, $hashed_password)) {
105		112
106	// Else, Redirect them back to the login page.	113	// Else, Redirect them back to the login page.
107	...	114	...
108	#+end_src	115	```
		116
		117	# Storing Authentication State
109		118
110	* Storing Authentication State	119	Once you\'ve created the user\'s account, now you\'re ready to
111	Once you've created the user's account, now you're ready to initialize the	120	initialize the user\'s session. **You will need to do this on every page
112	user's session. *You will need to do this on every page you load while the user	121	you load while the user is logged in.\*** To do so, simply enter the
113	is logged in.** To do so, simply enter the following code snippet:	122	following code snippet:
114		123
115	#+begin_src php	124	``` php
116	session_start();	125	session_start();
117	#+end_src	126	```
118		127
119	Once you've initialized the session, the next step is to store the session in a	128	Once you\'ve initialized the session, the next step is to store the
120	cookie so that you can access it later.	129	session in a cookie so that you can access it later.
121		130
122	#+begin_src php	131	``` php
123	setcookie(session_name());	132	setcookie(session_name());
124	#+end_src	133	```
125		134
126	Now that the session name has been stored, you'll be able to check if there's an	135	Now that the session name has been stored, you\'ll be able to check if
127	active session whenever you load a page.	136	there\'s an active session whenever you load a page.
128		137
129	#+begin_src php	138	``` php
130	if(isset(session_name())) {	139	if(isset(session_name())) {
131	// The session is active	140	// The session is active
132	}	141	}
133	#+end_src	142	```
134		143
135	** Removing User Authentication	144	## Removing User Authentication
136	The next logical step is to give your users the option to log out once they are
137	done using your application. This can be tricky in PHP since a few of the
138	standard ways do not always work.
139		145
140	#+begin_src php	146	The next logical step is to give your users the option to log out once
		147	they are done using your application. This can be tricky in PHP since a
		148	few of the standard ways do not always work.
		149
		150	``` php
141	// Initialize the session.	151	// Initialize the session.
142	// If you are using session_name("something"), don't forget it now!	152	// If you are using session_name("something"), don't forget it now!
143	session_start();	153	session_start();
	@@ -169,13 +179,18 @@ session_write_close();
169	// Go back to sign-in page	179	// Go back to sign-in page
170	header('Location: https://example.com/logged-out/');	180	header('Location: https://example.com/logged-out/');
171	die();	181	die();
172	#+end_src	182	```
		183
		184	# Wrapping Up
173		185
174	* Wrapping Up	186	Now you should be ready to begin your authentication programming with
175	Now you should be ready to begin your authentication programming with PHP. You	187	PHP. You can create user accounts, create sessions for users across
176	can create user accounts, create sessions for users across different pages of	188	different pages of your site, and then destroy the user data when
177	your site, and then destroy the user data when they're ready to leave.	189	they\'re ready to leave.
178		190
179	For more information on this subject, I recommend reading the [[https://www.php.net/][PHP Documentation]].	191	For more information on this subject, I recommend reading the [PHP
180	Specifically, you may want to look at [[https://www.php.net/manual/en/features.http-auth.php][HTTP Authentication with PHP]], [[https://www.php.net/manual/en/book.session.php][session	192	Documentation](https://www.php.net/). Specifically, you may want to look
181	handling]], and [[https://www.php.net/manual/en/function.hash.php][hash]].	193	at [HTTP Authentication with
		194	PHP](https://www.php.net/manual/en/features.http-auth.php), [session
		195	handling](https://www.php.net/manual/en/book.session.php), and
		196	[hash](https://www.php.net/manual/en/function.hash.php).

content/blog/2020-09-01-visual-recognition.md added +205

@@ -0,0 +1,205 @@
	1	+++
	2	date = 2020-09-01
	3	title = "IBM Watson Visual Recognition"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# What is IBM Watson?
	9
	10	If you\'ve never heard of [Watson](https://www.ibm.com/watson), this
	11	service is a suite of enterprise-ready AI services, applications, and
	12	tooling provided by IBM. Watson contains quite a few useful tools for
	13	data scientists and students, including the subject of this post today:
	14	visual recognition.
	15
	16	If you\'d like to view the official documentation for the Visual
	17	Recognition API, visit the [API
	18	Docs](https://cloud.ibm.com/apidocs/visual-recognition/visual-recognition-v3?code=python).
	19
	20	# Prerequisites
	21
	22	To be able to use Watson Visual Recognition, you\'ll need the following:
	23
	24	1. Create a free account on [IBM Watson
	25	Studio](https://www.ibm.com/cloud/watson-studio).
	26	2. Add the [Watson Visual
	27	Recognition](https://www.ibm.com/cloud/watson-visual-recognition)
	28	service to your IBM Watson account.
	29	3. Get your API key and URL. To do this, first go to the [profile
	30	dashboard](https://dataplatform.cloud.ibm.com/home2?context=cpdaas)
	31	for your IBM account and click on the Watson Visual Recognition
	32	service you created. This will be listed in the section titled
	33	Your services. Then click the Credentials\* tab and open the
	34	Auto-generated credentials\* dropdown. Copy your API key and URL
	35	so that you can use them in the Python script later.
	36	4. \[Optional\]\* While not required, you can also create the
	37	Jupyter Notebook for this project right inside [Watson
	38	Studio](https://www.ibm.com/cloud/watson-studio). Watson Studio will
	39	save your notebooks inside an organized project and allow you to use
	40	their other integrated products, such as storage containers, AI
	41	models, documentation, external sharing, etc.
	42
	43	# Calling the IBM Watson Visual Recognition API
	44
	45	Okay, now let\'s get started.
	46
	47	To begin, we need to install the proper Python package for IBM Watson.
	48
	49	```sh
	50	pip install --upgrade --user "ibm-watson>=4.5.0"
	51	```
	52
	53	Next, we need to specify the API key, version, and URL given to us when
	54	we created the Watson Visual Recognition service.
	55
	56	``` python
	57	apikey = "<your-apikey>"
	58	version = "2018-03-19"
	59	url = "<your-url>"
	60	```
	61
	62	Now, let\'s import the necessary libraries and authenticate our service.
	63
	64	``` python
	65	import json
	66	from ibm_watson import VisualRecognitionV3
	67	from ibm_cloud_sdk_core.authenticators import IAMAuthenticator
	68
	69	authenticator = IAMAuthenticator(apikey)
	70	visual_recognition = VisualRecognitionV3(
	71	version=version,
	72	authenticator=authenticator
	73	)
	74
	75	visual_recognition.set_service_url(url)
	76	```
	77
	78	\[Optional\] If you\'d like to tell the API not to use any data to
	79	improve their products, set the following header.
	80
	81	``` python
	82	visual_recognition.set_default_headers({'x-watson-learning-opt-out': "true"})
	83	```
	84
	85	Now we have our API all set and ready to go. For this example, I\'m
	86	going to include a `dict` of photos to load as we test out
	87	the API.
	88
	89	``` python
	90	data = [
	91	{
	92	"title": "Grizzly Bear",
	93	"url": "https://example.com/photos/image1.jpg"
	94	},
	95	{
	96	"title": "Nature Lake",
	97	"url": "https://example.com/photos/image2.jpg"
	98	},
	99	{
	100	"title": "Welcome Sign",
	101	"url": "https://example.com/photos/image3.jpg"
	102	},
	103	{
	104	"title": "Honey Badger",
	105	"url": "https://example.com/photos/image4.jpg"
	106	},
	107	{
	108	"title": "Grand Canyon Lizard",
	109	"url": "https://example.com/photos/image5.jpg"
	110	},
	111	{
	112	"title": "Castle",
	113	"url": "https://example.com/photos/image6.jpg"
	114	}
	115	]
	116	```
	117
	118	Now that we\'ve set up our libraries and have the photos ready, let\'s
	119	create a loop to call the API for each image. The code below shows a
	120	loop that calls the URL of each image and sends it to the API,
	121	requesting results with at least 60% confidence. The results are output
	122	to the console with dotted lines separating each section.
	123
	124	In the case of an API error, the codes and explanations are output to
	125	the console.
	126
	127	``` python
	128	from ibm_watson import ApiException
	129
	130	for x in range(len(data)):
	131	try:
	132	url = data[x]["url"]
	133	images_filename = data[x]["title"]
	134	classes = visual_recognition.classify(
	135	url=url,
	136	images_filename=images_filename,
	137	threshold='0.6',
	138	owners=["IBM"]).get_result()
	139	print("-----------------------------------------------")
	140	print("Image Title: ", data[x]["title"], "\n")
	141	print("Image URL: ", data[x]["url"], "\n")
	142	classification_results = classes["images"][0]["classifiers"][0]["classes"]
	143	for result in classification_results:
	144	print(result["class"], "(", result["score"], ")")
	145	print("-----------------------------------------------")
	146	except ApiException as ex:
	147	print("Method failed with status code " + str(ex.code) + ": " + ex.message)
	148	```
	149
	150	# The Results
	151
	152	Here we can see the full result set of our function above. If you view
	153	each of the URLs that we sent to the API, you\'ll be able to see that it
	154	was remarkably accurate. To be fair, these are clear high-resolution,
	155	clear photos shot with a professional camera. In reality, you will most
	156	likely be processing images that are lower quality and may have a lot of
	157	noise in the photo.
	158
	159	However, we can clearly see the benefit of being able to call this API
	160	instead of attempting to write our own image recognition function. Each
	161	of the classifications returned was a fair description of the image.
	162
	163	If you wanted to restrict the results to those that are at least 90%
	164	confident or greater, you would simply adjust the `threshold`
	165	in the `visual_recognition.classify()` function.
	166
	167	When your program runs, it should show the output below for each photo
	168	you provide.
	169
	170	``` txt
	171	----------------------------------------------------------------
	172	Image Title: Grizzly Bear
	173	Image URL: https://example.com/photos/image1.jpg
	174
	175	brown bear ( 0.944 )
	176	bear ( 1 )
	177	carnivore ( 1 )
	178	mammal ( 1 )
	179	animal ( 1 )
	180	Alaskan brown bear ( 0.759 )
	181	greenishness color ( 0.975 )
	182	----------------------------------------------------------------
	183	```
	184
	185	# Discussion
	186
	187	Now, this was a very minimal implementation of the API. We simply
	188	supplied some images and looked to see how accurate the results were.
	189	However, you could implement this type of API into many machine learning
	190	(ML) models.
	191
	192	For example, you could be working for a company that scans their
	193	warehouses or inventory using drones. Would you want to pay employees to
	194	sit there and watch drone footage all day in order to identify or count
	195	things in the video? Probably not. Instead, you could use a
	196	classification system similar to this one in order to train your machine
	197	learning model to correctly identify items that the drones show through
	198	video. More specifically, you could have your machine learning model
	199	watch a drone fly over a field of sheep in order to count how many sheep
	200	are living in that field.
	201
	202	There are many ways to implement machine learning functionality, but
	203	hopefully this post helped inspire some deeper thought about the tools
	204	that can help propel us further into the future of machine learning and
	205	AI.

content/blog/2020-09-01-visual-recognition.org deleted −186

	@@ -1,186 +0,0 @@
1	#+title: IBM Watson Visual Recognition
2	#+date: 2020-09-01
3	#+description: Exploring and visualizing data with Python.
4	#+filetags: :dev:
5
6	* What is IBM Watson?
7	If you've never heard of [[https://www.ibm.com/watson][Watson]], this service is a suite of enterprise-ready AI
8	services, applications, and tooling provided by IBM. Watson contains quite a few
9	useful tools for data scientists and students, including the subject of this
10	post today: visual recognition.
11
12	If you'd like to view the official documentation for the Visual Recognition API,
13	visit the [[https://cloud.ibm.com/apidocs/visual-recognition/visual-recognition-v3?code=python][API Docs]].
14
15	* Prerequisites
16	To be able to use Watson Visual Recognition, you'll need the following:
17
18	1. Create a free account on [[https://www.ibm.com/cloud/watson-studio][IBM Watson Studio]].
19	2. Add the [[https://www.ibm.com/cloud/watson-visual-recognition][Watson Visual Recognition]] service to your IBM Watson account.
20	3. Get your API key and URL. To do this, first go to the [[https://dataplatform.cloud.ibm.com/home2?context=cpdaas][profile dashboard]] for
21	your IBM account and click on the Watson Visual Recognition service you
22	created. This will be listed in the section titled Your services. Then
23	click the Credentials* tab and open the Auto-generated credentials*
24	dropdown. Copy your API key and URL so that you can use them in the Python
25	script later.
26	4. [Optional]* While not required, you can also create the Jupyter Notebook
27	for this project right inside [[https://www.ibm.com/cloud/watson-studio][Watson Studio]]. Watson Studio will save your
28	notebooks inside an organized project and allow you to use their other
29	integrated products, such as storage containers, AI models, documentation,
30	external sharing, etc.
31
32	* Calling the IBM Watson Visual Recognition API
33	Okay, now let's get started.
34
35	To begin, we need to install the proper Python package for IBM Watson.
36
37	#+begin_src sh
38	pip install --upgrade --user "ibm-watson>=4.5.0"
39	#+end_src
40
41	Next, we need to specify the API key, version, and URL given to us when we
42	created the Watson Visual Recognition service.
43
44	#+begin_src python
45	apikey = "<your-apikey>"
46	version = "2018-03-19"
47	url = "<your-url>"
48	#+end_src
49
50	Now, let's import the necessary libraries and authenticate our service.
51
52	#+begin_src python
53	import json
54	from ibm_watson import VisualRecognitionV3
55	from ibm_cloud_sdk_core.authenticators import IAMAuthenticator
56
57	authenticator = IAMAuthenticator(apikey)
58	visual_recognition = VisualRecognitionV3(
59	version=version,
60	authenticator=authenticator
61	)
62
63	visual_recognition.set_service_url(url)
64	#+end_src
65
66	[Optional] If you'd like to tell the API not to use any data to improve their
67	products, set the following header.
68
69	#+begin_src python
70	visual_recognition.set_default_headers({'x-watson-learning-opt-out': "true"})
71	#+end_src
72
73	Now we have our API all set and ready to go. For this example, I'm going to
74	include a =dict= of photos to load as we test out the API.
75
76	#+begin_src python
77	data = [
78	{
79	"title": "Grizzly Bear",
80	"url": "https://example.com/photos/image1.jpg"
81	},
82	{
83	"title": "Nature Lake",
84	"url": "https://example.com/photos/image2.jpg"
85	},
86	{
87	"title": "Welcome Sign",
88	"url": "https://example.com/photos/image3.jpg"
89	},
90	{
91	"title": "Honey Badger",
92	"url": "https://example.com/photos/image4.jpg"
93	},
94	{
95	"title": "Grand Canyon Lizard",
96	"url": "https://example.com/photos/image5.jpg"
97	},
98	{
99	"title": "Castle",
100	"url": "https://example.com/photos/image6.jpg"
101	}
102	]
103	#+end_src
104
105	Now that we've set up our libraries and have the photos ready, let's create a
106	loop to call the API for each image. The code below shows a loop that calls the
107	URL of each image and sends it to the API, requesting results with at least 60%
108	confidence. The results are output to the console with dotted lines separating
109	each section.
110
111	In the case of an API error, the codes and explanations are output to the
112	console.
113
114	#+begin_src python
115	from ibm_watson import ApiException
116
117	for x in range(len(data)):
118	try:
119	url = data[x]["url"]
120	images_filename = data[x]["title"]
121	classes = visual_recognition.classify(
122	url=url,
123	images_filename=images_filename,
124	threshold='0.6',
125	owners=["IBM"]).get_result()
126	print("-----------------------------------------------")
127	print("Image Title: ", data[x]["title"], "\n")
128	print("Image URL: ", data[x]["url"], "\n")
129	classification_results = classes["images"][0]["classifiers"][0]["classes"]
130	for result in classification_results:
131	print(result["class"], "(", result["score"], ")")
132	print("-----------------------------------------------")
133	except ApiException as ex:
134	print("Method failed with status code " + str(ex.code) + ": " + ex.message)
135	#+end_src
136
137	* The Results
138	Here we can see the full result set of our function above. If you view each of
139	the URLs that we sent to the API, you'll be able to see that it was remarkably
140	accurate. To be fair, these are clear high-resolution, clear photos shot with a
141	professional camera. In reality, you will most likely be processing images that
142	are lower quality and may have a lot of noise in the photo.
143
144	However, we can clearly see the benefit of being able to call this API instead
145	of attempting to write our own image recognition function. Each of the
146	classifications returned was a fair description of the image.
147
148	If you wanted to restrict the results to those that are at least 90% confident
149	or greater, you would simply adjust the =threshold= in the
150	=visual_recognition.classify()= function.
151
152	When your program runs, it should show the output below for each photo you
153	provide.
154
155	#+begin_src txt
156	----------------------------------------------------------------
157	Image Title: Grizzly Bear
158	Image URL: https://example.com/photos/image1.jpg
159
160	brown bear ( 0.944 )
161	bear ( 1 )
162	carnivore ( 1 )
163	mammal ( 1 )
164	animal ( 1 )
165	Alaskan brown bear ( 0.759 )
166	greenishness color ( 0.975 )
167	----------------------------------------------------------------
168	#+end_src
169
170	* Discussion
171	Now, this was a very minimal implementation of the API. We simply supplied some
172	images and looked to see how accurate the results were. However, you could
173	implement this type of API into many machine learning (ML) models.
174
175	For example, you could be working for a company that scans their warehouses or
176	inventory using drones. Would you want to pay employees to sit there and watch
177	drone footage all day in order to identify or count things in the video?
178	Probably not. Instead, you could use a classification system similar to this one
179	in order to train your machine learning model to correctly identify items that
180	the drones show through video. More specifically, you could have your machine
181	learning model watch a drone fly over a field of sheep in order to count how
182	many sheep are living in that field.
183
184	There are many ways to implement machine learning functionality, but hopefully
185	this post helped inspire some deeper thought about the tools that can help
186	propel us further into the future of machine learning and AI.

content/blog/2020-09-22-internal-audit.md added +264

@@ -0,0 +1,264 @@
	1	+++
	2	date = 2020-09-22
	3	title = "Who is Internal Audit?"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	![Internal Audit
	9	Overview](https://img.cleberg.net/blog/20200922-what-is-internal-audit/internal-audit-overview.jpg)
	10
	11	# Definitions
	12
	13	One of the many reasons that Internal Audit needs such thorough
	14	explaining to non-auditors is that Internal Audit can serve many
	15	purposes, depending on the organization\'s size and needs. However, the
	16	Institute of Internal Auditors (IIA) defines Internal Auditing as:
	17
	18	> Internal auditing is an independent, objective assurance and
	19	> consulting activity designed to add value and improve an
	20	> organization\'s operations. It helps an organization accomplish its
	21	> objectives by bringing a systematic, disciplined approach to evaluate
	22	> and improve the effectiveness of risk management, control, and
	23	> governance processes.
	24
	25	However, this definition uses quite a few terms that aren\'t clear
	26	unless the reader already has a solid understanding of the auditing
	27	profession. To further explain, the following is a list of definitions
	28	that can help supplement understanding of internal auditing.
	29
	30	## Independent
	31
	32	Independence is the freedom from conditions that threaten the ability of
	33	the internal audit activity to carry out internal audit responsibilities
	34	in an unbiased manner. To achieve the degree of independence necessary
	35	to effectively carry out the responsibilities of the internal audit
	36	activity, the chief audit executive has direct and unrestricted access
	37	to senior management and the board. This can be achieved through a
	38	dual-reporting relationship. Threats to independence must be managed at
	39	the individual auditor, engagement, functional, and organizational
	40	levels.
	41
	42	## Objective
	43
	44	Objectivity is an unbiased mental attitude that allows internal auditors
	45	to perform engagements in such a manner that they believe in their work
	46	product and that no quality compromises are made. Objectivity requires
	47	that internal auditors do not subordinate their judgment on audit
	48	matters to others. Threats to objectivity must be managed at the
	49	individual auditor, engagement, functional, and organizational levels.
	50
	51	## Assurance
	52
	53	Assurance services involve the internal auditor\'s objective assessment
	54	of evidence to provide opinions or conclusions regarding an entity,
	55	operation, function, process, system, or other subject matters. The
	56	internal auditor determines the nature and scope of an assurance
	57	engagement. Generally, three parties are participants in assurance
	58	services: (1) the person or group directly involved with the entity,
	59	operation, function, process, system, or other subject - (the process
	60	owner), (2) the person or group making the assessment - (the internal
	61	auditor), and (3) the person or group using the assessment - (the user).
	62
	63	## Consulting
	64
	65	Consulting services are advisory in nature and are generally performed
	66	at the specific request of an engagement client. The nature and scope of
	67	the consulting engagement are subject to agreement with the engagement
	68	client. Consulting services generally involve two parties: (1) the
	69	person or group offering the advice (the internal auditor), and (2) the
	70	person or group seeking and receiving the advice (the engagement
	71	client). When performing consulting services, the internal auditor
	72	should maintain objectivity and not assume management responsibility.
	73
	74	## Governance, Risk Management, & Compliance (GRC)
	75
	76	The integrated collection of capabilities that enable an organization to
	77	reliably achieve objectives, address uncertainty and act with integrity.
	78
	79	# Audit Charter & Standards
	80
	81	First, it\'s important to note that not every organization needs
	82	internal auditors. In fact, it\'s unwise for an organization to hire
	83	internal auditors unless they have regulatory requirements for auditing
	84	and have the capital to support the department. Internal audit is a cost
	85	center that can only affect revenue indirectly.
	86
	87	Once an organization determines the need for internal assurance
	88	services, they will hire a Chief Audit Executive and create the audit
	89	charter. This charter is a document, approved by the company\'s
	90	governing body, that will define internal audit\'s purpose, authority,
	91	responsibility, and position within the organization. Fortunately, the
	92	IIA has model charters available to IIA members for those developing or
	93	improving their charter.
	94
	95	Beyond the charter and organizational documents, internal auditors
	96	follow a few different standards in order to perform their job. First is
	97	the International Professional Practices Framework (IPPF) by the IIA,
	98	which is the model of standards for internal auditing. In addition,
	99	ISACA\'s Information Technology Assurance Framework (ITAF) helps guide
	100	auditors in reference to information technology (IT) compliance and
	101	assurance. Finally, additional standards such as FASB, GAAP, and
	102	industry-specific standards are used when performing internal audit
	103	work.
	104
	105	# Three Lines of Defense
	106
	107	[The IIA](https://theiia.org) released the original Three Lines of
	108	Defense model in 2013, but have released an updated version in 2020.
	109	Here is what the Three Lines of Defense model has historically looked
	110	like:
	111
	112	![2013 Three Lines of Defense
	113	Model](https://img.cleberg.net/blog/20200922-what-is-internal-audit/three_lines_model.png)
	114
	115	I won\'t go into depth about the changes made to the model in this
	116	article. Instead, let\'s take a look at the most current model.
	117
	118	![2020 Three Lines of Defense
	119	Model](https://img.cleberg.net/blog/20200922-what-is-internal-audit/updated_three_lines_model.png)
	120
	121	The updated model forgets the strict idea of areas performing their own
	122	functions or line of defense. Instead of talking about management, risk,
	123	and internal audit as 1-2-3, the new model creates a more fluid and
	124	cooperative model.
	125
	126	Looking at this model from an auditing perspective shows us that
	127	auditors will need to align, communicate, and collaborate with
	128	management, including business area managers and chief officers, as well
	129	as reporting to the governing body. The governing body will instruct
	130	internal audit functionally on their goals and track their progress
	131	periodically.
	132
	133	However, the internal audit department will report administratively to
	134	a chief officer in the company for the purposes of collaboration,
	135	direction, and assistance with the business. Note that in most
	136	situations, the governing body is the audit committee on the company\'s
	137	board of directors.
	138
	139	The result of this structure is that internal audit is an independent
	140	and objective function that can provide assurance over the topics they
	141	audit.
	142
	143	# Audit Process
	144
	145	A normal audit will generally follow the same process, regardless of the
	146	topic. However, certain special projects or abnormal business areas may
	147	call for changes to the audit process. The audit process is not set in
	148	stone, it\'s simply a set of best practices so that audits can be
	149	performed consistently.
	150
	151	![The Internal Audit
	152	Process](https://img.cleberg.net/blog/20200922-what-is-internal-audit/internal-audit-process.jpg)
	153
	154	While different organizations may tweak the process, it will generally
	155	follow this flow:
	156
	157	## 1. Risk Assessment
	158
	159	The risk assessment part of the process has historically been performed
	160	annually, but many organizations have moved to performing this process
	161	much more frequently. In fact, some organizations are moving to an agile
	162	approach that can take new risks into the risk assessment and
	163	re-prioritize risk areas on-the-go. To perform a risk assessment,
	164	leaders in internal audit will research industry risks, consult with
	165	business leaders around the company, and perform analyses on company
	166	data.
	167
	168	Once a risk assessment has been documented, the audit department has a
	169	prioritized list of risks that can be audited. This is usually in the
	170	form of auditable entities, such as business areas or departments.
	171
	172	## 2. Planning
	173
	174	During the planning phase of an audit, auditors will meet with the
	175	business area to discuss the various processes, controls, and risks
	176	applicable to the business. This helps the auditors determine the scope
	177	limits for the audit, as well as timing and subject-matter experts.
	178	Certain documents will be created in this phase that will be used to
	179	keep the audit on-track an in-scope as it goes forward.
	180
	181	## 3. Testing
	182
	183	The testing phase, also known as fieldwork or execution, is where
	184	internal auditors will take the information they\'ve discovered and test
	185	it against regulations, industry standards, company rules, best
	186	practices, as well as validating that any processes are complete and
	187	accurate. For example, an audit of HR would most likely examine
	188	processes such as employee on-boarding, employee termination, security
	189	of personally identifiable information (PII), or the IT systems involved
	190	in these processes. Company standards would be examined and compared
	191	against how the processes are actually being performed day-to-day, as
	192	well as compared against regulations such as the Equal Employment
	193	Opportunity (EEO), American with Disabilities Act, and National Labor
	194	Relations Act.
	195
	196	## 4. Reporting
	197
	198	Once all the tests have been completed, the audit will enter the
	199	reporting phase. This is when the audit team will conclude on the
	200	evidence they\'ve collected, interviews they\'ve held, and any opinions
	201	they\'ve formed on the controls in place. A summary of the audit
	202	findings, conclusions, and specific recommendations are officially
	203	communicated to the client through a draft report. Clients have the
	204	opportunity to respond to the report and submit an action plan and time
	205	frame. These responses become part of the final report which is
	206	distributed to the appropriate level of administration.
	207
	208	## 5. Follow-Up
	209
	210	After audits have been completed and management has formed action plans
	211	and time frames for audit issues, internal audit will follow up once
	212	that due date has arrived. In most cases, the follow-up will simply
	213	consist of a meeting to discuss how the action plan has been completed
	214	and to request documentation to prove it.
	215
	216	# Audit Department Structure
	217
	218	While an internal audit department is most often thought of as a team of
	219	full-time employees, there are actually many different ways in which a
	220	department can be structured. As the world becomes more digital and
	221	fast-paced, outsourcing has become a more attractive option for some
	222	organizations. Internal audit can be fully outsourced or partially
	223	outsourced, allowing for flexibility in cases where turnover is high.
	224
	225	In addition, departments can implement a rotational model. This allows
	226	for interested employees around the organization to rotate into the
	227	internal audit department for a period of time, allowing them to obtain
	228	knowledge of risks and controls and allowing the internal audit team to
	229	obtain more business area knowledge. This program is popular in very
	230	large organizations, but organizations tend to rotate lower-level audit
	231	staff instead of managers. This helps prevent any significant knowledge
	232	loss as auditors rotate out to business areas.
	233
	234	# Consulting
	235
	236	Consulting is not an easy task at any organization, especially for a
	237	department that can have negative perceptions within the organization as
	238	the \"compliance police.\" However, once an internal audit department
	239	has delivered value to organization, adding consulting to their suite of
	240	services is a smart move. In most cases, Internal Audit can insert
	241	themselves into a consulting role without affecting the process of
	242	project management at the company. This means that internal audit can
	243	add objective assurance and opinions to business areas as they develop
	244	new processes, instead of coming in periodically to audit an area and
	245	file issues that could have been fixed at the beginning.
	246
	247	# Data Science & Data Analytics
	248
	249	![Data Science Skill
	250	Set](https://img.cleberg.net/blog/20200922-what-is-internal-audit/data-science-skillset.png)
	251
	252	One major piece of the internal audit function in the modern world is
	253	data science. While the process is data science, most auditors will
	254	refer to anything in this realm as data analytics. Hot topics such as
	255	robotic process automation (RPA), machine learning (ML), and data mining
	256	have taken over the auditing world in recent years. These technologies
	257	have been immensely helpful with increasing the effectiveness and
	258	efficiency of auditors.
	259
	260	For example, mundane and repetitive tasks can be automated in order for
	261	auditors to make more room in their schedules for labor-intensive work.
	262	Further, auditors will need to adapt technologies like machine learning
	263	in order to extract more value from the data they\'re using to form
	264	conclusions.

content/blog/2020-09-22-internal-audit.org deleted −232

	@@ -1,232 +0,0 @@
1	#+title: What is Internal Audit?
2	#+date: 2020-09-22
3	#+description: Learn about the Internal Audit function and their purpose.
4	#+filetags: :audit:
5
6	#+caption: Internal Audit Overview
7	[[https://img.cleberg.net/blog/20200922-what-is-internal-audit/internal-audit-overview.jpg]]
8
9	* Definitions
10	One of the many reasons that Internal Audit needs such thorough explaining to
11	non-auditors is that Internal Audit can serve many purposes, depending on the
12	organization's size and needs. However, the Institute of Internal Auditors (IIA)
13	defines Internal Auditing as:
14
15	#+begin_quote
16	Internal auditing is an independent, objective assurance and consulting activity
17	designed to add value and improve an organization's operations. It helps an
18	organization accomplish its objectives by bringing a systematic, disciplined
19	approach to evaluate and improve the effectiveness of risk management, control,
20	and governance processes.
21
22	#+end_quote
23
24	However, this definition uses quite a few terms that aren't clear unless the
25	reader already has a solid understanding of the auditing profession. To further
26	explain, the following is a list of definitions that can help supplement
27	understanding of internal auditing.
28
29	** Independent
30	Independence is the freedom from conditions that threaten the ability of the
31	internal audit activity to carry out internal audit responsibilities in an
32	unbiased manner. To achieve the degree of independence necessary to effectively
33	carry out the responsibilities of the internal audit activity, the chief audit
34	executive has direct and unrestricted access to senior management and the board.
35	This can be achieved through a dual-reporting relationship. Threats to
36	independence must be managed at the individual auditor, engagement, functional,
37	and organizational levels.
38
39	** Objective
40	Objectivity is an unbiased mental attitude that allows internal auditors to
41	perform engagements in such a manner that they believe in their work product and
42	that no quality compromises are made. Objectivity requires that internal
43	auditors do not subordinate their judgment on audit matters to others. Threats
44	to objectivity must be managed at the individual auditor, engagement,
45	functional, and organizational levels.
46
47	** Assurance
48	Assurance services involve the internal auditor's objective assessment of
49	evidence to provide opinions or conclusions regarding an entity, operation,
50	function, process, system, or other subject matters. The internal auditor
51	determines the nature and scope of an assurance engagement. Generally, three
52	parties are participants in assurance services: (1) the person or group directly
53	involved with the entity, operation, function, process, system, or other
54	subject - (the process owner), (2) the person or group making the assessment -
55	(the internal auditor), and (3) the person or group using the assessment - (the
56	user).
57
58	** Consulting
59	Consulting services are advisory in nature and are generally performed at the
60	specific request of an engagement client. The nature and scope of the consulting
61	engagement are subject to agreement with the engagement client. Consulting
62	services generally involve two parties: (1) the person or group offering the
63	advice (the internal auditor), and (2) the person or group seeking and receiving
64	the advice (the engagement client). When performing consulting services, the
65	internal auditor should maintain objectivity and not assume management
66	responsibility.
67
68	** Governance, Risk Management, & Compliance (GRC)
69	The integrated collection of capabilities that enable an organization to
70	reliably achieve objectives, address uncertainty and act with integrity.
71
72	* Audit Charter & Standards
73	First, it's important to note that not every organization needs internal
74	auditors. In fact, it's unwise for an organization to hire internal auditors
75	unless they have regulatory requirements for auditing and have the capital to
76	support the department. Internal audit is a cost center that can only affect
77	revenue indirectly.
78
79	Once an organization determines the need for internal assurance services, they
80	will hire a Chief Audit Executive and create the audit charter. This charter is
81	a document, approved by the company's governing body, that will define internal
82	audit's purpose, authority, responsibility, and position within the
83	organization. Fortunately, the IIA has model charters available to IIA members
84	for those developing or improving their charter.
85
86	Beyond the charter and organizational documents, internal auditors follow a few
87	different standards in order to perform their job. First is the International
88	Professional Practices Framework (IPPF) by the IIA, which is the model of
89	standards for internal auditing. In addition, ISACA's Information Technology
90	Assurance Framework (ITAF) helps guide auditors in reference to information
91	technology (IT) compliance and assurance. Finally, additional standards such as
92	FASB, GAAP, and industry-specific standards are used when performing internal
93	audit work.
94
95	* Three Lines of Defense
96	[[https://theiia.org][The IIA]] released the original Three Lines of Defense model in 2013, but have
97	released an updated version in 2020. Here is what the Three Lines of Defense
98	model has historically looked like:
99
100	#+caption: 2013 Three Lines of Defense Model
101	[[https://img.cleberg.net/blog/20200922-what-is-internal-audit/three_lines_model.png]]
102
103	I won't go into depth about the changes made to the model in this article.
104	Instead, let's take a look at the most current model.
105
106	#+caption: 2020 Three Lines of Defense Model
107	[[https://img.cleberg.net/blog/20200922-what-is-internal-audit/updated_three_lines_model.png]]
108
109	The updated model forgets the strict idea of areas performing their own
110	functions or line of defense. Instead of talking about management, risk, and
111	internal audit as 1-2-3, the new model creates a more fluid and cooperative
112	model.
113
114	Looking at this model from an auditing perspective shows us that auditors will
115	need to align, communicate, and collaborate with management, including business
116	area managers and chief officers, as well as reporting to the governing body.
117	The governing body will instruct internal audit /functionally/ on their goals
118	and track their progress periodically.
119
120	However, the internal audit department will report /administratively/ to a chief
121	officer in the company for the purposes of collaboration, direction, and
122	assistance with the business. Note that in most situations, the governing body
123	is the audit committee on the company's board of directors.
124
125	The result of this structure is that internal audit is an independent and
126	objective function that can provide assurance over the topics they audit.
127
128	* Audit Process
129	A normal audit will generally follow the same process, regardless of the topic.
130	However, certain special projects or abnormal business areas may call for
131	changes to the audit process. The audit process is not set in stone, it's simply
132	a set of best practices so that audits can be performed consistently.
133
134	#+caption: The Internal Audit Process
135	[[https://img.cleberg.net/blog/20200922-what-is-internal-audit/internal-audit-process.jpg]]
136
137	While different organizations may tweak the process, it will generally follow
138	this flow:
139
140	** 1. Risk Assessment
141	The risk assessment part of the process has historically been performed
142	annually, but many organizations have moved to performing this process much more
143	frequently. In fact, some organizations are moving to an agile approach that can
144	take new risks into the risk assessment and re-prioritize risk areas on-the-go.
145	To perform a risk assessment, leaders in internal audit will research industry
146	risks, consult with business leaders around the company, and perform analyses on
147	company data.
148
149	Once a risk assessment has been documented, the audit department has a
150	prioritized list of risks that can be audited. This is usually in the form of
151	auditable entities, such as business areas or departments.
152
153	** 2. Planning
154	During the planning phase of an audit, auditors will meet with the business area
155	to discuss the various processes, controls, and risks applicable to the
156	business. This helps the auditors determine the scope limits for the audit, as
157	well as timing and subject-matter experts. Certain documents will be created in
158	this phase that will be used to keep the audit on-track an in-scope as it goes
159	forward.
160
161	** 3. Testing
162	The testing phase, also known as fieldwork or execution, is where internal
163	auditors will take the information they've discovered and test it against
164	regulations, industry standards, company rules, best practices, as well as
165	validating that any processes are complete and accurate. For example, an audit
166	of HR would most likely examine processes such as employee on-boarding, employee
167	termination, security of personally identifiable information (PII), or the IT
168	systems involved in these processes. Company standards would be examined and
169	compared against how the processes are actually being performed day-to-day, as
170	well as compared against regulations such as the Equal Employment Opportunity
171	(EEO), American with Disabilities Act, and National Labor Relations Act.
172
173	** 4. Reporting
174	Once all the tests have been completed, the audit will enter the reporting
175	phase. This is when the audit team will conclude on the evidence they've
176	collected, interviews they've held, and any opinions they've formed on the
177	controls in place. A summary of the audit findings, conclusions, and specific
178	recommendations are officially communicated to the client through a draft
179	report. Clients have the opportunity to respond to the report and submit an
180	action plan and time frame. These responses become part of the final report
181	which is distributed to the appropriate level of administration.
182
183	** 5. Follow-Up
184	After audits have been completed and management has formed action plans and time
185	frames for audit issues, internal audit will follow up once that due date has
186	arrived. In most cases, the follow-up will simply consist of a meeting to
187	discuss how the action plan has been completed and to request documentation to
188	prove it.
189
190	* Audit Department Structure
191	While an internal audit department is most often thought of as a team of
192	full-time employees, there are actually many different ways in which a
193	department can be structured. As the world becomes more digital and fast-paced,
194	outsourcing has become a more attractive option for some organizations. Internal
195	audit can be fully outsourced or partially outsourced, allowing for flexibility
196	in cases where turnover is high.
197
198	In addition, departments can implement a rotational model. This allows for
199	interested employees around the organization to rotate into the internal audit
200	department for a period of time, allowing them to obtain knowledge of risks and
201	controls and allowing the internal audit team to obtain more business area
202	knowledge. This program is popular in very large organizations, but
203	organizations tend to rotate lower-level audit staff instead of managers. This
204	helps prevent any significant knowledge loss as auditors rotate out to business
205	areas.
206
207	* Consulting
208	Consulting is not an easy task at any organization, especially for a department
209	that can have negative perceptions within the organization as the "compliance
210	police." However, once an internal audit department has delivered value to
211	organization, adding consulting to their suite of services is a smart move. In
212	most cases, Internal Audit can insert themselves into a consulting role without
213	affecting the process of project management at the company. This means that
214	internal audit can add objective assurance and opinions to business areas as
215	they develop new processes, instead of coming in periodically to audit an area
216	and file issues that could have been fixed at the beginning.
217
218	* Data Science & Data Analytics
219	#+caption: Data Science Skill Set
220	[[https://img.cleberg.net/blog/20200922-what-is-internal-audit/data-science-skillset.png]]
221
222	One major piece of the internal audit function in the modern world is data
223	science. While the process is data science, most auditors will refer to anything
224	in this realm as data analytics. Hot topics such as robotic process automation
225	(RPA), machine learning (ML), and data mining have taken over the auditing world
226	in recent years. These technologies have been immensely helpful with increasing
227	the effectiveness and efficiency of auditors.
228
229	For example, mundane and repetitive tasks can be automated in order for auditors
230	to make more room in their schedules for labor-intensive work. Further, auditors
231	will need to adapt technologies like machine learning in order to extract more
232	value from the data they're using to form conclusions.

content/blog/2020-09-25-happiness-map.org → content/blog/2020-09-25-happiness-map.md renamed +97 −83

	@@ -1,86 +1,95 @@
1	#+title: Data Visualization: World Choropleth Map of Happiness	1	+++
2	#+date: 2020-09-25	2	date = 2020-09-25
3	#+description: Exploring and visualizing data with Python.	3	title = "Data Visualization: World Choropleth Map of Happiness"
4	#+filetags: :data:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Background Information	8	# Background Information
7	The dataset (obtained from [[https://www.kaggle.com/unsdsn/world-happiness][Kaggle]]) used in this article contains a list of	9
8	countries around the world, their happiness rankings and scores, as well as	10	The dataset (obtained from
9	other national scoring measures.	11	[Kaggle](https://www.kaggle.com/unsdsn/world-happiness)) used in this
		12	article contains a list of countries around the world, their happiness
		13	rankings and scores, as well as other national scoring measures.
10		14
11	Fields include:	15	Fields include:
12		16
13	- Overall rank	17	- Overall rank
14	- Country or region	18	- Country or region
15	- GDP per capita	19	- GDP per capita
16	- Social support	20	- Social support
17	- Healthy life expectancy	21	- Healthy life expectancy
18	- Freedom to make life choices	22	- Freedom to make life choices
19	- Generosity	23	- Generosity
20	- Perceptions of corruption	24	- Perceptions of corruption
		25
		26	There are 156 records. Since there are \~195 countries in the world, we
		27	can see that around 40 countries will be missing from this dataset.
21		28
22	There are 156 records. Since there are ~195 countries in the world, we can see	29	# Install Packages
23	that around 40 countries will be missing from this dataset.
24		30
25	* Install Packages	31	As always, run the `install` command for all packages needed
26	As always, run the =install= command for all packages needed to perform	32	to perform analysis.
27	analysis.
28		33
29	#+begin_src python	34	``` python
30	!pip install folium geopandas matplotlib numpy pandas	35	!pip install folium geopandas matplotlib numpy pandas
31	#+end_src	36	```
32		37
33	* Import the Data	38	# Import the Data
34	We only need a couple packages to create a choropleth map. We will use [[https://python-visualization.github.io/folium/][Folium]],
35	which provides map visualizations in Python. We will also use geopandas and
36	pandas to wrangle our data before we put it on a map.
37		39
38	#+begin_src python	40	We only need a couple packages to create a choropleth map. We will use
		41	[Folium](https://python-visualization.github.io/folium/), which provides
		42	map visualizations in Python. We will also use geopandas and pandas to
		43	wrangle our data before we put it on a map.
		44
		45	``` python
39	# Import the necessary Python packages	46	# Import the necessary Python packages
40	import folium	47	import folium
41	import geopandas as gpd	48	import geopandas as gpd
42	import pandas as pd	49	import pandas as pd
43	#+end_src	50	```
44		51
45	To get anything to show up on a map, we need a file that will specify the	52	To get anything to show up on a map, we need a file that will specify
46	boundaries of each country. Luckily, GeoJSON files exist (for free!) on the	53	the boundaries of each country. Luckily, GeoJSON files exist (for free!)
47	internet. To get the boundaries of every country in the world, we will use the	54	on the internet. To get the boundaries of every country in the world, we
48	GeoJSON link shown below.	55	will use the GeoJSON link shown below.
49		56
50	GeoPandas will take this data and load it into a dataframe so that we can easily	57	GeoPandas will take this data and load it into a dataframe so that we
51	match it to the data we're trying to analyze. Let's look at the GeoJSON	58	can easily match it to the data we\'re trying to analyze. Let\'s look at
52	dataframe:	59	the GeoJSON dataframe:
53		60
54	#+begin_src python	61	``` python
55	# Load the GeoJSON data with geopandas	62	# Load the GeoJSON data with geopandas
56	geo_data = gpd.read_file('https://raw.githubusercontent.com/datasets/geo-countries/master/data/countries.geojson')	63	geo_data = gpd.read_file('https://raw.githubusercontent.com/datasets/geo-countries/master/data/countries.geojson')
57	geo_data.head()	64	geo_data.head()
58	#+end_src	65	```
59		66
60	#+caption: GeoJSON Dataframe	67	![GeoJSON
61	[[https://img.cleberg.net/blog/20200925-world-choropleth-map/geojson_df.png]]	68	Dataframe](https://img.cleberg.net/blog/20200925-world-choropleth-map/geojson_df.png)
62		69
63	Next, let's load the data from the Kaggle dataset. I've downloaded this file, so	70	Next, let\'s load the data from the Kaggle dataset. I\'ve downloaded
64	update the file path if you have it somewhere else. After loading, let's take a	71	this file, so update the file path if you have it somewhere else. After
65	look at this dataframe:	72	loading, let\'s take a look at this dataframe:
66		73
67	#+begin_src python	74	``` python
68	# Load the world happiness data with pandas	75	# Load the world happiness data with pandas
69	happy_data = pd.read_csv(r'~/Downloads/world_happiness_data_2019.csv')	76	happy_data = pd.read_csv(r'~/Downloads/world_happiness_data_2019.csv')
70	happy_data.head()	77	happy_data.head()
71	#+end_src	78	```
		79
		80	![Happiness
		81	Dataframe](https://img.cleberg.net/blog/20200925-world-choropleth-map/happiness_df.png)
72		82
73	#+caption: Happiness Dataframe	83	# Clean the Data
74	[[https://img.cleberg.net/blog/20200925-world-choropleth-map/happiness_df.png]]
75		84
76	* Clean the Data	85	Some countries need to be renamed, or they will be lost when you merge
77	Some countries need to be renamed, or they will be lost when you merge the	86	the happiness and GeoJSON dataframes. This is something I discovered
78	happiness and GeoJSON dataframes. This is something I discovered when the map	87	when the map below showed empty countries. I searched both data frames
79	below showed empty countries. I searched both data frames for the missing	88	for the missing countries to see the naming differences. Any countries
80	countries to see the naming differences. Any countries that do not have records	89	that do not have records in the `happy_data` df will not show
81	in the =happy_data= df will not show up on the map.	90	up on the map.
82		91
83	#+begin_src python	92	``` python
84	# Rename some countries to match our GeoJSON data	93	# Rename some countries to match our GeoJSON data
85		94
86	# Rename USA	95	# Rename USA
	@@ -98,35 +107,38 @@ happy_data.at[republic_congo_index, 'Country or region'] = 'Republic of Congo'
98	# Rename the DRC	107	# Rename the DRC
99	democratic_congo_index = happy_data.index[happy_data['Country or region'] == 'Congo (Kinshasa)']	108	democratic_congo_index = happy_data.index[happy_data['Country or region'] == 'Congo (Kinshasa)']
100	happy_data.at[democratic_congo_index, 'Country or region'] = 'Democratic Republic of the Congo'	109	happy_data.at[democratic_congo_index, 'Country or region'] = 'Democratic Republic of the Congo'
101	#+end_src	110	```
		111
		112	# Merge the Data
102		113
103	* Merge the Data
104	Now that we have clean data, we need to merge the GeoJSON data with the	114	Now that we have clean data, we need to merge the GeoJSON data with the
105	happiness data. Since we've stored them both in dataframes, we just need to call	115	happiness data. Since we\'ve stored them both in dataframes, we just
106	the =.merge()= function.	116	need to call the `.merge()` function.
107		117
108	We will also rename a couple columns, just so that they're a little easier to	118	We will also rename a couple columns, just so that they\'re a little
109	use when we create the map.	119	easier to use when we create the map.
110		120
111	#+begin_src python	121	``` python
112	# Merge the two previous dataframes into a single geopandas dataframe	122	# Merge the two previous dataframes into a single geopandas dataframe
113	merged_df = geo_data.merge(happy_data,left_on='ADMIN', right_on='Country or region')	123	merged_df = geo_data.merge(happy_data,left_on='ADMIN', right_on='Country or region')
114		124
115	# Rename columns for ease of use	125	# Rename columns for ease of use
116	merged_df = merged_df.rename(columns = {'ADMIN':'GeoJSON_Country'})	126	merged_df = merged_df.rename(columns = {'ADMIN':'GeoJSON_Country'})
117	merged_df = merged_df.rename(columns = {'Country or region':'Country'})	127	merged_df = merged_df.rename(columns = {'Country or region':'Country'})
118	#+end_src	128	```
		129
		130	![Merged
		131	Dataframe](https://img.cleberg.net/blog/20200925-world-choropleth-map/merged_df.png)
119		132
120	#+caption: Merged Dataframe	133	# Create the Map
121	[[https://img.cleberg.net/blog/20200925-world-choropleth-map/merged_df.png]]
122		134
123	* Create the Map
124	The data is finally ready to be added to a map. The code below shows the	135	The data is finally ready to be added to a map. The code below shows the
125	simplest way to find the center of the map and create a Folium map object. The	136	simplest way to find the center of the map and create a Folium map
126	important part is to remember to reference the merged dataframe for our GeoJSON	137	object. The important part is to remember to reference the merged
127	data and value data. The columns specify which geo data and value data to use.	138	dataframe for our GeoJSON data and value data. The columns specify which
		139	geo data and value data to use.
128		140
129	#+begin_src python	141	``` python
130	# Assign centroids to map	142	# Assign centroids to map
131	x_map = merged_df.centroid.x.mean()	143	x_map = merged_df.centroid.x.mean()
132	y_map = merged_df.centroid.y.mean()	144	y_map = merged_df.centroid.y.mean()
	@@ -150,19 +162,21 @@ folium.Choropleth(
150	smooth_factor=0,	162	smooth_factor=0,
151	highlight=True	163	highlight=True
152	).add_to(world_map)	164	).add_to(world_map)
153	#+end_src	165	```
		166
		167	Let\'s look at the resulting map.
154		168
155	Let's look at the resulting map.	169	![Choropleth
		170	Map](https://img.cleberg.net/blog/20200925-world-choropleth-map/map.png)
156		171
157	#+caption: Choropleth Map	172	# Create a Tooltip on Hover
158	[[https://img.cleberg.net/blog/20200925-world-choropleth-map/map.png]]
159		173
160	* Create a Tooltip on Hover	174	Now that we have a map set up, we could stop. However, I want to add a
161	Now that we have a map set up, we could stop. However, I want to add a tooltip	175	tooltip so that I can see more information about each country. The
162	so that I can see more information about each country. The =tooltip_data= code	176	`tooltip_data` code below will show a popup on hover with all
163	below will show a popup on hover with all the data fields shown.	177	the data fields shown.
164		178
165	#+begin_src python	179	``` python
166	# Adding labels to map	180	# Adding labels to map
167	style_function = lambda x: {'fillColor': '#ffffff',	181	style_function = lambda x: {'fillColor': '#ffffff',
168	'color':'#000000',	182	'color':'#000000',
	@@ -203,10 +217,10 @@ folium.LayerControl().add_to(world_map)
203		217
204	# Display the map	218	# Display the map
205	world_map	219	world_map
206	#+end_src	220	```
207		221
208	The final image below will show you what the tooltip looks like whenever you	222	The final image below will show you what the tooltip looks like whenever
209	hover over a country.	223	you hover over a country.
210		224
211	#+caption: Choropleth Map Tooltip	225	![Choropleth Map
212	[[https://img.cleberg.net/blog/20200925-world-choropleth-map/tooltip_map.png]]	226	Tooltip](https://img.cleberg.net/blog/20200925-world-choropleth-map/tooltip_map.png)

content/blog/2020-10-12-mediocrity.org → content/blog/2020-10-12-mediocrity.md renamed +56 −57

	@@ -1,10 +1,13 @@
1	#+title: On the Pursuit of Mediocrity	1	+++
2	#+date: 2020-10-12	2	date = 2020-10-12
3	#+description: Musings on mediocrity.	3	title = "On the Pursuit of Mediocrity"
4	#+filetags: :personal:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Perfect is the Enemy of Good	8	# Perfect is the Enemy of Good
7	As the saying goes, "the best is the enemy of the good." As we strive	9
		10	As the saying goes, \"the best is the enemy of the good.\" As we strive
8	for perfection, we often fail to realize the implications of such an	11	for perfection, we often fail to realize the implications of such an
9	undertaking. Attempting to reach perfection is often unrealistic. Even	12	undertaking. Attempting to reach perfection is often unrealistic. Even
10	worse, it can get in the way of achieving a good outcome. In certain	13	worse, it can get in the way of achieving a good outcome. In certain
	@@ -13,37 +16,36 @@ burned the bridges that would have allowed us to reach a lesser yet
13	still superb solution.	16	still superb solution.
14		17
15	Philosophers throughout history have inspected this plight from many	18	Philosophers throughout history have inspected this plight from many
16	viewpoints. Greek mythology speaks of the	19	viewpoints. Greek mythology speaks of the [golden
17	[[https://en.wikipedia.org/wiki/Golden_mean_(philosophy)][golden mean]],	20	mean](https://en.wikipedia.org/wiki/Golden_mean_(philosophy)), which
18	which uses the story of Icarus to illustrate that sometimes "the middle	21	uses the story of Icarus to illustrate that sometimes \"the middle
19	course" is the best solution. In this story, Daedalus, a famous artist	22	course\" is the best solution. In this story, Daedalus, a famous artist
20	of his time, built feathered wings for himself and his son so that they	23	of his time, built feathered wings for himself and his son so that they
21	might escape the clutches of King Minos. Daedalus warns his beloved son	24	might escape the clutches of King Minos. Daedalus warns his beloved son
22	whom he loved so much to "fly the middle course", between the sea spray	25	whom he loved so much to \"fly the middle course\", between the sea
23	and the sun's heat. Icarus did not heed his father; he flew up and up	26	spray and the sun\'s heat. Icarus did not heed his father; he flew up
24	until the sun melted the wax off his wings. For not heeding the middle	27	and up until the sun melted the wax off his wings. For not heeding the
25	course, he fell into the sea and drowned.	28	middle course, he fell into the sea and drowned.
26		29
27	More recently, management scholars have explored the	30	More recently, management scholars have explored the [Pareto
28	[[https://en.wikipedia.org/wiki/Pareto_principle][Pareto principle]] and	31	principle](https://en.wikipedia.org/wiki/Pareto_principle) and found
29	found that as we increase the frequency of something, or strive to	32	that as we increase the frequency of something, or strive to perform
30	perform actions to achieve some form of perfection, we run into	33	actions to achieve some form of perfection, we run into [diminishing
31	[[https://en.wikipedia.org/wiki/Diminishing_returns][diminishing	34	returns](https://en.wikipedia.org/wiki/Diminishing_returns).
32	returns]].	35
33		36	Even further, Harold Demsetz is noted as coining the term [the Nirvana
34	Even further, Harold Demsetz is noted as coining the term	37	fallacy](https://en.wikipedia.org/wiki/Nirvana_fallacy) in 1969, which
35	[[https://en.wikipedia.org/wiki/Nirvana_fallacy][the Nirvana fallacy]]	38	shows the fallacy of comparing actual things with unrealistic, idealized
36	in 1969, which shows the fallacy of comparing actual things with	39	alternatives. This is another trap that we may fall into, where we are
37	unrealistic, idealized alternatives. This is another trap that we may	40	constantly thinking of the ultimate solutions to problems, when
38	fall into, where we are constantly thinking of the ultimate solutions to	41	something more realistic needs to be considered.
39	problems, when something more realistic needs to be considered.	42
40		43	Over and over throughout history, we\'ve found that perfection is often
41	Over and over throughout history, we've found that perfection is often
42	unrealistic and unachievable. However, we push ourselves and our peers	44	unrealistic and unachievable. However, we push ourselves and our peers
43	to "give 100%" or "go the extra mile," while it may be that the better	45	to \"give 100%\" or \"go the extra mile,\" while it may be that the
44	course is to give a valuable level of effort while considering the	46	better course is to give a valuable level of effort while considering
45	effects of further effort on the outcome. Working harder does not always	47	the effects of further effort on the outcome. Working harder does not
46	help us achieve loftier goals.	48	always help us achieve loftier goals.
47		49
48	This has presented itself to me most recently during my time studying at	50	This has presented itself to me most recently during my time studying at
49	my university. I was anxious and feeling the stresses of my courses,	51	my university. I was anxious and feeling the stresses of my courses,
	@@ -52,44 +54,41 @@ how well I was doing at school and my level of effort at work. One day,
52	I happened to be talking to my father when he said something simple that	54	I happened to be talking to my father when he said something simple that
53	hit home:	55	hit home:
54		56
55	#+begin_quote	57	> All you can do is show up and do your best. Worrying about the
56	All you can do is show up and do your best. Worrying about the outcomes	58	> outcomes won\'t affect the outcome itself.
57	won't affect the outcome itself.
58	#+end_quote
59		59
60	The thought was extremely straightforward and uncomplicated, yet it was	60	The thought was extremely straightforward and uncomplicated, yet it was
61	something that I had lost sight of during my stress-filled years at	61	something that I had lost sight of during my stress-filled years at
62	school. Ever since then, I've found myself pausing and remembering that	62	school. Ever since then, I\'ve found myself pausing and remembering that
63	quote every time I get anxious or stressed. It helps to stop and think	63	quote every time I get anxious or stressed. It helps to stop and think
64	"Can I do anything to affect the outcome, or am I simply worrying over	64	\"Can I do anything to affect the outcome, or am I simply worrying over
65	something I can't change?"	65	something I can\'t change?\"
		66
		67	# When Mediocrity Isn\'t Enough
66		68
67	* When Mediocrity Isn't Enough
68	One problem with the philosophies presented in this post is that they	69	One problem with the philosophies presented in this post is that they
69	are implemented far too often in situations where mediocrity simply	70	are implemented far too often in situations where mediocrity simply
70	isn't adequate. For example, let's take a look at digital user data,	71	isn\'t adequate. For example, let\'s take a look at digital user data,
71	specifically personally-identifiable information (PII). As a	72	specifically personally-identifiable information (PII). As a
72	cybersecurity auditor in the United States, I have found that most	73	cybersecurity auditor in the United States, I have found that most
73	companies are concerned more with compliance than any actual safeguards	74	companies are concerned more with compliance than any actual safeguards
74	over the privacy or protection of user data. Other than companies who	75	over the privacy or protection of user data. Other than companies who
75	have built their reputation on privacy and security, most companies will	76	have built their reputation on privacy and security, most companies will
76	use [[https://en.wikipedia.org/wiki/Satisficing][satisficing]] as their	77	use [satisficing](https://en.wikipedia.org/wiki/Satisficing) as their
77	primary decision-making strategy around user data.	78	primary decision-making strategy around user data.
78		79
79	#+begin_quote	80	> Satisficing is a decision-making strategy or cognitive heuristic that
80	Satisficing is a decision-making strategy or cognitive heuristic that	81	> entails searching through the available alternatives until an
81	entails searching through the available alternatives until an	82	> acceptability threshold is met.
82	acceptability threshold is met.
83	#+end_quote
84		83
85	This means that each decision will be met with certain possible	84	This means that each decision will be met with certain possible
86	solutions until one of the solutions meets their minimum acceptable	85	solutions until one of the solutions meets their minimum acceptable
87	standards. For companies that deal with user data, the	86	standards. For companies that deal with user data, the
88	minimum-acceptable standards come from three areas:	87	minimum-acceptable standards come from three areas:
89		88
90	1. Laws and regulations	89	1. Laws and regulations
91	2. Competitive pressure	90	2. Competitive pressure
92	3. Risk of monetary or reputation loss	91	3. Risk of monetary or reputation loss
93		92
94	Working with project management or auditing, the primary concern here is	93	Working with project management or auditing, the primary concern here is
95	the risk of legal ramifications. Since the primary risk comes from laws	94	the risk of legal ramifications. Since the primary risk comes from laws
	@@ -109,14 +108,14 @@ satisficing, which states that they have met the minimum acceptable
109	standards and can now move on to other decisions. Modern business	108	standards and can now move on to other decisions. Modern business
110	culture in the United States dictates that profits are the golden	109	culture in the United States dictates that profits are the golden
111	measure of how well a company or manager is performing, so we often	110	measure of how well a company or manager is performing, so we often
112	don't think about our responsibilities beyond these basic standards.	111	don\'t think about our responsibilities beyond these basic standards.
113		112
114	Not all situations demand excellence, but I believe that applying any	113	Not all situations demand excellence, but I believe that applying any
115	philosophy as a broad stroke across one's life can be a mistake. We must	114	philosophy as a broad stroke across one\'s life can be a mistake. We
116	be able to think critically about what we are doing as we do it and ask	115	must be able to think critically about what we are doing as we do it and
117	ourselves a few questions. Have I done everything I can in this	116	ask ourselves a few questions. Have I done everything I can in this
118	situation? Is mediocrity an acceptable outcome, or should we strive for	117	situation? Is mediocrity an acceptable outcome, or should we strive for
119	perfection, even if we can't attain it?	118	perfection, even if we can\'t attain it?
120		119
121	Taking a few moments to think critically throughout our day, as we make	120	Taking a few moments to think critically throughout our day, as we make
122	decisions, can have a tremendous effect on the outcomes we create.	121	decisions, can have a tremendous effect on the outcomes we create.

content/blog/2020-12-27-website-redesign.org → content/blog/2020-12-27-website-redesign.md renamed +51 −43

	@@ -1,85 +1,93 @@
1	#+title: Redesigning My Website: The 5 KB Result	1	+++
2	#+date: 2020-12-27	2	date = 2020-12-27
3	#+description: A retrospective on my recent website redesign.	3	title = "Redesigning My Website: The 5 KB Result"
4	#+filetags: :sysadmin:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* A Brief History	8	# A Brief History
7	As a form of continuous learning and entertainment, I've been running a	9
		10	As a form of continuous learning and entertainment, I\'ve been running a
8	handful of websites since 2016 when I took my first programming courses	11	handful of websites since 2016 when I took my first programming courses
9	in college. I maintain one main website, the place I consider the	12	in college. I maintain one main website, the place I consider the
10	official website to represent me. Under this site, I have a handful of	13	official website to represent me. Under this site, I have a handful of
11	subdirectories and subdomains.	14	subdirectories and subdomains.
12		15
13	One of the parts I've enjoyed the most about web development is the	16	One of the parts I\'ve enjoyed the most about web development is the
14	aspect of designing an identity for a web page and working to find	17	aspect of designing an identity for a web page and working to find
15	exciting ways to display the site's content. Inevitably, this means I've	18	exciting ways to display the site\'s content. Inevitably, this means
16	changed the designs for my websites more times than I could possibly	19	I\'ve changed the designs for my websites more times than I could
17	count. Since I don't really host anything on my main webpage that's	20	possibly count. Since I don\'t really host anything on my main webpage
18	vital, it allows me the freedom to change things as inspiration strikes.	21	that\'s vital, it allows me the freedom to change things as inspiration
		22	strikes.
19		23
20	Historically, I've relied on core utilities for spacing, components, and	24	Historically, I\'ve relied on core utilities for spacing, components,
21	layouts from [[https://getbootstrap.com][Bootstrap]] and added custom	25	and layouts from [Bootstrap](https://getbootstrap.com) and added custom
22	CSS for fonts, accents, colors, and other items. I also tend to create	26	CSS for fonts, accents, colors, and other items. I also tend to create
23	sites with no border radius on items, visible borders, and content that	27	sites with no border radius on items, visible borders, and content that
24	takes up the entire screen (using whitespace inside components instead	28	takes up the entire screen (using whitespace inside components instead
25	of whitespace around my components).	29	of whitespace around my components).
26		30
27	* The Redesign Process	31	# The Redesign Process
		32
28	About a week ago, I found myself wishing for a new design yet again. The	33	About a week ago, I found myself wishing for a new design yet again. The
29	prior design was largely inspired by IBM's	34	prior design was largely inspired by IBM\'s [Carbon Design
30	[[https://www.carbondesignsystem.com][Carbon Design System]] and relied	35	System](https://www.carbondesignsystem.com) and relied on jQuery,
31	on jQuery, Bootstrap, along with some compressed	36	Bootstrap, along with some compressed
32	[[https://en.wikipedia.org/wiki/WebP][.webp]] images.	37	[.webp](https://en.wikipedia.org/wiki/WebP) images.
33		38
34	To anyone who knows my preferences toward web design - and even in my	39	To anyone who knows my preferences toward web design - and even in my
35	personal life - it should be no surprise that I immediately started	40	personal life - it should be no surprise that I immediately started
36	looking for inspiration on minimalism. While there are some decent	41	looking for inspiration on minimalism. While there are some decent
37	minimalistic designs on sites like	42	minimalistic designs on sites like
38	[[https://dribbble.com/search/shots/popular/web-design?q=minimalism][Dribbble]],	43	[Dribbble](https://dribbble.com/search/shots/popular/web-design?q=minimalism),
39	people seem to mostly discuss [[https://brutalist-web.design][brutalist	44	people seem to mostly discuss [brutalist web
40	web design]] when you ask about minimalism. While brutalist web design	45	design](https://brutalist-web.design) when you ask about minimalism.
41	doesn't have to be minimal, it often is.	46	While brutalist web design doesn\'t have to be minimal, it often is.
42		47
43	I suppose, in a way, I did create a brutalist website since my HTML is	48	I suppose, in a way, I did create a brutalist website since my HTML is
44	semantic and accessible, hyperlinks are colored and underlined, and all	49	semantic and accessible, hyperlinks are colored and underlined, and all
45	native browser functions like scrolling and the back button work as	50	native browser functions like scrolling and the back button work as
46	expected. However, I didn't think about brutalism while designing these	51	expected. However, I didn\'t think about brutalism while designing these
47	sites.	52	sites.
48		53
49	The new design followed a simple design process. I walked through the	54	The new design followed a simple design process. I walked through the
50	screens on my blog and asked myself: "Is this element necessary for a	55	screens on my blog and asked myself: \"Is this element necessary for a
51	user?" This allowed me to first start by removing all javascript, which	56	user?\" This allowed me to first start by removing all javascript, which
52	had the sole purpose of allowing users to open a collapsed navbar on	57	had the sole purpose of allowing users to open a collapsed navbar on
53	mobile. Replacing the collapsible navbar allowed me to remove both	58	mobile. Replacing the collapsible navbar allowed me to remove both
54	jQuery and Bootstrap's javascript.	59	jQuery and Bootstrap\'s javascript.
55		60
56	Next, I removed things like author names (since I'm literally the only	61	Next, I removed things like author names (since I\'m literally the only
57	person who will ever write on this site), multiple ways to click on a	62	person who will ever write on this site), multiple ways to click on a
58	blog post card, blog post descriptions, and the scroll-to-top button. It	63	blog post card, blog post descriptions, and the scroll-to-top button. It
59	also helped to move all categories to a single page, rather than have	64	also helped to move all categories to a single page, rather than have
60	each category on its own page.	65	each category on its own page.
61		66
62	The final big piece to finish the	67	The final big piece to finish the
63	"[[https://en.wikipedia.org/wiki/Marie_Kondo#KonMari_method][KonMari]]"-like	68	\"[KonMari](https://en.wikipedia.org/wiki/Marie_Kondo#KonMari_method)\"-like
64	part of my process was to remove Bootstrap CSS in its entirety. However,	69	part of my process was to remove Bootstrap CSS in its entirety. However,
65	this meant pulling out a few very useful classes, such as =.img-fluid=	70	this meant pulling out a few very useful classes, such as
66	and the default font stacks to keep in my custom CSS.	71	`.img-fluid` and the default font stacks to keep in my custom
		72	CSS.
67		73
68	After removing all the unnecessary pieces, I was finally able to	74	After removing all the unnecessary pieces, I was finally able to
69	reorganize my content and add a very small amount of custom CSS to make	75	reorganize my content and add a very small amount of custom CSS to make
70	everything pretty. This took a brief amount of time, effectively just	76	everything pretty. This took a brief amount of time, effectively just
71	consisting of me converting =<div>= tags into things like =<ul>= lists	77	consisting of me converting `<div>` tags into things like
72	and choosing accent colors.	78	`<ul>` lists and choosing accent colors.
		79
		80	# The Results
		81
		82	## Reflection
73		83
74	* The Results
75	** Reflection
76	So, what did all of this reorganizing do to my webpages? Well, first, my	84	So, what did all of this reorganizing do to my webpages? Well, first, my
77	websites are now ridiculously fast. Since the prior designs were also	85	websites are now ridiculously fast. Since the prior designs were
78	minimal and didn't have many images, they measured up in Firefox's	86	also minimal and didn\'t have many images, they measured up in
79	Network Monitor around 300 KB - 600KB. After making the changes, my main	87	Firefox\'s Network Monitor around 300 KB - 600KB. After making the
80	site is at 5 KB transferred (22 KB total), and my blog is at 6.5 KB	88	changes, my main site is at 5 KB transferred (22 KB total), and my blog
81	transferred (13 KB total). *That means the redesigned pages are less	89	is at 6.5 KB transferred (13 KB total). **That means the redesigned
82	than 2% the size of the old designs.*	90	pages are less than 2% the size of the old designs.**
83		91
84	Google Lighthouse ranks the new webpage as 100 in performance,	92	Google Lighthouse ranks the new webpage as 100 in performance,
85	accessibility, and best practices, with SEO at 92 since they think tap	93	accessibility, and best practices, with SEO at 92 since they think tap
	@@ -91,6 +99,6 @@ of blocking time, due to the fact that the CSS for my blog is within a
91	separate CSS file, and the CSS for my main website is simply embedded in	99	separate CSS file, and the CSS for my main website is simply embedded in
92	the HTML file.	100	the HTML file.
93		101
94	Now that everything is complete, I can confidently say I'm happy with	102	Now that everything is complete, I can confidently say I\'m happy with
95	the result and proud to look at the fastest set of websites I've created	103	the result and proud to look at the fastest set of websites I\'ve
96	so far.	104	created so far.

content/blog/2020-12-28-neon-drive.md added +95

@@ -0,0 +1,95 @@
	1	+++
	2	date = 2020-12-28
	3	title = "Neon Drive: A Nostalgic 80s Arcade Racing Game"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Game Description
	9
	10	[Neon Drive](https://store.steampowered.com/app/433910/Neon_Drive/)
	11	presents itself as a simple arcade-style game inspired by the arcade
	12	race games of the 1980s, yet it has managed to take up hours of my life
	13	without much effort. The game description, directly from the Steam page,
	14	is intriguing enough to entice anyone who\'s been looking for a good
	15	arcade racing game:
	16
	17	> Neon Drive is a slick retro-futuristic arcade game that will make your
	18	> brain melt. You\'ve been warned. From beautiful cityscapes and ocean
	19	> roads to exploding enemy spaceships, Neon Drive has it all.
	20
	21	# Gameplay
	22
	23	The game holds true to the
	24	[retro-futurism](https://en.wikipedia.org/wiki/Retrofuturism) style,
	25	including chrome female robots, pixelated arcade machines, and
	26	[outrun](https://teddit.net/r/outrun/) aesthetics.
	27
	28	Each level of the game is shown as a separate arcade machine. Each
	29	arcade machine lets you play on Normal, Hard, Insane, Practice, and Free
	30	Run. To beat each arcade, you must reach the end of the level without
	31	crashing your car into the various obstacles on the course. Basic levels
	32	let you move left or right to avoid blocks in the road. Later levels put
	33	you through other tests, such as dodging traffic or blasting asteroids.
	34
	35	The game uses synthwave music to keep you on track to make the correct
	36	moves by timing the beats of the songs to the correct moves on the
	37	screen. It reminds me of the early Guitar Hero games, as well as mobile
	38	apps like VOEZ - repetition and staying on-beat is the only way to win.
	39
	40	# In-Game Screenshots
	41
	42	Taking a look at the main menu, you can see that Neon Drive plays into
	43	every stereotype you can think of around retro-futuristic, synthwave
	44	arcades (in a good way).
	45
	46	![Neon Drive
	47	Menu](https://img.cleberg.net/blog/20201228-neon-drive/neon_drive_menu.png)
	48
	49	Once you get into the first level, we see that the choice of car fits
	50	right in with the stereotypical cars of the 80s, like the
	51	[DeLorean](https://en.wikipedia.org/wiki/DMC_DeLorean) or the [Ferrari
	52	F40](https://en.wikipedia.org/wiki/Ferrari_F40). Each new level comes
	53	with new color schemes and cars, so you should never get tired of the
	54	aesthetic.
	55
	56	![Neon Drive
	57	Race](https://img.cleberg.net/blog/20201228-neon-drive/neon_drive_race.png)
	58
	59	Personally, I love the orange and blue colors used in level 2:
	60
	61	![Level
	62	2](https://img.cleberg.net/blog/20201228-neon-drive/neon_drive_level_2.png)
	63
	64	If you\'re the competitive type and getting 100% on all arcade machines
	65	isn\'t enough, there are leaderboards for the regular part of the game,
	66	and the endurance game mode.
	67
	68	![Leaderboard](https://img.cleberg.net/blog/20201228-neon-drive/neon_drive_leaderboard.png)
	69
	70	# Other Suggestions
	71
	72	Neon Drive sits nicely within the well-founded cult genre of Outrun.
	73	Other games that I\'ve enjoyed in this same spectrum are:
	74
	75	- [Far Cry 3: Blood
	76	Dragon](https://store.steampowered.com/app/233270/Far_Cry_3__Blood_Dragon/)
	77	- [Retrowave](https://store.steampowered.com/app/1239690/Retrowave/)
	78	- [Slipstream](https://store.steampowered.com/app/732810/Slipstream/)
	79
	80	Although these games aren\'t necessarily in the same genre, they do have
	81	aspects that place them close enough to interest gamers that enjoyed
	82	Neon Drive:
	83
	84	- [Black Ice](https://store.steampowered.com/app/311800/Black_Ice/)
	85	- [Cloudpunk](https://store.steampowered.com/app/746850/Cloudpunk/)
	86	- [Need for Speed:
	87	Heat](https://store.steampowered.com/app/1222680/Need_for_Speed_Heat/)
	88	- [VirtuaVerse](https://store.steampowered.com/app/1019310/VirtuaVerse/)
	89
	90	Of course, if all you really care about is the arcade aspect of these
	91	games, you can check out the [Atari
	92	Vault](https://store.steampowered.com/app/400020/Atari_Vault/) or any of
	93	the other classic games sold on Steam by companies like Namco, Atari.
	94	For something like Nintendo, you\'d have to settle for buying used
	95	classic consoles or delve into the world of emulation.

content/blog/2020-12-28-neon-drive.org deleted −83

	@@ -1,83 +0,0 @@
1	#+title: Neon Drive: A Nostalgic 80s Arcade Racing Game
2	#+date: 2020-12-28
3	#+description: A video game review for Neon Drive.
4	#+filetags: :gaming:
5
6	* Game Description
7	[[https://store.steampowered.com/app/433910/Neon_Drive/][Neon Drive]] presents itself as a simple arcade-style game inspired by the arcade
8	race games of the 1980s, yet it has managed to take up hours of my life without
9	much effort. The game description, directly from the Steam page, is intriguing
10	enough to entice anyone who's been looking for a good arcade racing game:
11
12	#+begin_quote
13	Neon Drive is a slick retro-futuristic arcade game that will make your brain
14	melt. You've been warned. From beautiful cityscapes and ocean roads to exploding
15	enemy spaceships, Neon Drive has it all.
16	#+end_quote
17
18	* Gameplay
19	The game holds true to the [[https://en.wikipedia.org/wiki/Retrofuturism][retro-futurism]] style, including chrome female robots,
20	pixelated arcade machines, and [[https://teddit.net/r/outrun/][outrun]] aesthetics.
21
22	Each level of the game is shown as a separate arcade machine. Each arcade
23	machine lets you play on Normal, Hard, Insane, Practice, and Free Run. To beat
24	each arcade, you must reach the end of the level without crashing your car into
25	the various obstacles on the course. Basic levels let you move left or right to
26	avoid blocks in the road. Later levels put you through other tests, such as
27	dodging traffic or blasting asteroids.
28
29	The game uses synthwave music to keep you on track to make the correct moves by
30	timing the beats of the songs to the correct moves on the screen. It reminds me
31	of the early Guitar Hero games, as well as mobile apps like VOEZ - repetition
32	and staying on-beat is the only way to win.
33
34	* In-Game Screenshots
35	Taking a look at the main menu, you can see that Neon Drive plays into every
36	stereotype you can think of around retro-futuristic, synthwave arcades (in a
37	good way).
38
39	#+caption: Neon Drive Menu
40	[[https://img.cleberg.net/blog/20201228-neon-drive/neon_drive_menu.png]]
41
42	Once you get into the first level, we see that the choice of car fits right in
43	with the stereotypical cars of the 80s, like the [[https://en.wikipedia.org/wiki/DMC_DeLorean][DeLorean]] or the [[https://en.wikipedia.org/wiki/Ferrari_F40][Ferrari F40]].
44	Each new level comes with new color schemes and cars, so you should never get
45	tired of the aesthetic.
46
47	#+caption: Neon Drive Race
48	[[https://img.cleberg.net/blog/20201228-neon-drive/neon_drive_race.png]]
49
50	Personally, I love the orange and blue colors used in level 2:
51
52	#+caption: Level 2
53	[[https://img.cleberg.net/blog/20201228-neon-drive/neon_drive_level_2.png]]
54
55	If you're the competitive type and getting 100% on all arcade machines isn't
56	enough, there are leaderboards for the regular part of the game, and the
57	endurance game mode.
58
59	#+caption: Leaderboard
60	[[https://img.cleberg.net/blog/20201228-neon-drive/neon_drive_leaderboard.png]]
61
62	* Other Suggestions
63	Neon Drive sits nicely within the well-founded cult genre of Outrun. Other games
64	that I've enjoyed in this same spectrum are:
65
66	- [[https://store.steampowered.com/app/233270/Far_Cry_3__Blood_Dragon/][Far
67	Cry 3: Blood Dragon]]
68	- [[https://store.steampowered.com/app/1239690/Retrowave/][Retrowave]]
69	- [[https://store.steampowered.com/app/732810/Slipstream/][Slipstream]]
70
71	Although these games aren't necessarily in the same genre, they do have aspects
72	that place them close enough to interest gamers that enjoyed Neon Drive:
73
74	- [[https://store.steampowered.com/app/311800/Black_Ice/][Black Ice]]
75	- [[https://store.steampowered.com/app/746850/Cloudpunk/][Cloudpunk]]
76	- [[https://store.steampowered.com/app/1222680/Need_for_Speed_Heat/][Need
77	for Speed: Heat]]
78	- [[https://store.steampowered.com/app/1019310/VirtuaVerse/][VirtuaVerse]]
79
80	Of course, if all you really care about is the arcade aspect of these games, you
81	can check out the [[https://store.steampowered.com/app/400020/Atari_Vault/][Atari Vault]] or any of the other classic games sold on Steam by
82	companies like Namco, Atari. For something like Nintendo, you'd have to settle
83	for buying used classic consoles or delve into the world of emulation.

content/blog/2020-12-29-zork.md added +96

@@ -0,0 +1,96 @@
	1	+++
	2	date = 2020-12-29
	3	title = "Zork: Let's Explore a Classic"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Download (Free)
	9
	10	Before we get into the game itself, you should know that you can
	11	download Zork for free from Infocom\'s [download
	12	page](http://infocom-if.org/downloads/downloads.html). So feel free to
	13	boot it up and take a ride back to the 1980s with this masterpiece.
	14
	15	# Game Description
	16
	17	Zork is an interactive, text-based computer game originally released in
	18	1980. This series, split into three separate games, introduced a robust
	19	and sophisticated text parser to gamers. People were largely used to the
	20	simple commands used in the popular game [Colossal Cave
	21	Adventure](https://en.wikipedia.org/wiki/Colossal_Cave_Adventure), but
	22	Zork allowed users to send more complex commands that included
	23	prepositions and conjunctions.
	24
	25	Zork tracks your score as you explore the map, find tools, and collect
	26	trophy items (e.g., a jewel-encrusted egg). When you place your trophy
	27	items in the trophy case found in the Living Room area, you gain score
	28	points. Collecting the Twenty Treasures of Zork and placing them within
	29	the trophy case wins the game. However, you must explore the map, solve
	30	puzzles, and avoid being eaten by a grue to collect these treasures.
	31
	32	# The Map
	33
	34	Since Zork is a vast and complex game, it helps to have a map as you
	35	explore and collect your trophies. However, if you want to play the game
	36	as it was truly intended, you should try to play it without using the
	37	map.
	38
	39	![Zork Map](https://img.cleberg.net/blog/20201229-zork/zork_map.png)
	40
	41	[Map Source](https://www.filfre.net/2012/01/exploring-zork-part-1/)
	42
	43	# In-Game Screenshots
	44
	45	After playing the game (for the first time ever) for several weeks
	46	around 2014, I was finally able to beat the game with some online help
	47	to find the last couple items. As I was writing this post, I installed
	48	the game again to grab some screenshots to show off the true glory of
	49	this game. As noted in [Jimmy Maher\'s
	50	playthrough](https://www.filfre.net/2012/01/exploring-zork-part-1/), the
	51	original Zork games looked quite a bit different due to the older
	52	hardware of computers like the Apple II and multiple bug fixes that
	53	Infocom pushed out after the game\'s initial release. My play-through
	54	uses the [Zork
	55	Anthology](https://store.steampowered.com/app/570580/Zork_Anthology/)
	56	version, which utilizes DOSBox on Windows.
	57
	58	The first screenshot here shows the introductory information, which
	59	doesn\'t include instructions of any kind for the player. If you
	60	haven\'t played text adventures before, try to use simple commands like
	61	\"go west,\" \"look around,\" or \"hit troll with elvish sword.\"
	62
	63	![Zork Screen, pt.
	64	1](https://img.cleberg.net/blog/20201229-zork/zork_01.png)
	65
	66	In this second screenshot, we see the player has entered the house and
	67	found the trophy case in the living room. The lantern and sword in this
	68	room allow the player to explore dark areas and attack enemies. If you
	69	don\'t use the lantern, you won\'t be able to see anything in dark
	70	areas, and you may be eaten by a grue.
	71
	72	![Zork Screen, pt.
	73	2](https://img.cleberg.net/blog/20201229-zork/zork_02.png)
	74
	75	Finally, we see that the player has found the first treasure: a
	76	jewel-encrusted egg. These treasures can be taken back to the house and
	77	placed in the trophy case or carried until you feel like you want to put
	78	things away.
	79
	80	![Zork Screen, pt
	81	3.](https://img.cleberg.net/blog/20201229-zork/zork_03.png)
	82
	83	# Conclusion
	84
	85	It\'s been quite a few years since I first played Zork, but I clearly
	86	remember the late nights and bloodshot eyes that helped me find all the
	87	treasures. This game is well worth the time and effort, even though the
	88	text-based aspect may be off-putting to gamers who didn\'t have to grow
	89	up playing games without graphics. However, I believe that the strategy
	90	and skills learned in early video games like Zork can actually help you,
	91	even when playing newer games.
	92
	93	If you do decide to play Zork, you can download Zork I, II, and III from
	94	Infocom\'s [download
	95	page](http://infocom-if.org/downloads/downloads.html) for free or search
	96	the internet for an online version.

content/blog/2020-12-29-zork.org deleted −77

	@@ -1,77 +0,0 @@
1	#+title: Zork: Let's Explore a Classic
2	#+date: 2020-12-29
3	#+description: A video game review for Zork.
4	#+filetags: :gaming:
5
6	* Download (Free)
7	Before we get into the game itself, you should know that you can download Zork
8	for free from Infocom's [[http://infocom-if.org/downloads/downloads.html][download page]]. So feel free to boot it up and take a
9	ride back to the 1980s with this masterpiece.
10
11	* Game Description
12	Zork is an interactive, text-based computer game originally released in 1980.
13	This series, split into three separate games, introduced a robust and
14	sophisticated text parser to gamers. People were largely used to the simple
15	commands used in the popular game [[https://en.wikipedia.org/wiki/Colossal_Cave_Adventure][Colossal Cave Adventure]], but Zork allowed
16	users to send more complex commands that included prepositions and conjunctions.
17
18	Zork tracks your score as you explore the map, find tools, and collect trophy
19	items (e.g., a jewel-encrusted egg). When you place your trophy items in the
20	trophy case found in the Living Room area, you gain score points. Collecting the
21	Twenty Treasures of Zork and placing them within the trophy case wins the game.
22	However, you must explore the map, solve puzzles, and avoid being eaten by a
23	grue to collect these treasures.
24
25	* The Map
26	Since Zork is a vast and complex game, it helps to have a map as you explore and
27	collect your trophies. However, if you want to play the game as it was truly
28	intended, you should try to play it without using the map.
29
30	#+caption: Zork Map
31	[[https://img.cleberg.net/blog/20201229-zork/zork_map.png]]
32
33	/[[https://www.filfre.net/2012/01/exploring-zork-part-1/][Map Source]]/
34
35	* In-Game Screenshots
36	After playing the game (for the first time ever) for several weeks around 2014,
37	I was finally able to beat the game with some online help to find the last
38	couple items. As I was writing this post, I installed the game again to grab
39	some screenshots to show off the true glory of this game. As noted in [[https://www.filfre.net/2012/01/exploring-zork-part-1/][Jimmy
40	Maher's playthrough]], the original Zork games looked quite a bit different due to
41	the older hardware of computers like the Apple II and multiple bug fixes that
42	Infocom pushed out after the game's initial release. My play-through uses the
43	[[https://store.steampowered.com/app/570580/Zork_Anthology/][Zork Anthology]] version, which utilizes DOSBox on Windows.
44
45	The first screenshot here shows the introductory information, which doesn't
46	include instructions of any kind for the player. If you haven't played text
47	adventures before, try to use simple commands like "go west," "look around," or
48	"hit troll with elvish sword."
49
50	#+caption: Zork Screen, pt. 1
51	[[https://img.cleberg.net/blog/20201229-zork/zork_01.png]]
52
53	In this second screenshot, we see the player has entered the house and found the
54	trophy case in the living room. The lantern and sword in this room allow the
55	player to explore dark areas and attack enemies. If you don't use the lantern,
56	you won't be able to see anything in dark areas, and you may be eaten by a grue.
57
58	#+caption: Zork Screen, pt. 2
59	[[https://img.cleberg.net/blog/20201229-zork/zork_02.png]]
60
61	Finally, we see that the player has found the first treasure: a jewel-encrusted
62	egg. These treasures can be taken back to the house and placed in the trophy
63	case or carried until you feel like you want to put things away.
64
65	#+caption: Zork Screen, pt 3.
66	[[https://img.cleberg.net/blog/20201229-zork/zork_03.png]]
67
68	* Conclusion
69	It's been quite a few years since I first played Zork, but I clearly remember
70	the late nights and bloodshot eyes that helped me find all the treasures. This
71	game is well worth the time and effort, even though the text-based aspect may be
72	off-putting to gamers who didn't have to grow up playing games without graphics.
73	However, I believe that the strategy and skills learned in early video games
74	like Zork can actually help you, even when playing newer games.
75
76	If you do decide to play Zork, you can download Zork I, II, and III from
77	Infocom's [[http://infocom-if.org/downloads/downloads.html][download page]] for free or search the internet for an online version.

content/blog/2021-01-01-seum.md added +93

@@ -0,0 +1,93 @@
	1	+++
	2	date = 2021-01-01
	3	title = "SEUM: Spreedrunners from Hell"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Game Description
	9
	10	[SEUM: Speedrunners from
	11	Hell](https://store.steampowered.com/app/457210/SEUM_Speedrunners_from_Hell/)
	12	is an incredibly fast-paced mashup of a puzzle game and a free-running
	13	game. Created by [Pine Studio](https://pinestudio.co) in early 2016 and
	14	first released as a [demo on
	15	GameJolt](https://gamejolt.com/games/seum-speedrunners-from-hell-demo/154868),
	16	this game was successfully green-lit on Steam and has amassed a cult
	17	following on multiple consoles.
	18
	19	Here\'s the game description straight from the developers:
	20
	21	> Like a bastard child of Quake 3 and Super Meat Boy, SEUM: Speedrunners
	22	> from Hell is truly hardcore and focuses on speed and fast reaction.
	23
	24	# Story
	25
	26	SEUM does a great job setting the stage when you open the game for the
	27	first time, playing an animated video in the form of comic book images.
	28	You see Marty, the protagonist, sitting around drinking his beer as
	29	Satan busts down the door, cuts his hand off, and steals all his beer
	30	and bacon. As Satan is leaving, Marty whips a vinyl record across the
	31	room and cuts off one of Satan\'s hands. This hand is what allows you to
	32	use all the powers in the game.
	33
	34	Check out the screenshot below for one of the first panels of the
	35	storyline:
	36
	37	![SEUM Story](https://img.cleberg.net/blog/20210101-seum/seum_story.png)
	38
	39	# Gameplay
	40
	41	To accomplish each level, you will need to get to the final blue portal
	42	under a certain time limit. You can beat a level by getting to the
	43	portal before the time meter runs out or \"Dominate\" a level by beating
	44	it within a shorter time limit (noted by a bright red/orange color in
	45	the time meter).
	46
	47	The portal is usually set behind locked gates, protected by dangerous
	48	defenses, or in hard-to-reach places. To reach the portal, you\'ll need
	49	to go through any existing orange portals, light all yellow beacons,
	50	avoid things like fireballs and blades, or use any satanic power orbs
	51	lying around. These special abilities include:
	52
	53	- Gravity
	54	- Teleport
	55	- Rewind
	56	- Spawn platform
	57	- Roar (DLC)
	58	- Rocket (DLC)
	59	- Shadow world (DLC)
	60
	61	For the main storyline, there are nine floors to beat. Each floor
	62	contains nine regular levels, one boss level, and one bonus level;
	63	although you don\'t technically need to beat all levels to advance to
	64	the next floor.
	65
	66	![SEUM Floor
	67	Menu](https://img.cleberg.net/blog/20210101-seum/seum_floor.png)
	68
	69	# In-Game Screenshots
	70
	71	The main menu gives you plenty of options for tuning your system,
	72	playing main levels, playing the DLC, or exploring the other game modes.
	73
	74	![SEUM Main
	75	Menu](https://img.cleberg.net/blog/20210101-seum/seum_menu.png)
	76
	77	Once you enter a level, you can look around and strategize before
	78	starting. Clicking any button will start the menu, and you\'ll have to
	79	restart if you die. One of the great things about SEUM is that it has
	80	great keyboard shortcuts. You can quickly smash `R` to
	81	restart the level or `M` to return to the level menu.
	82
	83	![SEUM Level](https://img.cleberg.net/blog/20210101-seum/seum_level.png)
	84
	85	Once you\'re able to win a level, you\'ll see the high scores and can
	86	watch replays of the best scores.
	87
	88	![SEUM Win](https://img.cleberg.net/blog/20210101-seum/seum_win.png)
	89
	90	Each regular level contains a beer in a disguised location that may take
	91	some out-of-the-box thinking.
	92
	93	![SEUM Beer](https://img.cleberg.net/blog/20210101-seum/seum_beer.png)

content/blog/2021-01-01-seum.org deleted −92

	@@ -1,92 +0,0 @@
1	#+title: SEUM: Speedrunners from Hell
2	#+date: 2021-01-01
3	#+description: A video game review for SEUM: Speedrunners from Hell.
4	#+filetags: :gaming:
5
6	* Game Description
7	[[https://store.steampowered.com/app/457210/SEUM_Speedrunners_from_Hell/][SEUM:
8	Speedrunners from Hell]] is an incredibly fast-paced mashup of a puzzle
9	game and a free-running game. Created by [[https://pinestudio.co][Pine
10	Studio]] in early 2016 and first released as a
11	[[https://gamejolt.com/games/seum-speedrunners-from-hell-demo/154868][demo
12	on GameJolt]], this game was successfully green-lit on Steam and has
13	amassed a cult following on multiple consoles.
14
15	Here's the game description straight from the developers:
16
17	#+begin_quote
18	Like a bastard child of Quake 3 and Super Meat Boy, SEUM: Speedrunners
19	from Hell is truly hardcore and focuses on speed and fast reaction.
20	#+end_quote
21
22	* Story
23	SEUM does a great job setting the stage when you open the game for the
24	first time, playing an animated video in the form of comic book images.
25	You see Marty, the protagonist, sitting around drinking his beer as
26	Satan busts down the door, cuts his hand off, and steals all his beer
27	and bacon. As Satan is leaving, Marty whips a vinyl record across the
28	room and cuts off one of Satan's hands. This hand is what allows you to
29	use all the powers in the game.
30
31	Check out the screenshot below for one of the first panels of the
32	storyline:
33
34	#+caption: SEUM Story
35	[[https://img.cleberg.net/blog/20210101-seum/seum_story.png]]
36
37	* Gameplay
38	To accomplish each level, you will need to get to the final blue portal
39	under a certain time limit. You can beat a level by getting to the
40	portal before the time meter runs out or "Dominate" a level by beating
41	it within a shorter time limit (noted by a bright red/orange color in
42	the time meter).
43
44	The portal is usually set behind locked gates, protected by dangerous
45	defenses, or in hard-to-reach places. To reach the portal, you'll need
46	to go through any existing orange portals, light all yellow beacons,
47	avoid things like fireballs and blades, or use any satanic power orbs
48	lying around. These special abilities include:
49
50	- Gravity
51	- Teleport
52	- Rewind
53	- Spawn platform
54	- Roar (DLC)
55	- Rocket (DLC)
56	- Shadow world (DLC)
57
58	For the main storyline, there are nine floors to beat. Each floor
59	contains nine regular levels, one boss level, and one bonus level;
60	although you don't technically need to beat all levels to advance to the
61	next floor.
62
63	#+caption: SEUM Floor Menu
64	[[https://img.cleberg.net/blog/20210101-seum/seum_floor.png]]
65
66	* In-Game Screenshots
67	The main menu gives you plenty of options for tuning your system,
68	playing main levels, playing the DLC, or exploring the other game modes.
69
70	#+caption: SEUM Main Menu
71	[[https://img.cleberg.net/blog/20210101-seum/seum_menu.png]]
72
73	Once you enter a level, you can look around and strategize before
74	starting. Clicking any button will start the menu, and you'll have to
75	restart if you die. One of the great things about SEUM is that it has
76	great keyboard shortcuts. You can quickly smash =R= to restart the level
77	or =M= to return to the level menu.
78
79	#+caption: SEUM Level
80	[[https://img.cleberg.net/blog/20210101-seum/seum_level.png]]
81
82	Once you're able to win a level, you'll see the high scores and can
83	watch replays of the best scores.
84
85	#+caption: SEUM Win
86	[[https://img.cleberg.net/blog/20210101-seum/seum_win.png]]
87
88	Each regular level contains a beer in a disguised location that may take
89	some out-of-the-box thinking.
90
91	#+caption: SEUM Beer
92	[[https://img.cleberg.net/blog/20210101-seum/seum_beer.png]]

content/blog/2021-01-04-fediverse.org → content/blog/2021-01-04-fediverse.md renamed +56 −41

	@@ -1,9 +1,12 @@
1	#+title: A Simple Guide to the Fediverse	1	+++
2	#+date: 2021-01-04	2	date = 2021-01-04
3	#+description: Learn about the basics of the Fediverse.	3	title = "A Simple Guide to the Fediverse"
4	#+filetags: :social:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# What is the Fediverse?
5		9
6	* What is the Fediverse?
7	The fediverse is a federated universe of servers commonly used for	10	The fediverse is a federated universe of servers commonly used for
8	sharing content, like social media. So, instead of having to rely on a	11	sharing content, like social media. So, instead of having to rely on a
9	single organization to run the server (e.g. Facebook), the fediverse is	12	single organization to run the server (e.g. Facebook), the fediverse is
	@@ -20,26 +23,27 @@ and communicate back and forth without having to be on the same server.
20	However, responsible email admins are there to set rules and control the	23	However, responsible email admins are there to set rules and control the
21	traffic going in/out of the server.	24	traffic going in/out of the server.
22		25
23	#+caption: Federated services diagram	26	![Federated services
24	[[https://img.cleberg.net/blog/20210104-a-simple-guide-to-the-fediverse/federated-example.svg]]	27	diagram](https://img.cleberg.net/blog/20210104-a-simple-guide-to-the-fediverse/federated-example.svg)
25		28
26	The main objective of this architecture is to decentralize the control	29	The main objective of this architecture is to decentralize the control
27	within the internet connections. For example, if you run your own	30	within the internet connections. For example, if you run your own
28	Mastodon instance, you and your users can't be censored or impacted in	31	Mastodon instance, you and your users can\'t be censored or impacted in
29	any way by authorities of another Mastodon instance. Some users have	32	any way by authorities of another Mastodon instance. Some users have
30	praised these features due to recent criticism of popular social media	33	praised these features due to recent criticism of popular social media
31	websites that may be over-censoring their users.	34	websites that may be over-censoring their users.
32		35
33	This strategy is great for making sure control of the social web isn't	36	This strategy is great for making sure control of the social web isn\'t
34	controlled by a single organization, but it also has some downsides. If	37	controlled by a single organization, but it also has some downsides. If
35	I create a Mastodon instance and get a ton of users to sign up, I can	38	I create a Mastodon instance and get a ton of users to sign up, I can
36	shut the server down at any time. That means you're at risk of losing	39	shut the server down at any time. That means you\'re at risk of losing
37	the content you've created unless you back it up, or the server backs it	40	the content you\'ve created unless you back it up, or the server backs
38	up for you. Also, depending on the software used (e.g. Mastodon,	41	it up for you. Also, depending on the software used (e.g. Mastodon,
39	Pixelfed, etc.), censorship may still be an issue if the server admins	42	Pixelfed, etc.), censorship may still be an issue if the server admins
40	decide they want to censor their users. Now, censorship isn't always a	43	decide they want to censor their users. Now, censorship isn\'t always a
41	bad thing and can even benefit the community as a whole, but you'll want	44	bad thing and can even benefit the community as a whole, but you\'ll
42	to determine which servers align with your idea of proper censorship.	45	want to determine which servers align with your idea of proper
		46	censorship.
43		47
44	However, these are risks that we take when we sign up for any online	48	However, these are risks that we take when we sign up for any online
45	platform. Whatever your reason is for trying out federated social	49	platform. Whatever your reason is for trying out federated social
	@@ -49,44 +53,55 @@ with the increased difficulty understanding and signing up for these
49	platforms. Perhaps increased regulation and litigation against current	53	platforms. Perhaps increased regulation and litigation against current
50	social media sites will push more users into the fediverse.	54	social media sites will push more users into the fediverse.
51		55
52	* Federated Alternatives to Popular Sites	56	# Federated Alternatives to Popular Sites
		57
53	The list below is a small guide that will show you federated	58	The list below is a small guide that will show you federated
54	alternatives to current popular websites. There are many more out there,	59	alternatives to current popular websites. There are many more out there,
55	so go and explore: you might just find the perfect home.	60	so go and explore: you might just find the perfect home.
56		61
57	** Reddit	62	## Reddit
58	- [[https://lemmy.ml/instances][Lemmy]]	63
		64	- [Lemmy](https://lemmy.ml/instances)
		65
		66	## Twitter/Facebook/Tumblr
		67
		68	- [Mastodon](https://joinmastodon.org)
		69	- [Diaspora](https://diasporafoundation.org)
		70	- [Friendica](https://friendi.ca)
		71	- [GNU Social](https://gnusocial.network)
		72	- [Pleroma](https://pleroma.social)
		73
		74	## Instagram
		75
		76	- [Pixelfed](https://pixelfed.org)
		77
		78	## Slack/Discord
		79
		80	- [Matrix](https://element.io)
		81
		82	## Youtube/Vimeo
		83
		84	- [Peertube](https://joinpeertube.org)
59		85
60	** Twitter/Facebook/Tumblr	86	## Spotify/Soundcloud
61	- [[https://joinmastodon.org][Mastodon]]
62	- [[https://diasporafoundation.org][Diaspora]]
63	- [[https://friendi.ca][Friendica]]
64	- [[https://gnusocial.network][GNU Social]]
65	- [[https://pleroma.social][Pleroma]]
66		87
67	** Instagram	88	- [Funkwhale](https://funkwhale.audio)
68	- [[https://pixelfed.org][Pixelfed]]
69		89
70	** Slack/Discord	90	## Podcasting
71	- [[https://element.io][Matrix]]
72		91
73	** Youtube/Vimeo	92	- [Pubcast](https://pubcast.pub)
74	- [[https://joinpeertube.org][Peertube]]
75		93
76	** Spotify/Soundcloud	94	## Medium/Blogger
77	- [[https://funkwhale.audio][Funkwhale]]
78		95
79	** Podcasting	96	- [WriteFreely](https://writefreely.org)
80	- [[https://pubcast.pub][Pubcast]]
81		97
82	** Medium/Blogger	98	# Get Started
83	- [[https://writefreely.org][WriteFreely]]
84		99
85	* Get Started
86	The best way to get started is to simply sign up and learn as you go. If	100	The best way to get started is to simply sign up and learn as you go. If
87	you're comfortable signing up through a Mastodon, Pleroma, or Friendica	101	you\'re comfortable signing up through a Mastodon, Pleroma, or Friendica
88	server, here is [[https://fediverse.party/en/portal/servers][a list of	102	server, here is [a list of themed
89	themed servers]] to choose from. If you're looking for something else,	103	servers](https://fediverse.party/en/portal/servers) to choose from. If
90	try a web search for a federated alternative to your favorite sites.	104	you\'re looking for something else, try a web search for a federated
		105	alternative to your favorite sites.
91		106
92	Find a server that focuses on your passions and start there!	107	Find a server that focuses on your passions and start there!

content/blog/2021-01-07-ufw.org → content/blog/2021-01-07-ufw.md renamed +96 −84

	@@ -1,152 +1,163 @@
1	#+title: Secure Your Network with the Uncomplicated Firewall (ufw)	1	+++
2	#+date: 2021-01-07	2	date = 2021-01-07
3	#+description: A simple guide to the UFW.	3	title = "Secure Your Network with the Uncomplicated Firewall (ufw)"
4	#+filetags: :sysadmin:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Uncomplicated Firewall
5		9
6	* Uncomplicated Firewall
7	Uncomplicated Firewall, also known as ufw, is a convenient and	10	Uncomplicated Firewall, also known as ufw, is a convenient and
8	beginner-friendly way to enforce OS-level firewall rules. For those who	11	beginner-friendly way to enforce OS-level firewall rules. For those who
9	are hosting servers or any device that is accessible to the world (i.e.,	12	are hosting servers or any device that is accessible to the world (i.e.,
10	by public IP or domain name), it's critical that a firewall is properly	13	by public IP or domain name), it\'s critical that a firewall is properly
11	implemented and active.	14	implemented and active.
12		15
13	Ufw is available by default in all Ubuntu installations after 8.04 LTS.	16	Ufw is available by default in all Ubuntu installations after 8.04 LTS.
14	For other distributions, you can look to install ufw or check if there	17	For other distributions, you can look to install ufw or check if there
15	are alternative firewalls installed already. There are usually	18	are alternative firewalls installed already. There are usually
16	alternatives available, such as Fedora's =firewall= and the package	19	alternatives available, such as Fedora\'s `firewall` and the
17	available on most distributions: =iptables=. Ufw is considered a	20	package available on most distributions: `iptables`. Ufw is
18	beginner-friendly front-end to iptables.	21	considered a beginner-friendly front-end to iptables.
19		22
20	[[https://gufw.org][Gufw]] is available as a graphical user interface	23	[Gufw](https://gufw.org) is available as a graphical user interface
21	(GUI) application for users who are uncomfortable setting up a firewall	24	(GUI) application for users who are uncomfortable setting up a firewall
22	through a terminal.	25	through a terminal.
23		26
24	#+caption: Gufw Screenshot	27	![Gufw
25	[[https://img.cleberg.net/blog/20210107-secure-your-network-with-the-uncomplicated-firewall/gufw.png]]	28	Screenshot](https://img.cleberg.net/blog/20210107-secure-your-network-with-the-uncomplicated-firewall/gufw.png)
		29
		30	# Getting Help
26		31
27	* Getting Help
28	If you need help figuring out commands, remember that you can run the	32	If you need help figuring out commands, remember that you can run the
29	=--help= flag to get a list of options.	33	`--help` flag to get a list of options.
30		34
31	#+begin_src sh	35	```sh
32	sudo ufw --help	36	sudo ufw --help
33	#+end_src	37	```
		38
		39	# Set Default State
34		40
35	* Set Default State
36	The proper way to run a firewall is to set a strict default state and	41	The proper way to run a firewall is to set a strict default state and
37	slowly open up ports that you want to allow. This helps prevent anything	42	slowly open up ports that you want to allow. This helps prevent anything
38	malicious from slipping through the cracks. The following command	43	malicious from slipping through the cracks. The following command
39	prevents all incoming traffic (other than the rules we specify later),	44	prevents all incoming traffic (other than the rules we specify later),
40	but you can also set this for outgoing connections, if necessary.	45	but you can also set this for outgoing connections, if necessary.
41		46
42	#+begin_src sh	47	```sh
43	sudo ufw default deny incoming	48	sudo ufw default deny incoming
44	#+end_src	49	```
45		50
46	You should also allow outgoing traffic if you want to allow the device	51	You should also allow outgoing traffic if you want to allow the device
47	to communicate back to you or other parties. For example, media servers	52	to communicate back to you or other parties. For example, media servers
48	like Plex need to be able to send out data related to streaming the	53	like Plex need to be able to send out data related to streaming the
49	media.	54	media.
50		55
51	#+begin_src sh	56	```sh
52	sudo ufw default allow outgoing	57	sudo ufw default allow outgoing
53	#+end_src	58	```
54		59
55	* Adding Port Rules	60	# Adding Port Rules
56	Now that we've disabled all incoming traffic by default, we need to open
57	up some ports (or else no traffic would be able to come in). If you need
58	to be able to =ssh= into the machine, you'll need to open up port 22.
59		61
60	#+begin_src sh	62	Now that we\'ve disabled all incoming traffic by default, we need to
		63	open up some ports (or else no traffic would be able to come in). If you
		64	need to be able to `ssh` into the machine, you\'ll need to
		65	open up port 22.
		66
		67	```sh
61	sudo ufw allow 22	68	sudo ufw allow 22
62	#+end_src	69	```
63		70
64	You can also issue more restrictive rules. The following rule will allow	71	You can also issue more restrictive rules. The following rule will allow
65	=ssh= connections only from machines on the local subnet.	72	`ssh` connections only from machines on the local subnet.
66		73
67	#+begin_src sh	74	```sh
68	sudo ufw allow proto tcp from 192.168.0.0/24 to any port 22	75	sudo ufw allow proto tcp from 192.168.0.0/24 to any port 22
69	#+end_src	76	```
70		77
71	If you need to set a rule that isn't tcp, just append your connection	78	If you need to set a rule that isn\'t tcp, just append your connection
72	type to the end of the rule.	79	type to the end of the rule.
73		80
74	#+begin_src sh	81	```sh
75	sudo ufw allow 1900/udp	82	sudo ufw allow 1900/udp
76	#+end_src	83	```
		84
		85	# Enable ufw
77		86
78	* Enable ufw
79	Now that the firewall is configured and ready to go, you can enable the	87	Now that the firewall is configured and ready to go, you can enable the
80	firewall.	88	firewall.
81		89
82	#+begin_src sh	90	```sh
83	sudo ufw enable	91	sudo ufw enable
84	#+end_src	92	```
85		93
86	A restart may be required for the firewall to begin operating.	94	A restart may be required for the firewall to begin operating.
87		95
88	#+begin_src sh	96	```sh
89	sudo reboot now	97	sudo reboot now
90	#+end_src	98	```
91		99
92	* Checking Status	100	# Checking Status
93	Now that the firewall is enabled, let's check and see what the rules	101
		102	Now that the firewall is enabled, let\'s check and see what the rules
94	look like.	103	look like.
95		104
96	#+begin_src sh	105	```sh
97	sudo ufw status numbered	106	sudo ufw status numbered
98	#+end_src	107	```
99		108
100	#+begin_src txt	109	``` txt
101	Status: active	110	Status: active
102		111
103	To Action From	112	To Action From
104	-- ------ ----	113	-- ------ ----
105	[ 1] 22 ALLOW IN Anywhere	114	[ 1] 22 ALLOW IN Anywhere
106	[ 2] 22 (v6) ALLOW IN Anywhere (v6)	115	[ 2] 22 (v6) ALLOW IN Anywhere (v6)
107	#+end_src	116	```
		117
		118	# Deleting Rules
108		119
109	* Deleting Rules
110	If you need to delete a rule, you need to know the number associated	120	If you need to delete a rule, you need to know the number associated
111	with that rule. Let's delete the first rule in the table above. You'll	121	with that rule. Let\'s delete the first rule in the table above. You\'ll
112	be asked to confirm the deletion as part of this process.	122	be asked to confirm the deletion as part of this process.
113		123
114	#+begin_src sh	124	```sh
115	sudo ufw delete 1	125	sudo ufw delete 1
116	#+end_src	126	```
117		127
118	* Managing App Rules	128	# Managing App Rules
119	Luckily, there's a convenient way for installed applications to create	129
120	files that ufw can easily implement so that you don't have to search and	130	Luckily, there\'s a convenient way for installed applications to create
121	find which ports your application requires. To see if your device has	131	files that ufw can easily implement so that you don\'t have to search
122	any applications with pre-installed ufw rules, execute the following	132	and find which ports your application requires. To see if your device
		133	has any applications with pre-installed ufw rules, execute the following
123	command:	134	command:
124		135
125	#+begin_src sh	136	```sh
126	sudo ufw app list	137	sudo ufw app list
127	#+end_src	138	```
128		139
129	The results should look something like this:	140	The results should look something like this:
130		141
131	#+begin_src txt	142	``` txt
132	Available applications:	143	Available applications:
133	OpenSSH	144	OpenSSH
134	Samba	145	Samba
135	plexmediaserver	146	plexmediaserver
136	plexmediaserver-all	147	plexmediaserver-all
137	plexmediaserver-dlna	148	plexmediaserver-dlna
138	#+end_src	149	```
139		150
140	If you want to get more information on a specific app rule, use the	151	If you want to get more information on a specific app rule, use the
141	=info= command.	152	`info` command.
142		153
143	#+begin_src sh	154	```sh
144	sudo ufw app info plexmediaserver-dlna	155	sudo ufw app info plexmediaserver-dlna
145	#+end_src	156	```
146		157
147	You'll get a blurb of info back like this:	158	You\'ll get a blurb of info back like this:
148		159
149	#+begin_src txt	160	``` txt
150	Profile: plexmediaserver-dlna	161	Profile: plexmediaserver-dlna
151	Title: Plex Media Server (DLNA)	162	Title: Plex Media Server (DLNA)
152	Description: The Plex Media Server (additional DLNA capability only)	163	Description: The Plex Media Server (additional DLNA capability only)
	@@ -154,28 +165,29 @@ Description: The Plex Media Server (additional DLNA capability only)
154	Ports:	165	Ports:
155	1900/udp	166	1900/udp
156	32469/tcp	167	32469/tcp
157	#+end_src	168	```
158		169
159	You can add or delete app rules the same way that you'd add or delete	170	You can add or delete app rules the same way that you\'d add or delete
160	specific port rules.	171	specific port rules.
161		172
162	#+begin_src sh	173	```sh
163	sudo ufw allow plexmediaserver-dlna	174	sudo ufw allow plexmediaserver-dlna
164	#+end_src	175	```
165		176
166	#+begin_src sh	177	```sh
167	sudo ufw delete RULE\|NUM	178	sudo ufw delete RULE\|NUM
168	#+end_src	179	```
		180
		181	# Creating App Rules
169		182
170	* Creating App Rules	183	If you\'d like to create you own app rule, you\'ll need to create a file
171	If you'd like to create you own app rule, you'll need to create a file	184	in the `/etc/ufw/applications.d` directory. Within the file
172	in the =/etc/ufw/applications.d= directory. Within the file you create,	185	you create, you need to make sure the content is properly formatted.
173	you need to make sure the content is properly formatted.
174		186
175	For example, here are the contents my =plexmediaserver= file, which	187	For example, here are the contents my `plexmediaserver` file,
176	creates three distinct app rules for ufw:	188	which creates three distinct app rules for ufw:
177		189
178	#+begin_src config	190	``` config
179	[plexmediaserver]	191	[plexmediaserver]
180	title=Plex Media Server (Standard)	192	title=Plex Media Server (Standard)
181	description=The Plex Media Server	193	description=The Plex Media Server
	@@ -190,24 +202,24 @@ ports=1900/udp\|32469/tcp
190	title=Plex Media Server (Standard + DLNA)	202	title=Plex Media Server (Standard + DLNA)
191	description=The Plex Media Server (with additional DLNA capability)	203	description=The Plex Media Server (with additional DLNA capability)
192	ports=32400/tcp\|3005/tcp\|5353/udp\|8324/tcp\|32410:32414/udp\|1900/udp\|32469/tcp	204	ports=32400/tcp\|3005/tcp\|5353/udp\|8324/tcp\|32410:32414/udp\|1900/udp\|32469/tcp
193	#+end_src	205	```
194		206
195	So, if I wanted to create a custom app rule called "mycustomrule," I'd	207	So, if I wanted to create a custom app rule called \"mycustomrule,\"
196	create a file and add my content like this:	208	I\'d create a file and add my content like this:
197		209
198	#+begin_src sh	210	```sh
199	sudo nano /etc/ufw/applications.d/mycustomrule	211	sudo nano /etc/ufw/applications.d/mycustomrule
200	#+end_src	212	```
201		213
202	#+begin_src config	214	``` config
203	[mycustomrule]	215	[mycustomrule]
204	title=My Custom Rule	216	title=My Custom Rule
205	description=This is a temporary ufw app rule.	217	description=This is a temporary ufw app rule.
206	ports=88/tcp\|9100/udp	218	ports=88/tcp\|9100/udp
207	#+end_src	219	```
208		220
209	Then, I would just enable this rule in ufw.	221	Then, I would just enable this rule in ufw.
210		222
211	#+begin_src sh	223	```sh
212	sudo ufw allow mycustomrule	224	sudo ufw allow mycustomrule
213	#+end_src	225	```

content/blog/2021-02-19-macos.md added +215

@@ -0,0 +1,215 @@
	1	+++
	2	date = 2021-02-19
	3	title = "macOS: Testing Out a New OS"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Diving into macOS
	9
	10	After spending nearly 15 years working with Windows and 8 years on
	11	Linux, I have experienced macOS for the first time. By chance, my spouse
	12	happened to buy a new MacBook and gifted me their 2013 model. Of course,
	13	I still consider my Linux desktop to be my daily driver and keep Windows
	14	around for gaming needs, but over the past week I\'ve found myself using
	15	the MacBook more and more for things that don\'t require gaming specs or
	16	advanced dev tools.
	17
	18	# Initial Thoughts
	19
	20	Before I move on to the technical aspects of my set-up, I want to take
	21	some time and express my thoughts on the overall OS.
	22
	23	![macOS
	24	Desktop](https://img.cleberg.net/blog/20210219-macos-testing-out-a-new-os/macos-desktop.png)
	25
	26	As expected, the initial computer setup is a breeze with Mac\'s guided
	27	GUI installer.
	28
	29	The desktop itself reminds me of GNOME more than anything else I\'ve
	30	seen: even Pantheon from [ElementaryOS](https://elementary.io/), which
	31	people commonly refer to as the closest Linux distro to macOS. The
	32	desktop toolbar is great and far surpasses the utility of the GNOME
	33	toolbar due to the fact that the extensions and icons actually work. I
	34	launch macOS and immediately see my shortcuts for Tresorit, Bitwarden,
	35	and Mullvad pop up as the computer loads.
	36
	37	Even further, the app dock is very useful and will be yet another
	38	familiarity for GNOME users. I know many people like panels instead of
	39	docks, but I\'ve always found docks to have a more pleasing UI. However,
	40	I had to disable the \"Show recent applications in Dock\" preference; I
	41	can\'t stand items taking up precious screen space if I\'m not currently
	42	using them. On that same note, it\'s taking me some time to get use to
	43	the fact that I have to manually quit an app or else it will still stay
	44	open/active in the dock, even if I\'ve closed out all windows for that
	45	app (e.g. Firefox).
	46
	47	Overall, I\'m having a lot of fun and for users who spend a large
	48	majority of their time performing basic tasks like web browsing,
	49	writing, watching media, etc., macOS is a fantastic option.
	50
	51	The rest of this post explains the technicalities of how I set up my CLI
	52	environment to make me feel more at-home, similar to the environments I
	53	set up on Fedora, Ubuntu, etc.
	54
	55	# Making it Feel Like Home
	56
	57	If you\'re someone who uses Linux primarily, no doubt your first thought
	58	when booting macOS will be the same as mine was: \"Where is the terminal
	59	and how do I set up my favorite utilities?\"
	60
	61	Luckily, macOS hasn\'t completely hidden away the development tools from
	62	the average user. You can easily find the Terminal app in the Launchpad
	63	area, but it\'s probably not what you\'re used to. I was surprised (and
	64	happy) to see that the default shell is `zsh`, the shell I
	65	use on all of my Linux distros. However, the commands are not the same -
	66	even the ones you may think are native to the shell. Commands like
	67	`dir` do not exist, so other native commands like
	68	`ls -la` or `pwd` are more useful here.
	69
	70	With only a few minutes of installing and tweaking a few packages, I was
	71	able to recreate a terminal environment that I feel very comfortable
	72	using. See the image below for a preview of the iTerm2 app with a split
	73	view between my macOS desktop shell and an SSH session into my server.
	74
	75	![iTerm2](https://img.cleberg.net/blog/20210219-macos-testing-out-a-new-os/iterm2.png)
	76
	77	# Xcode
	78
	79	My first step was to search the web for any hints on how to get
	80	`zsh` back up to the state I like, with extensions, themes,
	81	etc. My first step was to install the CLI tools for
	82	[Xcode](https://developer.apple.com/xcode/), Apple\'s suite of
	83	development tools.
	84
	85	```sh
	86	sudo xcode-select -r
	87	```
	88
	89	```sh
	90	sudo xcode-select --install
	91	```
	92
	93	# Homebrew
	94
	95	Next up is to install [Homebrew](https://brew.sh), a nifty package
	96	manager for macOS.
	97
	98	```sh
	99	/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
	100	```
	101
	102	I ran into a permission error when installing Homebrew:
	103
	104	```sh
	105	Error: Failed to link all completions, docs and manpages:
	106	Permission denied @ rb_file_s_symlink - (../../../Homebrew/completions/zsh/_brew, /usr/local/share/zsh/site-functions/_brew)
	107	Failed during: /usr/local/bin/brew update --force --quiet
	108	```
	109
	110	I found that the following permission modification worked like a charm.
	111	However, I noted that some users online discussed the fact that this
	112	solution may not work if your system has multiple users who use
	113	Homebrew.
	114
	115	```sh
	116	sudo chown -R $(whoami) $(brew --prefix)/*
	117	```
	118
	119	Next up is to ensure Homebrew is updated and cleaned.
	120
	121	```sh
	122	brew update
	123	```
	124
	125	```sh
	126	brew cleanup
	127	```
	128
	129	# iTerm2
	130
	131	Now that I\'ve installed the basic utilities for development, I moved
	132	onto installing iTerm2, a much better terminal than the default.
	133
	134	```sh
	135	brew install --cask iterm2
	136	```
	137
	138	I also used the `Make iTerm2 Default Term` and
	139	`Install Shell Integration` options in the iTerm2 application
	140	menu to make sure I don\'t run into any issues later on with different
	141	terminals.
	142
	143	We will also install `zsh` so we can use it in iTerm2.
	144
	145	```sh
	146	brew install zsh
	147	```
	148
	149	# Oh-My-Zsh
	150
	151	I\'ve shown the great aspects of [Oh My Zsh](https://ohmyz.sh) in other
	152	blog posts, so I\'ll skip over that speech for now. Simply install it
	153	and run an update.
	154
	155	```sh
	156	sh -c "$(curl -fsSL https://raw.githubusercontent.com/robbyrussell/oh-my-zsh/master/tools/install.sh)"
	157	```
	158
	159	```sh
	160	omz update
	161	```
	162
	163	Finally, restart the iTerm2 application to ensure all changes go into
	164	effect.
	165
	166	# Oh-My-Zsh Themes
	167
	168	Let\'s change the theme of the terminal to make it a little more
	169	friendly.
	170
	171	```sh
	172	open ~/.zshrc
	173	```
	174
	175	The third section of this file should contain a line like the code
	176	below. Change that theme to [any theme you
	177	want](https://github.com/ohmyzsh/ohmyzsh/wiki/Themes), save the file,
	178	and exit.
	179
	180	```sh
	181	ZSH_THEME="af-magic"
	182	```
	183
	184	After changing the `.zshrc` file, you\'ll need to close your
	185	terminal and re-open it to see the changes. Optionally, just open a new
	186	tab if you\'re using iTerm2, and you\'ll see the new shell config.
	187
	188	# Oh-My-Zsh Plugins
	189
	190	Of course, my customization of `zsh` would not be complete
	191	without
	192	[zsh-autosuggestions](https://github.com/zsh-users/zsh-autosuggestions).
	193	This will bring up commands you\'ve run in the past as you type them.
	194	For example, if you\'ve run `ssh user@192.168.1.99` before,
	195	the terminal will show this command as soon as you start typing it (e.g.
	196	`zsh u`), and you can hit the right arrow to autocomplete the
	197	command.
	198
	199	```sh
	200	git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions
	201	```
	202
	203	```sh
	204	open ~/.zshrc
	205	```
	206
	207	```sh
	208	# Scroll down the script and edit this line to add zsh-autosuggestions
	209	plugins=(git zsh-autosuggestions)
	210	```
	211
	212	Remember: After changing the `.zshrc` file, you\'ll need to
	213	close your terminal and re-open it to see the changes. Optionally, just
	214	open a new tab if you\'re using iTerm2, and you\'ll see the new shell
	215	config.

content/blog/2021-02-19-macos.org deleted −200

	@@ -1,200 +0,0 @@
1	#+title: macOS: Testing Out A New OS
2	#+date: 2021-02-19
3	#+description: A retrospective on my migration from Linux to macOS.
4	#+filetags: :apple:
5
6	* Diving into macOS
7	After spending nearly 15 years working with Windows and 8 years on
8	Linux, I have experienced macOS for the first time. By chance, my spouse
9	happened to buy a new MacBook and gifted me their 2013 model. Of course,
10	I still consider my Linux desktop to be my daily driver and keep Windows
11	around for gaming needs, but over the past week I've found myself using
12	the MacBook more and more for things that don't require gaming specs or
13	advanced dev tools.
14
15	* Initial Thoughts
16	Before I move on to the technical aspects of my set-up, I want to take
17	some time and express my thoughts on the overall OS.
18
19	#+caption: macOS Desktop
20	[[https://img.cleberg.net/blog/20210219-macos-testing-out-a-new-os/macos-desktop.png]]
21
22	As expected, the initial computer setup is a breeze with Mac's guided
23	GUI installer.
24
25	The desktop itself reminds me of GNOME more than anything else I've
26	seen: even Pantheon from [[https://elementary.io/][ElementaryOS]], which
27	people commonly refer to as the closest Linux distro to macOS. The
28	desktop toolbar is great and far surpasses the utility of the GNOME
29	toolbar due to the fact that the extensions and icons /actually work/. I
30	launch macOS and immediately see my shortcuts for Tresorit, Bitwarden,
31	and Mullvad pop up as the computer loads.
32
33	Even further, the app dock is very useful and will be yet another
34	familiarity for GNOME users. I know many people like panels instead of
35	docks, but I've always found docks to have a more pleasing UI. However,
36	I had to disable the "Show recent applications in Dock" preference; I
37	can't stand items taking up precious screen space if I'm not currently
38	using them. On that same note, it's taking me some time to get use to
39	the fact that I have to manually quit an app or else it will still stay
40	open/active in the dock, even if I've closed out all windows for that
41	app (e.g. Firefox).
42
43	Overall, I'm having a lot of fun and for users who spend a large
44	majority of their time performing basic tasks like web browsing,
45	writing, watching media, etc., macOS is a fantastic option.
46
47	The rest of this post explains the technicalities of how I set up my CLI
48	environment to make me feel more at-home, similar to the environments I
49	set up on Fedora, Ubuntu, etc.
50
51	* Making it Feel Like Home
52	If you're someone who uses Linux primarily, no doubt your first thought
53	when booting macOS will be the same as mine was: "Where is the terminal
54	and how do I set up my favorite utilities?"
55
56	Luckily, macOS hasn't completely hidden away the development tools from
57	the average user. You can easily find the Terminal app in the Launchpad
58	area, but it's probably not what you're used to. I was surprised (and
59	happy) to see that the default shell is =zsh=, the shell I use on all of
60	my Linux distros. However, the commands are not the same - even the ones
61	you may think are native to the shell. Commands like =dir= do not exist,
62	so other native commands like =ls -la= or =pwd= are more useful here.
63
64	With only a few minutes of installing and tweaking a few packages, I was
65	able to recreate a terminal environment that I feel very comfortable
66	using. See the image below for a preview of the iTerm2 app with a split
67	view between my macOS desktop shell and an SSH session into my server.
68
69	#+caption: iTerm2
70	[[https://img.cleberg.net/blog/20210219-macos-testing-out-a-new-os/iterm2.png]]
71
72	* Xcode
73	My first step was to search the web for any hints on how to get =zsh=
74	back up to the state I like, with extensions, themes, etc. My first step
75	was to install the CLI tools for
76	[[https://developer.apple.com/xcode/][Xcode]], Apple's suite of
77	development tools.
78
79	#+begin_src sh
80	sudo xcode-select -r
81	#+end_src
82
83	#+begin_src sh
84	sudo xcode-select --install
85	#+end_src
86
87	* Homebrew
88	Next up is to install [[https://brew.sh][Homebrew]], a nifty package
89	manager for macOS.
90
91	#+begin_src sh
92	/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
93	#+end_src
94
95	I ran into a permission error when installing Homebrew:
96
97	#+begin_src sh
98	Error: Failed to link all completions, docs and manpages:
99	Permission denied @ rb_file_s_symlink - (../../../Homebrew/completions/zsh/_brew, /usr/local/share/zsh/site-functions/_brew)
100	Failed during: /usr/local/bin/brew update --force --quiet
101	#+end_src
102
103	I found that the following permission modification worked like a charm.
104	However, I noted that some users online discussed the fact that this
105	solution may not work if your system has multiple users who use
106	Homebrew.
107
108	#+begin_src sh
109	sudo chown -R $(whoami) $(brew --prefix)/*
110	#+end_src
111
112	Next up is to ensure Homebrew is updated and cleaned.
113
114	#+begin_src sh
115	brew update
116	#+end_src
117
118	#+begin_src sh
119	brew cleanup
120	#+end_src
121
122	* iTerm2
123	Now that I've installed the basic utilities for development, I moved
124	onto installing iTerm2, a much better terminal than the default.
125
126	#+begin_src sh
127	brew install --cask iterm2
128	#+end_src
129
130	I also used the =Make iTerm2 Default Term= and
131	=Install Shell Integration= options in the iTerm2 application menu to
132	make sure I don't run into any issues later on with different terminals.
133
134	We will also install =zsh= so we can use it in iTerm2.
135
136	#+begin_src sh
137	brew install zsh
138	#+end_src
139
140	* Oh-My-Zsh
141	I've shown the great aspects of [[https://ohmyz.sh][Oh My Zsh]] in other
142	blog posts, so I'll skip over that speech for now. Simply install it and
143	run an update.
144
145	#+begin_src sh
146	sh -c "$(curl -fsSL https://raw.githubusercontent.com/robbyrussell/oh-my-zsh/master/tools/install.sh)"
147	#+end_src
148
149	#+begin_src sh
150	omz update
151	#+end_src
152
153	Finally, restart the iTerm2 application to ensure all changes go into
154	effect.
155
156	* Oh-My-Zsh Themes
157	Let's change the theme of the terminal to make it a little more
158	friendly.
159
160	#+begin_src sh
161	open ~/.zshrc
162	#+end_src
163
164	The third section of this file should contain a line like the code
165	below. Change that theme to
166	[[https://github.com/ohmyzsh/ohmyzsh/wiki/Themes][any theme you want]],
167	save the file, and exit.
168
169	#+begin_src sh
170	ZSH_THEME="af-magic"
171	#+end_src
172
173	After changing the =.zshrc= file, you'll need to close your terminal and
174	re-open it to see the changes. Optionally, just open a new tab if you're
175	using iTerm2, and you'll see the new shell config.
176
177	* Oh-My-Zsh Plugins
178	Of course, my customization of =zsh= would not be complete without
179	[[https://github.com/zsh-users/zsh-autosuggestions][zsh-autosuggestions]].
180	This will bring up commands you've run in the past as you type them. For
181	example, if you've run =ssh user@192.168.1.99= before, the terminal will
182	show this command as soon as you start typing it (e.g. =zsh u=), and you
183	can hit the right arrow to autocomplete the command.
184
185	#+begin_src sh
186	git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions
187	#+end_src
188
189	#+begin_src sh
190	open ~/.zshrc
191	#+end_src
192
193	#+begin_src sh
194	# Scroll down the script and edit this line to add zsh-autosuggestions
195	plugins=(git zsh-autosuggestions)
196	#+end_src
197
198	Remember: After changing the =.zshrc= file, you'll need to close your
199	terminal and re-open it to see the changes. Optionally, just open a new
200	tab if you're using iTerm2, and you'll see the new shell config.

content/blog/2021-03-19-clone-github-repos.org → content/blog/2021-03-19-clone-github-repos.md renamed +57 −49

	@@ -1,55 +1,60 @@
1	#+title: How to Clone All Repositories from a GitHub or Sourcehut Account	1	+++
2	#+date: 2021-03-19	2	date = 2021-03-19
3	#+description: Learn how to clone all GitHub or Sourcehut repositories.	3	title = "How to Clonse All Repositories from a GitHub or Sourcehut Account"
4	#+filetags: :dev:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Cloning from GitHub	8	# Cloning from GitHub
7	If you're like me and use a lot of different devices (and sometimes	9
		10	If you\'re like me and use a lot of different devices (and sometimes
8	decide to just wipe your device and start with a new OS), you probably	11	decide to just wipe your device and start with a new OS), you probably
9	know the pain of cloning all your old code repositories down to your	12	know the pain of cloning all your old code repositories down to your
10	local file system.	13	local file system.
11		14
12	If you're using GitHub, you can easily clone all of your code back down	15	If you\'re using GitHub, you can easily clone all of your code back down
13	in just seconds. First, create a bash script. I do so by opening a new	16	in just seconds. First, create a bash script. I do so by opening a new
14	file in =nano=, but you can use =gedit=, =vim=, or something else:	17	file in `nano`, but you can use `gedit`,
		18	`vim`, or something else:
15		19
16	#+begin_src sh	20	```sh
17	nano clone_github_repos.sh	21	nano clone_github_repos.sh
18	#+end_src	22	```
19		23
20	Next, paste in the following information. Note that you can replace the	24	Next, paste in the following information. Note that you can replace the
21	word =users= in the first line with =orgs= and type an organization's	25	word `users` in the first line with `orgs` and
22	name instead of a user's name.	26	type an organization\'s name instead of a user\'s name.
23		27
24	#+begin_src sh	28	```sh
25	CNTX=users; NAME=YOUR-USERNAME; PAGE=1	29	CNTX=users; NAME=YOUR-USERNAME; PAGE=1
26	curl "https://api.github.com/$CNTX/$NAME/repos?page=$PAGE&per_page=100" \|	30	curl "https://api.github.com/$CNTX/$NAME/repos?page=$PAGE&per_page=100" \|
27	grep -e 'git_url*' \|	31	grep -e 'git_url*' \|
28	cut -d \" -f 4 \|	32	cut -d \" -f 4 \|
29	xargs -L1 git clone	33	xargs -L1 git clone
30	#+end_src	34	```
31		35
32	Finally, save the bash script and make it executable.	36	Finally, save the bash script and make it executable.
33		37
34	#+begin_src sh	38	```sh
35	chmod a+x clone_github_repos.sh	39	chmod a+x clone_github_repos.sh
36	#+end_src	40	```
37		41
38	Now you can run the script and should see the cloning process begin.	42	Now you can run the script and should see the cloning process begin.
39		43
40	#+begin_src sh	44	```sh
41	./clone_github_repos.sh	45	./clone_github_repos.sh
42	#+end_src	46	```
		47
		48	# Cloning from Sourcehut
43		49
44	* Cloning from Sourcehut	50	I haven\'t fully figured out how to directly incorporate Sourcehut\'s
45	I haven't fully figured out how to directly incorporate Sourcehut's
46	GraphQL API into a bash script yet, so this one will take two steps.	51	GraphQL API into a bash script yet, so this one will take two steps.
47		52
48	First, log-in to Sourcehut and go to their	53	First, log-in to Sourcehut and go to their [GraphQL playground for
49	[[https://git.sr.ht/graphql][GraphQL playground for Git]]. Next, paste	54	Git](https://git.sr.ht/graphql). Next, paste the following query into
50	the following query into the left box:	55	the left box:
51		56
52	#+begin_src sh	57	```sh
53	query {	58	query {
54	me {	59	me {
55	canonicalName	60	canonicalName
	@@ -61,27 +66,28 @@ query {
61	}	66	}
62	}	67	}
63	}	68	}
64	#+end_src	69	```
65		70
66	The output on the right side will give you an object of all your	71	The output on the right side will give you an object of all your
67	repositories. Just grab that text and remove all the characters such as	72	repositories. Just grab that text and remove all the characters such as
68	quotation marks and curly brackets. You will need a single-line list of	73	quotation marks and curly brackets. You will need a single-line list of
69	space-separated values for the next step.	74	space-separated values for the next step.
70		75
71	Now let's create the bash script:	76	Now let\'s create the bash script:
72		77
73	#+begin_src sh	78	```sh
74	nano clone_sourcehut_repos.sh	79	nano clone_sourcehut_repos.sh
75	#+end_src	80	```
76		81
77	Next, paste the following bash script in with the list of repositories	82	Next, paste the following bash script in with the list of repositories
78	you obtained above and replace =your-username= with your username.	83	you obtained above and replace `your-username` with your
		84	username.
79		85
80	Note that this uses the SSH-based Git cloning method	86	Note that this uses the SSH-based Git cloning method (e.g.
81	(e.g. =git@git...=), so you'll need to ensure you have set up Sourcehut	87	`git@git...`), so you\'ll need to ensure you have set up
82	with your SSH key.	88	Sourcehut with your SSH key.
83		89
84	#+begin_src sh	90	```sh
85	repos=(repo1 repo2 repo3)	91	repos=(repo1 repo2 repo3)
86		92
87	# List all sub-directories in the current directory	93	# List all sub-directories in the current directory
	@@ -90,35 +96,37 @@ do
90	# Clone	96	# Clone
91	git clone git@git.sr.ht:~your-username/$repo	97	git clone git@git.sr.ht:~your-username/$repo
92	done	98	done
93	#+end_src	99	```
94		100
95	Finally, save the bash script and make it executable.	101	Finally, save the bash script and make it executable.
96		102
97	#+begin_src sh	103	```sh
98	chmod a+x clone_sourcehut_repos.sh	104	chmod a+x clone_sourcehut_repos.sh
99	#+end_src	105	```
100		106
101	Now you can run the script and should see the cloning process begin.	107	Now you can run the script and should see the cloning process begin.
102		108
103	#+begin_src sh	109	```sh
104	./clone_sourcehut_repos.sh	110	./clone_sourcehut_repos.sh
105	#+end_src	111	```
		112
		113	# Moving Repositories to a New Host
106		114
107	* Moving Repositories to a New Host
108	Now that you have all of your code repositories cloned to your local	115	Now that you have all of your code repositories cloned to your local
109	computer, you may want to change the remote host (e.g., moving from	116	computer, you may want to change the remote host (e.g., moving from
110	GitHub to GitLab). To do this, let's create another bash script:	117	GitHub to GitLab). To do this, let\'s create another bash script:
111		118
112	#+begin_src sh	119	```sh
113	nano change_remote_urls.sh	120	nano change_remote_urls.sh
114	#+end_src	121	```
115		122
116	Past the following information and be sure to change the URL information	123	Past the following information and be sure to change the URL information
117	to whichever host you are moving to. For this example, I am looping	124	to whichever host you are moving to. For this example, I am looping
118	through all of my cloned GitHub directories and changing them to	125	through all of my cloned GitHub directories and changing them to
119	Sourcehut (e.g. =<YOUR_NEW_REMOTE_URL>= -> =git@git.sr.ht:~myusername=).	126	Sourcehut (e.g. `<YOUR_NEW_REMOTE_URL>` -\>
		127	`git@git.sr.ht:~myusername`).
120		128
121	#+begin_src sh	129	```sh
122	# List all sub-directories in the current directory	130	# List all sub-directories in the current directory
123	for dir in */	131	for dir in */
124	do	132	do
	@@ -133,16 +141,16 @@ do
133	# Go back to main directory	141	# Go back to main directory
134	cd ..	142	cd ..
135	done	143	done
136	#+end_src	144	```
137		145
138	Finally, save the bash script and make it executable.	146	Finally, save the bash script and make it executable.
139		147
140	#+begin_src sh	148	```sh
141	chmod a+x change_remote_urls.sh	149	chmod a+x change_remote_urls.sh
142	#+end_src	150	```
143		151
144	Now you can run the script and should see the cloning process begin.	152	Now you can run the script and should see the cloning process begin.
145		153
146	#+begin_src sh	154	```sh
147	./change_remote_urls.sh	155	./change_remote_urls.sh
148	#+end_src	156	```

content/blog/2021-03-28-gemini-capsule.md added +186

@@ -0,0 +1,186 @@
	1	+++
	2	date = 2021-03-28
	3	title = "Launching a Gemini Capsule"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# What is Gemini?
	9
	10	[Gemini](https://gemini.circumlunar.space/) is an internet protocol
	11	introduced in June 2019 as an alternative to HTTP(S) or Gopher. In
	12	layman\'s terms, it\'s an alternative way to browse sites (called
	13	capsules) that requires a special browser. Since Gemini is not
	14	standardized as an internet standard, normal web browsers won\'t be able
	15	to load a Gemini capsule. Instead, you\'ll need to use [a
	16	Gemini-specific
	17	browser](https://gemini.%20circumlunar.space/clients.html).
	18
	19	The content found within a Gemini page is called
	20	[Gemtext](https://gemini.circumlunar.space/docs/cheatsheet.gmi) and is
	21	extremely basic (on purpose). Gemini only processes the text, no media
	22	content like images. However, you\'re able to style 3 levels of
	23	headings, regular text, links (which will display on their own line),
	24	quotes, and an unordered list.
	25
	26	Here\'s a complete listing of valid Gemtext:
	27
	28	``` txt
	29	# Heading 1
	30	## Heading 2
	31	### Heading 3
	32
	33	Regular text! Lorem ipsum dolor sit amet.
	34
	35	=> https://example.com My Website
	36	=> gemini://example.com My Gemini Capsule
	37
	38	> "If life were predictable it would cease to be life, and be without flavor." - Eleanor Roosevelt
	39
	40	My List:
	41	** Item
	42	** Item
	43
	44	```Anything between three backticks will be rendered as code.```
	45	```
	46
	47	### Free Option
	48
	49	There are probably numerous websites that allow you to create your
	50	personal Gemini capsule, but I\'m going to focus on the two sites that I
	51	have personally tested. The first option below, Midnight Pub, allows you
	52	to create/edit any Gemini files you want in your account. This is
	53	essentially a GUI option with a built-in text box for editing. The
	54	second option below, Sourcehut, allows you to use a Git repository and
	55	automatic build process to deploy your personal Gemini capsule every
	56	time you push a commit.
	57
	58	## Midnight Pub - Beginner Friendly
	59
	60	[Midnight Pub](https://midnight.pub/) is a small, virtual community
	61	meant to reflect the atmosphere of wandering into a small alley pub. The
	62	site is built in Gemtext and has a server-side process to convert
	63	Gemtext to HTML if someone loads the site in an HTTP(S) browser.
	64
	65	To create an account, you\'ll need to email the owner of the website to
	66	obtain a key. You can find their email on the Midnight Pub homepage.
	67	Once registered, head to [your account](https://midnight.pub/account)
	68	and select [manage site](https://midnight.pub/site). This is the screen
	69	where you can upload or create any files to be displayed on the
	70	internet.
	71
	72	For example, I\'ve created both an HTML file and a Gemini file. Remember
	73	that Gemini is automatically converted to HTML on the Pub, so you don\'t
	74	need an HTML version. For example, I created an HTML version to add in
	75	some extra styling.
	76
	77	All you need to do is create a page like `index.gmi` and use
	78	your Gemini browser to head over to your-username.midnight.pub to see
	79	the result.
	80
	81	That\'s all there is to it! Easy enough, right? Let\'s check out a more
	82	advanced version in the next section.
	83
	84	# Paid Option
	85
	86	As of 2021, Sourcehut has decided to require users to have a paid
	87	account in order to utilize their automated build system. For now, paid
	88	accounts can be as low as \$2/month.
	89
	90	## Sourcehut
	91
	92	[Sourcehut](https://sourcehut.org/) is a collection of software
	93	development tools, but mostly surrounds their hosted Git repository
	94	service. Simply put, it\'s a minimal and more private alternative to
	95	services like GitHub.
	96
	97	This walkthrough is more advanced and involves things like Git, SSH, the
	98	command line. If you don\'t think you know enough to do this, check out
	99	my walkthrough on creating a Gemini capsule for the Midnight Pub
	100	instead.
	101
	102	The first thing you\'ll need to do is create an SSH key pair, if you
	103	don\'t already have one on your system. Once created, grab the contents
	104	of `id_rsa.pub` and add it to your Sourcehut account
	105	settings - this will allow you to push and pull code changes without
	106	using a username/password.
	107
	108	```sh
	109	ssh keygen
	110	```
	111
	112	Next up, let\'s create a repository with the proper name so that the
	113	Sourcehut build system will know we want them to host a website for us.
	114	Use the following format exactly:
	115
	116	```sh
	117	mkdir your-username.srht.site && cd your-username.srht.site
	118	```
	119
	120	Now that we\'ve created the repo, let\'s initialize Git and add the
	121	proper remote URL.
	122
	123	```sh
	124	git init
	125	```
	126
	127	```sh
	128	git remote add origin git@git.sr.ht:~your-username/your-username.srht.site
	129	```
	130
	131	Now that our repository is set up and configured, we will need to create
	132	at least two files:
	133
	134	- `index.gmi`
	135	- `.build.yml`
	136
	137	For your `.build.yml` file, use the following content and be
	138	sure to update the `site` line with your username!
	139
	140	``` yaml
	141	image: alpine/latest
	142	oauth: pages.sr.ht/PAGES:RW
	143	environment:
	144	site: your-username.srht.site
	145	tasks:
	146	- package: \|
	147	cd $site
	148	tar -cvz . > ../site.tar.gz
	149	- upload: \|
	150	acurl -f https://pages.sr.ht/publish/$site -Fcontent=@site.tar.gz -Fprotocol=GEMINI
	151	```
	152
	153	For the `index.gmi` file, put whatever you want in there and
	154	save it. You could even just copy and paste the Gemtext cheatsheet.
	155
	156	If you want to serve both HTML and Gemini files from this repository,
	157	just add a second command to the `upload` section:
	158
	159	``` yaml
	160	- upload: \|
	161	acurl -f https://pages.sr.ht/publish/$site -Fcontent=@site.tar.gz -Fprotocol=GEMINI
	162	acurl -f https://pages.sr.ht/publish/$site -Fcontent=@site.tar.gz
	163	```
	164
	165	Lastly, commit your changes and push them to the remote repo.
	166
	167	```sh
	168	git add .; git commit -m "initial commit"; git push --set-upstream origin HEAD
	169	```
	170
	171	If you\'ve successfully created the files with the proper format,
	172	you\'ll see the terminal print a message that lets you know where the
	173	automatic build is taking place. For example, here\'s what the terminal
	174	tells me:
	175
	176	```sh
	177	remote: Build started:
	178	remote: https://builds.sr.ht/~user/job/689803 [.build.yml]
	179	```
	180
	181	Now that you\'ve properly built your Sourcehut page, you can browse to
	182	your-username.srht.site in a Gemini browser and view the final results.
	183	Take a look at the image below for my Sourcehut Gemini capsule.
	184
	185	![Gemini page on the amfora
	186	browser](https://img.cleberg.net/blog/20210328-launching-a-gemini-capsule/amfora.png)

content/blog/2021-03-28-gemini-capsule.org deleted −177

	@@ -1,177 +0,0 @@
1	#+title: Launching a Gemini Capsule
2	#+date: 2021-03-28
3	#+description: A guide to self-hosting a Gemini capsule on your own server.
4	#+filetags: :dev:
5
6	* What is Gemini?
7	[[https://gemini.circumlunar.space/][Gemini]] is an internet protocol
8	introduced in June 2019 as an alternative to HTTP(S) or Gopher. In
9	layman's terms, it's an alternative way to browse sites (called
10	capsules) that requires a special browser. Since Gemini is not
11	standardized as an internet standard, normal web browsers won't be able
12	to load a Gemini capsule. Instead, you'll need to use
13	[[https://gemini.%20circumlunar.space/clients.html][a Gemini-specific
14	browser]].
15
16	The content found within a Gemini page is called
17	[[https://gemini.circumlunar.space/docs/cheatsheet.gmi][Gemtext]] and is
18	/extremely/ basic (on purpose). Gemini only processes the text, no media
19	content like images. However, you're able to style 3 levels of headings,
20	regular text, links (which will display on their own line), quotes, and
21	an unordered list.
22
23	Here's a complete listing of valid Gemtext:
24
25	#+begin_src txt
26	# Heading 1
27	## Heading 2
28	### Heading 3
29
30	Regular text! Lorem ipsum dolor sit amet.
31
32	=> https://example.com My Website
33	=> gemini://example.com My Gemini Capsule
34
35	> "If life were predictable it would cease to be life, and be without flavor." - Eleanor Roosevelt
36
37	My List:
38	,** Item
39	,** Item
40
41	```Anything between three backticks will be rendered as code.```
42	#+end_src
43
44	*** Free Option
45	There are probably numerous websites that allow you to create your
46	personal Gemini capsule, but I'm going to focus on the two sites that I
47	have personally tested. The first option below, Midnight Pub, allows you
48	to create/edit any Gemini files you want in your account. This is
49	essentially a GUI option with a built-in text box for editing. The
50	second option below, Sourcehut, allows you to use a Git repository and
51	automatic build process to deploy your personal Gemini capsule every
52	time you push a commit.
53
54	** Midnight Pub - Beginner Friendly
55	[[https://midnight.pub/][Midnight Pub]] is a small, virtual community
56	meant to reflect the atmosphere of wandering into a small alley pub. The
57	site is built in Gemtext and has a server-side process to convert
58	Gemtext to HTML if someone loads the site in an HTTP(S) browser.
59
60	To create an account, you'll need to email the owner of the website to
61	obtain a key. You can find their email on the Midnight Pub homepage.
62	Once registered, head to [[https://midnight.pub/account][your account]]
63	and select [[https://midnight.pub/site][manage site]]. This is the
64	screen where you can upload or create any files to be displayed on the
65	internet.
66
67	For example, I've created both an HTML file and a Gemini file. Remember
68	that Gemini is automatically converted to HTML on the Pub, so you don't
69	need an HTML version. For example, I created an HTML version to add in
70	some extra styling.
71
72	All you need to do is create a page like =index.gmi= and use your Gemini
73	browser to head over to your-username.midnight.pub to see the result.
74
75	That's all there is to it! Easy enough, right? Let's check out a more
76	advanced version in the next section.
77
78	* Paid Option
79	As of 2021, Sourcehut has decided to require users to have a paid
80	account in order to utilize their automated build system. For now, paid
81	accounts can be as low as $2/month.
82
83	** Sourcehut
84	[[https://sourcehut.org/][Sourcehut]] is a collection of software
85	development tools, but mostly surrounds their hosted Git repository
86	service. Simply put, it's a minimal and more private alternative to
87	services like GitHub.
88
89	This walkthrough is more advanced and involves things like Git, SSH, the
90	command line. If you don't think you know enough to do this, check out
91	my walkthrough on creating a Gemini capsule for the Midnight Pub
92	instead.
93
94	The first thing you'll need to do is create an SSH key pair, if you
95	don't already have one on your system. Once created, grab the contents
96	of =id_rsa.pub= and add it to your Sourcehut account settings - this
97	will allow you to push and pull code changes without using a
98	username/password.
99
100	#+begin_src sh
101	ssh keygen
102	#+end_src
103
104	Next up, let's create a repository with the proper name so that the
105	Sourcehut build system will know we want them to host a website for us.
106	Use the following format exactly:
107
108	#+begin_src sh
109	mkdir your-username.srht.site && cd your-username.srht.site
110	#+end_src
111
112	Now that we've created the repo, let's initialize Git and add the proper
113	remote URL.
114
115	#+begin_src sh
116	git init
117	#+end_src
118
119	#+begin_src sh
120	git remote add origin git@git.sr.ht:~your-username/your-username.srht.site
121	#+end_src
122
123	Now that our repository is set up and configured, we will need to create
124	at least two files:
125
126	- =index.gmi=
127	- =.build.yml=
128
129	For your =.build.yml= file, use the following content and be sure to
130	update the =site= line with your username!
131
132	#+begin_src yaml
133	image: alpine/latest
134	oauth: pages.sr.ht/PAGES:RW
135	environment:
136	site: your-username.srht.site
137	tasks:
138	- package: \|
139	cd $site
140	tar -cvz . > ../site.tar.gz
141	- upload: \|
142	acurl -f https://pages.sr.ht/publish/$site -Fcontent=@site.tar.gz -Fprotocol=GEMINI
143	#+end_src
144
145	For the =index.gmi= file, put whatever you want in there and save it.
146	You could even just copy and paste the Gemtext cheatsheet.
147
148	If you want to serve both HTML and Gemini files from this repository,
149	just add a second command to the =upload= section:
150
151	#+begin_src yaml
152	- upload: \|
153	acurl -f https://pages.sr.ht/publish/$site -Fcontent=@site.tar.gz -Fprotocol=GEMINI
154	acurl -f https://pages.sr.ht/publish/$site -Fcontent=@site.tar.gz
155	#+end_src
156
157	Lastly, commit your changes and push them to the remote repo.
158
159	#+begin_src sh
160	git add .; git commit -m "initial commit"; git push --set-upstream origin HEAD
161	#+end_src
162
163	If you've successfully created the files with the proper format, you'll
164	see the terminal print a message that lets you know where the automatic
165	build is taking place. For example, here's what the terminal tells me:
166
167	#+begin_src sh
168	remote: Build started:
169	remote: https://builds.sr.ht/~user/job/689803 [.build.yml]
170	#+end_src
171
172	Now that you've properly built your Sourcehut page, you can browse to
173	your-username.srht.site in a Gemini browser and view the final results.
174	Take a look at the image below for my Sourcehut Gemini capsule.
175
176	#+caption: Gemini page on the amfora browser
177	[[https://img.cleberg.net/blog/20210328-launching-a-gemini-capsule/amfora.png]]

content/blog/2021-03-28-vaporwave-vs-outrun.md added +133

@@ -0,0 +1,133 @@
	1	+++
	2	date = 2021-03-28
	3	title = "Vaporware vs. Outrun"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Overview
	9
	10	When it comes to an aesthetic that originated primarily online, there
	11	tends to be a lot of confusion around what falls into each specific
	12	genre. This post discusses Vaporwave and Outrun, which have become
	13	almost synonymous in the minds of those online who aren\'t hardcore into
	14	these genres of media. More specifically, Outrun is largely an unknown
	15	term while all aesthetics in these two genres are usually attributed to
	16	Vaporwave. For example, take a look at the image search results for
	17	Vaporwave: the results include a lot\* of Outrun-themed images.
	18	You\'ll find a similar trend almost everywhere.
	19
	20	![Vaporwave Search
	21	Results](https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/vaporwave-search-results.png)
	22
	23	# Vaporwave
	24
	25	![Macintosh Plus Album
	26	Cover](https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/macintosh-plus.png)
	27
	28	Okay, so what is Vaporwave? I\'m going to just copy-and-paste some
	29	general info from the Wikipedia article on
	30	[Vaporwave](https://en.wikipedia.org/wiki/Vaporwave), so that I\'m not
	31	repeating everything you can already search for online:
	32
	33	> Vaporwave is a microgenre of electronic music, a visual art style, and
	34	> an Internet meme that emerged in the early 2010s. It is defined partly
	35	> by its slowed-down, chopped and screwed samples of smooth jazz,
	36	> elevator, R&B, and lounge music from the 1980s and 1990s. The
	37	> surrounding subculture is sometimes associated with an ambiguous or
	38	> satirical take on consumer capitalism and pop culture, and tends to be
	39	> characterized by a nostalgic or surrealist engagement with the popular
	40	> entertainment, technology and advertising of previous decades.
	41	> Visually, it incorporates early Internet imagery, late 1990s web
	42	> design, glitch art, anime, 3D-rendered objects, and cyberpunk tropes
	43	> in its cover artwork and music videos.
	44
	45	This is an excellent summary, and it helps address my point here: there
	46	are specific aspects that make Vaporwave unique:
	47
	48	## Time Frame
	49
	50	The time frame for references, logos, etc. focuses mostly on the 1990s
	51	in Vaporwave. You\'ll see old school Pepsi logos, Microsoft 95 screens,
	52	tropical plants, classic marble sculptures, and many references from
	53	Japan\'s influence in the 90s.
	54
	55	## Art
	56
	57	The color scheme is generally a soft, light palette that uses pastel
	58	colors. The backdrop will often be in a light-pink or teal blue.
	59
	60	## Music
	61
	62	The musical genre of Vaporwave incorporates soft tunes, lounge music,
	63	and sound effects that will make the listener reminisce of the 90s. The
	64	sounds of the genre are generally slower-paced and calming. The major
	65	breakthrough artist for Vaporwave was [Macintosh
	66	Plus](https://en.wikipedia.org/wiki/Vektroid), who released the album
	67	[Floral
	68	Shoppe](https://archive.org/details/MACINTOSHPLUS-FLORALSHOPPE_complete)
	69	in 2011. Another more recent example is the artist
	70	[sadbert](https://sadbert.bandcamp.com/), whose latest album
	71	incorporates the upbeat tones of the 1999 Dilbert TV series.
	72
	73	Notice that Vaporwave doesn\'t include things like racing cars,
	74	futuristic technology, chrome, or the deep orange/purple color scheme.
	75	Vaporwave is a focus on the idyllic state of the world when technology
	76	was becoming common in households, a reality that we have already
	77	experienced. Focus on the most aesthetically-pleasing parts of that past
	78	is a large part of Vaporwave.
	79
	80	# Outrun
	81
	82	![Outrun](https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/outrun.png)
	83
	84	Now, let\'s get to Outrun. This one is a little trickier since the genre
	85	has largely been lumped under the Vaporwave title for so long. However,
	86	it stems from the [Synthwave](https://en.wikipedia.org/wiki/Synthwave)
	87	music genre and is likely named after the 1986 racer game, [Out
	88	Run](https://en.wikipedia.org/wiki/Out_Run).
	89
	90	## Time Frame
	91
	92	Outrun can be thought of as a retro-futuristic aesthetic born from the
	93	1980s.
	94
	95	## Art
	96
	97	The color scheme uses a very dark color palette with the main colors
	98	being deep oranges, blues, and purples. Red edges are common around
	99	objects in Outrun art. The background of the Outrun aesthetic is almost
	100	always a neon grid like you\'d expect to see in Tron or a 1980s arcade
	101	machine.
	102
	103	Classic sports cars, chrome robots, computer generated graphics and
	104	fonts, and the occasional use of rain or palm trees can be found in
	105	Outrun art.
	106
	107	## Music
	108
	109	This aesthetic has a more aggressive and fast-paced style of music,
	110	which tends to match the subject of the art in this aesthetic.
	111
	112	Outrun enthusiasts love what people in the 1980s thought the future
	113	would look like. Take a look at a common video game discussed in Outrun
	114	circles, Far Cry 3: Blood Dragon:
	115
	116	![Fry Cry 3: Blood
	117	Dragon](https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/far-cry.png)
	118
	119	Another example that doesn\'t force the color scheme as hard as some
	120	online art does is Kung Fury:
	121
	122	![Kung
	123	Fury](https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/kung-fury.png)
	124
	125	![Kung Fury Hacker
	126	Scene](https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/kung-fury-hacker.png)
	127
	128	# Conclusion
	129
	130	While Vaporwave and Outrun share similarities, they are two distinct
	131	aesthetics with many important distinctions. Someone who enjoys one may
	132	not necessarily enjoy the other, so it\'s important to make sure we
	133	properly describe the aesthetic we\'re looking for.

content/blog/2021-03-28-vaporwave-vs-outrun.org deleted −124

	@@ -1,124 +0,0 @@
1	#+title: Vaporwave vs Outrun
2	#+date: 2021-03-28
3	#+description: Learn the differences between the vaporwave and Outrun aesthetics.
4	#+filetags: :personal:
5
6	* Overview
7	When it comes to an aesthetic that originated primarily online, there
8	tends to be a lot of confusion around what falls into each specific
9	genre. This post discusses Vaporwave and Outrun, which have become
10	almost synonymous in the minds of those online who aren't hardcore into
11	these genres of media. More specifically, Outrun is largely an unknown
12	term while all aesthetics in these two genres are usually attributed to
13	Vaporwave. For example, take a look at the image search results for
14	Vaporwave: the results include a lot* of Outrun-themed images. You'll
15	find a similar trend almost everywhere.
16
17	#+caption: Vaporwave Search Results
18	[[https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/vaporwave-search-results.png]]
19
20	* Vaporwave
21	#+caption: Macintosh Plus Album Cover
22	[[https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/macintosh-plus.png]]
23
24	Okay, so what is Vaporwave? I'm going to just copy-and-paste some
25	general info from the Wikipedia article on
26	[[https://en.wikipedia.org/wiki/Vaporwave][Vaporwave]], so that I'm not
27	repeating everything you can already search for online:
28
29	#+begin_quote
30	Vaporwave is a microgenre of electronic music, a visual art style, and
31	an Internet meme that emerged in the early 2010s. It is defined partly
32	by its slowed-down, chopped and screwed samples of smooth jazz,
33	elevator, R&B, and lounge music from the 1980s and 1990s. The
34	surrounding subculture is sometimes associated with an ambiguous or
35	satirical take on consumer capitalism and pop culture, and tends to be
36	characterized by a nostalgic or surrealist engagement with the popular
37	entertainment, technology and advertising of previous decades. Visually,
38	it incorporates early Internet imagery, late 1990s web design, glitch
39	art, anime, 3D-rendered objects, and cyberpunk tropes in its cover
40	artwork and music videos.
41	#+end_quote
42
43	This is an excellent summary, and it helps address my point here: there
44	are specific aspects that make Vaporwave unique:
45
46	** Time Frame
47	The time frame for references, logos, etc. focuses mostly on the 1990s
48	in Vaporwave. You'll see old school Pepsi logos, Microsoft 95 screens,
49	tropical plants, classic marble sculptures, and many references from
50	Japan's influence in the 90s.
51
52	** Art
53	The color scheme is generally a soft, light palette that uses pastel
54	colors. The backdrop will often be in a light-pink or teal blue.
55
56	** Music
57	The musical genre of Vaporwave incorporates soft tunes, lounge music,
58	and sound effects that will make the listener reminisce of the 90s. The
59	sounds of the genre are generally slower-paced and calming. The major
60	breakthrough artist for Vaporwave was
61	[[https://en.wikipedia.org/wiki/Vektroid][Macintosh Plus]], who released
62	the album
63	[[https://archive.org/details/MACINTOSHPLUS-FLORALSHOPPE_complete][Floral
64	Shoppe]] in 2011. Another more recent example is the artist
65	[[https://sadbert.bandcamp.com/][sadbert]], whose latest album
66	incorporates the upbeat tones of the 1999 Dilbert TV series.
67
68	Notice that Vaporwave doesn't include things like racing cars,
69	futuristic technology, chrome, or the deep orange/purple color scheme.
70	Vaporwave is a focus on the idyllic state of the world when technology
71	was becoming common in households, a reality that we have already
72	experienced. Focus on the most aesthetically-pleasing parts of that past
73	is a large part of Vaporwave.
74
75	* Outrun
76	#+caption: Outrun
77	[[https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/outrun.png]]
78
79	Now, let's get to Outrun. This one is a little trickier since the genre
80	has largely been lumped under the Vaporwave title for so long. However,
81	it stems from the [[https://en.wikipedia.org/wiki/Synthwave][Synthwave]]
82	music genre and is likely named after the 1986 racer game,
83	[[https://en.wikipedia.org/wiki/Out_Run][Out Run]].
84
85	** Time Frame
86	Outrun can be thought of as a retro-futuristic aesthetic born from the
87	1980s.
88
89	** Art
90	The color scheme uses a very dark color palette with the main colors
91	being deep oranges, blues, and purples. Red edges are common around
92	objects in Outrun art. The background of the Outrun aesthetic is almost
93	always a neon grid like you'd expect to see in Tron or a 1980s arcade
94	machine.
95
96	Classic sports cars, chrome robots, computer generated graphics and
97	fonts, and the occasional use of rain or palm trees can be found in
98	Outrun art.
99
100	** Music
101	This aesthetic has a more aggressive and fast-paced style of music,
102	which tends to match the subject of the art in this aesthetic.
103
104	Outrun enthusiasts love what people in the 1980s thought the future
105	would look like. Take a look at a common video game discussed in Outrun
106	circles, Far Cry 3: Blood Dragon:
107
108	#+caption: Fry Cry 3: Blood Dragon
109	[[https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/far-cry.png]]
110
111	Another example that doesn't force the color scheme as hard as some
112	online art does is Kung Fury:
113
114	#+caption: Kung Fury
115	[[https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/kung-fury.png]]
116
117	#+caption: Kung Fury Hacker Scene
118	[[https://img.cleberg.net/blog/20210328-vaporwave-vs-outrun/kung-fury-hacker.png]]
119
120	* Conclusion
121	While Vaporwave and Outrun share similarities, they are two distinct
122	aesthetics with many important distinctions. Someone who enjoys one may
123	not necessarily enjoy the other, so it's important to make sure we
124	properly describe the aesthetic we're looking for.

content/blog/2021-03-30-vps-web-server.md added +418

@@ -0,0 +1,418 @@
	1	+++
	2	date = 2021-03-30
	3	title = "How to Set Up a VPS Web Server"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Shared Hosting vs. VPS
	9
	10	Choosing a place to host a website is one of the most confusing
	11	decisions for beginner web developers. Even for experienced web devs,
	12	choosing between different forms of web hosting can be a daunting
	13	choice.
	14
	15	First, let\'s take a look at [shared web
	16	hosting](https://en.wikipedia.org/wiki/Shared_web_hosting_service).
	17	Shared web hosting is a product where you are purchasing a small piece
	18	of a web server that is being shared between many websites. As a result,
	19	the cost of shared hosting is extremely low. You won\'t have access to
	20	the server itself, which means you can\'t install your own software on
	21	the server, such as Docker. Usually, you are simply allowed to connect
	22	your domains to the server, set up domain security, and other small
	23	utilities.
	24
	25	In contrast, a [virtual private
	26	server](https://en.wikipedia.org/wiki/Virtual_private_server) (VPS) is a
	27	virtual machine that replicates the environment of having a dedicated
	28	server to yourself. You are able to control the virtual server\'s host
	29	names, base file system, package manager, etc. Another great upside of a
	30	VPS is that since it\'s virtual, the company providing the VPS can
	31	dynamically increase the disk size, RAM size, or number of CPUs at any
	32	time. However, the virtual server is still physically located on a
	33	server that is shared between multiple virtual servers.
	34
	35	The choice between shared hosting and VPS mostly depends on your skill
	36	level with system administration. If you\'re comforting working on a
	37	server that is mostly left up to you (or you\'re willing to learn), then
	38	a VPS is usually a better option. However, shared hosting is a fantastic
	39	option for people who don\'t want to have to learn how to manage their
	40	server.
	41
	42	# My Situation
	43
	44	I had used shared hosting for approximately 5 years before trying my
	45	first VPS. I manage a homelab and have had success running a server and
	46	performing typical sysadmin duties, but I was still hesitant to get a
	47	VPS. One fear was that I always struggled to properly set up the
	48	networking part of a server - DNS and hostname configurations were not
	49	my friend.
	50
	51	As a little bit of background, I originally used
	52	[Siteground](https://www.siteground.com) for my initially shared hosting
	53	and stayed on that platform for at least a year. However, the UI was
	54	clunky, and I didn\'t like how they handled certain technical aspects,
	55	so I switched to [Namecheap](https://www.namecheap.com). Namecheap was
	56	great because it is the service I primarily use for purchasing domain
	57	names, which made it incredibly easy to link them to my hosting service.
	58	However, it was still mediocre shared hosting, and Namecheap is
	59	notorious for not letting you use [Let\'s
	60	Encrypt](https://letsencrypt.org) to obtain free SSL/TLS certificates;
	61	Namecheap wants to make you purchase certificates through their store.
	62
	63	Finally, I settled down with [iWebFusion](https://www.iwebfusion.net)
	64	for about the last year of my shared hosting. This service was pretty
	65	great, came with free SSL/TLS, and I never had any complaints.
	66
	67	However, I finally grew tired of not being able to install software on
	68	my own web server. I wanted to be able to try out things like
	69	[Postmill](https://postmill.xyz) or [Matrix](https://matrix.org). This
	70	is possible with a VPS, so I decided to grab a new domain name to try it
	71	out.
	72
	73	# Getting Started: Buying a VPS
	74
	75	The first step to moving over to a VPS is (you guessed it): finding a
	76	VPS provider. For my VPSs, I use [1984](https://1984hosting.com) and
	77	prefer their services much more than any alternative, due to their
	78	location (Iceland), their [privacy
	79	policy](https://1984hosting.com/GDPR/), their respect for GDPR, and the
	80	ability to remain anonymous if you pay in Bitcoin or Monero.
	81
	82	[Njalla](https://njal.la) is another good, privacy-oriented option for
	83	VPS services.
	84
	85	You\'ll have to decide what specifications you want on your VPS. For me,
	86	I only build and deploy low-resource HTML, PHP, and Python websites.
	87	This means I can survive on the smallest VPS: 1 CPU, 1GB of RAM, and
	88	25GB SSD for \$5.00 per month.
	89
	90	As noted above, the great thing about a VPS is you can request your
	91	provider to increase the resources at any time.
	92
	93	# Configuring DNS Settings
	94
	95	Okay, so now let\'s get into some actual work that has to be done to get
	96	content moved from a shared host to a VPS. At this point, I\'m assuming
	97	you have a shared host with website content that you can still access,
	98	and you\'ve purchased a new VPS and can SSH into that server.
	99
	100	The first change is minor, but it should be done immediately in order to
	101	get things moving: DNS settings. Go to wherever your DNS settings are
	102	handled. If your shared host also managed your DNS settings, you\'ll
	103	need to first move that DNS over to your new VPS provider. For me, I
	104	route my DNS through [Gandi](https://www.gandi.net).
	105
	106	Once you know where your DNS settings are, go ahead and update the
	107	`A` records to match the public IP address of your VPS. For
	108	example:
	109
	110	``` txt
	111	A example.com xxx.xxx.xxx.xxx
	112	A subdomain xxx.xxx.xxx.xxx
	113	CNAME www example.com.
	114	```
	115
	116	If you have any other records that require updates, such as MX or TXT
	117	records for a mail server, be sure to update those accordingly.
	118	Personally, I don\'t host my own mail server. I route all mail on my
	119	custom domains to [Migadu](https://www.migadu.com). Hosting your own
	120	email server can become complex quickly and is not for beginners.
	121
	122	DNS changes can take up to 48 hours to propagate, so be sure to give it
	123	some time before assuming you\'ve made an error.
	124
	125	# Server Updates and Packages
	126
	127	Now that the DNS settings have been changed, let\'s set up our server
	128	while we wait for the DNS to propagate. First up is to ssh into your
	129	server. If you\'ve signed up with a service like DigitalOcean, you can
	130	add your SSH key to your account and to your VPS droplet so that you
	131	don\'t need a password in order to SSH.
	132
	133	```sh
	134	ssh root@xxx.xxx.xxx.xxx
	135	```
	136
	137	The VPS that is used in this blog post runs Ubuntu 20.04 with an Apache
	138	web server. If you\'re working on a different operating system (OS) or
	139	want a different web server, such as Nginx, you\'ll have to use
	140	different commands to set it up.
	141
	142	First, let\'s update and upgrade our server.
	143
	144	NOTE: Since we have logged in to the server as `root` for
	145	now, we don\'t need to use the `sudo` modifier before our
	146	commands.
	147
	148	```sh
	149	apt update && apt upgrade -y
	150	```
	151
	152	# Create A User Account
	153
	154	While being able to use `root` can be beneficial at times,
	155	you shouldn\'t use `root` unless you have to.
	156
	157	So let\'s set up a new user in our system. The `-m` option
	158	below tells the OS to create a home directory for the new user.
	159
	160	```sh
	161	adduser USERNAME
	162	```
	163
	164	Now, create a password for that user.
	165
	166	```sh
	167	passwd USERNAME
	168	```
	169
	170	Finally, add the user to the sudoers file, so they can perform
	171	priveleged commands.
	172
	173	```sh
	174	usermod -a -G sudo USERNAME
	175	```
	176
	177	If you are using SSH keys and not passwords, you\'ll need to copy your
	178	SSH key from your local machine to the VPS. If you haven\'t disabled
	179	password-based SSH yet, the easiest way to do this is
	180	`ssh-copy-id` from your local computer (not from the VPS):
	181
	182	```sh
	183	ssh-copy-id testuser@xxx.xxx.xxx.xxx
	184	```
	185
	186	If you\'ve disabled password-based SSH, you\'ll need to manually copy
	187	your SSH key into the `~/.ssh/authorized_keys` file.
	188
	189	# Install Software
	190
	191	Our goal here is to host a web server, so the next step is to install
	192	the Apache web server and any other packages we need.
	193
	194	From this point on, I will be logged in as a user (not
	195	`root`) and will need to use the `sudo` modifier
	196	for most commands.
	197
	198	```sh
	199	sudo apt update; sudo apt upgrade -y; sudo apt autoremove -y
	200	sudo apt install apache2
	201	```
	202
	203	If you need other language support, such as PHP, you\'ll need to install
	204	that too.
	205
	206	```sh
	207	sudo apt install libapache2-mod-php php-dom
	208	sudo a2enmod php
	209	sudo systemctl restart apache2
	210	```
	211
	212	# Website Files & Folders
	213
	214	Next up is to create the directories for the domain(s) we want to be
	215	hosted on this web server.
	216
	217	```sh
	218	cd /var/www
	219	sudo mkdir example.com
	220	```
	221
	222	We have a folder for `example.com` now, so let\'s add an
	223	`index.html` file and put it within a specific
	224	`public_html` folder. You don\'t need this
	225	`public_html` if you don\'t want it, but it helps with
	226	organizing items related to `example.com` that you don\'t
	227	want to publish to the internet.
	228
	229	```sh
	230	cd example.com
	231	sudo mkdir public_html && cd public_html
	232	sudo nano index.html
	233	```
	234
	235	You can put anything you want in this `index.html` file. If
	236	you can\'t think of anything, paste this in there:
	237
	238	``` html
	239	<!DOCTYPE html>
	240	<html lang="en">
	241	<head>
	242	<meta charset="utf-8" />
	243	<meta name="viewport" content="width=device-width, initial-scale=1" />
	244	<title>Hello, world!</title>
	245	</head>
	246	<body>
	247	<h1>Hello, world!</h1>
	248	</body>
	249	</html>
	250	```
	251
	252	If you want something to be served at
	253	`example.com/page01/file.txt`, you\'ll have to create the
	254	`page01` directory under the `example.com`
	255	directory. For example:
	256
	257	```sh
	258	cd /var/www/example.com/public_html
	259	sudo mkdir page01
	260	sudo nano file.txt
	261	```
	262
	263	# Apache Configuration
	264
	265	Now, let\'s set up the files that will tell the server where to find the
	266	files for `example.com`. We will copy the default
	267	configuration file and create our own.
	268
	269	```sh
	270	cd /etc/apache2/sites-available
	271	sudo cp 000-default.conf example.com.conf
	272	sudo nano example.com.conf
	273	```
	274
	275	This configuration file will have a few default lines, but you\'ll need
	276	to edit it to look similar to this (settings may change based on your
	277	personal needs):
	278
	279	``` config
	280	<VirtualHost *:80>
	281	ServerAdmin your-email@email-provider.com
	282	ServerName example.com
	283	ServerAlias www.example.com
	284	DocumentRoot /var/www/example.com/public_html
	285	ErrorLog ${APACHE_LOG_DIR}/error.log
	286	CustomLog ${APACHE_LOG_DIR}/access.log combined
	287	</VirtualHost>
	288	```
	289
	290	Now, enable the configuration for your new site, disable the default
	291	configuration, and reload the web server.
	292
	293	```sh
	294	sudo a2ensite example.com.conf
	295	sudo a2dissite 000-default.conf
	296	sudo systemctl reload apache2
	297	```
	298
	299	You can always run a test to make sure no errors or warnings are found
	300	in your configuration files.
	301
	302	```sh
	303	sudo apache2ctl configtest
	304	```
	305
	306	Now, restart the web server entirely. After this, you should be able to
	307	browse to `http://example.com` and see the HTML content you
	308	provided earlier. Note that SSL/TLS has not been enabled yet, so you
	309	won\'t be able to use the secure version yet
	310	(`https://example.com`).
	311
	312	```sh
	313	sudo systemctl restart apache2
	314	```
	315
	316	You can repeat this for as many websites as you need. Just create the
	317	domain folders in `/var/www/`, add the configuration file,
	318	enable the configuration, and restart `apache2`.
	319
	320	# SSL/TLS Certificates: Serve Websites Over HTTPS
	321
	322	In order to serve secure content, you\'ll need to obtain SSL/TLS
	323	certificates. Luckily, there\'s a free tool called
	324	[Certbot](https://certbot.eff.org) that helps us with the process.
	325
	326	The first step is to install `snapd` and `core`
	327	for Ubuntu.
	328
	329	```sh
	330	sudo apt install snapd
	331	sudo snap install core
	332	sudo snap refresh core
	333	```
	334
	335	Next, install the `certbot` snap package.
	336
	337	```sh
	338	sudo snap install --classic certbot
	339	```
	340
	341	Execute the following command to ensure that the `certbot`
	342	command can be run.
	343
	344	```sh
	345	sudo ln -s /snap/bin/certbot /usr/bin/certbot
	346	```
	347
	348	Finally, you can run `certbot` one of two ways:
	349
	350	1. run it and let it alter your Apache configuration files
	351	automatically to enable HTTPS redirects.
	352	2. run it and only allow it to create certificates. You\'ll need to
	353	manually alter the config files to enable HTTPS redirects.
	354
	355	Run certbot and allow automatic config changes:
	356
	357	```sh
	358	sudo certbot --apache
	359	```
	360
	361	Run certbot for certificates only and don\'t allow it to alter config
	362	files:
	363
	364	```sh
	365	sudo certbot certonly --apache
	366	```
	367
	368	The Certbot packages on your system come with a cron job or systemd
	369	timer that will renew your certificates automatically before they
	370	expire. You will not need to run Certbot again unless you change your
	371	configuration. You can test automatic renewal for your certificates by
	372	running this command:
	373
	374	```sh
	375	sudo certbot renew --dry-run
	376	```
	377
	378	Now, test your domains by going to `https://example.com`.
	379
	380	# Firewall Security
	381
	382	To enable better security on your server, you\'ll need to enable a basic
	383	firewall. For Ubuntu, we\'ll use [the uncomplicated
	384	firewall](../secure-your-network-with-the-uncomplicated-firewall/).
	385
	386	Now, add the following rules to the firewall allow SSH, Apache, and
	387	HTTP(S) connections. If you need to, you can enable different ports for
	388	specifics applications, SFTP, etc.
	389
	390	```sh
	391	sudo ufw default deny incoming
	392	sudo ufw default allow outgoing
	393	sudo ufw allow OpenSSH
	394	sudo ufw allow Apache
	395	sudo ufw allow proto tcp from any to any port 80,443
	396	```
	397
	398	Once you\'ve added all the rules you need, enable the firewall.
	399
	400	```sh
	401	sudo ufw enable
	402	```
	403
	404	# Troubleshooting
	405
	406	If you run into any issues during your VPS set-up, be sure to walk back
	407	through your actions and make sure you didn\'t miss any steps.
	408
	409	Many websites have fantastic guides to setting up various web servers.
	410	This is one of the areas [where DigitalOcean
	411	shines](https://www.digitalocean.%20com/community/tutorials). For
	412	simpler or more Linux-oriented questions, I suggest using \[Linuxize\]
	413	(<https://linuxize.com>).
	414
	415	If you\'re getting certain errors (e.g.
	416	`500 Internal Server Error`) and need to debug locally, you
	417	can view the `access.log` and `error.log` files in
	418	the `/var/log/apache/` directory.

content/blog/2021-03-30-vps-web-server.org deleted −399

	@@ -1,399 +0,0 @@
1	#+title: How to Set Up a VPS Web Server
2	#+date: 2021-03-30
3	#+description: A beginner's guide to setting up a virtual private server (VPS).
4	#+filetags: :sysadmin:
5
6	* Shared Hosting vs. VPS
7	Choosing a place to host a website is one of the most confusing
8	decisions for beginner web developers. Even for experienced web devs,
9	choosing between different forms of web hosting can be a daunting
10	choice.
11
12	First, let's take a look at
13	[[https://en.wikipedia.org/wiki/Shared_web_hosting_service][shared web
14	hosting]]. Shared web hosting is a product where you are purchasing a
15	small piece of a web server that is being shared between many websites.
16	As a result, the cost of shared hosting is extremely low. You won't have
17	access to the server itself, which means you can't install your own
18	software on the server, such as Docker. Usually, you are simply allowed
19	to connect your domains to the server, set up domain security, and other
20	small utilities.
21
22	In contrast, a
23	[[https://en.wikipedia.org/wiki/Virtual_private_server][virtual private
24	server]] (VPS) is a virtual machine that replicates the environment of
25	having a dedicated server to yourself. You are able to control the
26	virtual server's host names, base file system, package manager, etc.
27	Another great upside of a VPS is that since it's virtual, the company
28	providing the VPS can dynamically increase the disk size, RAM size, or
29	number of CPUs at any time. However, the virtual server is still
30	physically located on a server that is shared between multiple virtual
31	servers.
32
33	The choice between shared hosting and VPS mostly depends on your skill
34	level with system administration. If you're comforting working on a
35	server that is mostly left up to you (or you're willing to learn), then
36	a VPS is usually a better option. However, shared hosting is a fantastic
37	option for people who don't want to have to learn how to manage their
38	server.
39
40	* My Situation
41	I had used shared hosting for approximately 5 years before trying my
42	first VPS. I manage a homelab and have had success running a server and
43	performing typical sysadmin duties, but I was still hesitant to get a
44	VPS. One fear was that I always struggled to properly set up the
45	networking part of a server - DNS and hostname configurations were not
46	my friend.
47
48	As a little bit of background, I originally used
49	[[https://www.siteground.com][Siteground]] for my initially shared
50	hosting and stayed on that platform for at least a year. However, the UI
51	was clunky, and I didn't like how they handled certain technical
52	aspects, so I switched to [[https://www.namecheap.com][Namecheap]].
53	Namecheap was great because it is the service I primarily use for
54	purchasing domain names, which made it incredibly easy to link them to
55	my hosting service. However, it was still mediocre shared hosting, and
56	Namecheap is notorious for not letting you use
57	[[https://letsencrypt.org][Let's Encrypt]] to obtain free SSL/TLS
58	certificates; Namecheap wants to make you purchase certificates through
59	their store.
60
61	Finally, I settled down with [[https://www.iwebfusion.net][iWebFusion]]
62	for about the last year of my shared hosting. This service was pretty
63	great, came with free SSL/TLS, and I never had any complaints.
64
65	However, I finally grew tired of not being able to install software on
66	my own web server. I wanted to be able to try out things like
67	[[https://postmill.xyz][Postmill]] or [[https://matrix.org][Matrix]].
68	This is possible with a VPS, so I decided to grab a new domain name to
69	try it out.
70
71	* Getting Started: Buying a VPS
72	The first step to moving over to a VPS is (you guessed it): finding a
73	VPS provider. For my VPSs, I use [[https://1984hosting.com][1984]] and
74	prefer their services much more than any alternative, due to their
75	location (Iceland), their [[https://1984hosting.com/GDPR/][privacy
76	policy]], their respect for GDPR, and the ability to remain anonymous if
77	you pay in Bitcoin or Monero.
78
79	[[https://njal.la][Njalla]] is another good, privacy-oriented option for
80	VPS services.
81
82	You'll have to decide what specifications you want on your VPS. For me,
83	I only build and deploy low-resource HTML, PHP, and Python websites.
84	This means I can survive on the smallest VPS: 1 CPU, 1GB of RAM, and
85	25GB SSD for $5.00 per month.
86
87	As noted above, the great thing about a VPS is you can request your
88	provider to increase the resources at any time.
89
90	* Configuring DNS Settings
91	Okay, so now let's get into some actual work that has to be done to get
92	content moved from a shared host to a VPS. At this point, I'm assuming
93	you have a shared host with website content that you can still access,
94	and you've purchased a new VPS and can SSH into that server.
95
96	The first change is minor, but it should be done immediately in order to
97	get things moving: DNS settings. Go to wherever your DNS settings are
98	handled. If your shared host also managed your DNS settings, you'll need
99	to first move that DNS over to your new VPS provider. For me, I route my
100	DNS through [[https://www.gandi.net][Gandi]].
101
102	Once you know where your DNS settings are, go ahead and update the =A=
103	records to match the public IP address of your VPS. For example:
104
105	#+begin_src txt
106	A example.com xxx.xxx.xxx.xxx
107	A subdomain xxx.xxx.xxx.xxx
108	CNAME www example.com.
109	#+end_src
110
111	If you have any other records that require updates, such as MX or TXT
112	records for a mail server, be sure to update those accordingly.
113	Personally, I don't host my own mail server. I route all mail on my
114	custom domains to [[https://www.migadu.com][Migadu]]. Hosting your own
115	email server can become complex quickly and is not for beginners.
116
117	DNS changes can take up to 48 hours to propagate, so be sure to give it
118	some time before assuming you've made an error.
119
120	* Server Updates and Packages
121	Now that the DNS settings have been changed, let's set up our server
122	while we wait for the DNS to propagate. First up is to ssh into your
123	server. If you've signed up with a service like DigitalOcean, you can
124	add your SSH key to your account and to your VPS droplet so that you
125	don't need a password in order to SSH.
126
127	#+begin_src sh
128	ssh root@xxx.xxx.xxx.xxx
129	#+end_src
130
131	The VPS that is used in this blog post runs Ubuntu 20.04 with an Apache
132	web server. If you're working on a different operating system (OS) or
133	want a different web server, such as Nginx, you'll have to use different
134	commands to set it up.
135
136	First, let's update and upgrade our server.
137
138	NOTE: Since we have logged in to the server as =root= for now, we
139	don't need to use the =sudo= modifier before our commands.
140
141	#+begin_src sh
142	apt update && apt upgrade -y
143	#+end_src
144
145	* Create A User Account
146	While being able to use =root= can be beneficial at times, you shouldn't
147	use =root= unless you have to.
148
149	So let's set up a new user in our system. The =-m= option below tells
150	the OS to create a home directory for the new user.
151
152	#+begin_src sh
153	adduser USERNAME
154	#+end_src
155
156	Now, create a password for that user.
157
158	#+begin_src sh
159	passwd USERNAME
160	#+end_src
161
162	Finally, add the user to the sudoers file, so they can perform
163	priveleged commands.
164
165	#+begin_src sh
166	usermod -a -G sudo USERNAME
167	#+end_src
168
169	If you are using SSH keys and not passwords, you'll need to copy your
170	SSH key from your local machine to the VPS. If you haven't disabled
171	password-based SSH yet, the easiest way to do this is =ssh-copy-id= from
172	your local computer (not from the VPS):
173
174	#+begin_src sh
175	ssh-copy-id testuser@xxx.xxx.xxx.xxx
176	#+end_src
177
178	If you've disabled password-based SSH, you'll need to manually copy your
179	SSH key into the =~/.ssh/authorized_keys= file.
180
181	* Install Software
182	Our goal here is to host a web server, so the next step is to install
183	the Apache web server and any other packages we need.
184
185	From this point on, I will be logged in as a user (not =root=) and will
186	need to use the =sudo= modifier for most commands.
187
188	#+begin_src sh
189	sudo apt update; sudo apt upgrade -y; sudo apt autoremove -y
190	sudo apt install apache2
191	#+end_src
192
193	If you need other language support, such as PHP, you'll need to install
194	that too.
195
196	#+begin_src sh
197	sudo apt install libapache2-mod-php php-dom
198	sudo a2enmod php
199	sudo systemctl restart apache2
200	#+end_src
201
202	* Website Files & Folders
203	Next up is to create the directories for the domain(s) we want to be
204	hosted on this web server.
205
206	#+begin_src sh
207	cd /var/www
208	sudo mkdir example.com
209	#+end_src
210
211	We have a folder for =example.com= now, so let's add an =index.html=
212	file and put it within a specific =public_html= folder. You don't need
213	this =public_html= if you don't want it, but it helps with organizing
214	items related to =example.com= that you don't want to publish to the
215	internet.
216
217	#+begin_src sh
218	cd example.com
219	sudo mkdir public_html && cd public_html
220	sudo nano index.html
221	#+end_src
222
223	You can put anything you want in this =index.html= file. If you can't
224	think of anything, paste this in there:
225
226	#+begin_src html
227	<!DOCTYPE html>
228	<html lang="en">
229	<head>
230	<meta charset="utf-8" />
231	<meta name="viewport" content="width=device-width, initial-scale=1" />
232	<title>Hello, world!</title>
233	</head>
234	<body>
235	<h1>Hello, world!</h1>
236	</body>
237	</html>
238	#+end_src
239
240	If you want something to be served at =example.com/page01/file.txt=,
241	you'll have to create the =page01= directory under the =example.com=
242	directory. For example:
243
244	#+begin_src sh
245	cd /var/www/example.com/public_html
246	sudo mkdir page01
247	sudo nano file.txt
248	#+end_src
249
250	* Apache Configuration
251	Now, let's set up the files that will tell the server where to find the
252	files for =example.com=. We will copy the default configuration file and
253	create our own.
254
255	#+begin_src sh
256	cd /etc/apache2/sites-available
257	sudo cp 000-default.conf example.com.conf
258	sudo nano example.com.conf
259	#+end_src
260
261	This configuration file will have a few default lines, but you'll need
262	to edit it to look similar to this (settings may change based on your
263	personal needs):
264
265	#+begin_src config
266	<VirtualHost *:80>
267	ServerAdmin your-email@email-provider.com
268	ServerName example.com
269	ServerAlias www.example.com
270	DocumentRoot /var/www/example.com/public_html
271	ErrorLog ${APACHE_LOG_DIR}/error.log
272	CustomLog ${APACHE_LOG_DIR}/access.log combined
273	</VirtualHost>
274	#+end_src
275
276	Now, enable the configuration for your new site, disable the default
277	configuration, and reload the web server.
278
279	#+begin_src sh
280	sudo a2ensite example.com.conf
281	sudo a2dissite 000-default.conf
282	sudo systemctl reload apache2
283	#+end_src
284
285	You can always run a test to make sure no errors or warnings are found
286	in your configuration files.
287
288	#+begin_src sh
289	sudo apache2ctl configtest
290	#+end_src
291
292	Now, restart the web server entirely. After this, you should be able to
293	browse to =http://example.com= and see the HTML content you provided
294	earlier. Note that SSL/TLS has not been enabled yet, so you won't be
295	able to use the secure version yet (=https://example.com=).
296
297	#+begin_src sh
298	sudo systemctl restart apache2
299	#+end_src
300
301	You can repeat this for as many websites as you need. Just create the
302	domain folders in =/var/www/=, add the configuration file, enable the
303	configuration, and restart =apache2=.
304
305	* SSL/TLS Certificates: Serve Websites Over HTTPS
306	In order to serve secure content, you'll need to obtain SSL/TLS
307	certificates. Luckily, there's a free tool called
308	[[https://certbot.eff.org][Certbot]] that helps us with the process.
309
310	The first step is to install =snapd= and =core= for Ubuntu.
311
312	#+begin_src sh
313	sudo apt install snapd
314	sudo snap install core
315	sudo snap refresh core
316	#+end_src
317
318	Next, install the =certbot= snap package.
319
320	#+begin_src sh
321	sudo snap install --classic certbot
322	#+end_src
323
324	Execute the following command to ensure that the =certbot= command can
325	be run.
326
327	#+begin_src sh
328	sudo ln -s /snap/bin/certbot /usr/bin/certbot
329	#+end_src
330
331	Finally, you can run =certbot= one of two ways:
332
333	1. run it and let it alter your Apache configuration files automatically
334	to enable HTTPS redirects.
335	2. run it and only allow it to create certificates. You'll need to
336	manually alter the config files to enable HTTPS redirects.
337
338	Run certbot and allow automatic config changes:
339
340	#+begin_src sh
341	sudo certbot --apache
342	#+end_src
343
344	Run certbot for certificates only and don't allow it to alter config
345	files:
346
347	#+begin_src sh
348	sudo certbot certonly --apache
349	#+end_src
350
351	The Certbot packages on your system come with a cron job or systemd
352	timer that will renew your certificates automatically before they
353	expire. You will not need to run Certbot again unless you change your
354	configuration. You can test automatic renewal for your certificates by
355	running this command:
356
357	#+begin_src sh
358	sudo certbot renew --dry-run
359	#+end_src
360
361	Now, test your domains by going to =https://example.com=.
362
363	* Firewall Security
364	To enable better security on your server, you'll need to enable a basic
365	firewall. For Ubuntu, we'll use
366	[[../secure-your-network-with-the-uncomplicated-firewall/][the
367	uncomplicated firewall]].
368
369	Now, add the following rules to the firewall allow SSH, Apache, and
370	HTTP(S) connections. If you need to, you can enable different ports for
371	specifics applications, SFTP, etc.
372
373	#+begin_src sh
374	sudo ufw default deny incoming
375	sudo ufw default allow outgoing
376	sudo ufw allow OpenSSH
377	sudo ufw allow Apache
378	sudo ufw allow proto tcp from any to any port 80,443
379	#+end_src
380
381	Once you've added all the rules you need, enable the firewall.
382
383	#+begin_src sh
384	sudo ufw enable
385	#+end_src
386
387	* Troubleshooting
388	If you run into any issues during your VPS set-up, be sure to walk back
389	through your actions and make sure you didn't miss any steps.
390
391	Many websites have fantastic guides to setting up various web servers.
392	This is one of the areas
393	[[https://www.digitalocean.%20com/community/tutorials][where
394	DigitalOcean shines]]. For simpler or more Linux-oriented questions, I
395	suggest using [Linuxize] ([[https://linuxize.com]]).
396
397	If you're getting certain errors (e.g. =500 Internal Server Error=) and
398	need to debug locally, you can view the =access.log= and =error.log=
399	files in the =/var/log/apache/= directory.

content/blog/2021-04-17-gemini-server.md added +165

@@ -0,0 +1,165 @@
	1	+++
	2	date = 2021-04-17
	3	title = "Hosting a Gemini Server"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Similar Article Available
	9
	10	To read more about Gemini and ways to test out this new protocol without
	11	your own server, see my previous post [Launching a Gemini
	12	Capsule](../launching-a-gemini-capsule/).
	13
	14	# Preparation
	15
	16	This guide assumes you have access to a server accessible to the world
	17	through a public IP address and that you own a domain name used for this
	18	Gemini capsule.
	19
	20	# Getting Started with Agate
	21
	22	We are going to use [Agate](https://github.com/mbrubeck/agate) for this
	23	tutorial. This is a basic Gemini server written in Rust. It takes very
	24	little time and maintenance to get it running.
	25
	26	# Install Dependencies
	27
	28	First, you will need to install the Rust package for your system. On
	29	Ubuntu, use the following commands (remember to use `sudo` if
	30	you are not the root user). The Rust installation will give you options
	31	to customize the installation; I used the default installation options.
	32
	33	```sh
	34	sudo apt update && sudo apt upgrade -y
	35	curl https://sh.rustup.rs -sSf \| sh
	36	```
	37
	38	Remember to configure your shell with the new configuration:
	39
	40	```sh
	41	source $HOME/.cargo/env
	42	```
	43
	44	Before we install agate, make sure you have the `gcc` package
	45	installed:
	46
	47	```sh
	48	sudo apt install gcc
	49	```
	50
	51	Next, you\'ll need to install the agate executable with Rust\'s Cargo
	52	package maintainer:
	53
	54	```sh
	55	cargo install agate
	56	```
	57
	58	# Create Symlinks
	59
	60	Once Cargo has finished installing all the required packages, symlink
	61	the executable to your \$PATH.
	62
	63	```sh
	64	sudo ln -s $HOME/.cargo/bin/agate /usr/local/bin/agate
	65	```
	66
	67	# Using Agate\'s Built-In Installation Tool
	68
	69	If you\'re running Ubuntu or Debian, use the Debian installation script
	70	found in Agate\'s GitHub repository, under the `tools/debian`
	71	folder.
	72
	73	```sh
	74	git clone https://github.com/mbrubeck/agate
	75	cd agate/tools/debian
	76	sudo ./install.sh
	77	```
	78
	79	# Configure the Gemini Service
	80
	81	We have a little more to do, but since this script tries to immediately
	82	run the service, it will likely fail with an exit code. Let\'s add our
	83	finishing touches. Edit the following file and replace the hostname with
	84	your desired URL. You can also change the directory where content will
	85	be served.
	86
	87	```sh
	88	sudo nano /etc/systemd/system/gemini.service
	89	```
	90
	91	```sh
	92	# Edit these lines to whatever you want - see the next code block for my personal configuration.
	93	WorkingDirectory=/srv/gemini
	94	ExecStart=agate --hostname $(uname -n) --lang en
	95	```
	96
	97	This is my personal config:
	98
	99	```sh
	100	WorkingDirectory=/var/gemini/
	101	ExecStart=agate --hostname gemini.example.com --lang en
	102	```
	103
	104	Since we\'ve altered the systemd configuration files, we have to reload
	105	the daemon. Let\'s do that, restart our service, and check its status.
	106
	107	```sh
	108	sudo systemctl daemon-reload
	109	sudo systemctl restart gemini.service
	110	sudo systemctl status gemini.service
	111	```
	112
	113	# Fixing Systemd Errors
	114
	115	If you\'re still getting errors, the installation process may not have
	116	properly enabled the gemini service. Fix it with the following commands.
	117
	118	```sh
	119	sudo systemctl enable gemini.service
	120	sudo systemctl restart gemini.service
	121	sudo systemctl status gemini.service
	122	```
	123
	124	# Firewall Rules
	125
	126	Great! Our server is now functional and running. The first consideration
	127	now is that you need to be able to access port 1965 on the server. If
	128	you have a firewall enabled, you\'ll need to open that port up.
	129
	130	```sh
	131	sudo ufw allow 1965
	132	sudo ufw reload
	133	```
	134
	135	# Creating Content
	136
	137	Let\'s create the Gemini capsule. Note that wherever you set the
	138	WorkingDirectory variable to earlier, Agate will expect you to put your
	139	Gemini capsule contents in a sub-folder called \"content.\" So, I place
	140	my files in \"/var/gmi/content.\" I\'m going to create that folder now
	141	and put a file in there.
	142
	143	```sh
	144	sudo mkdir /var/gemini/content
	145	sudo nano /var/gemini/content/index.gmi
	146	```
	147
	148	You can put whatever you want in the \"index.gmi\" file, just make sure
	149	it\'s valid Gemtext.
	150
	151	# The Results
	152
	153	Here are some screenshots of the Gemini page I just created in the
	154	[Lagrange](https://gmi.skyjake.fi/lagrange/) browser and the
	155	[amfora](https://github.com/makeworld-the-better-one/amfora) browser.
	156
	157	![GUI Gemini
	158	browser](https://img.cleberg.net/blog/20210417-hosting-a-gemini-server/lagrange.png)
	159
	160	Lagrange
	161
	162	![CLI Gemini
	163	browser](https://img.cleberg.net/blog/20210417-hosting-a-gemini-server/amfora.png)
	164
	165	Amfora

content/blog/2021-04-17-gemini-server.org deleted −150

	@@ -1,150 +0,0 @@
1	#+title: Hosting a Gemini Server
2	#+date: 2021-04-17
3	#+description: A guide to self-hosting a Gemini web server on your own server.
4	#+filetags: :sysadmin:
5
6	* Similar Article Available
7	To read more about Gemini and ways to test out this new protocol without
8	your own server, see my previous post
9	[[../launching-a-gemini-capsule/][Launching a Gemini Capsule]].
10
11	* Preparation
12	This guide assumes you have access to a server accessible to the world
13	through a public IP address and that you own a domain name used for this
14	Gemini capsule.
15
16	* Getting Started with Agate
17	We are going to use [[https://github.com/mbrubeck/agate][Agate]] for
18	this tutorial. This is a basic Gemini server written in Rust. It takes
19	very little time and maintenance to get it running.
20
21	* Install Dependencies
22	First, you will need to install the Rust package for your system. On
23	Ubuntu, use the following commands (remember to use =sudo= if you are
24	not the root user). The Rust installation will give you options to
25	customize the installation; I used the default installation options.
26
27	#+begin_src sh
28	sudo apt update && sudo apt upgrade -y
29	curl https://sh.rustup.rs -sSf \| sh
30	#+end_src
31
32	Remember to configure your shell with the new configuration:
33
34	#+begin_src sh
35	source $HOME/.cargo/env
36	#+end_src
37
38	Before we install agate, make sure you have the =gcc= package installed:
39
40	#+begin_src sh
41	sudo apt install gcc
42	#+end_src
43
44	Next, you'll need to install the agate executable with Rust's Cargo
45	package maintainer:
46
47	#+begin_src sh
48	cargo install agate
49	#+end_src
50
51	* Create Symlinks
52	Once Cargo has finished installing all the required packages, symlink
53	the executable to your $PATH.
54
55	#+begin_src sh
56	sudo ln -s $HOME/.cargo/bin/agate /usr/local/bin/agate
57	#+end_src
58
59	* Using Agate's Built-In Installation Tool
60	If you're running Ubuntu or Debian, use the Debian installation script
61	found in Agate's GitHub repository, under the =tools/debian= folder.
62
63	#+begin_src sh
64	git clone https://github.com/mbrubeck/agate
65	cd agate/tools/debian
66	sudo ./install.sh
67	#+end_src
68
69	* Configure the Gemini Service
70	We have a little more to do, but since this script tries to immediately
71	run the service, it will likely fail with an exit code. Let's add our
72	finishing touches. Edit the following file and replace the hostname with
73	your desired URL. You can also change the directory where content will
74	be served.
75
76	#+begin_src sh
77	sudo nano /etc/systemd/system/gemini.service
78	#+end_src
79
80	#+begin_src sh
81	# Edit these lines to whatever you want - see the next code block for my personal configuration.
82	WorkingDirectory=/srv/gemini
83	ExecStart=agate --hostname $(uname -n) --lang en
84	#+end_src
85
86	This is my personal config:
87
88	#+begin_src sh
89	WorkingDirectory=/var/gemini/
90	ExecStart=agate --hostname gemini.example.com --lang en
91	#+end_src
92
93	Since we've altered the systemd configuration files, we have to reload
94	the daemon. Let's do that, restart our service, and check its status.
95
96	#+begin_src sh
97	sudo systemctl daemon-reload
98	sudo systemctl restart gemini.service
99	sudo systemctl status gemini.service
100	#+end_src
101
102	* Fixing Systemd Errors
103	If you're still getting errors, the installation process may not have
104	properly enabled the gemini service. Fix it with the following commands.
105
106	#+begin_src sh
107	sudo systemctl enable gemini.service
108	sudo systemctl restart gemini.service
109	sudo systemctl status gemini.service
110	#+end_src
111
112	* Firewall Rules
113	Great! Our server is now functional and running. The first consideration
114	now is that you need to be able to access port 1965 on the server. If
115	you have a firewall enabled, you'll need to open that port up.
116
117	#+begin_src sh
118	sudo ufw allow 1965
119	sudo ufw reload
120	#+end_src
121
122	* Creating Content
123	Let's create the Gemini capsule. Note that wherever you set the
124	WorkingDirectory variable to earlier, Agate will expect you to put your
125	Gemini capsule contents in a sub-folder called "content." So, I place my
126	files in "/var/gmi/content." I'm going to create that folder now and put
127	a file in there.
128
129	#+begin_src sh
130	sudo mkdir /var/gemini/content
131	sudo nano /var/gemini/content/index.gmi
132	#+end_src
133
134	You can put whatever you want in the "index.gmi" file, just make sure
135	it's valid Gemtext.
136
137	* The Results
138	Here are some screenshots of the Gemini page I just created in the
139	[[https://gmi.skyjake.fi/lagrange/][Lagrange]] browser and the
140	[[https://github.com/makeworld-the-better-one/amfora][amfora]] browser.
141
142	#+caption: GUI Gemini browser
143	[[https://img.cleberg.net/blog/20210417-hosting-a-gemini-server/lagrange.png]]
144
145	/Lagrange/
146
147	#+caption: CLI Gemini browser
148	[[https://img.cleberg.net/blog/20210417-hosting-a-gemini-server/amfora.png]]
149
150	/Amfora/

content/blog/2021-04-23-php-comment-system.org → content/blog/2021-04-23-php-comment-system.md renamed +103 −91

	@@ -1,11 +1,14 @@
1	#+title: Roll Your Own Static Commenting System in PHP	1	+++
2	#+date: 2021-04-23	2	date = 2021-04-23
3	#+description: A simple guide to creating a commenting system in PHP.	3	title = "Roll Your Own Static Commenting System in PHP"
4	#+filetags: :dev:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# The Terrible-ness of Commenting Systems
5		9
6	* The Terrible-ness of Commenting Systems
7	The current state of affairs regarding interactive comment systems is,	10	The current state of affairs regarding interactive comment systems is,
8	well, terrible. It is especially awful if you're a privacy conscious	11	well, terrible. It is especially awful if you\'re a privacy conscious
9	person who does not generally load third-party scripts or frames on the	12	person who does not generally load third-party scripts or frames on the
10	websites you visit.	13	websites you visit.
11		14
	@@ -14,75 +17,78 @@ something that should be standard.
14		17
15	Of course, there are some really terrible options:	18	Of course, there are some really terrible options:
16		19
17	- Facebook Comments	20	- Facebook Comments
18	- Discourse	21	- Discourse
19		22
20	There are some options that are better but still use too many scripts,	23	There are some options that are better but still use too many scripts,
21	frames, or social integrations on your web page that could impact some	24	frames, or social integrations on your web page that could impact some
22	users:	25	users:
23		26
24	- Disqus	27	- Disqus
25	- Isso	28	- Isso
26	- Remark42	29	- Remark42
27		30
28	Lastly, I looked into a few unique ways of generating blog comments,	31	Lastly, I looked into a few unique ways of generating blog comments,
29	such as using Twitter threads or GitHub issues to automatically post	32	such as using Twitter threads or GitHub issues to automatically post
30	issues. However, these both rely on external third-party sites that I	33	issues. However, these both rely on external third-party sites that I
31	don't currently use.	34	don\'t currently use.
		35
		36	# Stay Static with Server-Side Comments
32		37
33	* Stay Static with Server-Side Comments
34	The main issue for my personal use-case is that my blog is completely,	38	The main issue for my personal use-case is that my blog is completely,
35	100% static. I use PHP on the back-end but website visitors only see	39	100% static. I use PHP on the back-end but website visitors only see
36	HTML and a single CSS file. No external javascript and no embedded	40	HTML and a single CSS file. No external javascript and no embedded
37	frames.	41	frames.
38		42
39	So, how do we keep a site static and still allow users to interact with	43	So, how do we keep a site static and still allow users to interact with
40	blog posts? The key actually pretty simple - I'm already using PHP, so	44	blog posts? The key actually pretty simple - I\'m already using PHP, so
41	why not rely on the classic HTML =<form>= and a PHP script to save the	45	why not rely on the classic HTML `<form>` and a PHP script to
42	comments somewhere? As it turns out, this was a perfect solution for me.	46	save the comments somewhere? As it turns out, this was a perfect
		47	solution for me.
43		48
44	The second issue for my personal use-case is that I am trying to keep	49	The second issue for my personal use-case is that I am trying to keep
45	the contents of my website accessible over time, as described by	50	the contents of my website accessible over time, as described by
46	[cite/t:@brandur], in his post entitled	51	@brandur, in his post entitled [Blog with Markdown + Git, and degrade
47	[[https://brandur.org/fragments/graceful-degradation-time][Blog with	52	gracefully through
48	Markdown + Git, and degrade gracefully through time]] .	53	time](https://brandur.org/fragments/graceful-degradation-time) .
49		54
50	This means I cannot rely on a database for comments, since I do not rely	55	This means I cannot rely on a database for comments, since I do not rely
51	on a database for any other part of my websites.	56	on a database for any other part of my websites.
52		57
53	I blog in plain Markdown files, commit all articles to Git, and ensure	58	I blog in plain Markdown files, commit all articles to Git, and ensure
54	that future readers will be able to see the source data long after I'm	59	that future readers will be able to see the source data long after I\'m
55	gone, or the website has gone offline. However, I still haven't	60	gone, or the website has gone offline. However, I still haven\'t
56	committed any images served on my blog to Git, as I'm not entirely sold	61	committed any images served on my blog to Git, as I\'m not entirely sold
57	on Git LFS yet - for now, images can be found at	62	on Git LFS yet - for now, images can be found at
58	[[https://img.cleberg.net][img.cleberg.net]].	63	[img.cleberg.net](https://img.cleberg.net).
59		64
60	Saving my comments back to the Git repository ensures that another	65	Saving my comments back to the Git repository ensures that another
61	aspect of my site will degrade gracefully.	66	aspect of my site will degrade gracefully.
62		67
63	* Create a Comment Form	68	# Create a Comment Form
64	Okay, let's get started. The first step is to create an HTML form that	69
		70	Okay, let\'s get started. The first step is to create an HTML form that
65	users can see and utilize to submit comments. This is fairly easy and	71	users can see and utilize to submit comments. This is fairly easy and
66	can be changed depending on your personal preferences.	72	can be changed depending on your personal preferences.
67		73
68	Take a look at the code block below for the form I currently use. Note	74	Take a look at the code block below for the form I currently use. Note
69	that =<current-url>= is replaced automatically in PHP with the current	75	that `<current-url>` is replaced automatically in PHP with
70	post's URL, so that my PHP script used later will know which blog post	76	the current post\'s URL, so that my PHP script used later will know
71	the comment is related to.	77	which blog post the comment is related to.
72		78
73	The form contains the following structure:	79	The form contains the following structure:
74		80
75	1. =<form>= - This is the form and will determine which PHP script to	81	1. `<form>` - This is the form and will determine which PHP
76	send the comment to.	82	script to send the comment to.
77	2. =<section hidden>= - This section is hidden from the user and is used	83	2. `<section hidden>` - This section is hidden from the user
78	to ensure that we know which blog post sent the comment.	84	and is used to ensure that we know which blog post sent the comment.
79	3. =<section>= Display Name (Optional) - Used to accept a display name,	85	3. `<section>` Display Name (Optional) - Used to accept a
80	if entered.	86	display name, if entered.
81	4. =<section>= Comment (Required) - Used to accept the user's full	87	4. `<section>` Comment (Required) - Used to accept the
82	comment. Markdown is allowed.	88	user\'s full comment. Markdown is allowed.
83	5. =<button>= - A button to submit the form.	89	5. `<button>` - A button to submit the form.
84		90
85	#+begin_src html	91	``` html
86	<form action="/comment.php" method="POST">	92	<form action="/comment.php" method="POST">
87	<h3>Leave a Comment</h3>	93	<h3>Leave a Comment</h3>
88	<section hidden>	94	<section hidden>
	@@ -122,30 +128,32 @@ The form contains the following structure:
122	</section>	128	</section>
123	<button type="submit">Submit</button>	129	<button type="submit">Submit</button>
124	</form>	130	</form>
125	#+end_src	131	```
		132
		133	# Handle Comments via POST
126		134
127	* Handle Comments via POST
128	Now that we have a form and can submit comments, we need to create a PHP	135	Now that we have a form and can submit comments, we need to create a PHP
129	script so that the server can fetch the comment data and save it. Make	136	script so that the server can fetch the comment data and save it. Make
130	sure your PHP script name matches the name you entered in the =action=	137	sure your PHP script name matches the name you entered in the
131	field in your form.	138	`action` field in your form.
132		139
133	See the code block below for the contents of my =comment.php= script. We	140	See the code block below for the contents of my `comment.php`
134	perform the following tasks in this script:	141	script. We perform the following tasks in this script:
135		142
136	1. Grab the POST data from the HTML form.	143	1. Grab the POST data from the HTML form.
137	2. Sanitize the comment data with =htmlentities=.	144	2. Sanitize the comment data with `htmlentities`.
138	3. Set the display name to =Anonymous= if it was left blank.	145	3. Set the display name to `Anonymous` if it was left blank.
139	4. Create a PHP object that combines all of this data.	146	4. Create a PHP object that combines all of this data.
140	5. Check if our destination file =comments.json= exists.	147	5. Check if our destination file `comments.json` exists.
141	6. If so, convert the PHP object to JSON and save it to the file.	148	6. If so, convert the PHP object to JSON and save it to the file.
142	7. If the =comments.json= file does not exist, the script will exit with	149	7. If the `comments.json` file does not exist, the script
143	an error. You can alter this to ensure it creates the script, but my	150	will exit with an error. You can alter this to ensure it creates the
144	source code includes the file by default, so it will always exist.	151	script, but my source code includes the file by default, so it will
145	8. Finally, send the user back to the =#comments= section of the blog	152	always exist.
146	post they just read.	153	8. Finally, send the user back to the `#comments` section of
147		154	the blog post they just read.
148	#+begin_src php	155
		156	``` php
149	// Get the content sent from the comment form	157	// Get the content sent from the comment form
150	$comment = htmlentities($_POST['userContent']);	158	$comment = htmlentities($_POST['userContent']);
151	$post_url = $_POST['postURL'];	159	$post_url = $_POST['postURL'];
	@@ -180,32 +188,33 @@ if (file_exists($file_name)) {
180		188
181	// Send the user back	189	// Send the user back
182	header('Location: ' . $post_url . '#comments');	190	header('Location: ' . $post_url . '#comments');
183	#+end_src	191	```
184		192
185	If you're using Apache, make sure the =www-data= user on your server has	193	If you\'re using Apache, make sure the `www-data` user on
186	the correct permissions to your website directory or else it will not be	194	your server has the correct permissions to your website directory or
187	able to write to =comments.json=.	195	else it will not be able to write to `comments.json`.
188		196
189	#+begin_src sh	197	```sh
190	chgrp -R www-data /path/to/website/	198	chgrp -R www-data /path/to/website/
191	chmod -R g+w comments.json	199	chmod -R g+w comments.json
192	#+end_src	200	```
		201
		202	# Display User Comments
193		203
194	* Display User Comments
195	Now that we can submit comments, and they are saved to the	204	Now that we can submit comments, and they are saved to the
196	=comments.json= file, let's make sure we can show those comments in each	205	`comments.json` file, let\'s make sure we can show those
197	blog post.	206	comments in each blog post.
198		207
199	The code block below shows the function I use to decode my	208	The code block below shows the function I use to decode my
200	=comments.json= file, check if the comments apply to the current post,	209	`comments.json` file, check if the comments apply to the
201	and then display them.	210	current post, and then display them.
202		211
203	This piece of code should really* be inside a function (or at least in	212	This piece of code should really\* be inside a function (or at least
204	an organized PHP workflow). Don't just copy-and-paste and expect it to	213	in an organized PHP workflow). Don\'t just copy-and-paste and expect it
205	work. You need to at least supply a =$query= variable depending on the	214	to work. You need to at least supply a `$query` variable
206	page visited.	215	depending on the page visited.
207		216
208	#+begin_src php	217	``` php
209	$query = 'your-blog-post.html';	218	$query = 'your-blog-post.html';
210		219
211	// Load saved comments	220	// Load saved comments
	@@ -237,29 +246,32 @@ foreach ($comments as $comment) {
237	}	246	}
238		247
239	echo $comment_section;	248	echo $comment_section;
240	#+end_src	249	```
		250
		251	# Bonus: Create a \'Recent Comments\' Page
241		252
242	* Bonus: Create a 'Recent Comments' Page
243	Finally, the last part of my current system is to create a Recent	253	Finally, the last part of my current system is to create a Recent
244	Comments page so that I can easily check-in on my blog and moderate any	254	Comments page so that I can easily check-in on my blog and moderate any
245	spam. As an alternative, you could use PHP's =mail()= function to email	255	spam. As an alternative, you could use PHP\'s `mail()`
246	you for each blog comment.	256	function to email you for each blog comment.
247		257
248	The code to do this is literally the same code as the previous section,	258	The code to do this is literally the same code as the previous section,
249	I just make sure it is printed when someone visits	259	I just make sure it is printed when someone visits
250	=https://example.com/comments/=.	260	`https://example.com/comments/`.
		261
		262	# Possible Enhancements
251		263
252	* Possible Enhancements
253	This comment system is by no means a fully-developed system. I have	264	This comment system is by no means a fully-developed system. I have
254	noted a few possible enhancements here that I may implement in the	265	noted a few possible enhancements here that I may implement in the
255	future:	266	future:
256		267
257	- Create a secure moderator page with user authentication at	268	- Create a secure moderator page with user authentication at
258	=https://blog.example.com/mod/=. This page could have the option to	269	`https://blog.example.com/mod/`. This page could have the
259	edit or delete any comment found in =comments.json=.	270	option to edit or delete any comment found in
260	- Create a temporary file, such as =pending_comments.json=, that will	271	`comments.json`.
261	store newly-submitted comments and won't display on blog posts until	272	- Create a temporary file, such as `pending_comments.json`,
262	approved by a moderator.	273	that will store newly-submitted comments and won\'t display on blog
263	- Create a =/modlog/= page with a chronological log, showing which	274	posts until approved by a moderator.
264	moderator approved which comments and why certain comments were	275	- Create a `/modlog/` page with a chronological log,
265	rejected.	276	showing which moderator approved which comments and why certain
		277	comments were rejected.

content/blog/2021-04-28-photography.md added +73

@@ -0,0 +1,73 @@
	1	+++
	2	date = 2021-04-28
	3	title = "Jumping Back Into Photography"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Why Photography?
	9
	10	I\'ve often wondered why photography is as enticing as it is. You can
	11	see billions of people around the world taking photographs every single
	12	moment of the day. New technology often boasts about their photographic
	13	capabilities, especially smartphones. I would even assume that we live
	14	in a world where there is never a moment in which a photograph is not
	15	being taken somewhere on Earth.
	16
	17	As for myself, I would simply say that I enjoy preserving a memory in
	18	physical (or digital) form. I\'ve never had the best memory when it
	19	comes to recalling details of places and people gone by, so it helps to
	20	have a frame of reference lying around.
	21
	22	Regardless of the reason, I think most people would agree that you
	23	simply cannot have too many hobbies.
	24
	25	# Older Cameras
	26
	27	I started playing around with the idea of photography when my family
	28	purchased a Fujifilm camera for family-specific events. I don\'t recall
	29	the specific model, but I do recall it was a point-and-shoot camera
	30	without an interchangeable lens. However, it was of great value to
	31	someone, like myself, who couldn\'t afford any other camera. I took
	32	about 10,000 shots with that camera over a 3-5 year span. Most notably,
	33	all of my trips to California were documented through this camera.
	34
	35	When possible, I would borrow my sister\'s camera, which is a Sony
	36	SLT-A58. This camera was great and allowed for some of my best early
	37	shots, especially those taken in Utah\'s and Nevada\'s parks.
	38
	39	# My Current Kit
	40
	41	I\'ve finally come to a point in my life where I have the disposable
	42	income to invest in a solid photography kit. I played around with the
	43	idea of a lot of different cameras, different types, new vs used, etc.
	44	Finally, I settled on the [Sony α7
	45	III](https://en.wikipedia.org/wiki/Sony_%CE%B17_III). This camera is
	46	mirror-less and uses a full-frame image sensor at 24 megapixels. I
	47	don\'t create large prints, and I am mostly focused on preserving
	48	memories in high quality for the next 5-10 years with this camera, so
	49	the specifications here are just perfect for me.
	50
	51	For lenses, I decided to buy two lenses that could carry me through most
	52	situations:
	53
	54	- [Vario-Tessar T\\ FE 24-70 mm F4 ZA
	55	OSS](https://electronics.sony.com/imaging/lenses/full-frame-e-mount/p/sel2470z)
	56	- [Tamron 70-300mm f4.5-6.3 Di III
	57	RXD](https://www.tamron-usa.com/product/lenses/a047.html)
	58
	59	In addition, I grabbed a couple [HGX Prime
	60	67mm](https://www.promaster.com/Product/6725) protection filters for the
	61	lenses.
	62
	63	As I delve further into photography and pick up more skills, I will most
	64	likely go back and grab a lens with a higher f-stop value, such as
	65	f/1.8. I toyed with the idea of grabbing a 50 mm at `f/1.8`,
	66	but decided to keep things in a reasonable price range instead.
	67
	68	Finally, I made sure to buy a photography-specific backpack with a rain
	69	guard, and the zipper on the back panel, to protect the equipment while
	70	wearing the bag. If you\'ve ever had to haul around a DSLR (or camera of
	71	similar heft) in a bag that only has a shoulder strap, you\'ll know the
	72	pain it can cause. Putting all my equipment in a backpack was an easy
	73	decision.

content/blog/2021-04-28-photography.org deleted −68

	@@ -1,68 +0,0 @@
1	#+title: Jumping Back Into Photography
2	#+date: 2021-04-28
3	#+description: Some thoughts on photography.
4	#+filetags: :personal:
5
6	* Why Photography?
7	I've often wondered why photography is as enticing as it is. You can see
8	billions of people around the world taking photographs every single
9	moment of the day. New technology often boasts about their photographic
10	capabilities, especially smartphones. I would even assume that we live
11	in a world where there is never a moment in which a photograph is not
12	being taken somewhere on Earth.
13
14	As for myself, I would simply say that I enjoy preserving a memory in
15	physical (or digital) form. I've never had the best memory when it comes
16	to recalling details of places and people gone by, so it helps to have a
17	frame of reference lying around.
18
19	Regardless of the reason, I think most people would agree that you
20	simply cannot have too many hobbies.
21
22	* Older Cameras
23	I started playing around with the idea of photography when my family
24	purchased a Fujifilm camera for family-specific events. I don't recall
25	the specific model, but I do recall it was a point-and-shoot camera
26	without an interchangeable lens. However, it was of great value to
27	someone, like myself, who couldn't afford any other camera. I took about
28	10,000 shots with that camera over a 3-5 year span. Most notably, all of
29	my trips to California were documented through this camera.
30
31	When possible, I would borrow my sister's camera, which is a Sony
32	SLT-A58. This camera was great and allowed for some of my best early
33	shots, especially those taken in Utah's and Nevada's parks.
34
35	* My Current Kit
36	I've finally come to a point in my life where I have the disposable
37	income to invest in a solid photography kit. I played around with the
38	idea of a lot of different cameras, different types, new vs used, etc.
39	Finally, I settled on the
40	[[https://en.wikipedia.org/wiki/Sony_%CE%B17_III][Sony α7 III]]. This
41	camera is mirror-less and uses a full-frame image sensor at 24
42	megapixels. I don't create large prints, and I am mostly focused on
43	preserving memories in high quality for the next 5-10 years with this
44	camera, so the specifications here are just perfect for me.
45
46	For lenses, I decided to buy two lenses that could carry me through most
47	situations:
48
49	- [[https://electronics.sony.com/imaging/lenses/full-frame-e-mount/p/sel2470z][Vario-Tessar
50	T** FE 24-70 mm F4 ZA OSS]]
51	- [[https://www.tamron-usa.com/product/lenses/a047.html][Tamron 70-300mm
52	f4.5-6.3 Di III RXD]]
53
54	In addition, I grabbed a couple
55	[[https://www.promaster.com/Product/6725][HGX Prime 67mm]] protection
56	filters for the lenses.
57
58	As I delve further into photography and pick up more skills, I will most
59	likely go back and grab a lens with a higher f-stop value, such as
60	f/1.8. I toyed with the idea of grabbing a 50 mm at =f/1.8=, but decided
61	to keep things in a reasonable price range instead.
62
63	Finally, I made sure to buy a photography-specific backpack with a rain
64	guard, and the zipper on the back panel, to protect the equipment while
65	wearing the bag. If you've ever had to haul around a DSLR (or camera of
66	similar heft) in a bag that only has a shoulder strap, you'll know the
67	pain it can cause. Putting all my equipment in a backpack was an easy
68	decision.

content/blog/2021-05-30-changing-git-authors.org → content/blog/2021-05-30-changing-git-authors.md renamed +23 −20

	@@ -1,30 +1,33 @@
1	#+title: Changing Git Authors	1	+++
2	#+date: 2021-05-30	2	date = 2021-05-30
3	#+description: A guide to change Git author names and emails in old commits.	3	title = "Changing Git Authors"
4	#+filetags: :dev:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Changing Git Author/Email Based on Previously Committed Email	8	# Changing Git Author/Email Based on Previously Committed Email
7	Here's the dilemma: You've been committing changes to your git	9
		10	Here\'s the dilemma: You\'ve been committing changes to your git
8	repository with an incorrect name or email (or multiple repositories),	11	repository with an incorrect name or email (or multiple repositories),
9	and now you want to fix it. Luckily, there's a semi-reliable way to fix	12	and now you want to fix it. Luckily, there\'s a semi-reliable way to fix
10	that. While I have never experienced issues with this method, some	13	that. While I have never experienced issues with this method, some
11	people have warned that it can mess with historical hashes and integrity	14	people have warned that it can mess with historical hashes and integrity
12	of commits, so use this method only if you're okay accepting that risk.	15	of commits, so use this method only if you\'re okay accepting that risk.
13		16
14	Okay, let's create the bash script:	17	Okay, let\'s create the bash script:
15		18
16	#+begin_src sh	19	```sh
17	nano change_git_authors.sh	20	nano change_git_authors.sh
18	#+end_src	21	```
19		22
20	The following information can be pasted directly into your bash script.	23	The following information can be pasted directly into your bash script.
21	The only changes you need to make are to the following variables:	24	The only changes you need to make are to the following variables:
22		25
23	- =OLD_EMAIL=	26	- `OLD_EMAIL`
24	- =CORRECT_NAME=	27	- `CORRECT_NAME`
25	- =CORRECT_EMAIL=	28	- `CORRECT_EMAIL`
26		29
27	#+begin_src sh	30	```sh
28	#!/bin/sh	31	#!/bin/sh
29		32
30	# List all sub-directories in the current directory	33	# List all sub-directories in the current directory
	@@ -57,16 +60,16 @@ do
57		60
58	cd ..	61	cd ..
59	done	62	done
60	#+end_src	63	```
61		64
62	Finally, save the bash script and make it executable.	65	Finally, save the bash script and make it executable.
63		66
64	#+begin_src sh	67	```sh
65	chmod a+x change_git_authors.sh	68	chmod a+x change_git_authors.sh
66	#+end_src	69	```
67		70
68	Now you can run the script and should see the process begin.	71	Now you can run the script and should see the process begin.
69		72
70	#+begin_src sh	73	```sh
71	./change_git_authors.sh	74	./change_git_authors.sh
72	#+end_src	75	```

content/blog/2021-07-15-delete-gitlab-repos.org → content/blog/2021-07-15-delete-gitlab-repos.md renamed +35 −29

	@@ -1,47 +1,53 @@
1	#+title: How to Delete All GitLab Repositories	1	+++
2	#+date: 2021-07-15	2	date = 2021-07-15
3	#+description: Learn how to delete all GitLab repositories in your account.	3	title = "How t oDelete All GitLab Repositories"
4	#+filetags: :dev:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Background
5		9
6	* Background
7	Have you ever used GitLab to host your source code, moved to a different	10	Have you ever used GitLab to host your source code, moved to a different
8	host, and wanted to delete everything from your GitLab account? Well,	11	host, and wanted to delete everything from your GitLab account? Well,
9	this post covers any scenario where you would want to delete all	12	this post covers any scenario where you would want to delete all
10	repositories from your GitLab account.	13	repositories from your GitLab account.
11		14
12	For me, I currently maintain around 30 repositories and don't like to	15	For me, I currently maintain around 30 repositories and don\'t like to
13	manually delete them whenever I switch host. GitHub has a few different	16	manually delete them whenever I switch host. GitHub has a few different
14	tools online to delete all repositories for you, but I have not found	17	tools online to delete all repositories for you, but I have not found
15	anything similar for GitLab, so I needed an alternative solution.	18	anything similar for GitLab, so I needed an alternative solution.
16		19
17	* Use a Python Script	20	# Use a Python Script
18	** Requirements	21
		22	## Requirements
		23
19	Before we look at the script, make sure you know your GitLab username.	24	Before we look at the script, make sure you know your GitLab username.
20	Next, [[https://gitlab.com/-/profile/personal_access_tokens][create an	25	Next, [create an authorization
21	authorization token]] so that the Python script can delete your	26	token](https://gitlab.com/-/profile/personal_access_tokens) so that the
22	repositories. Don't lose this token or else you'll need to create a new	27	Python script can delete your repositories. Don\'t lose this token or
23	one.	28	else you\'ll need to create a new one.
		29
		30	## Create the Script
24		31
25	** Create the Script
26	To run a Python script, you must first create it. Open a terminal and	32	To run a Python script, you must first create it. Open a terminal and
27	enter the following commands in whichever directory you prefer to store	33	enter the following commands in whichever directory you prefer to store
28	the script. You can do the same things in a file manager if you prefer.	34	the script. You can do the same things in a file manager if you prefer.
29		35
30	#+begin_src sh	36	```sh
31	mkdir delete-gitlab	37	mkdir delete-gitlab
32	#+end_src	38	```
33		39
34	#+begin_src sh	40	```sh
35	cd delete-gitlab	41	cd delete-gitlab
36	#+end_src	42	```
37		43
38	#+begin_src sh	44	```sh
39	nano main.py	45	nano main.py
40	#+end_src	46	```
41		47
42	Enter the following code into your =main.py= script.	48	Enter the following code into your `main.py` script.
43		49
44	#+begin_src python	50	``` python
45	import request	51	import request
46	import json	52	import json
47		53
	@@ -95,16 +101,16 @@ def main():
95		101
96	if __name__ == "__main__":	102	if __name__ == "__main__":
97	main()	103	main()
98	#+end_src	104	```
99		105
100	Now that you have the proper information, replace ={user-id}= with your	106	Now that you have the proper information, replace `{user-id}`
101	GitLab username and ={auth-token}= with the authorization token you	107	with your GitLab username and `{auth-token}` with the
102	created earlier.	108	authorization token you created earlier.
103		109
104	Finally, simply run the script and watch the output. You can also use	110	Finally, simply run the script and watch the output. You can also use
105	PyCharm Community Edition to edit and run the Python script if you don't	111	PyCharm Community Edition to edit and run the Python script if you
106	want to work in a terminal.	112	don\'t want to work in a terminal.
107		113
108	#+begin_src sh	114	```sh
109	python3 main.py	115	python3 main.py
110	#+end_src	116	```

content/blog/2021-08-25-audit-sampling.org → content/blog/2021-08-25-audit-sampling.md renamed +94 −80

	@@ -1,9 +1,12 @@
1	#+title: Audit Sampling with Python	1	+++
2	#+date: 2021-08-25	2	date = 2021-08-25
3	#+description: Learn how to sample populations with Python.	3	title = "Audit Sampling with Python"
4	#+filetags: :audit:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Introduction
5		9
6	* Introduction
7	For anyone who is familiar with internal auditing, external auditing, or	10	For anyone who is familiar with internal auditing, external auditing, or
8	consulting, you will understand how tedious audit testing can become	11	consulting, you will understand how tedious audit testing can become
9	when you are required to test large swaths of data. When we cannot	12	when you are required to test large swaths of data. When we cannot
	@@ -16,33 +19,35 @@ However, sampling data within the world of audit still seems to confuse
16	quite a lot of people. While some audit-focused tools have introduced	19	quite a lot of people. While some audit-focused tools have introduced
17	sampling functionality (e.g. Wdesk), many audit departments and firms	20	sampling functionality (e.g. Wdesk), many audit departments and firms
18	cannot use software like this due to certain constraints, such as the	21	cannot use software like this due to certain constraints, such as the
19	team's budget or knowledge. Here is where this article comes in: we're	22	team\'s budget or knowledge. Here is where this article comes in: we\'re
20	going to use [[https://www.python.org][Python]], a free and open-source	23	going to use [Python](https://www.python.org), a free and open-source
21	programming language, to generate random samples from a dataset in order	24	programming language, to generate random samples from a dataset in order
22	to suffice numerous audit situations.	25	to suffice numerous audit situations.
23		26
24	* Audit Requirements for Sampling	27	# Audit Requirements for Sampling
		28
25	Before we get into the details of how to sample with Python, I want to	29	Before we get into the details of how to sample with Python, I want to
26	make sure I discuss the different requirements that auditors may have of	30	make sure I discuss the different requirements that auditors may have of
27	samples used within their projects.	31	samples used within their projects.
28		32
29	** Randomness	33	## Randomness
30	First, let's discuss randomness. When testing out new technology to help	34
31	assist with audit sampling, you need to understand exactly how your	35	First, let\'s discuss randomness. When testing out new technology to
		36	help assist with audit sampling, you need to understand exactly how your
32	samples are being generated. For example, if the underlying function is	37	samples are being generated. For example, if the underlying function is
33	just picking every 57th element from a list, that's not truly random;	38	just picking every 57th element from a list, that\'s not truly random;
34	it's a systematic form of sampling. Luckily, since Python is	39	it\'s a systematic form of sampling. Luckily, since Python is
35	open-source, we have access to its codebase. Through this blog post, I	40	open-source, we have access to its codebase. Through this blog post, I
36	will be using the [[https://pandas.pydata.org][pandas]] module in order	41	will be using the [pandas](https://pandas.pydata.org) module in order to
37	to generate the random samples. More specifically, I will be using the	42	generate the random samples. More specifically, I will be using the
38	[[https://pandas.pydata.org/pandas-docs/stable/reference/api/pandas.DataFrame.sample.html][pandas.DataFrame.sample]]	43	[pandas.DataFrame.sample](https://pandas.pydata.org/pandas-docs/stable/reference/api/pandas.DataFrame.sample.html)
39	function provided by Pandas.	44	function provided by Pandas.
40		45
41	Now that you know what you're using, you can always check out the code	46	Now that you know what you\'re using, you can always check out the code
42	behind =pandas.DataFrame.sample=. This function does a lot of work, but	47	behind `pandas.DataFrame.sample`. This function does a lot of
43	we really only care about the following snippets of code:	48	work, but we really only care about the following snippets of code:
44		49
45	#+begin_src python	50	``` python
46	# Process random_state argument	51	# Process random_state argument
47	rs = com.random_state(random_state)	52	rs = com.random_state(random_state)
48		53
	@@ -54,22 +59,24 @@ if ignore_index:
54	result.index = ibase.default_index(len(result))	59	result.index = ibase.default_index(len(result))
55		60
56	return result	61	return result
57	#+end_src	62	```
58		63
59	The block of code above shows you that if you assign a =random_state=	64	The block of code above shows you that if you assign a
60	argument when you run the function, that will be used as a seed number	65	`random_state` argument when you run the function, that will
61	in the random generation and will allow you to reproduce a sample, given	66	be used as a seed number in the random generation and will allow you to
62	that nothing else changes. This is critical to the posterity of audit	67	reproduce a sample, given that nothing else changes. This is critical to
63	work. After all, how can you say your audit process is adequately	68	the posterity of audit work. After all, how can you say your audit
64	documented if the next person can't run the code and get the same	69	process is adequately documented if the next person can\'t run the code
65	sample? The final piece here on randomness is to look at the	70	and get the same sample? The final piece here on randomness is to look
66	[[https://docs.%20python.org/3/library/random.html#random.choice][choice]]	71	at the
		72	[choice](https://docs.%20python.org/3/library/random.html#random.choice)
67	function used above. This is the crux of the generation and can also be	73	function used above. This is the crux of the generation and can also be
68	examined for more detailed analysis on its reliability. As far as	74	examined for more detailed analysis on its reliability. As far as
69	auditing goes, we will trust that these functions are mathematically	75	auditing goes, we will trust that these functions are mathematically
70	random.	76	random.
71		77
72	** Sample Sizes	78	## Sample Sizes
		79
73	As mentioned in the intro, sampling is only an effective method of	80	As mentioned in the intro, sampling is only an effective method of
74	auditing when it truly represents the entire population. While some	81	auditing when it truly represents the entire population. While some
75	audit departments or firms may consider certain judgmental sample sizes	82	audit departments or firms may consider certain judgmental sample sizes
	@@ -88,32 +95,35 @@ proprietary, table that will instruct auditors which sample sizes to
88	choose. This allows for uniform testing and reduces overall workload.	95	choose. This allows for uniform testing and reduces overall workload.
89	See the table below for a common implementation of sample sizes:	96	See the table below for a common implementation of sample sizes:
90		97
91	\| Control Frequency \| Sample Size - High Risk \| Sample Size - Low Risk \|	98	Control Frequency Sample Size - High Risk Sample Size - Low Risk
92	\|-------------------+-------------------------+------------------------\|	99	------------------- ------------------------- ------------------------
93	\| More Than Daily \| 40 \| 25 \|	100	More Than Daily 40 25
94	\| Daily \| 40 \| 25 \|	101	Daily 40 25
95	\| Weekly \| 12 \| 5 \|	102	Weekly 12 5
96	\| Monthly \| 5 \| 3 \|	103	Monthly 5 3
97	\| Quarterly \| 2 \| 2 \|	104	Quarterly 2 2
98	\| Semi-Annually \| 1 \| 1 \|	105	Semi-Annually 1 1
99	\| Annually \| 1 \| 1 \|	106	Annually 1 1
100	\| Ad-hoc \| 1 \| 1 \|	107	Ad-hoc 1 1
101		108
102	*** Sampling with Python & Pandas	109	### Sampling with Python & Pandas
		110
103	In this section, I am going to cover a few basic audit situations that	111	In this section, I am going to cover a few basic audit situations that
104	require sampling. While some situations may require more effort, the	112	require sampling. While some situations may require more effort, the
105	syntax, organization, and intellect used remain largely the same. If	113	syntax, organization, and intellect used remain largely the same. If
106	you've never used Python before, note that lines starting with a '=#='	114	you\'ve never used Python before, note that lines starting with a
107	symbol are called comments, and they will be skipped by Python. I highly	115	\'`#`\' symbol are called comments, and they will be skipped
108	recommend taking a quick tutorial online to understand the basics of	116	by Python. I highly recommend taking a quick tutorial online to
109	Python if any of the code below is confusing to you.	117	understand the basics of Python if any of the code below is confusing to
		118	you.
		119
		120	## Simple Random Sample
110		121
111	** Simple Random Sample	122	First, let\'s look at a simple, random sample. The code block below will
112	First, let's look at a simple, random sample. The code block below will	123	import the `pandas` module, load a data file, sample the
113	import the =pandas= module, load a data file, sample the data, and	124	data, and export the sample to a file.
114	export the sample to a file.
115		125
116	#+begin_src python	126	``` python
117	# Import the Pandas module	127	# Import the Pandas module
118	import pandas	128	import pandas
119		129
	@@ -131,13 +141,14 @@ sample = df.sample(n=25, random_state=0)
131		141
132	# Save the sample to Excel	142	# Save the sample to Excel
133	sample.to_excel(file_output)	143	sample.to_excel(file_output)
134	#+end_src	144	```
		145
		146	## Simple Random Sample: Using Multiple Input Files
135		147
136	** Simple Random Sample: Using Multiple Input Files	148	Now that we\'ve created a simple sample, let\'s create a sample from
137	Now that we've created a simple sample, let's create a sample from
138	multiple files.	149	multiple files.
139		150
140	#+begin_src python	151	``` python
141	# Import the Pandas module	152	# Import the Pandas module
142	import pandas	153	import pandas
143		154
	@@ -164,14 +175,15 @@ sample = pandas.concat([sample_01, sample_02, sample_03], ignore_index=True)
164		175
165	# Save the sample to Excel	176	# Save the sample to Excel
166	sample.to_excel(file_output)	177	sample.to_excel(file_output)
167	#+end_src	178	```
		179
		180	## Stratified Random Sample
168		181
169	** Stratified Random Sample
170	Well, what if you need to sample distinct parts of a single file? For	182	Well, what if you need to sample distinct parts of a single file? For
171	example, let's write some code to separate our data by "Region" and	183	example, let\'s write some code to separate our data by \"Region\" and
172	sample those regions independently.	184	sample those regions independently.
173		185
174	#+begin_src python	186	``` python
175	# Import the Pandas module	187	# Import the Pandas module
176	import pandas	188	import pandas
177		189
	@@ -197,15 +209,16 @@ sample = pandas.concat([sample_east, sample_west], ignore_index=True)
197		209
198	# Save the sample to Excel	210	# Save the sample to Excel
199	sample.to_excel(file_output)	211	sample.to_excel(file_output)
200	#+end_src	212	```
		213
		214	## Stratified Systematic Sample
201		215
202	** Stratified Systematic Sample
203	This next example is quite useful if you need audit coverage over a	216	This next example is quite useful if you need audit coverage over a
204	certain time period. This code will generate samples for each month in	217	certain time period. This code will generate samples for each month in
205	the data and combine them all together at the end. Obviously, this code	218	the data and combine them all together at the end. Obviously, this code
206	can be modified to stratify by something other than months, if needed.	219	can be modified to stratify by something other than months, if needed.
207		220
208	#+begin_src python	221	``` python
209	# Import the Pandas module	222	# Import the Pandas module
210	import pandas	223	import pandas
211		224
	@@ -245,20 +258,21 @@ def monthly_stratified_sample(df: pandas.DataFrame, date_column: str, num_select
245	sample_size = 3	258	sample_size = 3
246	sample = monthly_stratified_sample(df, 'Date of Sale', sample_size)	259	sample = monthly_stratified_sample(df, 'Date of Sale', sample_size)
247	sample.to_excel(file_output)	260	sample.to_excel(file_output)
248	#+end_src	261	```
249		262
250	*** Documenting the Results	263	### Documenting the Results
251	Once you've generated a proper sample, there are a few things left to do	264
252	in order to properly ensure your process is reproducible.	265	Once you\'ve generated a proper sample, there are a few things left to
253		266	do in order to properly ensure your process is reproducible.
254	1. Document the sample. Make sure the resulting file is readable and	267
255	includes the documentation listed in the next bullet.	268	1. Document the sample. Make sure the resulting file is readable and
256	2. Include documentation around the data source, extraction techniques,	269	includes the documentation listed in the next bullet.
257	any modifications made to the data, and be sure to include a copy of	270	2. Include documentation around the data source, extraction techniques,
258	the script itself.	271	any modifications made to the data, and be sure to include a copy of
259	3. Whenever possible, perform a completeness and accuracy test to ensure	272	the script itself.
260	your sample is coming from a complete and accurate population. To	273	3. Whenever possible, perform a completeness and accuracy test to
261	ensure completeness, compare the record count from the data source to	274	ensure your sample is coming from a complete and accurate
262	the record count loaded into Python. To ensure accuracy, test a small	275	population. To ensure completeness, compare the record count from
263	sample against the source data (e.g., test 5 sales against the	276	the data source to the record count loaded into Python. To ensure
264	database to see if the details are accurate).	277	accuracy, test a small sample against the source data (e.g., test 5
		278	sales against the database to see if the details are accurate).

content/blog/2021-10-09-apache-redirect.md added +47

@@ -0,0 +1,47 @@
	1	+++
	2	date = 2021-10-09
	3	title = "Apache Redirect HTML Files to a Directory"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# The Problem
	9
	10	After recently switching static site generators (SSG), my blog URLs
	11	changed with no option to preserve the classic `.html`
	12	extension at the end of my blog post URLs.
	13
	14	I really disliked using my old SSG ([Jekyll](https://jekyllrb.com)) and
	15	prefer my new tool ([Zola](https://www.getzola.org)) much more, so I was
	16	determined to figure out a way to get the proper redirect set up so that
	17	people who find my posts online aren\'t constantly met by 404 errors.
	18
	19	# The Solution
	20
	21	To solve this problem, I really needed to solve two pieces:
	22
	23	1. Redirect all blog post URL requests from
	24	`/blog/some-post.html` to `/blog/some-post/`.
	25	2. Ensure that no other `.html` files are redirected, such
	26	as `index.html`.
	27
	28	After a lot of tweaking and testing, I believe I have finally found
	29	the solution. The solution is shown below.
	30
	31	``` conf
	32	RewriteEngine On
	33	RewriteCond %{REQUEST_URI} !\index.html$ [NC]
	34	RewriteRule ^(.*).html$ https://example.com/$1 [R=301,L]
	35	```
	36
	37	This piece of code in the Apache `.conf` or
	38	`.htaccess` file will do the following:
	39
	40	1. Turn on the RewriteEngine so that we can modify URLs.
	41	2. Ignore any `index.html` files from the rule we are about
	42	to specify.
	43	3. Find any `.html` files within the website directory and
	44	redirect it to exclude the file extension.
	45	4. The final piece is adding the trailing slash (`/`) at the
	46	end of the URL - you\'ll notice that I don\'t have an Apache rule
	47	for that since Apache handles that automatically.

content/blog/2021-10-09-apache-redirect.org deleted −43

	@@ -1,43 +0,0 @@
1	#+title: Apache Redirect HTML Files to a Directory
2	#+date: 2021-10-09
3	#+description: A guide on redirecting HTML files to directory in Apache.
4	#+filetags: :apache:
5
6	* The Problem
7	After recently switching static site generators (SSG), my blog URLs
8	changed with no option to preserve the classic =.html= extension at the
9	end of my blog post URLs.
10
11	I really disliked using my old SSG ([[https://jekyllrb.com][Jekyll]])
12	and prefer my new tool ([[https://www.getzola.org][Zola]]) much more, so
13	I was determined to figure out a way to get the proper redirect set up
14	so that people who find my posts online aren't constantly met by 404
15	errors.
16
17	* The Solution
18	To solve this problem, I really needed to solve two pieces:
19
20	1. Redirect all blog post URL requests from =/blog/some-post.html= to
21	=/blog/some-post/=.
22	2. Ensure that no other =.html= files are redirected, such as
23	=index.html=.
24
25	After /a lot/ of tweaking and testing, I believe I have finally found
26	the solution. The solution is shown below.
27
28	#+begin_src conf
29	RewriteEngine On
30	RewriteCond %{REQUEST_URI} !\index.html$ [NC]
31	RewriteRule ^(.*).html$ https://example.com/$1 [R=301,L]
32	#+end_src
33
34	This piece of code in the Apache =.conf= or =.htaccess= file will do the
35	following:
36
37	1. Turn on the RewriteEngine so that we can modify URLs.
38	2. Ignore any =index.html= files from the rule we are about to specify.
39	3. Find any =.html= files within the website directory and redirect it
40	to exclude the file extension.
41	4. The final piece is adding the trailing slash (=/=) at the end of the
42	URL - you'll notice that I don't have an Apache rule for that since
43	Apache handles that automatically.

content/blog/2021-12-04-cisa.md added +215

@@ -0,0 +1,215 @@
	1	+++
	2	date = 2021-12-04
	3	title = "I Passed the CISA!"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# What is the CISA?
	9
	10	For those of you lucky enough not to be knee-deep in the world of IT/IS
	11	Auditing, [CISA](https://www.isaca.org/credentialing/cisa) stands for
	12	Certified Information Systems Auditor. This certification and exam are
	13	part of ISACA\'s suite of certifications. As I often explain it to
	14	people like my family, it basically means you\'re employed to use your
	15	knowledge of information systems, regulations, common threats, risks,
	16	etc. in order to assess an organization\'s current control of their
	17	risk. If a risk isn\'t controlled (and the company doesn\'t want to
	18	accept the risk), an IS auditor will suggest implementing a control to
	19	address that risk.
	20
	21	Now, the CISA certification itself is, in my opinion, the main
	22	certification for this career. While certifications such as the CPA or
	23	CISSP are beneficial, nothing matches the power of the CISA for an IS
	24	auditor when it comes to getting hired, getting a raise/bonus, or
	25	earning respect in the field.
	26
	27	However, to be honest, I am a skeptic of most certifications. I
	28	understand the value they hold in terms of how much you need to commit
	29	to studying or learning on the job, as well as the market value for
	30	certifications such as the CISA. But I also have known some very
	31	~~incompetent~~ less than stellar auditors who have CPAs, CISAs, CIAs,
	32	etc.
	33
	34	The same goes for most industries: if a person is good at studying, they
	35	can earn the certification. However, that knowledge means nothing unless
	36	you\'re actually able to use it in real life and perform as expected of
	37	a certification holder. The challenge comes when people are hired or
	38	connected strictly because of their certifications or resume; you need
	39	to see a person work before you can assume them having a CISA means
	40	they\'re better than someone without the CISA.
	41
	42	Okay, rant over. Certifications are generally accepted as a measuring
	43	stick of commitment and quality of an employee, so I am accepting it
	44	too.
	45
	46	# Exam Content
	47
	48	The CISA is broken down into five sections, each weighted with a
	49	percentage of test questions that may appear.
	50
	51	![CISA exam
	52	sections](https://img.cleberg.net/blog/20211204-i-passed-the-cisa/cisa-exam-sections.png)
	53
	54	Since the exam contains 150 questions, here\'s how those sections break
	55	down:
	56
	57	Exam Section Percentage of Exam Questions
	58	----------------- -------------------- -----------
	59	1 21% 32
	60	2 17% 26
	61	3 12% 18
	62	4 23% 34
	63	5 27% 40
	64	Grand Total 100% 150
	65
	66	# My Studying Habits
	67
	68	This part is a little hard for me to break down into specific detail due
	69	to the craziness of the last year. While I officially purchased my
	70	studying materials in December 2020 and opened them to \"start
	71	studying\" in January 2021, I really wasn\'t able to study much due to
	72	the demands of my job and personal life.
	73
	74	Let me approach this from a few different viewpoints.
	75
	76	## Study Materials
	77
	78	Let\'s start by discussing the study materials I purchased. I\'ll be
	79	referring to #1 as the CRM and #2 as the QAE.
	80
	81	1. [CISA Review Manual, 27th Edition \\|
	82	Print](https://store.isaca.org/s/store#/store/browse/detail/a2S4w000004KoCbEAK)
	83	2. \[\[<https://store.isaca.org/s/store#/store/browse/detail/a2S4w000004KoCcEAK>\]\[CISA
	84	Review Questions, Answers & Explanations Manual, 12th Edition \\|
	85	Print\]\]
	86
	87	The CRM is an excellent source of information and could honestly be used
	88	as a reference for most IS auditors as a learning reference during their
	89	daily audit responsibilities. However, it is full\* of information
	90	and can be overloading if you\'re not good at filtering out useless
	91	information while studying.
	92
	93	The QAE is the real star of the show here. This book contains 1000
	94	questions, separated by exam section, and a practice exam. My only
	95	complaint about the QAE is that each question is immediately followed
	96	with the correct answer and explanations below it, which means I had to
	97	use something to constantly cover the answers while I was studying.
	98
	99	I didn\'t use the online database version of the QAE, but I\'ve heard
	100	that it\'s easier to use than the printed book. However, it is more
	101	expensive (\$299 database vs \$129 book) which might be important if
	102	you\'re paying for materials yourself.
	103
	104	In terms of question difficulty, I felt that the QAE was a good
	105	representation of the actual exam. I\'ve seen a lot of people online say
	106	it wasn\'t accurate to the exam or that it was much easier/harder, but I
	107	disagree with all of those. The exam was fairly similar to the QAE, just
	108	focusing on whichever topics they chose for my version of the exam.
	109
	110	If you understand the concepts, skim the CRM (and read in-depth on
	111	topics you struggle with), and use the QAE to continue practicing
	112	exam-like questions, you should be fine. I didn\'t use any online
	113	courses, videos, etc. - the ISACA materials are more than enough.
	114
	115	## Studying Process
	116
	117	While I was able to briefly read through sections 1 and 2 in early 2021,
	118	I had to stop and take a break from February/March to September. I
	119	switched jobs in September, which allowed me a lot more free time to
	120	study.
	121
	122	In September, I studied sections 3-5, took notes, and did a quick review
	123	of the section topics. Once I felt comfortable with my notes, I took a
	124	practice exam from the QAE manual and scored 70% (105/150).
	125
	126	Here\'s a breakdown of my initial practice exam:
	127
	128	Exam Section Incorrect Correct Grand Total Percent
	129	------------------- ----------- ----------- ------------- -----------
	130	1 8 25 33 76%
	131	2 5 20 25 80%
	132	3 6 12 18 67%
	133	4 10 23 33 70%
	134	5 16 25 41 61%
	135	Grand Total\* 45\* 105\* 150\* 70%\*
	136
	137	As I expected, my toughest sections were related to project management,
	138	development, implementation, and security.
	139
	140	This just leaves October and November. For these months, I tried to
	141	practice every few days, doing 10 questions for each section, until the
	142	exam. This came out to 13 practice sessions, \~140 questions per
	143	section, and \~700 questions total.
	144
	145	While some practice sessions were worse and some were better, the final
	146	results were similar to my practice exam results. As you can see below,
	147	my averages were slightly worse than my practice exam. However, I got in
	148	over 700 questions of practice and, most importantly, \*I read through
	149	the explanations every time I answered incorrectly and learned from my
	150	mistakes\*.
	151
	152	Exam Section Incorrect Correct Grand Total Percent
	153	------------------- ----------- ----------- ------------- -----------
	154	1 33 108 141 77%
	155	2 33 109 142 77%
	156	3 55 89 144 62%
	157	4 52 88 140 63%
	158	5 55 85 140 61%
	159	Grand Total\* 228\* 479\* 707\* 68%\*
	160
	161	![CISA practice question
	162	results](https://img.cleberg.net/blog/20211204-i-passed-the-cisa/cisa-practice-questions-results.png)
	163
	164	# Results
	165
	166	Now, how do the practice scores reflect my actual results? After all,
	167	it\'s hard to tell how good a practice regimen is unless you see how it
	168	turns out.
	169
	170	Exam Section Section Name Score
	171	-------------- ------------------------------------------------------------------ ---------
	172	1 Information Systems Auditing Process 678
	173	2 Governance and Management of IT 590
	174	3 Information Systems Acquisition, Development, and Implementation 721
	175	4 Information Systems Operations and Business Resilience 643
	176	5 Protection of Information Assets 511
	177	TOTAL 616
	178
	179	Now, in order to pass the CISA, you need at least 450 on a sliding scale
	180	of 200-800. Personally, I really have no clue what an average CISA score
	181	is. After a very brief look online, I can see that the high end is
	182	usually in the low 700s. In addition, only about 50-60% of people pass
	183	the exam.
	184
	185	Given this information, I feel great about my scores. 616 may not be
	186	phenomenal, and I wish I had done better on sections 2 & 5, but my
	187	practicing seems to have worked very well overall.
	188
	189	However, the practice results do not conform to the actual results.
	190	Section 2 was one of my highest practice sections and was my
	191	second-lowest score in the exam. Conversely, section 3 was my
	192	second-lowest practice section and turned out to be my highest actual
	193	score!
	194
	195	After reflecting, it is obvious that if you have any background on the
	196	CISA topics at all, the most important part of studying is doing
	197	practice questions. You really need to understand how to read the
	198	questions critically and pick the best answer.
	199
	200	# Looking Forward
	201
	202	I am extremely happy that I was finally able to pass the CISA. Looking
	203	to the future, I\'m not sure what\'s next in terms of professional
	204	learning. My current company offers internal learning courses, so I will
	205	most likely focus on that if I need to gain more knowledge in certain
	206	areas.
	207
	208	To be fair, even if you pass the CISA, it\'s hard to become an expert on
	209	any specific topic found within. My career may take me in a different
	210	direction, and I might need to focus more on security or networking
	211	certifications (or possibly building a better analysis/visualization
	212	portfolio if I want to go into data analysis/science).
	213
	214	All I know is that I am content at the moment and extremely proud of my
	215	accomplishment.

content/blog/2021-12-04-cisa.org deleted −205

	@@ -1,205 +0,0 @@
1	#+title: I Passed the CISA!
2	#+date: 2021-12-04
3	#+description: A recap of the CISA certification exam and my results.
4	#+filetags: :audit:
5
6	* What is the CISA?
7	For those of you lucky enough not to be knee-deep in the world of IT/IS
8	Auditing, [[https://www.isaca.org/credentialing/cisa][CISA]] stands for
9	Certified Information Systems Auditor. This certification and exam are
10	part of ISACA's suite of certifications. As I often explain it to people
11	like my family, it basically means you're employed to use your knowledge
12	of information systems, regulations, common threats, risks, etc. in
13	order to assess an organization's current control of their risk. If a
14	risk isn't controlled (and the company doesn't want to accept the risk),
15	an IS auditor will suggest implementing a control to address that risk.
16
17	Now, the CISA certification itself is, in my opinion, the main
18	certification for this career. While certifications such as the CPA or
19	CISSP are beneficial, nothing matches the power of the CISA for an IS
20	auditor when it comes to getting hired, getting a raise/bonus, or
21	earning respect in the field.
22
23	However, to be honest, I am a skeptic of most certifications. I
24	understand the value they hold in terms of how much you need to commit
25	to studying or learning on the job, as well as the market value for
26	certifications such as the CISA. But I also have known some very
27	+incompetent+ /less than stellar/ auditors who have CPAs, CISAs, CIAs,
28	etc.
29
30	The same goes for most industries: if a person is good at studying, they
31	can earn the certification. However, that knowledge means nothing unless
32	you're actually able to use it in real life and perform as expected of a
33	certification holder. The challenge comes when people are hired or
34	connected strictly because of their certifications or resume; you need
35	to see a person work before you can assume them having a CISA means
36	they're better than someone without the CISA.
37
38	Okay, rant over. Certifications are generally accepted as a measuring
39	stick of commitment and quality of an employee, so I am accepting it
40	too.
41
42	* Exam Content
43	The CISA is broken down into five sections, each weighted with a
44	percentage of test questions that may appear.
45
46	#+caption: CISA exam sections
47	[[https://img.cleberg.net/blog/20211204-i-passed-the-cisa/cisa-exam-sections.png]]
48
49	Since the exam contains 150 questions, here's how those sections break
50	down:
51
52	\| Exam Section \| Percentage of Exam \| Questions \|
53	\|---------------+--------------------+-----------\|
54	\| 1 \| 21% \| 32 \|
55	\| 2 \| 17% \| 26 \|
56	\| 3 \| 12% \| 18 \|
57	\| 4 \| 23% \| 34 \|
58	\| 5 \| 27% \| 40 \|
59	\| Grand Total \| 100% \| 150 \|
60
61	* My Studying Habits
62	This part is a little hard for me to break down into specific detail due
63	to the craziness of the last year. While I officially purchased my
64	studying materials in December 2020 and opened them to "start studying"
65	in January 2021, I really wasn't able to study much due to the demands
66	of my job and personal life.
67
68	Let me approach this from a few different viewpoints.
69
70	** Study Materials
71	Let's start by discussing the study materials I purchased. I'll be
72	referring to #1 as the CRM and #2 as the QAE.
73
74	1. [[https://store.isaca.org/s/store#/store/browse/detail/a2S4w000004KoCbEAK][CISA
75	Review Manual, 27th Edition \| Print]]
76	2. [[[[https://store.isaca.org/s/store#/store/browse/detail/a2S4w000004KoCcEAK]]][CISA
77	Review Questions, Answers & Explanations Manual, 12th Edition \|
78	Print]]
79
80	The CRM is an excellent source of information and could honestly be used
81	as a reference for most IS auditors as a learning reference during their
82	daily audit responsibilities. However, it is full* of information and
83	can be overloading if you're not good at filtering out useless
84	information while studying.
85
86	The QAE is the real star of the show here. This book contains 1000
87	questions, separated by exam section, and a practice exam. My only
88	complaint about the QAE is that each question is immediately followed
89	with the correct answer and explanations below it, which means I had to
90	use something to constantly cover the answers while I was studying.
91
92	I didn't use the online database version of the QAE, but I've heard that
93	it's easier to use than the printed book. However, it is more expensive
94	($299 database vs $129 book) which might be important if you're paying
95	for materials yourself.
96
97	In terms of question difficulty, I felt that the QAE was a good
98	representation of the actual exam. I've seen a lot of people online say
99	it wasn't accurate to the exam or that it was much easier/harder, but I
100	disagree with all of those. The exam was fairly similar to the QAE, just
101	focusing on whichever topics they chose for my version of the exam.
102
103	If you understand the concepts, skim the CRM (and read in-depth on
104	topics you struggle with), and use the QAE to continue practicing
105	exam-like questions, you should be fine. I didn't use any online
106	courses, videos, etc. - the ISACA materials are more than enough.
107
108	** Studying Process
109	While I was able to briefly read through sections 1 and 2 in early 2021,
110	I had to stop and take a break from February/March to September. I
111	switched jobs in September, which allowed me a lot more free time to
112	study.
113
114	In September, I studied sections 3-5, took notes, and did a quick review
115	of the section topics. Once I felt comfortable with my notes, I took a
116	practice exam from the QAE manual and scored 70% (105/150).
117
118	Here's a breakdown of my initial practice exam:
119
120	\| Exam Section \| Incorrect \| Correct \| Grand Total \| Percent \|
121	\|---------------+-----------+---------+-------------+---------\|
122	\| 1 \| 8 \| 25 \| 33 \| 76% \|
123	\| 2 \| 5 \| 20 \| 25 \| 80% \|
124	\| 3 \| 6 \| 12 \| 18 \| 67% \|
125	\| 4 \| 10 \| 23 \| 33 \| 70% \|
126	\| 5 \| 16 \| 25 \| 41 \| 61% \|
127	\| Grand Total* \| 45* \| 105* \| 150* \| 70%* \|
128
129	As I expected, my toughest sections were related to project management,
130	development, implementation, and security.
131
132	This just leaves October and November. For these months, I tried to
133	practice every few days, doing 10 questions for each section, until the
134	exam. This came out to 13 practice sessions, ~140 questions per section,
135	and ~700 questions total.
136
137	While some practice sessions were worse and some were better, the final
138	results were similar to my practice exam results. As you can see below,
139	my averages were slightly worse than my practice exam. However, I got in
140	over 700 questions of practice and, most importantly, *I read through
141	the explanations every time I answered incorrectly and learned from my
142	mistakes*.
143
144	\| Exam Section \| Incorrect \| Correct \| Grand Total \| Percent \|
145	\|---------------+-----------+---------+-------------+---------\|
146	\| 1 \| 33 \| 108 \| 141 \| 77% \|
147	\| 2 \| 33 \| 109 \| 142 \| 77% \|
148	\| 3 \| 55 \| 89 \| 144 \| 62% \|
149	\| 4 \| 52 \| 88 \| 140 \| 63% \|
150	\| 5 \| 55 \| 85 \| 140 \| 61% \|
151	\| Grand Total* \| 228* \| 479* \| 707* \| 68%* \|
152
153	#+caption: CISA practice question results
154	[[https://img.cleberg.net/blog/20211204-i-passed-the-cisa/cisa-practice-questions-results.png]]
155
156	* Results
157	Now, how do the practice scores reflect my actual results? After all,
158	it's hard to tell how good a practice regimen is unless you see how it
159	turns out.
160
161	\| Exam Section \| Section Name \| Score \|
162	\|--------------+------------------------------------------------------------------+-------\|
163	\| 1 \| Information Systems Auditing Process \| 678 \|
164	\| 2 \| Governance and Management of IT \| 590 \|
165	\| 3 \| Information Systems Acquisition, Development, and Implementation \| 721 \|
166	\| 4 \| Information Systems Operations and Business Resilience \| 643 \|
167	\| 5 \| Protection of Information Assets \| 511 \|
168	\| TOTAL \| \| 616 \|
169
170	Now, in order to pass the CISA, you need at least 450 on a sliding scale
171	of 200-800. Personally, I really have no clue what an average CISA score
172	is. After a /very/ brief look online, I can see that the high end is
173	usually in the low 700s. In addition, only about 50-60% of people pass
174	the exam.
175
176	Given this information, I feel great about my scores. 616 may not be
177	phenomenal, and I wish I had done better on sections 2 & 5, but my
178	practicing seems to have worked very well overall.
179
180	However, the practice results do not conform to the actual results.
181	Section 2 was one of my highest practice sections and was my
182	second-lowest score in the exam. Conversely, section 3 was my
183	second-lowest practice section and turned out to be my highest actual
184	score!
185
186	After reflecting, it is obvious that if you have any background on the
187	CISA topics at all, the most important part of studying is doing
188	practice questions. You really need to understand how to read the
189	questions critically and pick the best answer.
190
191	* Looking Forward
192	I am extremely happy that I was finally able to pass the CISA. Looking
193	to the future, I'm not sure what's next in terms of professional
194	learning. My current company offers internal learning courses, so I will
195	most likely focus on that if I need to gain more knowledge in certain
196	areas.
197
198	To be fair, even if you pass the CISA, it's hard to become an expert on
199	any specific topic found within. My career may take me in a different
200	direction, and I might need to focus more on security or networking
201	certifications (or possibly building a better analysis/visualization
202	portfolio if I want to go into data analysis/science).
203
204	All I know is that I am content at the moment and extremely proud of my
205	accomplishment.

content/blog/2022-02-10-leaving-the-office.org → content/blog/2022-02-10-leaving-the-office.md renamed +83 −80

	@@ -1,9 +1,12 @@
1	#+title: Leaving Office-Based Work in the Past	1	+++
2	#+date: 2022-02-10	2	date = 2022-02-10
3	#+description: My thoughts on the current surge of remote work and what that means for full-time office-based roles.	3	title = "Leaving Office-Based Work in the Past"
4	#+filetags: :audit:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# The Working World is Changing
5		9
6	* The Working World is Changing
7	There has been a trend for the past few years of companies slowly	10	There has been a trend for the past few years of companies slowly
8	realizing that the pandemic is not just a temporary state that will go	11	realizing that the pandemic is not just a temporary state that will go
9	away eventually and let everything return to the way it was before. In	12	away eventually and let everything return to the way it was before. In
	@@ -19,28 +22,31 @@ operate in select states).
19		22
20	I decided to take a look back at my relatively short career so far and	23	I decided to take a look back at my relatively short career so far and
21	compare the positive and negative effects of the different work	24	compare the positive and negative effects of the different work
22	environments I've been in.	25	environments I\'ve been in.
		26
		27	# In-Person Offices
		28
		29	## Retail Internship
23		30
24	* In-Person Offices
25	** Retail Internship
26	I started my first job as a management intern at a busy retail pharmacy,	31	I started my first job as a management intern at a busy retail pharmacy,
27	working my 40-hour weeks on my feet. As these retail stores don't	32	working my 40-hour weeks on my feet. As these retail stores don\'t
28	believe in resting or sitting down, you can guarantee that you will	33	believe in resting or sitting down, you can guarantee that you will
29	spend entire shifts standing, walking, or running around the store.	34	spend entire shifts standing, walking, or running around the store.
30	Unfortunately, I worked at a time when our store didn't have enough	35	Unfortunately, I worked at a time when our store didn\'t have enough
31	managers, so I spent the majority of my tenure at the store running and	36	managers, so I spent the majority of my tenure at the store running and
32	breaking a sweat.	37	breaking a sweat.
33		38
34	Now, things aren't all bad in retail stores like this. It is definitely	39	Now, things aren\'t all bad in retail stores like this. It is definitely
35	tiring and inefficient to force employees to work constantly, or pretend	40	tiring and inefficient to force employees to work constantly, or pretend
36	to work if there's nothing to do, and not allow anyone to sit down.	41	to work if there\'s nothing to do, and not allow anyone to sit down.
37	However, if you are able to operate a retail store with a limited crew	42	However, if you are able to operate a retail store with a limited crew
38	and provide enough comfort and support, I believe these jobs could be	43	and provide enough comfort and support, I believe these jobs could be
39	both comfortable and efficient.	44	both comfortable and efficient.
40		45
41	** Semi-Private Cubicles	46	## Semi-Private Cubicles
42	#+caption: Semi-Private Cubicles	47
43	[[https://img.cleberg.net/blog/20220210-leaving-office-based-work-in-the-past/private_cubicles.png]]	48	![Semi-Private
		49	Cubicles](https://img.cleberg.net/blog/20220210-leaving-office-based-work-in-the-past/private_cubicles.png)
44		50
45	After about a year, I was able to find another internship - this time,	51	After about a year, I was able to find another internship - this time,
46	it was in my field of interest: internal auditing. This was for a life	52	it was in my field of interest: internal auditing. This was for a life
	@@ -51,22 +57,23 @@ Likewise, they owned a large headquarters in a nice area of town with
51	plenty of space, parking, etc.	57	plenty of space, parking, etc.
52		58
53	One upside is that each person gets their own large L-shaped desk,	59	One upside is that each person gets their own large L-shaped desk,
54	formed into cubicles that house 4 desks/employees. These "pods" of	60	formed into cubicles that house 4 desks/employees. These \"pods\" of
55	4-person cubicles are linked throughout each floor of the headquarters	61	4-person cubicles are linked throughout each floor of the headquarters
56	(except the sales people, who had that open-floor concept going on). The	62	(except the sales people, who had that open-floor concept going on). The
57	walls of the cubicle were tall and provided a lot of privacy and	63	walls of the cubicle were tall and provided a lot of privacy and
58	sound-proofing, except when I used the standing desk feature (I'm over 6	64	sound-proofing, except when I used the standing desk feature (I\'m over
59	feet tall, so probably not an issue for most people).	65	6 feet tall, so probably not an issue for most people).
60		66
61	I loved this environment, it allowed me to focus on my work with minimal	67	I loved this environment, it allowed me to focus on my work with minimal
62	distractions, but also allowed easy access, so I could spin around in my	68	distractions, but also allowed easy access, so I could spin around in my
63	chair and chat with my friends without leaving my chair. This is the	69	chair and chat with my friends without leaving my chair. This is the
64	closest I've been to a home office environment (which is my personal	70	closest I\'ve been to a home office environment (which is my personal
65	favorite, as I'll get to later in this post).	71	favorite, as I\'ll get to later in this post).
		72
		73	## Semi-Open Floor Concept
66		74
67	** Semi-Open Floor Concept	75	![Semi-Open Floor
68	#+caption: Semi-Open Floor Concept	76	Concept](https://img.cleberg.net/blog/20220210-leaving-office-based-work-in-the-past/semi_open_office.png)
69	[[https://img.cleberg.net/blog/20220210-leaving-office-based-work-in-the-past/semi_open_office.png]]
70		77
71	When I shifted to my first full-time internal audit job out of college,	78	When I shifted to my first full-time internal audit job out of college,
72	I was working at a company that was headquartered on a floor in a	79	I was working at a company that was headquartered on a floor in a
	@@ -74,42 +81,44 @@ downtown high-rise building. The company was only about 20 years old
74	when I worked there and were trying a lot of new things to attract young	81	when I worked there and were trying a lot of new things to attract young
75	talent, one of which was a semi-open floor concept for the office. My	82	talent, one of which was a semi-open floor concept for the office. My
76	department worked just around the hallway corner from the executive	83	department worked just around the hallway corner from the executive
77	offices and used that "modern" layout young tech companies started using	84	offices and used that \"modern\" layout young tech companies started
78	in the 2000s/2010s.	85	using in the 2000s/2010s.
79		86
80	Each desk was brief, and you could look most coworkers in the face	87	Each desk was brief, and you could look most coworkers in the face
81	without moving from your chair, I hated this so much. Directly to my	88	without moving from your chair, I hated this so much. Directly to my
82	left was the Chief Audit Executive (our department's leading boss), and	89	left was the Chief Audit Executive (our department\'s leading boss), and
83	his desk was pointed so that his face would stare straight at my desk	90	his desk was pointed so that his face would stare straight at my desk
84	all day. I spent more time thinking about who was looking at me or	91	all day. I spent more time thinking about who was looking at me or
85	checking on me than actually working.	92	checking on me than actually working.
86		93
87	The other annoying part of the open concept they used was that the	94	The other annoying part of the open concept they used was that the
88	kitchen area and pathways were too close to everyone's desks (since the	95	kitchen area and pathways were too close to everyone\'s desks (since the
89	desks were spread out, to provide space or something), so noise and	96	desks were spread out, to provide space or something), so noise and
90	conversation would be constant throughout the day while you try to work.	97	conversation would be constant throughout the day while you try to work.
91	For someone like me, who needs silence to get work done, that was a	98	For someone like me, who needs silence to get work done, that was a
92	non-starter.	99	non-starter.
93		100
94	** Hotel Office Concept	101	## Hotel Office Concept
95	#+caption: Hotel Office Concept	102
96	[[https://img.cleberg.net/blog/20220210-leaving-office-based-work-in-the-past/hotel_desks.png]]	103	![Hotel Office
		104	Concept](https://img.cleberg.net/blog/20220210-leaving-office-based-work-in-the-past/hotel_desks.png)
97		105
98	I currently work for a company remotely (for now) and travel to the	106	I currently work for a company remotely (for now) and travel to the
99	office every once in a while for events and to help coach the staff	107	office every once in a while for events and to help coach the staff
100	underneath me. The office I visit uses the hotel desk concept, where you	108	underneath me. The office I visit uses the hotel desk concept, where you
101	need to check in at a touch screen when you enter the office and "rent"	109	need to check in at a touch screen when you enter the office and
102	a desk for the day. The same goes for offices and meeting rooms.	110	\"rent\" a desk for the day. The same goes for offices and meeting
		111	rooms.
103		112
104	These desks are flat-top only and do not have any walls at all. In	113	These desks are flat-top only and do not have any walls at all. In
105	addition, they're stacked with one row of 4 desks facing another row of	114	addition, they\'re stacked with one row of 4 desks facing another row of
106	4 desks. These pairs of desk rows are repeated through the office.	115	4 desks. These pairs of desk rows are repeated through the office.
107		116
108	This means that when I go, I need to rent a random desk or try to	117	This means that when I go, I need to rent a random desk or try to
109	remember the unique ID numbers on desks I like. Once I rent it, I have	118	remember the unique ID numbers on desks I like. Once I rent it, I have
110	to make sure no one sat down in that desk without renting it. Then, I	119	to make sure no one sat down in that desk without renting it. Then, I
111	can sit down and work, but will probably need to adjust the monitors so	120	can sit down and work, but will probably need to adjust the monitors so
112	that I'm not staring in the face of the person across from me all day.	121	that I\'m not staring in the face of the person across from me all day.
113	Finally, I need to wear headphones as this environment does nothing to	122	Finally, I need to wear headphones as this environment does nothing to
114	provide you with peace or quiet.	123	provide you with peace or quiet.
115		124
	@@ -117,27 +126,26 @@ Luckily, you can rent offices with doors that offer quiet and privacy,
117	which can be very nice if you have a lot of meetings or webinars on a	126	which can be very nice if you have a lot of meetings or webinars on a
118	certain day.	127	certain day.
119		128
120	* Home Office	129	# Home Office
121	#+caption: Home Office
122	[[https://img.cleberg.net/blog/20220210-leaving-office-based-work-in-the-past/home_office.png]]
123		130
124	Okay, now let's finally get to the home office concept. I have worked	131	![Home
		132	Office](https://img.cleberg.net/blog/20220210-leaving-office-based-work-in-the-past/home_office.png)
		133
		134	Okay, now let\'s finally get to the home office concept. I have worked
125	from home for a little over two years at this point, across three	135	from home for a little over two years at this point, across three
126	different jobs/employers. Over this time, I have experimented with a	136	different jobs/employers. Over this time, I have experimented with a
127	plethora of different organizational ideas, desks, and room layouts to	137	plethora of different organizational ideas, desks, and room layouts to
128	find what works best for me.	138	find what works best for me.
129		139
130	These things might not apply to you, and that's fine. Everyone has a	140	These things might not apply to you, and that\'s fine. Everyone has a
131	different situation, and I really don't think you'll know what works	141	different situation, and I really don\'t think you\'ll know what works
132	until you try.	142	until you try.
133		143
134	** Tip #1	144	## Tip #1
135	Let's start with my top rule for a home office:
136		145
137	#+begin_quote	146	Let\'s start with my top rule for a home office:
138	If you live with others, working in a shared space is not effective.
139		147
140	#+end_quote	148	> If you live with others, working in a shared space is not effective.
141		149
142	It just does not work. If you have another person sleeping in your	150	It just does not work. If you have another person sleeping in your
143	bedroom, it is difficult to manage your work schedule with their	151	bedroom, it is difficult to manage your work schedule with their
	@@ -146,18 +154,16 @@ work, you might wake them up or have to suffer the agony of staring at
146	bright screens in a dark room.	154	bright screens in a dark room.
147		155
148	In a similar vein, working from a location such as the living room	156	In a similar vein, working from a location such as the living room
149	likely won't work either. Distractions will come far more frequently:	157	likely won\'t work either. Distractions will come far more frequently:
150	televisions, cooking, cleaning, deliveries, etc. If you're like me,	158	televisions, cooking, cleaning, deliveries, etc. If you\'re like me,
151	you'll end up playing a game instead of actually doing any work.	159	you\'ll end up playing a game instead of actually doing any work.
152		160
153	** Tip #2	161	## Tip #2
154	Okay, the second thing I've discovered that works for me:
155		162
156	#+begin_quote	163	Okay, the second thing I\'ve discovered that works for me:
157	Use the pomodoro method (or something similar) to balance work tasks
158	with personal tasks.
159		164
160	#+end_quote	165	> Use the pomodoro method (or something similar) to balance work tasks
		166	> with personal tasks.
161		167
162	I use a very casual version of the pomodoro method where I will work for	168	I use a very casual version of the pomodoro method where I will work for
163	1-2 hours (usually set in strict intervals like 1, 1.5, 2 hours) and	169	1-2 hours (usually set in strict intervals like 1, 1.5, 2 hours) and
	@@ -165,26 +171,24 @@ then will allow myself 30-60 minutes for personal tasks. This schedule
165	works for me, since my work schedule really only comes to 3-6 hours of	171	works for me, since my work schedule really only comes to 3-6 hours of
166	work per day.	172	work per day.
167		173
168	In this case, I'll work through my list of tasks for an hour or two and	174	In this case, I\'ll work through my list of tasks for an hour or two and
169	then give myself personal time to get drinks and food, wash dishes, put	175	then give myself personal time to get drinks and food, wash dishes, put
170	clothes in the washer, get the mail, etc. If you're in a convenient	176	clothes in the washer, get the mail, etc. If you\'re in a convenient
171	location, this usually gives time for things like getting groceries (as	177	location, this usually gives time for things like getting groceries (as
172	long as you're not a slow shopper).	178	long as you\'re not a slow shopper).
173		179
174	** Tip #3	180	## Tip #3
175	While I listed this one as number three, I don't think I'd accomplish
176	anything without it:
177		181
178	#+begin_quote	182	While I listed this one as number three, I don\'t think I\'d accomplish
179	Document everything: even things you didn't before - such as task lists	183	anything without it:
180	and notes from casual calls or meetings.
181		184
182	#+end_quote	185	> Document everything: even things you didn\'t before - such as task
		186	> lists and notes from casual calls or meetings.
183		187
184	I've noticed that staying in an office gave me more constant reminders	188	I\'ve noticed that staying in an office gave me more constant reminders
185	of outstanding tasks or facts I had learned in a conversation.	189	of outstanding tasks or facts I had learned in a conversation.
186	Translating everything to a digital world has made me lose a bit of that	190	Translating everything to a digital world has made me lose a bit of that
187	focus (perhaps since I don't have visual reminders?).	191	focus (perhaps since I don\'t have visual reminders?).
188		192
189	Keeping a running task list of all things I have to do - even potential	193	Keeping a running task list of all things I have to do - even potential
190	tasks! - has helped me keep up without missing anything small. Likewise,	194	tasks! - has helped me keep up without missing anything small. Likewise,
	@@ -193,13 +197,11 @@ has improved my retention immensely. Beyond helping my mental
193	recollection, it has saved me numerous times when I need to do a keyword	197	recollection, it has saved me numerous times when I need to do a keyword
194	search for some topic that was discussed 6+ months ago.	198	search for some topic that was discussed 6+ months ago.
195		199
196	** Tip #4	200	## Tip #4
197	Okay, last one for now.
198		201
199	#+begin_quote	202	Okay, last one for now.
200	Keep your work area clean.
201		203
202	#+end_quote	204	> Keep your work area clean.
203		205
204	This one is straightforward, but I know some people struggle with	206	This one is straightforward, but I know some people struggle with
205	cleanliness or may not believe it makes a difference. Trust me, keeping	207	cleanliness or may not believe it makes a difference. Trust me, keeping
	@@ -210,20 +212,21 @@ Just think about it, you walk into your home office and see a clean desk
210	with a laptop, dock, monitors, keyboard, mouse, and a notepad with a pen	212	with a laptop, dock, monitors, keyboard, mouse, and a notepad with a pen
211	on top.	213	on top.
212		214
213	Now imagine the opposite, there's an office with the same equipment, but	215	Now imagine the opposite, there\'s an office with the same equipment,
214	there are clothes hanging on the chair, empty drink bottles, candy	216	but there are clothes hanging on the chair, empty drink bottles, candy
215	wrappers and dirty plates. This can take both a mental and emotional	217	wrappers and dirty plates. This can take both a mental and emotional
216	toll by bringing constant disarray and stress into your working	218	toll by bringing constant disarray and stress into your working
217	environment.	219	environment.
218		220
219	Just keep things clean each day, and you won't need to do any big	221	Just keep things clean each day, and you won\'t need to do any big
220	cleaning days to recover.	222	cleaning days to recover.
221		223
222	* My Preferences	224	# My Preferences
223	I've talked about the different environments I've worked in and	225
		226	I\'ve talked about the different environments I\'ve worked in and
224	expressed some honest thoughts on pros or cons to each, but what do I	227	expressed some honest thoughts on pros or cons to each, but what do I
225	prefer? Well, if you're reading along, you should be able to tell that I	228	prefer? Well, if you\'re reading along, you should be able to tell that
226	much prefer a home office above all else.	229	I much prefer a home office above all else.
227		230
228	Being able to control my own day and allot my time as needed has brought	231	Being able to control my own day and allot my time as needed has brought
229	a calmness to my life and has allowed me to maximize each day. I feel	232	a calmness to my life and has allowed me to maximize each day. I feel
	@@ -236,5 +239,5 @@ my work done.
236		239
237	Cubicles are good! I agree with Alice (from the comic Dilbert):	240	Cubicles are good! I agree with Alice (from the comic Dilbert):
238		241
239	#+caption: Dilbert comic strip	242	![Dilbert comic
240	[[https://img.cleberg.net/blog/20220210-leaving-office-based-work-in-the-past/dilbert_120109.png]]	243	strip](https://img.cleberg.net/blog/20220210-leaving-office-based-work-in-the-past/dilbert_120109.png)

content/blog/2022-02-10-njalla-dns-api.org → content/blog/2022-02-10-njalla-dns-api.md renamed +75 −62

	@@ -1,13 +1,16 @@
1	#+title: Dynamic DNS with Njalla API	1	+++
2	#+date: 2022-02-10	2	date = 2022-02-10
3	#+description: Learn how to dynamically update DNS records for changing IPs with Njalla.	3	title = "Dynamic DNS with Njalla API"
4	#+filetags: :sysadmin:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Njalla's API	8	# Njalla\'s API
7	As noted in my recent post about [[/blog/ditching-cloudflare/][switching	9
8	to Njalla from Cloudflare]], I was searching for a way to replace my	10	As noted in my recent post about [switching to Njalla from
9	very easy-to-use bash script to [[/blog/cloudflare-dns-api/][update	11	Cloudflare](file:///blog/ditching-cloudflare/), I was searching for a
10	Cloudflare's DNS via their API]].	12	way to replace my very easy-to-use bash script to [update Cloudflare\'s
		13	DNS via their API](file:///blog/cloudflare-dns-api/).
11		14
12	To reiterate what I said in those posts, this is a common necessity for	15	To reiterate what I said in those posts, this is a common necessity for
13	those of us who have non-static IP addresses that can change at any	16	those of us who have non-static IP addresses that can change at any
	@@ -15,86 +18,93 @@ moment due to ISP policy.
15		18
16	In order to keep a home server running smoothly, the server admin needs	19	In order to keep a home server running smoothly, the server admin needs
17	to have a process to constantly monitor their public IP address and	20	to have a process to constantly monitor their public IP address and
18	update their domain's DNS records if it changes.	21	update their domain\'s DNS records if it changes.
		22
		23	This post explains how to use Python to update Njalla\'s DNS records
		24	whenever a machine\'s public IP address changes.
19		25
20	This post explains how to use Python to update Njalla's DNS records	26	## Creating a Token
21	whenever a machine's public IP address changes.
22		27
23	** Creating a Token	28	To use Njalla\'s API, you will first need to create a token that will be
24	To use Njalla's API, you will first need to create a token that will be
25	used to authenticate you every time you call the API. Luckily, this is	29	used to authenticate you every time you call the API. Luckily, this is
26	very easy to do if you have an account with Njalla.	30	very easy to do if you have an account with Njalla.
27		31
28	Simply go the [[https://njal.la/settings/api/][API Settings]] page and	32	Simply go the [API Settings](https://njal.la/settings/api/) page and
29	click the =Add Token= button. Next, enter a name for the token and click	33	click the `Add Token` button. Next, enter a name for the
30	=Add=.	34	token and click `Add`.
31		35
32	Finally, click the =Manage= button next to your newly created token and	36	Finally, click the `Manage` button next to your newly created
33	copy the =API Token= field.	37	token and copy the `API Token` field.
34		38
35	** Finding the Correct API Request	39	## Finding the Correct API Request
36	Once you have a token, you're ready to call the Njalla API for any	40
		41	Once you have a token, you\'re ready to call the Njalla API for any
37	number of requests. For a full listing of available requests, see the	42	number of requests. For a full listing of available requests, see the
38	[[https://njal.la/api/][Njalla API Documentation]].	43	[Njalla API Documentation](https://njal.la/api/).
39		44
40	For this demo, we are using the =list-records= and =edit-record=	45	For this demo, we are using the `list-records` and
41	requests.	46	`edit-record` requests.
42		47
43	The =list-records= request requires the following payload to be sent	48	The `list-records` request requires the following payload to
44	when calling the API:	49	be sent when calling the API:
45		50
46	#+begin_src txt	51	``` txt
47	params: {	52	params: {
48	domain: string	53	domain: string
49	}	54	}
50	#+end_src	55	```
51		56
52	The =edit-record= request requires the following payload to be sent when	57	The `edit-record` request requires the following payload to
53	calling the API:	58	be sent when calling the API:
54		59
55	#+begin_src txt	60	``` txt
56	params: {	61	params: {
57	domain: string	62	domain: string
58	id: int	63	id: int
59	content: string	64	content: string
60	}	65	}
61	#+end_src	66	```
		67
		68	# Server Set-Up
62		69
63	* Server Set-Up
64	To create this script, we will be using Python. By default, I use Python	70	To create this script, we will be using Python. By default, I use Python
65	3 on my servers, so please note that I did not test this in Python 2,	71	3 on my servers, so please note that I did not test this in Python 2,
66	and I do not know if Python 2 will work for this.	72	and I do not know if Python 2 will work for this.
67		73
68	** Creating the Script	74	## Creating the Script
		75
69	First, find a suitable place to create your script. Personally, I just	76	First, find a suitable place to create your script. Personally, I just
70	create a directory called =ddns= in my home directory:	77	create a directory called `ddns` in my home directory:
71		78
72	#+begin_src sh	79	```sh
73	mkdir ~/ddns	80	mkdir ~/ddns
74	#+end_src	81	```
75		82
76	Next, create a Python script file:	83	Next, create a Python script file:
77		84
78	#+begin_src sh	85	```sh
79	nano ~/ddns/ddns.py	86	nano ~/ddns/ddns.py
80	#+end_src	87	```
81		88
82	The following code snippet is quite long, so I won't go into depth on	89	The following code snippet is quite long, so I won\'t go into depth on
83	each part. However, I suggest you read through the entire script before	90	each part. However, I suggest you read through the entire script before
84	running it; it is quite simple and contains comments to help explain	91	running it; it is quite simple and contains comments to help explain
85	each code block.	92	each code block.
86		93
87	:warning: Note: You will need to update the following variables for	94	:warning: Note: You will need to update the following variables for
88	this to work:	95	this to work:
89		96
90	- =token=: This is the Njalla API token you created earlier.	97	- `token`: This is the Njalla API token you created
91	- =user_domain=: This is the top-level domain you want to modify.	98	earlier.
92	- =include_subdomains=: Set this to =True= if you also want to modify	99	- `user_domain`: This is the top-level domain you want to
93	subdomains found under the TLD.	100	modify.
94	- =subdomains=: If =include_subdomains= = =True=, you can include your	101	- `include_subdomains`: Set this to `True` if
95	list of subdomains to be modified here.	102	you also want to modify subdomains found under the TLD.
96		103	- `subdomains`: If `include_subdomains` =
97	#+begin_src python	104	`True`, you can include your list of subdomains to be
		105	modified here.
		106
		107	``` python
98	#!/usr/bin/python	108	#!/usr/bin/python
99	# -- coding: utf-8 --	109	# -- coding: utf-8 --
100	# Import Python modules	110	# Import Python modules
	@@ -173,27 +183,30 @@ for record in data['records']:
173	'does not match Njalla's value of',	183	'does not match Njalla's value of',
174	record['content'], '. Updating...')	184	record['content'], '. Updating...')
175	update_record(user_domain, record['id'], ipv6)	185	update_record(user_domain, record['id'], ipv6)
176	#+end_src	186	```
177		187
178	** Running the Script	188	## Running the Script
179	Once you've created the script and are ready to test it, run the	189
		190	Once you\'ve created the script and are ready to test it, run the
180	following command:	191	following command:
181		192
182	#+begin_src sh	193	```sh
183	python3 ~/ddns/ddns.py	194	python3 ~/ddns/ddns.py
184	#+end_src	195	```
		196
		197	## Setting the Script to Run Automatically
185		198
186	** Setting the Script to Run Automatically	199	To make sure the scripts run automatically, add it to the
187	To make sure the scripts run automatically, add it to the =cron= file so	200	`cron` file so that it will run on a schedule. To do this,
188	that it will run on a schedule. To do this, open the =cron= file:	201	open the `cron` file:
189		202
190	#+begin_src sh	203	```sh
191	crontab -e	204	crontab -e
192	#+end_src	205	```
193		206
194	In the cron file, paste the following at the bottom of the editor in	207	In the cron file, paste the following at the bottom of the editor in
195	order to check the IP every five minutes:	208	order to check the IP every five minutes:
196		209
197	#+begin_src sh	210	```sh
198	,/5 * ** python3 /home/<your_username>/ddns/ddns.py	211	/5 * ** python3 /home/<your_username>/ddns/ddns.py
199	#+end_src	212	```

content/blog/2022-02-16-debian-and-nginx.org → content/blog/2022-02-16-debian-and-nginx.md renamed +79 −70

	@@ -1,74 +1,78 @@
1	#+title: Migrating to a New Web Server Setup with Debian, Nginx, and Agate	1	+++
2	#+date: 2022-02-16	2	date = 2022-02-16
3	#+description: A retrospective on my recent server migration.	3	title = "Migrating to a New Web Server Setup with Debian, Nginx, and Agate"
4	#+filetags: :sysadmin:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Server OS: Debian	8	# Server OS: Debian
7	#+caption: Debian + neofetch
8	[[https://img.cleberg.net/blog/20220216-migrating-to-debian-and-nginx/neofetch.png]]
9		9
10	I've used various Linux distributions throughout the years, but I've	10	![Debian +
		11	neofetch](https://img.cleberg.net/blog/20220216-migrating-to-debian-and-nginx/neofetch.png)
		12
		13	I\'ve used various Linux distributions throughout the years, but I\'ve
11	never used anything except Ubuntu for my servers. Why? I really have no	14	never used anything except Ubuntu for my servers. Why? I really have no
12	idea, mostly just comfort around the commands and software availability.	15	idea, mostly just comfort around the commands and software availability.
13		16
14	However, I have always wanted to try Debian as a server OS after testing	17	However, I have always wanted to try Debian as a server OS after testing
15	it out in a VM a few years ago (side-note: I'd love to try Alpine too,	18	it out in a VM a few years ago (side-note: I\'d love to try Alpine too,
16	but I always struggle with compatibility). So, I decided to launch a new	19	but I always struggle with compatibility). So, I decided to launch a new
17	VPS and use [[https://www.debian.org][Debian]] 11 as the OS. Spoiler	20	VPS and use [Debian](https://www.debian.org) 11 as the OS. Spoiler
18	alert: it feels identical to Ubuntu for my purposes.	21	alert: it feels identical to Ubuntu for my purposes.
19		22
20	I did the normal things when first launching the VPS, such as adding a	23	I did the normal things when first launching the VPS, such as adding a
21	new user, locking down SSH, etc. If you want to see that level of	24	new user, locking down SSH, etc. If you want to see that level of
22	detail, read my other post about	25	detail, read my other post about [How to Set Up a VPS Web
23	[[https://cleberg.net/blog/how-to-set-up-a-vps-web-server/][How to Set	26	Server](https://cleberg.net/blog/how-to-set-up-a-vps-web-server/).
24	Up a VPS Web Server]].
25		27
26	All of this has been similar, apart from small things such as the	28	All of this has been similar, apart from small things such as the
27	location of users' home folders. No complaints at all from me - Debian	29	location of users\' home folders. No complaints at all from me - Debian
28	seems great.	30	seems great.
29		31
30	* Web Server: Nginx	32	# Web Server: Nginx
31	#+caption: Nginx status	33
32	[[https://img.cleberg.net/blog/20220216-migrating-to-debian-and-nginx/nginx.png]]	34	![Nginx
		35	status](https://img.cleberg.net/blog/20220216-migrating-to-debian-and-nginx/nginx.png)
33		36
34	Once I had the baseline server configuration set-up for Debian, I moved	37	Once I had the baseline server configuration set-up for Debian, I moved
35	on to trying out [[https://nginx.org][Nginx]] as my web server software.	38	on to trying out [Nginx](https://nginx.org) as my web server software.
36	This required me to install the =nginx= and =ufw= packages, as well as	39	This required me to install the `nginx` and `ufw`
37	setting up the initial UFW config:	40	packages, as well as setting up the initial UFW config:
38		41
39	#+begin_src sh	42	```sh
40	sudo apt install nginx ufw	43	sudo apt install nginx ufw
41	sudo ufw allow 'Nginx Full'	44	sudo ufw allow 'Nginx Full'
42	sudo ufw allow SSH	45	sudo ufw allow SSH
43	sudo ufw enable	46	sudo ufw enable
44	sudo ufw status	47	sudo ufw status
45	sudo systemctl status nginx	48	sudo systemctl status nginx
46	#+end_src	49	```
47		50
48	Once I had the firewall set, I moved on to creating the directories and	51	Once I had the firewall set, I moved on to creating the directories and
49	files for my website. This is very easy and is basically the same as	52	files for my website. This is very easy and is basically the same as
50	setting up an Apache server, so no struggles here.	53	setting up an Apache server, so no struggles here.
51		54
52	#+begin_src sh	55	```sh
53	sudo mkdir -p /var/www/your_domain/html	56	sudo mkdir -p /var/www/your_domain/html
54	sudo chown -R $USER:$USER /var/www/your_domain/html	57	sudo chown -R $USER:$USER /var/www/your_domain/html
55	sudo chmod -R 755 /var/www/your_domain	58	sudo chmod -R 755 /var/www/your_domain
56	nano /var/www/your_domain/html/index.html	59	nano /var/www/your_domain/html/index.html
57	#+end_src	60	```
58		61
59	The next part, creating the Nginx configuration files, is quite a bit	62	The next part, creating the Nginx configuration files, is quite a bit
60	different from Apache. First, you need to create the files in the	63	different from Apache. First, you need to create the files in the
61	=sites-available= folder and symlink it the =sites-enabled= folder.	64	`sites-available` folder and symlink it the
		65	`sites-enabled` folder.
62		66
63	Creating the config file for your domain:	67	Creating the config file for your domain:
64		68
65	#+begin_src sh	69	```sh
66	sudo nano /etc/nginx/sites-available/your_domain	70	sudo nano /etc/nginx/sites-available/your_domain
67	#+end_src	71	```
68		72
69	Default content for an Nginx config file:	73	Default content for an Nginx config file:
70		74
71	#+begin_src sh	75	```sh
72	server {	76	server {
73	listen 80;	77	listen 80;
74	listen [::]:80;	78	listen [::]:80;
	@@ -82,43 +86,45 @@ server {
82	try_files $uri $uri/ =404;	86	try_files $uri $uri/ =404;
83	}	87	}
84	}	88	}
85	#+end_src	89	```
86		90
87	Finally, symlink it together:	91	Finally, symlink it together:
88		92
89	#+begin_src sh	93	```sh
90	sudo ln -s /etc/nginx/sites-available/your_domain /etc/nginx/sites-enabled/	94	sudo ln -s /etc/nginx/sites-available/your_domain /etc/nginx/sites-enabled/
91	#+end_src	95	```
92		96
93	This will make your site available to the public (as long as you have	97	This will make your site available to the public (as long as you have
94	=your_domain= DNS records pointed at the server's IP address)!	98	`your_domain` DNS records pointed at the server\'s IP
		99	address)!
95		100
96	Next, I used [[https://certbot.eff.org/][certbot]] to issue an HTTPS	101	Next, I used [certbot](https://certbot.eff.org/) to issue an HTTPS
97	certificate for my domains using the following commands:	102	certificate for my domains using the following commands:
98		103
99	#+begin_src sh	104	```sh
100	sudo apt install snapd; sudo snap install core; sudo snap refresh core	105	sudo apt install snapd; sudo snap install core; sudo snap refresh core
101	sudo snap install --classic certbot	106	sudo snap install --classic certbot
102	sudo ln -s /snap/bin/certbot /usr/bin/certbot	107	sudo ln -s /snap/bin/certbot /usr/bin/certbot
103	sudo certbot --nginx	108	sudo certbot --nginx
104	#+end_src	109	```
105		110
106	Now that certbot ran successfully and updated my Nginx config files to	111	Now that certbot ran successfully and updated my Nginx config files to
107	include a =443= server block of code, I went back in and edited the	112	include a `443` server block of code, I went back in and
108	config file to include security HTTP headers. This part is optional, but	113	edited the config file to include security HTTP headers. This part is
109	is recommended for security purposes; you can even test a website's HTTP	114	optional, but is recommended for security purposes; you can even test a
110	header security at [[https://securityheaders.com/][Security Headers]].	115	website\'s HTTP header security at [Security
		116	Headers](https://securityheaders.com/).
111		117
112	The configuration below shows a set-up where you only want your website	118	The configuration below shows a set-up where you only want your website
113	to serve content from its own domain, except for images and scripts,	119	to serve content from its own domain, except for images and scripts,
114	which may come from =nullitics.com=. All other content would be blocked	120	which may come from `nullitics.com`. All other content would
115	from loading in a browser.	121	be blocked from loading in a browser.
116		122
117	#+begin_src sh	123	```sh
118	sudo nano /etc/nginx/sites-available/your_domain	124	sudo nano /etc/nginx/sites-available/your_domain
119	#+end_src	125	```
120		126
121	#+begin_src sh	127	```sh
122	server {	128	server {
123	...	129	...
124	add_header Content-Security-Policy "default-src 'none'; img-src 'self' https://nullitics.com; script-src 'self' https://nullitics.com; style-src 'self'; font-src 'self'";	130	add_header Content-Security-Policy "default-src 'none'; img-src 'self' https://nullitics.com; script-src 'self' https://nullitics.com; style-src 'self'; font-src 'self'";
	@@ -129,44 +135,47 @@ server {
129	add_header Referrer-Policy "no-referrer";	135	add_header Referrer-Policy "no-referrer";
130	...	136	...
131	}	137	}
132	#+end_src	138	```
133		139
134	#+begin_src sh	140	```sh
135	sudo systemctl restart nginx	141	sudo systemctl restart nginx
136	#+end_src	142	```
		143
		144	## Nginx vs. Apache
137		145
138	** Nginx vs. Apache
139	As I stated at the beginning, my historical hesitation with trying Nginx	146	As I stated at the beginning, my historical hesitation with trying Nginx
140	was that the differences in configuration formats scared me away from	147	was that the differences in configuration formats scared me away from
141	leaving Apache. However, I prefer Nginx to Apache for a few reasons:	148	leaving Apache. However, I prefer Nginx to Apache for a few reasons:
142		149
143	1. Nginx uses only one config file (=your_domain=) vs. Apache's two-file	150	1. Nginx uses only one config file (`your_domain`) vs.
144	approach for HTTP vs. HTTPS (=your_domain.conf= and	151	Apache\'s two-file approach for HTTP vs. HTTPS
145	=your_domain-le-ssl.conf=).	152	(`your_domain.conf` and
146	2. Symlinking new configurations files and reloading Nginx are way	153	`your_domain-le-ssl.conf`).
147	easier than Apache's process of having to enable headers with	154	2. Symlinking new configurations files and reloading Nginx are way
148	=a2enmod mod_headers=, enable PHP with =a2enmod php= (plus any other	155	easier than Apache\'s process of having to enable headers with
149	mods you need), and then enabling sites with =a2ensite=, and THEN	156	`a2enmod mod_headers`, enable PHP with
150	reloading Apache.	157	`a2enmod php` (plus any other mods you need), and then
151	3. The contents of the Nginx config files seem more organized and	158	enabling sites with `a2ensite`, and THEN reloading
152	logical with the curly-bracket approach. This is a minor reason, but	159	Apache.
153	everything just felt cleaner while I was installing my sites and that	160	3. The contents of the Nginx config files seem more organized and
154	had a big quality of life impact on the installation for me.	161	logical with the curly-bracket approach. This is a minor reason, but
155		162	everything just felt cleaner while I was installing my sites and
156	They're both great software packages, but Nginx just seems more	163	that had a big quality of life impact on the installation for me.
		164
		165	They\'re both great software packages, but Nginx just seems more
157	organized and easier to use these days. I will certainly be exploring	166	organized and easier to use these days. I will certainly be exploring
158	the Nginx docs to see what other fun things I can do with all of this.	167	the Nginx docs to see what other fun things I can do with all of this.
159		168
160	* Gemini Server: Agate	169	# Gemini Server: Agate
161	#+caption: Agate status	170
162	[[https://img.cleberg.net/blog/20220216-migrating-to-debian-and-nginx/agate.png]]	171	![Agate
		172	status](https://img.cleberg.net/blog/20220216-migrating-to-debian-and-nginx/agate.png)
163		173
164	Finally, I set up the Agate software on this server again to host my	174	Finally, I set up the Agate software on this server again to host my
165	Gemini server content, using Rust as I have before. You can read my	175	Gemini server content, using Rust as I have before. You can read my
166	other post for more information on installing Agate:	176	other post for more information on installing Agate: [Hosting a Gemini
167	[[https://cleberg.net/blog/hosting-a-gemini-server/][Hosting a Gemini	177	Server](https://cleberg.net/blog/hosting-a-gemini-server/).
168	Server]].
169		178
170	All in all, Debian + Nginx is very slick and I prefer it over my old	179	All in all, Debian + Nginx is very slick and I prefer it over my old
171	combination of Ubuntu + Apache (although it's really just Nginx > Apache	180	combination of Ubuntu + Apache (although it\'s really just Nginx \>
172	for me, since Debian seems mostly the same as Ubuntu is so far).	181	Apache for me, since Debian seems mostly the same as Ubuntu is so far).

content/blog/2022-02-17-exiftool.md added +68

@@ -0,0 +1,68 @@
	1	+++
	2	date = 2022-02-17
	3	title = "Stripping Image Metadata with Exiftool"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	## Why Strip Metadata?
	9
	10	Okay, so you want to strip metadata from your photos. Perhaps you take
	11	pictures of very rare birds, and the location metadata is a gold mine
	12	for poachers, or perhaps you\'re just privacy-oriented like me and
	13	prefer to strip metadata from publicly-available images.
	14
	15	There are various components of image metadata that you may want to
	16	delete before releasing a photo to the public. Here\'s an incomplete
	17	list of things I could easily see just by inspecting a photo on my
	18	laptop:
	19
	20	- Location (Latitude & Longitude)
	21	- Dimensions
	22	- Device Make & Model
	23	- Color Space
	24	- Color Profile
	25	- Focal Length
	26	- Alpha Channel
	27	- Red Eye
	28	- Metering Mode
	29	- F Number
	30
	31	Regardless of your reasoning, I\'m going to explain how I used the
	32	`exiftool` package in Linux to automatically strip metadata
	33	from all images in a directory (+ subdirectories).
	34
	35	## Installing `exiftool`
	36
	37	First things first: we need to install the tool. I\'m running Debian 11
	38	on my server (Ubuntu will work the same), so the command is as simple
	39	as:
	40
	41	```sh
	42	sudo apt install exiftool
	43	```
	44
	45	There are different tools that can accomplish the same thing across
	46	distributions, but I really only care to test out this one package.
	47
	48	## Recursively Strip Data
	49
	50	I actually use this tool extensively to strip any photos uploaded to the
	51	website that serves all the images for my blog
	52	(`img.cleberg.net`).
	53
	54	The following command is incredibly useful and can be modified to
	55	include any image extensions that `exiftool` supports:
	56
	57	```sh
	58	exiftool -r -all= -ext jpg -ext png /path/to/directory/
	59	```
	60
	61	See below for the results of my most recent usage of
	62	`exiftool` after I uploaded the image for this blog post. You
	63	can see that the command will let you know how many directories were
	64	scanned, how many images were updated, and how many images were
	65	unchanged.
	66
	67	![exiftool
	68	results](https://img.cleberg.net/blog/20220217-stripping-metadata-with-exiftool/exiftool.png)

content/blog/2022-02-17-exiftool.org deleted −60

	@@ -1,60 +0,0 @@
1	#+title: Stripping Image Metadata with exiftool
2	#+date: 2022-02-17
3	#+description: A simple guide to remove exif data with exiftool.
4	#+filetags: :privacy:
5
6	** Why Strip Metadata?
7	Okay, so you want to strip metadata from your photos. Perhaps you take
8	pictures of very rare birds, and the location metadata is a gold mine
9	for poachers, or perhaps you're just privacy-oriented like me and prefer
10	to strip metadata from publicly-available images.
11
12	There are various components of image metadata that you may want to
13	delete before releasing a photo to the public. Here's an incomplete list
14	of things I could easily see just by inspecting a photo on my laptop:
15
16	- Location (Latitude & Longitude)
17	- Dimensions
18	- Device Make & Model
19	- Color Space
20	- Color Profile
21	- Focal Length
22	- Alpha Channel
23	- Red Eye
24	- Metering Mode
25	- F Number
26
27	Regardless of your reasoning, I'm going to explain how I used the
28	=exiftool= package in Linux to automatically strip metadata from all
29	images in a directory (+ subdirectories).
30
31	** Installing =exiftool=
32	First things first: we need to install the tool. I'm running Debian 11
33	on my server (Ubuntu will work the same), so the command is as simple
34	as:
35
36	#+begin_src sh
37	sudo apt install exiftool
38	#+end_src
39
40	There are different tools that can accomplish the same thing across
41	distributions, but I really only care to test out this one package.
42
43	** Recursively Strip Data
44	I actually use this tool extensively to strip any photos uploaded to the
45	website that serves all the images for my blog (=img.cleberg.net=).
46
47	The following command is incredibly useful and can be modified to
48	include any image extensions that =exiftool= supports:
49
50	#+begin_src sh
51	exiftool -r -all= -ext jpg -ext png /path/to/directory/
52	#+end_src
53
54	See below for the results of my most recent usage of =exiftool= after I
55	uploaded the image for this blog post. You can see that the command will
56	let you know how many directories were scanned, how many images were
57	updated, and how many images were unchanged.
58
59	#+caption: exiftool results
60	[[https://img.cleberg.net/blog/20220217-stripping-metadata-with-exiftool/exiftool.png]]

content/blog/2022-02-20-nginx-caching.md added +73

@@ -0,0 +1,73 @@
	1	+++
	2	date = 2022-02-20
	3	title = "Caching Static Content with Nginx"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Update Your Nginx Config to Cache Static Files
	9
	10	If you run a website on Nginx that serves static content (i.e., content
	11	that is not dynamic and changing with interactions from the user), you
	12	would likely benefit from caching that content on the client-side. If
	13	you\'re used to Apache and looking for the Nginx equivalent, this post
	14	should help.
	15
	16	Luckily, setting up the cache is as easy as identifying the file types
	17	you want to cache and determining the expiration length. To include more
	18	file types, simply use the bar separator (`\|`) and type the
	19	new file extension you want to include.
	20
	21	``` config
	22	server {
	23	...
	24
	25	location ~** .(css\|js\|jpg\|jpeg\|gif\|png\|ico)$ {
	26	expires 30d;
	27	}
	28
	29	...
	30	}
	31	```
	32
	33	I have seen some people who prefer to set `expires` as
	34	`365d` or even `max`, but that is only for stable,
	35	infrequently changing websites. As my site often changes (i.e., I\'m
	36	never content with my website), I need to know that my readers are
	37	seeing the new content without waiting too long.
	38
	39	So, I went ahead and set the expiration date at `30d`, which
	40	is short enough to refresh for readers but long enough that
	41	clients/browsers won\'t be re-requesting the static files too often,
	42	hopefully resulting in faster loading times, as images should be the
	43	only thing slowing down my site.
	44
	45	# Testing Results
	46
	47	To test my changes to the Nginx configuration, I used the [HTTP Header
	48	Live](https://addons.mozilla.org/en-US/firefox/addon/http-header-live/)
	49	extension on my Gecko browser and used the sidebar to inspect the
	50	headers of a recent image from my blog.
	51
	52	In the image below, you can see that the `Cache-Control`
	53	header is now present and set to 2592000, which is 30 days represented
	54	in seconds (30 days \_ 24 hours/day \_ 60 minutes/hour \\ 60
	55	seconds/minute = 2,592,000 seconds).
	56
	57	The `Expires` field is now showing 22 March 2022, which is 30
	58	days from the day of this post, 20 February 2022.
	59
	60	![Image
	61	Headers](https://img.cleberg.net/blog/20220220-caching-static-content-with-nginx/image_headers.png)
	62
	63	# Caveats
	64
	65	Remember that this caching system is client-side, which means that
	66	content is only cached for as long as a client allows it. For example,
	67	my browser purges all caches, data, etc. upon exit, so this caching
	68	policy will only work as long as my browser remains open and running.
	69
	70	If you need to test updates to your site, you\'ll need to clear the
	71	cache to see updates for any file extension you configured. This can
	72	often be done with the `Shift + F5` or `Ctrl + F5`
	73	key combinations in most browsers.

content/blog/2022-02-20-nginx-caching.org deleted −68

	@@ -1,68 +0,0 @@
1	#+title: Caching Static Content with Nginx
2	#+date: 2022-02-20
3	#+description: Learn how to enable the static content cache in Nginx.
4	#+filetags: :nginx:
5
6	* Update Your Nginx Config to Cache Static Files
7	If you run a website on Nginx that serves static content (i.e., content
8	that is not dynamic and changing with interactions from the user), you
9	would likely benefit from caching that content on the client-side. If
10	you're used to Apache and looking for the Nginx equivalent, this post
11	should help.
12
13	Luckily, setting up the cache is as easy as identifying the file types
14	you want to cache and determining the expiration length. To include more
15	file types, simply use the bar separator (=\|=) and type the new file
16	extension you want to include.
17
18	#+begin_src config
19	server {
20	...
21
22	location ~** .(css\|js\|jpg\|jpeg\|gif\|png\|ico)$ {
23	expires 30d;
24	}
25
26	...
27	}
28	#+end_src
29
30	I have seen some people who prefer to set =expires= as =365d= or even
31	=max=, but that is only for stable, infrequently changing websites. As
32	my site often changes (i.e., I'm never content with my website), I need
33	to know that my readers are seeing the new content without waiting too
34	long.
35
36	So, I went ahead and set the expiration date at =30d=, which is short
37	enough to refresh for readers but long enough that clients/browsers
38	won't be re-requesting the static files too often, hopefully resulting
39	in faster loading times, as images should be the only thing slowing down
40	my site.
41
42	* Testing Results
43	To test my changes to the Nginx configuration, I used the
44	[[https://addons.mozilla.org/en-US/firefox/addon/http-header-live/][HTTP
45	Header Live]] extension on my Gecko browser and used the sidebar to
46	inspect the headers of a recent image from my blog.
47
48	In the image below, you can see that the =Cache-Control= header is now
49	present and set to 2592000, which is 30 days represented in seconds (30
50	days _ 24 hours/day _ 60 minutes/hour ** 60 seconds/minute = 2,592,000
51	seconds).
52
53	The =Expires= field is now showing 22 March 2022, which is 30 days from
54	the day of this post, 20 February 2022.
55
56	#+caption: Image Headers
57	[[https://img.cleberg.net/blog/20220220-caching-static-content-with-nginx/image_headers.png]]
58
59	* Caveats
60	Remember that this caching system is client-side, which means that
61	content is only cached for as long as a client allows it. For example,
62	my browser purges all caches, data, etc. upon exit, so this caching
63	policy will only work as long as my browser remains open and running.
64
65	If you need to test updates to your site, you'll need to clear the cache
66	to see updates for any file extension you configured. This can often be
67	done with the =Shift + F5= or =Ctrl + F5= key combinations in most
68	browsers.

content/blog/2022-02-22-tuesday.md added +42

@@ -0,0 +1,42 @@
	1	+++
	2	date = 2022-02-22
	3	title = "Tuesday"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Tuesday, Twosday
	9
	10	I\'m taking a break from my usual technology-related posts and writing
	11	about something a little more enjoyable today.
	12
	13	Today is Tuesday, February 22nd, 2022. Today is 02-22-2022. Today is
	14	Twosday.
	15
	16	Let\'s look at everything that fell in place today:
	17
	18	1. Written in the `m-dd-yy` or `dd-m-yy` formats,
	19	today is 2-22-22 or 22-2-22, which is a neat little palindrome in
	20	either format. (The last ubiquitous six-digit palindrome was
	21	1-11-11.)
	22	2. Today is Tuesday, which is why everyone is using the nickname
	23	Twosday to call out these similarities.
	24	3. Falling on Tuesday means today is the 2nd day of the week (for most
	25	cultures. For the US, it\'s the 3rd day of the week since we start
	26	on Sunday).
	27	4. The only culture I could find with a connection to a `2`
	28	is that some Slavic languages derived their version of Tuesday from
	29	the Old Church Slavonic word `въторъ`, meaning \"the
	30	second.\"
	31	5. Written in the classic monospaced, digital font (think of digital
	32	clocks from the 80s/90s), there is nice symmetry to the numbers
	33	([view the image
	34	here](https://img.cleberg.net/blog/20220222-tuesday/digital_font.png)!).
	35	6. This one isn\'t naturally-occurring, but it seems people around the
	36	world are celebrating the day. For example, a group is putting
	37	together
	38	\[\[<https://www.eventbrite.com/e/2-22-22-a-collective-wedding-ceremony-at-the-state-capitol-tickets-211434605597>\]\[a
	39	wedding of 222 couples at the California State Capitol in
	40	Sacramento\]\], concluding at exactly 2:22 PM. These couples will
	41	record their marriage dates as 2-22-22 2:22 PM. Tickets were on sale
	42	for \$222.22.

content/blog/2022-02-22-tuesday.org deleted −37

	@@ -1,37 +0,0 @@
1	#+title: Tuesday
2	#+date: 2022-02-22
3	#+description: 2-22-22 \|\| 22-2-22
4	#+filetags: :personal:
5
6	* Tuesday, Twosday
7	I'm taking a break from my usual technology-related posts and writing
8	about something a little more enjoyable today.
9
10	Today is Tuesday, February 22nd, 2022. Today is 02-22-2022. Today is
11	Twosday.
12
13	Let's look at everything that fell in place today:
14
15	1. Written in the =m-dd-yy= or =dd-m-yy= formats, today is 2-22-22 or
16	22-2-22, which is a neat little palindrome in either format. (The
17	last ubiquitous six-digit palindrome was 1-11-11.)
18	2. Today is Tuesday, which is why everyone is using the nickname Twosday
19	to call out these similarities.
20	3. Falling on Tuesday means today is the 2nd day of the week (for most
21	cultures. For the US, it's the 3rd day of the week since we start on
22	Sunday).
23	4. The only culture I could find with a connection to a =2= is that some
24	Slavic languages derived their version of Tuesday from the Old Church
25	Slavonic word =въторъ=, meaning "the second."
26	5. Written in the classic monospaced, digital font (think of digital
27	clocks from the 80s/90s), there is nice symmetry to the numbers
28	([[https://img.cleberg.net/blog/20220222-tuesday/digital_font.png][view
29	the image here]]!).
30	6. This one isn't naturally-occurring, but it seems people around the
31	world are celebrating the day. For example, a group is putting
32	together
33	[[[[https://www.eventbrite.com/e/2-22-22-a-collective-wedding-ceremony-at-the-state-capitol-tickets-211434605597]]][a
34	wedding of 222 couples at the California State Capitol in
35	Sacramento]], concluding at exactly 2:22 PM. These couples will
36	record their marriage dates as 2-22-22 2:22 PM. Tickets were on sale
37	for $222.22.

content/blog/2022-03-02-reliable-notes.org → content/blog/2022-03-02-reliable-notes.md renamed +56 −55

	@@ -1,17 +1,17 @@
1	#+title: Easy, Reliable Note-Taking	1	+++
2	#+date: 2022-03-02	2	date = 2022-03-02
3	#+description: My personal preferences to ensure notes are clear, portable, and long-lasting.	3	title = "Easy, Reliable Note-Taking"
4	#+filetags: :personal:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Choosing Durable File Formats	8	# Choosing Durable File Formats
7		9
8	#+begin_quote	10	> TL;DR: Write in a format that can be easily rendered and read in
9	TL;DR: Write in a format that can be easily rendered and read in	11	> plain-text mode (e.g., `.txt`, `.md`, etc.).
10	plain-text mode (e.g., =.txt=, =.md=, etc.).
11	#+end_quote
12		12
13	As I've written more and more over the years, I've found that my love of	13	As I\'ve written more and more over the years, I\'ve found that my love
14	note-taking is always growing. Everything I learn or need to remember	14	of note-taking is always growing. Everything I learn or need to remember
15	can be written down in a note and saved digitally, with no cost to	15	can be written down in a note and saved digitally, with no cost to
16	myself. Unlike paper copies that need physical storage space, digital	16	myself. Unlike paper copies that need physical storage space, digital
17	files simply need space on your local disk or cloud storage, which is	17	files simply need space on your local disk or cloud storage, which is
	@@ -23,8 +23,8 @@ styling. This meant that I had to go through each note during migration
23	and edit the file to look presentable again.	23	and edit the file to look presentable again.
24		24
25	For the last year or two, I have written everything exclusively in	25	For the last year or two, I have written everything exclusively in
26	[[https://en.wikipedia.org/wiki/Markdown][Markdown]] format. Small	26	[Markdown](https://en.wikipedia.org/wiki/Markdown) format. Small notes,
27	notes, long-form writings, and even these blog posts are all written in	27	long-form writings, and even these blog posts are all written in
28	Markdown.	28	Markdown.
29		29
30	Why Markdown? While I do appreciate the simplicity of plain-text files	30	Why Markdown? While I do appreciate the simplicity of plain-text files
	@@ -32,18 +32,19 @@ without any formatting, I often need visual cues such as heading and
32	code blocks to keep my thoughts straight. Markdown provides a minimal	32	code blocks to keep my thoughts straight. Markdown provides a minimal
33	set of styling indicators for me to style my notes without adding any	33	set of styling indicators for me to style my notes without adding any
34	proprietary, embedded data into the files. If I want a top-level	34	proprietary, embedded data into the files. If I want a top-level
35	heading, I simply add a hash (=#=) before the line. An added bonus is	35	heading, I simply add a hash (`#`) before the line. An added
36	that even if a system doesn't understand Markdown, it will render it as	36	bonus is that even if a system doesn\'t understand Markdown, it will
37	plain-text and I can read it just as easily.	37	render it as plain-text and I can read it just as easily.
38		38
39	For example, here's how TextEdit on macOS will open and display a	39	For example, here\'s how TextEdit on macOS will open and display a
40	Markdown file in plain-text, since it does contain any features to	40	Markdown file in plain-text, since it does contain any features to
41	preview Markdown as HTML:	41	preview Markdown as HTML:
42		42
43	#+caption: Plain Text Markdown	43	![Plain Text
44	[[https://img.cleberg.net/blog/20220302-easy-reliable-note-taking/plain_markdown.png]]	44	Markdown](https://img.cleberg.net/blog/20220302-easy-reliable-note-taking/plain_markdown.png)
		45
		46	## Saving & Syncing Files
45		47
46	** Saving & Syncing Files
47	In order to read and edit my notes across platforms, I use my personal	48	In order to read and edit my notes across platforms, I use my personal
48	cloud storage through Tresorit due to its native integration with macOS	49	cloud storage through Tresorit due to its native integration with macOS
49	and iOS file managers. In addition, Tresorit works well on Debian-based	50	and iOS file managers. In addition, Tresorit works well on Debian-based
	@@ -59,17 +60,19 @@ me to sync anything manually or kick-off a sync job to update my files.
59	This means that I can edit on mobile, and it takes about 5-10 seconds to	60	This means that I can edit on mobile, and it takes about 5-10 seconds to
60	see the changes on desktop.	61	see the changes on desktop.
61		62
62	*** Version Control with Git	63	### Version Control with Git
63	A different approach I've contemplated is storing my notes and	64
		65	A different approach I\'ve contemplated is storing my notes and
64	attachments is using a hosted Git repository to track changes to the	66	attachments is using a hosted Git repository to track changes to the
65	files. However, I don't want to rely on an external service that could	67	files. However, I don\'t want to rely on an external service that could
66	potentially see into my data, even if the repository is private.	68	potentially see into my data, even if the repository is private.
67		69
68	I might just do =git init= locally and then commit my changes each time	70	I might just do `git init` locally and then commit my changes
69	I write or update a note, but that seems to be a lot of work just for	71	each time I write or update a note, but that seems to be a lot of work
70	tracking changes - which I don't necessarily care to know.	72	just for tracking changes - which I don\'t necessarily care to know.
		73
		74	### Backups!
71		75
72	*** Backups!
73	One small addition to the storage/sync conversation is the idea of	76	One small addition to the storage/sync conversation is the idea of
74	backups. Personally, I manually create periodic backups of my entire	77	backups. Personally, I manually create periodic backups of my entire
75	cloud storage, compress it into an archive, and store it on my home	78	cloud storage, compress it into an archive, and store it on my home
	@@ -79,46 +82,44 @@ To improve my workflow, I am going to be exploring options to
79	automatically compress the mounted cloud directory and send it over to	82	automatically compress the mounted cloud directory and send it over to
80	my server on a set schedule.	83	my server on a set schedule.
81		84
82	** Writing on Desktop	85	## Writing on Desktop
83		86
84	#+begin_quote	87	> Update (06.14.22): Since writing this post, I have reverted to
85	Update (06.14.22): Since writing this post, I have reverted to simply	88	> simply keeping my `notes` folder open and opening notes
86	keeping my =notes= folder open and opening notes individually in	89	> individually in TextEdit for a more minimal and relaxing writing
87	TextEdit for a more minimal and relaxing writing experience on the	90	> experience on the desktop.
88	desktop.
89
90	#+end_quote
91		91
92	The bulk of my writing occurs in a desktop environment, with a full	92	The bulk of my writing occurs in a desktop environment, with a full
93	keyboard layout and wide screen. I don't illustrate with a smart pen, I	93	keyboard layout and wide screen. I don\'t illustrate with a smart pen, I
94	rarely use embedded images, and I love being able to see all of my	94	rarely use embedded images, and I love being able to see all of my
95	notes/directories in a sidebar.	95	notes/directories in a sidebar.
96		96
97	With this simple set of requirements, I chose	97	With this simple set of requirements, I chose
98	[[https://obsidian.md][Obsidian]] as my desktop text editor. Obsidian	98	[Obsidian](https://obsidian.md) as my desktop text editor. Obsidian has
99	has some in-depth tools like a graph view, command palette, mentions,	99	some in-depth tools like a graph view, command palette, mentions, etc.,
100	etc., but I've found that using it as a simple Markdown editor is	100	but I\'ve found that using it as a simple Markdown editor is incredibly
101	incredibly easy and straightforward.	101	easy and straightforward.
102		102
103	Here's an example of how my Markdown notes look when opened in	103	Here\'s an example of how my Markdown notes look when opened in
104	plain-text mode:	104	plain-text mode:
105		105
106	#+caption: Obsidian Markdown Source Mode	106	![Obsidian Markdown Source
107	[[https://img.cleberg.net/blog/20220302-easy-reliable-note-taking/obsidian_source_mode.png]]	107	Mode](https://img.cleberg.net/blog/20220302-easy-reliable-note-taking/obsidian_source_mode.png)
		108
		109	Here\'s the \"live preview\" version, where the Markdown is rendered
		110	into its HTML format:
108		111
109	Here's the "live preview" version, where the Markdown is rendered into	112	![Obsidian Markdown Live
110	its HTML format:	113	Preview](https://img.cleberg.net/blog/20220302-easy-reliable-note-taking/obsidian_live_preview.png)
111		114
112	#+caption: Obsidian Markdown Live Preview	115	### Programming on Desktop
113	[[https://img.cleberg.net/blog/20220302-easy-reliable-note-taking/obsidian_live_preview.png]]
114		116
115	*** Programming on Desktop	117	While I was writing this, I realized I should specify that I don\'t use
116	While I was writing this, I realized I should specify that I don't use
117	the same editor for writing notes and for writing code. For programming	118	the same editor for writing notes and for writing code. For programming
118	purposes, I use [[https://vscodium.com][VSCodium]] as my development	119	purposes, I use [VSCodium](https://vscodium.com) as my development IDE.
119	IDE.	120
		121	## Writing on Mobile
120		122
121	** Writing on Mobile
122	Personally, I write very little on mobile, except when needing to take	123	Personally, I write very little on mobile, except when needing to take
123	important notes on-the-go. Any long-form writing, journals, etc. are	124	important notes on-the-go. Any long-form writing, journals, etc. are
124	done at home, where I always have my laptop available.	125	done at home, where I always have my laptop available.
	@@ -126,9 +127,9 @@ done at home, where I always have my laptop available.
126	I wanted a simple and foolproof editor for iOS, preferably open-source.	127	I wanted a simple and foolproof editor for iOS, preferably open-source.
127	After a long journey of testing the few (& terrible) open-source iOS	128	After a long journey of testing the few (& terrible) open-source iOS
128	note-taking apps, I finally found a phenomenal one:	129	note-taking apps, I finally found a phenomenal one:
129	[[https://github.com/simonbs/runestone][Runestone]]. This app is	130	[Runestone](https://github.com/simonbs/runestone). This app is fantastic
130	fantastic for note-taking, has plenty of optional features, and	131	for note-taking, has plenty of optional features, and integrates
131	integrates natively with the iOS file manager.	132	natively with the iOS file manager.
132		133
133	This app opens the iOS file manager and allows you to click any file you	134	This app opens the iOS file manager and allows you to click any file you
134	want, opens it up in an editor, and lets me save and close out of that	135	want, opens it up in an editor, and lets me save and close out of that

content/blog/2022-03-03-financial-database.md added +272

@@ -0,0 +1,272 @@
	1	+++
	2	date = 2022-03-03
	3	title = "Maintaining a Personal Financial Database"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Personal Financial Tracking
	9
	10	For the last 6-ish years, I\'ve tracked my finances in a spreadsheet.
	11	This is common practice in the business world, but any good dev will
	12	cringe at the thought of storing long-term data in a spreadsheet. A
	13	spreadsheet is not for long-term storage or as a source of data to pull
	14	data/reports.
	15
	16	As I wanted to expand the functionality of my financial data (e.g.,
	17	adding more reports), I decided to migrate the data into a database. To
	18	run reports, I would query the database and use a language like Python
	19	or Javascript to process the data, perform calculations, and visualize
	20	the data.
	21
	22	# SQLite
	23
	24	When choosing the type of database I wanted to use for this project, I
	25	was split between three options:
	26
	27	1. MySQL: The database I have the most experience with and have used
	28	for years.
	29	2. PostgreSQL: A database I\'m new to, but want to learn.
	30	3. SQLite: A database that I\'ve used for a couple projects and have
	31	moderate experience.
	32
	33	I ended up choosing SQLite since it can be maintained within a single
	34	`.sqlite` file, which allows me more flexibility for storage
	35	and backup. I keep this file in my cloud storage and pull it up whenever
	36	needed.
	37
	38	## GUI Editing
	39
	40	Since I didn\'t want to try and import 1000--1500 records into my new
	41	database via the command line, I opted to use [DB Browser for SQLite
	42	(DB4S)](https://sqlitebrowser.org/) as a GUI tool. This application is
	43	excellent, and I don\'t see myself going back to the CLI when working in
	44	this database.
	45
	46	DB4S allows you to copy a range of cells from a spreadsheet and paste it
	47	straight into the SQL table. I used this process for all 36 accounts,
	48	1290 account statements, and 126 pay statements. Overall, I\'m guessing
	49	this took anywhere between 4--8 hours. In comparison, it probably took
	50	me 2-3 days to initially create the spreadsheet.
	51
	52	![DB4S](https://img.cleberg.net/blog/20220303-maintaining-a-personal-financial-database/db4s.png)
	53
	54	## Schema
	55
	56	The schema for this database is actually extremely simple and involves
	57	only three tables (for now):
	58
	59	1. Accounts
	60	2. Statements
	61	3. Payroll
	62
	63	Accounts
	64
	65	The Accounts table contains summary information about an account, such
	66	as a car loan or a credit card. By viewing this table, you can find
	67	high-level data, such as interest rate, credit line, or owner.
	68
	69	``` sql
	70	CREATE TABLE "Accounts" (
	71	"AccountID" INTEGER NOT NULL UNIQUE,
	72	"AccountType" TEXT,
	73	"AccountName" TEXT,
	74	"InterestRate" NUMERIC,
	75	"CreditLine" NUMERIC,
	76	"State" TEXT,
	77	"Owner" TEXT,
	78	"Co-Owner" TEXT,
	79	PRIMARY KEY("AccountID" AUTOINCREMENT)
	80	)
	81	```
	82
	83	Statements
	84
	85	The Statements table uses the same unique identifier as the Accounts
	86	table, meaning you can join the tables to find a monthly statement for
	87	any of the accounts listed in the Accounts table. Each statement has an
	88	account ID, statement date, and total balance.
	89
	90	``` sql
	91	CREATE TABLE "Statements" (
	92	"StatementID" INTEGER NOT NULL UNIQUE,
	93	"AccountID" INTEGER,
	94	"StatementDate" INTEGER,
	95	"Balance" NUMERIC,
	96	PRIMARY KEY("StatementID" AUTOINCREMENT),
	97	FOREIGN KEY("AccountID") REFERENCES "Accounts"("AccountID")
	98	)
	99	```
	100
	101	Payroll
	102
	103	The Payroll table is a separate entity, unrelated to the Accounts or
	104	Statements tables. This table contains all information you would find on
	105	a pay statement from an employer. As you change employers or obtain new
	106	perks/benefits, just add new columns to adapt to the new data.
	107
	108	``` sql
	109	CREATE TABLE "Payroll" (
	110	"PaycheckID" INTEGER NOT NULL UNIQUE,
	111	"PayDate" TEXT,
	112	"Payee" TEXT,
	113	"Employer" TEXT,
	114	"JobTitle" TEXT,
	115	"IncomeRegular" NUMERIC,
	116	"IncomePTO" NUMERIC,
	117	"IncomeHoliday" NUMERIC,
	118	"IncomeBonus" NUMERIC,
	119	"IncomePTOPayout" NUMERIC,
	120	"IncomeReimbursements" NUMERIC,
	121	"FringeHSA" NUMERIC,
	122	"FringeStudentLoan" NUMERIC,
	123	"Fringe401k" NUMERIC,
	124	"PreTaxMedical" NUMERIC,
	125	"PreTaxDental" NUMERIC,
	126	"PreTaxVision" NUMERIC,
	127	"PreTaxLifeInsurance" NUMERIC,
	128	"PreTax401k" NUMERIC,
	129	"PreTaxParking" NUMERIC,
	130	"PreTaxStudentLoan" NUMERIC,
	131	"PreTaxOther" NUMERIC,
	132	"TaxFederal" NUMERIC,
	133	"TaxSocial" NUMERIC,
	134	"TaxMedicare" NUMERIC,
	135	"TaxState" NUMERIC,
	136	PRIMARY KEY("PaycheckID" AUTOINCREMENT)
	137	)
	138	```
	139
	140	## Python Reporting
	141
	142	Once I created the database tables and imported all my data, the only
	143	step left was to create a process to report and visualize on various
	144	aspects of the data.
	145
	146	In order to explore and create the reports I\'m interested in, I
	147	utilized a two-part process involving Jupyter Notebooks and Python
	148	scripts.
	149
	150	1. Step 1: Jupyter Notebooks
	151
	152	When I need to explore data, try different things, and re-run my
	153	code cell-by-cell, I use Jupyter Notebooks. For example, I explored
	154	the `Accounts` table until I found the following useful
	155	information:
	156
	157	``` python
	158	import sqlite3
	159	import pandas as pd
	160	import matplotlib
	161
	162	# Set up database filename and connect
	163	db = "finances.sqlite"
	164	connection = sqlite3.connect(db)
	165	df = pd.read_sql_query("SELECT ** FROM Accounts", connection)
	166
	167	# Set global matplotlib variables
	168	%matplotlib inline
	169	matplotlib.rcParams['text.color'] = 'white'
	170	matplotlib.rcParams['axes.labelcolor'] = 'white'
	171	matplotlib.rcParams['xtick.color'] = 'white'
	172	matplotlib.rcParams['ytick.color'] = 'white'
	173	matplotlib.rcParams['legend.labelcolor'] = 'black'
	174
	175	# Display graph
	176	df.groupby(['AccountType']).sum().plot.pie(title='Credit Line by Account Type', y='CreditLine', figsize=(5,5), autopct='%1.1f%%')
	177	```
	178
	179	2. Step 2: Python Scripts
	180
	181	Once I explored enough through the notebooks and had a list of
	182	reports I wanted, I moved on to create a Python project with the
	183	following structure:
	184
	185	``` txt
	186	finance/
	187	├── notebooks/
	188	│ │ ├── account_summary.ipynb
	189	│ │ ├── account_details.ipynb
	190	│ │ └── payroll.ipynb
	191	├── public/
	192	│ │ ├── image-01.png
	193	│ │ └── image-0X.png
	194	├── src/
	195	│ └── finance.sqlite
	196	├── venv/
	197	├── _init.py
	198	├── database.py
	199	├── process.py
	200	├── requirements.txt
	201	└── README.md
	202	```
	203
	204	This structure allows me to:
	205
	206	1. Compile all required python packages into
	207	`requirements.txt` for easy installation if I move to
	208	a new machine.
	209	2. Activate a virtual environment in `venv/` so I don\'t
	210	need to maintain a system-wide Python environment just for this
	211	project.
	212	3. Keep my `notebooks/` folder to continuously explore
	213	the data as I see fit.
	214	4. Maintain a local copy of the database in `src/` for
	215	easy access.
	216	5. Export reports, images, HTML files, etc. to
	217	`public/`.
	218
	219	Now, onto the differences between the code in a Jupyter Notebook and
	220	the actual Python files. To create the report in the Notebook
	221	snippet above, I created the following function inside
	222	`process.py`:
	223
	224	``` python
	225	# Create summary pie chart
	226	def summary_data(accounts: pandas.DataFrame) -> None:
	227	accounts_01 = accounts[accounts["Owner"] == "Person01"]
	228	accounts_02 = accounts[accounts["Owner"] == "Person02"]
	229	for x in range(1, 4):
	230	if x == 1:
	231	df = accounts
	232	account_string = "All Accounts"
	233	elif x == 2:
	234	df = accounts_01
	235	account_string = "Person01's Accounts"
	236	elif x == 3:
	237	df = accounts_02
	238	account_string = "Person02's Accounts"
	239	print(f"Generating pie chart summary image for {account_string}...")
	240	summary_chart = (
	241	df.groupby(["AccountType"])
	242	.sum()
	243	.plot.pie(
	244	title=f"Credit Line by Type for {account_string}",
	245	y="CreditLine",
	246	autopct="%1.1f%%",
	247	)
	248	)
	249	summary_chart.figure.savefig(f"public/summary_chart_{x}.png", dpi=1200)
	250	```
	251
	252	The result? A high-quality pie chart that is read directly by the
	253	`public/index.html` template I use.
	254
	255	![Summary Pie
	256	Chart](https://img.cleberg.net/blog/20220303-maintaining-a-personal-financial-database/summary_chart.png)
	257
	258	Other charts generated by this project include:
	259
	260	- Charts of account balances over time.
	261	- Line chart of effective tax rate (taxes divided by taxable
	262	income).
	263	- Salary projections and error limits using past income and
	264	inflation rates.
	265	- Multi-line chart of gross income, taxable income, and net
	266	income.
	267
	268	The best thing about this project? I can improve it at any given
	269	time, shaping it into whatever helps me the most for that time. I
	270	imagine that I will be introducing an asset tracking table soon to
	271	track the depreciating value of cars, houses, etc. Who knows what\'s
	272	next?

content/blog/2022-03-03-financial-database.org deleted −256

	@@ -1,256 +0,0 @@
1	#+title: Maintaining a Personal Financial Database
2	#+date: 2022-03-03
3	#+description: An example project showing to build and maintain a simple financial database.
4	#+filetags: :personal:
5
6	* Personal Financial Tracking
7	For the last 6-ish years, I've tracked my finances in a spreadsheet.
8	This is common practice in the business world, but any good dev will
9	cringe at the thought of storing long-term data in a spreadsheet. A
10	spreadsheet is not for long-term storage or as a source of data to pull
11	data/reports.
12
13	As I wanted to expand the functionality of my financial data (e.g.,
14	adding more reports), I decided to migrate the data into a database. To
15	run reports, I would query the database and use a language like Python
16	or Javascript to process the data, perform calculations, and visualize
17	the data.
18
19	* SQLite
20	When choosing the type of database I wanted to use for this project, I
21	was split between three options:
22
23	1. MySQL: The database I have the most experience with and have used for
24	years.
25	2. PostgreSQL: A database I'm new to, but want to learn.
26	3. SQLite: A database that I've used for a couple projects and have
27	moderate experience.
28
29	I ended up choosing SQLite since it can be maintained within a single
30	=.sqlite= file, which allows me more flexibility for storage and backup.
31	I keep this file in my cloud storage and pull it up whenever needed.
32
33	** GUI Editing
34	Since I didn't want to try and import 1000--1500 records into my new
35	database via the command line, I opted to use
36	[[https://sqlitebrowser.org/][DB Browser for SQLite (DB4S)]] as a GUI
37	tool. This application is excellent, and I don't see myself going back
38	to the CLI when working in this database.
39
40	DB4S allows you to copy a range of cells from a spreadsheet and paste it
41	straight into the SQL table. I used this process for all 36 accounts,
42	1290 account statements, and 126 pay statements. Overall, I'm guessing
43	this took anywhere between 4--8 hours. In comparison, it probably took
44	me 2-3 days to initially create the spreadsheet.
45
46	#+caption: DB4S
47	[[https://img.cleberg.net/blog/20220303-maintaining-a-personal-financial-database/db4s.png]]
48
49	** Schema
50	The schema for this database is actually extremely simple and involves
51	only three tables (for now):
52
53	1. Accounts
54	2. Statements
55	3. Payroll
56
57	Accounts
58
59	The Accounts table contains summary information about an account, such
60	as a car loan or a credit card. By viewing this table, you can find
61	high-level data, such as interest rate, credit line, or owner.
62
63	#+begin_src sql
64	CREATE TABLE "Accounts" (
65	"AccountID" INTEGER NOT NULL UNIQUE,
66	"AccountType" TEXT,
67	"AccountName" TEXT,
68	"InterestRate" NUMERIC,
69	"CreditLine" NUMERIC,
70	"State" TEXT,
71	"Owner" TEXT,
72	"Co-Owner" TEXT,
73	PRIMARY KEY("AccountID" AUTOINCREMENT)
74	)
75	#+end_src
76
77	Statements
78
79	The Statements table uses the same unique identifier as the Accounts
80	table, meaning you can join the tables to find a monthly statement for
81	any of the accounts listed in the Accounts table. Each statement has an
82	account ID, statement date, and total balance.
83
84	#+begin_src sql
85	CREATE TABLE "Statements" (
86	"StatementID" INTEGER NOT NULL UNIQUE,
87	"AccountID" INTEGER,
88	"StatementDate" INTEGER,
89	"Balance" NUMERIC,
90	PRIMARY KEY("StatementID" AUTOINCREMENT),
91	FOREIGN KEY("AccountID") REFERENCES "Accounts"("AccountID")
92	)
93	#+end_src
94
95	Payroll
96
97	The Payroll table is a separate entity, unrelated to the Accounts or
98	Statements tables. This table contains all information you would find on
99	a pay statement from an employer. As you change employers or obtain new
100	perks/benefits, just add new columns to adapt to the new data.
101
102	#+begin_src sql
103	CREATE TABLE "Payroll" (
104	"PaycheckID" INTEGER NOT NULL UNIQUE,
105	"PayDate" TEXT,
106	"Payee" TEXT,
107	"Employer" TEXT,
108	"JobTitle" TEXT,
109	"IncomeRegular" NUMERIC,
110	"IncomePTO" NUMERIC,
111	"IncomeHoliday" NUMERIC,
112	"IncomeBonus" NUMERIC,
113	"IncomePTOPayout" NUMERIC,
114	"IncomeReimbursements" NUMERIC,
115	"FringeHSA" NUMERIC,
116	"FringeStudentLoan" NUMERIC,
117	"Fringe401k" NUMERIC,
118	"PreTaxMedical" NUMERIC,
119	"PreTaxDental" NUMERIC,
120	"PreTaxVision" NUMERIC,
121	"PreTaxLifeInsurance" NUMERIC,
122	"PreTax401k" NUMERIC,
123	"PreTaxParking" NUMERIC,
124	"PreTaxStudentLoan" NUMERIC,
125	"PreTaxOther" NUMERIC,
126	"TaxFederal" NUMERIC,
127	"TaxSocial" NUMERIC,
128	"TaxMedicare" NUMERIC,
129	"TaxState" NUMERIC,
130	PRIMARY KEY("PaycheckID" AUTOINCREMENT)
131	)
132	#+end_src
133
134	** Python Reporting
135	Once I created the database tables and imported all my data, the only
136	step left was to create a process to report and visualize on various
137	aspects of the data.
138
139	In order to explore and create the reports I'm interested in, I utilized
140	a two-part process involving Jupyter Notebooks and Python scripts.
141
142	1. Step 1: Jupyter Notebooks
143
144	When I need to explore data, try different things, and re-run my code
145	cell-by-cell, I use Jupyter Notebooks. For example, I explored the
146	=Accounts= table until I found the following useful information:
147
148	#+begin_src python
149	import sqlite3
150	import pandas as pd
151	import matplotlib
152
153	# Set up database filename and connect
154	db = "finances.sqlite"
155	connection = sqlite3.connect(db)
156	df = pd.read_sql_query("SELECT ** FROM Accounts", connection)
157
158	# Set global matplotlib variables
159	%matplotlib inline
160	matplotlib.rcParams['text.color'] = 'white'
161	matplotlib.rcParams['axes.labelcolor'] = 'white'
162	matplotlib.rcParams['xtick.color'] = 'white'
163	matplotlib.rcParams['ytick.color'] = 'white'
164	matplotlib.rcParams['legend.labelcolor'] = 'black'
165
166	# Display graph
167	df.groupby(['AccountType']).sum().plot.pie(title='Credit Line by Account Type', y='CreditLine', figsize=(5,5), autopct='%1.1f%%')
168	#+end_src
169
170	2. Step 2: Python Scripts
171
172	Once I explored enough through the notebooks and had a list of
173	reports I wanted, I moved on to create a Python project with the
174	following structure:
175
176	#+begin_src txt
177	finance/
178	├── notebooks/
179	│ │ ├── account_summary.ipynb
180	│ │ ├── account_details.ipynb
181	│ │ └── payroll.ipynb
182	├── public/
183	│ │ ├── image-01.png
184	│ │ └── image-0X.png
185	├── src/
186	│ └── finance.sqlite
187	├── venv/
188	├── _init.py
189	├── database.py
190	├── process.py
191	├── requirements.txt
192	└── README.md
193	#+end_src
194
195	This structure allows me to:
196
197	1. Compile all required python packages into =requirements.txt= for
198	easy installation if I move to a new machine.
199	2. Activate a virtual environment in =venv/= so I don't need to
200	maintain a system-wide Python environment just for this project.
201	3. Keep my =notebooks/= folder to continuously explore the data as I
202	see fit.
203	4. Maintain a local copy of the database in =src/= for easy access.
204	5. Export reports, images, HTML files, etc. to =public/=.
205
206	Now, onto the differences between the code in a Jupyter Notebook and
207	the actual Python files. To create the report in the Notebook snippet
208	above, I created the following function inside =process.py=:
209
210	#+begin_src python
211	# Create summary pie chart
212	def summary_data(accounts: pandas.DataFrame) -> None:
213	accounts_01 = accounts[accounts["Owner"] == "Person01"]
214	accounts_02 = accounts[accounts["Owner"] == "Person02"]
215	for x in range(1, 4):
216	if x == 1:
217	df = accounts
218	account_string = "All Accounts"
219	elif x == 2:
220	df = accounts_01
221	account_string = "Person01's Accounts"
222	elif x == 3:
223	df = accounts_02
224	account_string = "Person02's Accounts"
225	print(f"Generating pie chart summary image for {account_string}...")
226	summary_chart = (
227	df.groupby(["AccountType"])
228	.sum()
229	.plot.pie(
230	title=f"Credit Line by Type for {account_string}",
231	y="CreditLine",
232	autopct="%1.1f%%",
233	)
234	)
235	summary_chart.figure.savefig(f"public/summary_chart_{x}.png", dpi=1200)
236	#+end_src
237
238	The result? A high-quality pie chart that is read directly by the
239	=public/index.html= template I use.
240
241	#+caption: Summary Pie Chart
242	[[https://img.cleberg.net/blog/20220303-maintaining-a-personal-financial-database/summary_chart.png]]
243
244	Other charts generated by this project include:
245
246	- Charts of account balances over time.
247	- Line chart of effective tax rate (taxes divided by taxable income).
248	- Salary projections and error limits using past income and inflation
249	rates.
250	- Multi-line chart of gross income, taxable income, and net income.
251
252	The best thing about this project? I can improve it at any given
253	time, shaping it into whatever helps me the most for that time. I
254	imagine that I will be introducing an asset tracking table soon to
255	track the depreciating value of cars, houses, etc. Who knows what's
256	next?

content/blog/2022-03-08-plex-migration.md added +248

@@ -0,0 +1,248 @@
	1	+++
	2	date = 2022-03-08
	3	title = "Migrating Plex to a New Server with Nvidia GPU Transcoding"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Migration Phases
	9
	10	I recently decided to migrate my server from an old OptiPlex desktop
	11	machine to a custom-built tower with better hardware in every category.
	12	In order to do this, I would need to properly migrate a full Plex
	13	installation.
	14
	15	The second part of this migration is that the new server uses an Nvidia
	16	GPU and does not have any integrated graphics, which requires extra work
	17	for installation, but provides much better hardware transcoding options
	18	for Plex.
	19
	20	Therefore, I have broken this migration down into three phases:
	21
	22	1. Configure the New Server
	23	2. Migrate Plex Data & Devices
	24	3. Configure GPU Transcoding
	25
	26	# Phase 1: Configure the New Server
	27
	28	## Choosing an OS
	29
	30	In order to migrate Plex to my new server, I first needed to choose an
	31	appropriate operating system (OS) and install it on the machine. Given
	32	that I have encountered numerous issues installing other Linux
	33	distributions properly with Nvidia graphics, I chose [Ubuntu
	34	Server](https://ubuntu.com/download/server).
	35
	36	The first step is to create a bootable USB with Ubuntu Server. This is
	37	easy with [Etcher](https://www.balena.io/etcher/), an app that runs on
	38	many different platforms. Just download the Ubuntu Server
	39	`.iso` image, launch Etcher, and install the
	40	`.iso` on the USB.
	41
	42	Once the USB is created, insert it into my server, reboot, and click
	43	`Esc` (or any of the `F1-12` keys) until the BIOS
	44	menu appears. Finally, launch the USB boot drive.
	45
	46	## Booting with Nvidia
	47
	48	In order to install Ubuntu Server with an Nvidia Graphics card (and no
	49	integrated graphics on this device for some reason), you\'ll have to
	50	configure the boot menu to allow different graphics drivers to be
	51	loaded.
	52
	53	When booting from the USB, the machine will launch the initial
	54	installation menu. From this menu, type `e` to view the
	55	default command options that come with the device - it\'s a good idea to
	56	take a photo of this screen, so you can enter these commands on the next
	57	screen (along with adding support for Nvidia).
	58
	59	Finally, type `Ctrl + C` to enter the command line. From this
	60	command line, enter the commands found on the `e` screen.
	61	\*Remember to add `nomodeset` to the `linux ...`
	62	line so that your Nvidia device will display the installation screens
	63	properly!\*
	64
	65	Here\'s an example of the commands I pulled from the `e`
	66	screen and entered on the command line.
	67
	68	```sh
	69	setparams 'Install Ubuntu Server'
	70	setgfxpayload=keep
	71	linux /casper/vmlinuz quiet nomodeset ---
	72	initrd /casper/initrd
	73	boot
	74	```
	75
	76	![Ubuntu Server Installation
	77	01](https://img.cleberg.net/blog/20220308-plex-media-server-migration/ubuntu_server_installation_01.png)
	78
	79	![Ubuntu Server Installation
	80	02](https://img.cleberg.net/blog/20220308-plex-media-server-migration/ubuntu_server_installation_02.png)
	81
	82	Once the machine is rebooted, enter the `e` screen again and
	83	add `nomodeset` to the `linux ...` line again and
	84	press `Ctrl + X` to save the boot options.
	85
	86	The machine is now fully installed and can properly display on an
	87	external display using the Nvidia GPU.
	88
	89	Always remember to update and upgrade on a new installation:
	90
	91	```sh
	92	sudo apt update; sudo apt upgrade -y; sudo apt autoremove -y
	93	```
	94
	95	# Phase 2: Migrate Plex Data & Devices
	96
	97	This phase uses the great Plex article on migrations ([Move an
	98	Installation to Another
	99	System](https://support.plex.tv/articles/201370363-move-an-install-to-another-system/))
	100	and adds a bit more information to help with commands and context.
	101
	102	## Terminology
	103
	104	Source:\* The original server that is being replaced.\
	105	Destination:\* The new server.\
	106	Client:\* Any application that can be used to modify settings for
	107	both source/destination.
	108
	109	## Step 01: \[Client\] Update Settings
	110
	111	Open up a Plex app and disable the `Account` \>
	112	`Library` \>
	113	`Empty trash automatically after every scan` preference for
	114	the source server.
	115
	116	## Step 02: \[Destination\] Install Plex
	117
	118	Open up the [Plex Media Server download
	119	page](https://www.plex.tv/media-server-downloads/) and copy the link for
	120	the appropriate platform.
	121
	122	Execute the following commands on the destination server to install
	123	Plex:
	124
	125	```sh
	126	wget <url>
	127	sudo dpkg -i <filename>
	128	sudo systemctl stop plexmediaserver.service
	129	```
	130
	131	## Step 03: \[Source\] Stop Plex & Migrate Data
	132
	133	First, stop the Plex service so that no data is created or modified
	134	during the migration.
	135
	136	```sh
	137	sudo systemctl stop plexmediaserver.service
	138	```
	139
	140	Next, copy the data to the new server. To find where the Plex data
	141	directory is located, Plex has another excellent article available:
	142	[Where is the Plex Media Server data directory
	143	located?](https://support.plex.tv/articles/202915258-where-is-the-plex-media-server-data-directory-located/).
	144
	145	There are many ways to copy the data to the new server and will largely
	146	depend on the size of the folder being copied. Personally, my data
	147	folder was \~23GB and I opted to simply use the `scp` command
	148	to copy the files over SSH.
	149
	150	This process was throttled by the old server\'s slow HDD and ports and
	151	took approximately 90 minutes to complete. In comparison, moving the
	152	data from the new server\'s `home/user/` directory to the
	153	`/var/.../Plex Media Server` directory took 2-3 minutes.
	154
	155	```sh
	156	scp -r "/var/lib/plexmediaserver/Library/Application Support/Plex Media Server" your_user@xxx.xxx.xxx.xxx:"'/path/to/destination/'"
	157	```
	158
	159	## Step 04: \[Destination\] Update File Permissions
	160
	161	In case you move the data directory to a common area on the new server,
	162	it will have to be moved to the proper location before Plex can function
	163	properly:
	164
	165	```sh
	166	mv "Plex Media Server" /var/lib/plexmediaserver/Library/Application Support/
	167	```
	168
	169	To ensure permissions were retained properly, the server will need to
	170	show that all files and folders in the data directory are owned by
	171	`plex:plex` (or whichever user is running the Plex
	172	application).
	173
	174	```sh
	175	sudo chown -R plex:plex "/var/lib/plexmediaserver/Library/Application Support/Plex Media Server"
	176	```
	177
	178	Finally, start the service and check the status.
	179
	180	```sh
	181	sudo systemctl start plexmediaserver.service
	182	sudo systemctl status plexmediaserver.service
	183	```
	184
	185	## Step 05: \[Client\] Update Libraries & Metadata
	186
	187	The first step - now that the new server is up and running - is to sign
	188	out of the client and sign back in. Once this is done, update any
	189	library locations, if necessary. This was unnecessary in my case since I
	190	simply moved my storage drives from the source server to the destination
	191	server.
	192
	193	Next, perform the following actions in the client:
	194
	195	1. On the left sidebar, click `More` \> Three-Dot Menu \>
	196	`Scan Library Files`
	197	2. Enable the `Account` \> `Library` \>
	198	`Empty trash automatically after every scan` preference
	199	for the source server.
	200	3. On the left sidebar, click `More` \> Three-Dot Menu \>
	201	`Manage Server` \> `Empty Trash`
	202	4. On the left sidebar, click `More` \> Three-Dot Menu \>
	203	`Manage Server` \> `Clean Bundles`
	204	5. On the left sidebar, click `More` \> Three-Dot Menu \>
	205	`Manage Server` \> `Optimize Database`
	206
	207	Finally, double-check the Remote Access settings to make sure no changes
	208	have caused issues with accessing the server from outside the network.
	209
	210	In my case, I use a single port forwarding rule in my router and needed
	211	to update the Local LAN IP Address to the new server IP address.
	212
	213	![Router port
	214	forwarding](https://img.cleberg.net/blog/20220308-plex-media-server-migration/port_forwarding.png)
	215
	216	# Phase 3: Configure GPU Transcoding
	217
	218	The final piece to the migration is enabling hardware transcoding so
	219	that Plex can fully utilize the new Nvidia GPU available in the server.
	220	The first step is to install Nvidia graphics drivers. This process may
	221	take a few minutes, but the commands are pretty simple:
	222
	223	```sh
	224	sudo add-apt-repository ppa:graphics-drivers/ppa
	225	sudo apt update
	226	sudo apt-get install ubuntu-drivers-common
	227	sudo ubuntu-drivers autoinstall
	228	```
	229
	230	Finally, reboot so that the changes are loaded:
	231
	232	```sh
	233	sudo reboot now
	234	```
	235
	236	To ensure that the Nvidia graphics drivers are working properly, run the
	237	following command to view the available GPUs, statistics, and processes:
	238
	239	```sh
	240	sudo nvidia-smi
	241	```
	242
	243	![nvidia-smi](https://img.cleberg.net/blog/20220308-plex-media-server-migration/nvidia_smi.png)
	244
	245	Finally, enable hardware transcoding settings in the Plex application:
	246
	247	![Plex transcoding
	248	settings](https://img.cleberg.net/blog/20220308-plex-media-server-migration/plex_transcoding.png)

content/blog/2022-03-08-plex-migration.org deleted −230

	@@ -1,230 +0,0 @@
1	#+title: Migrating Plex to a New Server (& Nvidia Transcoding)
2	#+date: 2022-03-08
3	#+description: A retrospective on migrating Plex between servers and enabling Nvidia GPU transcoding.
4	#+filetags: :selfhosting:
5
6	* Migration Phases
7	I recently decided to migrate my server from an old OptiPlex desktop
8	machine to a custom-built tower with better hardware in every category.
9	In order to do this, I would need to properly migrate a full Plex
10	installation.
11
12	The second part of this migration is that the new server uses an Nvidia
13	GPU and does not have any integrated graphics, which requires extra work
14	for installation, but provides much better hardware transcoding options
15	for Plex.
16
17	Therefore, I have broken this migration down into three phases:
18
19	1. Configure the New Server
20	2. Migrate Plex Data & Devices
21	3. Configure GPU Transcoding
22
23	* Phase 1: Configure the New Server
24	** Choosing an OS
25	In order to migrate Plex to my new server, I first needed to choose an
26	appropriate operating system (OS) and install it on the machine. Given
27	that I have encountered numerous issues installing other Linux
28	distributions properly with Nvidia graphics, I chose
29	[[https://ubuntu.com/download/server][Ubuntu Server]].
30
31	The first step is to create a bootable USB with Ubuntu Server. This is
32	easy with [[https://www.balena.io/etcher/][Etcher]], an app that runs on
33	many different platforms. Just download the Ubuntu Server =.iso= image,
34	launch Etcher, and install the =.iso= on the USB.
35
36	Once the USB is created, insert it into my server, reboot, and click
37	=Esc= (or any of the =F1-12= keys) until the BIOS menu appears. Finally,
38	launch the USB boot drive.
39
40	** Booting with Nvidia
41	In order to install Ubuntu Server with an Nvidia Graphics card (and no
42	integrated graphics on this device for some reason), you'll have to
43	configure the boot menu to allow different graphics drivers to be
44	loaded.
45
46	When booting from the USB, the machine will launch the initial
47	installation menu. From this menu, type =e= to view the default command
48	options that come with the device - it's a good idea to take a photo of
49	this screen, so you can enter these commands on the next screen (along
50	with adding support for Nvidia).
51
52	Finally, type =Ctrl + C= to enter the command line. From this command
53	line, enter the commands found on the =e= screen. *Remember to add
54	=nomodeset= to the =linux ...= line so that your Nvidia device will
55	display the installation screens properly!*
56
57	Here's an example of the commands I pulled from the =e= screen and
58	entered on the command line.
59
60	#+begin_src sh
61	setparams 'Install Ubuntu Server'
62	setgfxpayload=keep
63	linux /casper/vmlinuz quiet nomodeset ---
64	initrd /casper/initrd
65	boot
66	#+end_src
67
68	#+caption: Ubuntu Server Installation 01
69	[[https://img.cleberg.net/blog/20220308-plex-media-server-migration/ubuntu_server_installation_01.png]]
70
71	#+caption: Ubuntu Server Installation 02
72	[[https://img.cleberg.net/blog/20220308-plex-media-server-migration/ubuntu_server_installation_02.png]]
73
74	Once the machine is rebooted, enter the =e= screen again and add
75	=nomodeset= to the =linux ...= line again and press =Ctrl + X= to save
76	the boot options.
77
78	The machine is now fully installed and can properly display on an
79	external display using the Nvidia GPU.
80
81	Always remember to update and upgrade on a new installation:
82
83	#+begin_src sh
84	sudo apt update; sudo apt upgrade -y; sudo apt autoremove -y
85	#+end_src
86
87	* Phase 2: Migrate Plex Data & Devices
88	This phase uses the great Plex article on migrations
89	([[https://support.plex.tv/articles/201370363-move-an-install-to-another-system/][Move
90	an Installation to Another System]]) and adds a bit more information to
91	help with commands and context.
92
93	** Terminology
94	Source:* The original server that is being replaced.\\
95	Destination:* The new server.\\
96	Client:* Any application that can be used to modify settings for both
97	source/destination.
98
99	** Step 01: [Client] Update Settings
100	Open up a Plex app and /disable/ the =Account= > =Library= >
101	=Empty trash automatically after every scan= preference for the source
102	server.
103
104	** Step 02: [Destination] Install Plex
105	Open up the [[https://www.plex.tv/media-server-downloads/][Plex Media
106	Server download page]] and copy the link for the appropriate platform.
107
108	Execute the following commands on the destination server to install
109	Plex:
110
111	#+begin_src sh
112	wget <url>
113	sudo dpkg -i <filename>
114	sudo systemctl stop plexmediaserver.service
115	#+end_src
116
117	** Step 03: [Source] Stop Plex & Migrate Data
118	First, stop the Plex service so that no data is created or modified
119	during the migration.
120
121	#+begin_src sh
122	sudo systemctl stop plexmediaserver.service
123	#+end_src
124
125	Next, copy the data to the new server. To find where the Plex data
126	directory is located, Plex has another excellent article available:
127	[[https://support.plex.tv/articles/202915258-where-is-the-plex-media-server-data-directory-located/][Where
128	is the Plex Media Server data directory located?]].
129
130	There are many ways to copy the data to the new server and will largely
131	depend on the size of the folder being copied. Personally, my data
132	folder was ~23GB and I opted to simply use the =scp= command to copy the
133	files over SSH.
134
135	This process was throttled by the old server's slow HDD and ports and
136	took approximately 90 minutes to complete. In comparison, moving the
137	data from the new server's =home/user/= directory to the
138	=/var/.../Plex Media Server= directory took 2-3 minutes.
139
140	#+begin_src sh
141	scp -r "/var/lib/plexmediaserver/Library/Application Support/Plex Media Server" your_user@xxx.xxx.xxx.xxx:"'/path/to/destination/'"
142	#+end_src
143
144	** Step 04: [Destination] Update File Permissions
145	In case you move the data directory to a common area on the new server,
146	it will have to be moved to the proper location before Plex can function
147	properly:
148
149	#+begin_src sh
150	mv "Plex Media Server" /var/lib/plexmediaserver/Library/Application Support/
151	#+end_src
152
153	To ensure permissions were retained properly, the server will need to
154	show that all files and folders in the data directory are owned by
155	=plex:plex= (or whichever user is running the Plex application).
156
157	#+begin_src sh
158	sudo chown -R plex:plex "/var/lib/plexmediaserver/Library/Application Support/Plex Media Server"
159	#+end_src
160
161	Finally, start the service and check the status.
162
163	#+begin_src sh
164	sudo systemctl start plexmediaserver.service
165	sudo systemctl status plexmediaserver.service
166	#+end_src
167
168	** Step 05: [Client] Update Libraries & Metadata
169	The first step - now that the new server is up and running - is to sign
170	out of the client and sign back in. Once this is done, update any
171	library locations, if necessary. This was unnecessary in my case since I
172	simply moved my storage drives from the source server to the destination
173	server.
174
175	Next, perform the following actions in the client:
176
177	1. On the left sidebar, click =More= > Three-Dot Menu >
178	=Scan Library Files=
179	2. /Enable/ the =Account= > =Library= >
180	=Empty trash automatically after every scan= preference for the
181	source server.
182	3. On the left sidebar, click =More= > Three-Dot Menu > =Manage Server=
183	> =Empty Trash=
184	4. On the left sidebar, click =More= > Three-Dot Menu > =Manage Server=
185	> =Clean Bundles=
186	5. On the left sidebar, click =More= > Three-Dot Menu > =Manage Server=
187	> =Optimize Database=
188
189	Finally, double-check the Remote Access settings to make sure no changes
190	have caused issues with accessing the server from outside the network.
191
192	In my case, I use a single port forwarding rule in my router and needed
193	to update the Local LAN IP Address to the new server IP address.
194
195	#+caption: Router port forwarding
196	[[https://img.cleberg.net/blog/20220308-plex-media-server-migration/port_forwarding.png]]
197
198	* Phase 3: Configure GPU Transcoding
199	The final piece to the migration is enabling hardware transcoding so
200	that Plex can fully utilize the new Nvidia GPU available in the server.
201	The first step is to install Nvidia graphics drivers. This process may
202	take a few minutes, but the commands are pretty simple:
203
204	#+begin_src sh
205	sudo add-apt-repository ppa:graphics-drivers/ppa
206	sudo apt update
207	sudo apt-get install ubuntu-drivers-common
208	sudo ubuntu-drivers autoinstall
209	#+end_src
210
211	Finally, reboot so that the changes are loaded:
212
213	#+begin_src sh
214	sudo reboot now
215	#+end_src
216
217	To ensure that the Nvidia graphics drivers are working properly, run the
218	following command to view the available GPUs, statistics, and processes:
219
220	#+begin_src sh
221	sudo nvidia-smi
222	#+end_src
223
224	#+caption: nvidia-smi
225	[[https://img.cleberg.net/blog/20220308-plex-media-server-migration/nvidia_smi.png]]
226
227	Finally, enable hardware transcoding settings in the Plex application:
228
229	#+caption: Plex transcoding settings
230	[[https://img.cleberg.net/blog/20220308-plex-media-server-migration/plex_transcoding.png]]

content/blog/2022-03-23-cloudflare-dns-api.org → content/blog/2022-03-23-cloudflare-dns-api.md renamed +49 −44

	@@ -1,39 +1,42 @@
1	#+title: Dynamic DNS with Cloudflare API	1	+++
2	#+date: 2022-03-23	2	date = 2022-03-23
3	#+description: Learn how to dynamically update DNS records for changing IPs with Cloudflare.	3	title = "Dynamic DNS with Cloudflare API"
4	#+filetags: :sysadmin:	4	description = ""
5		5	draft = false
6	* DDNS: Dynamic DNS	6	+++
7	If you're hosting a service from a location with dynamic DNS (where your	7
8	IP may change at any time), you must have a solution to update the DNS	8	# DDNS: Dynamic DNS
9	so that you can access your service even when the IP of the server	9
		10	If you\'re hosting a service from a location with dynamic DNS (where
		11	your IP may change at any time), you must have a solution to update the
		12	DNS so that you can access your service even when the IP of the server
10	changes.	13	changes.
11		14
12	The process below uses the [[https://api.cloudflare.com/][Cloudflare	15	The process below uses the [Cloudflare API](https://api.cloudflare.com/)
13	API]] to update DNS =A= and =AAAA= records with the server's current IP.	16	to update DNS `A` and `AAAA` records with the
14	If you use another DNS provider, you will have to find a way to update	17	server\'s current IP. If you use another DNS provider, you will have to
15	your DNS (or find a way to get a static IP).	18	find a way to update your DNS (or find a way to get a static IP).
16		19
17	First, install =jq= since we will use it in the next script:	20	First, install `jq` since we will use it in the next script:
18		21
19	#+begin_src sh	22	```sh
20	sudo apt install jq	23	sudo apt install jq
21	#+end_src	24	```
22		25
23	Next, create a location for your DDNS update scripts and open the first	26	Next, create a location for your DDNS update scripts and open the first
24	script:	27	script:
25		28
26	#+begin_src sh	29	```sh
27	mkdir ~/ddns	30	mkdir ~/ddns
28	nano ~/ddns/update.sh	31	nano ~/ddns/update.sh
29	#+end_src	32	```
30		33
31	The following =update.sh= script will take all of your domains and	34	The following `update.sh` script will take all of your
32	subdomains and check Cloudflare to see if the current =A= and =AAAA=	35	domains and subdomains and check Cloudflare to see if the current
33	records match your server's IP address. If not, it will update the	36	`A` and `AAAA` records match your server\'s IP
34	records.	37	address. If not, it will update the records.
35		38
36	#+begin_src sh	39	```sh
37	# file: update.sh	40	# file: update.sh
38	#!/bin/bash	41	#!/bin/bash
39		42
	@@ -55,20 +58,21 @@ do
55	echo -e "\nUpdating $subdomain..."	58	echo -e "\nUpdating $subdomain..."
56	zone_name=$domain dns_record=$subdomain /home/<your-username>/ddns/ddns.sh	59	zone_name=$domain dns_record=$subdomain /home/<your-username>/ddns/ddns.sh
57	done	60	done
58	#+end_src	61	```
59		62
60	Next, open up the =ddns.sh= script. Paste the following into the script	63	Next, open up the `ddns.sh` script. Paste the following into
61	and update the =api_token= and =email= variables.	64	the script and update the `api_token` and `email`
		65	variables.
62		66
63	#+begin_src sh	67	```sh
64	nano ~/ddns/ddns.sh	68	nano ~/ddns/ddns.sh
65	#+end_src	69	```
66		70
67	Note: If you want your DNS records to be proxied through	71	Note: If you want your DNS records to be proxied through Cloudflare,
68	Cloudflare, find and update the following snippet: ="proxied":false}"=	72	find and update the following snippet: `"proxied":false}"` to
69	to say =true= instead of =false=.	73	say `true` instead of `false`.
70		74
71	#+begin_src sh	75	```sh
72	# file: ddns.sh	76	# file: ddns.sh
73	#!/bin/bash	77	#!/bin/bash
74	# based on https://gist.github.com/Tras2/cba88201b17d765ec065ccbedfb16d9a	78	# based on https://gist.github.com/Tras2/cba88201b17d765ec065ccbedfb16d9a
	@@ -161,30 +165,31 @@ then
161	else	165	else
162	echo "There is a problem with either the email or the password"	166	echo "There is a problem with either the email or the password"
163	fi	167	fi
164	#+end_src	168	```
165		169
166	Once the script is saved and closed, make the scripts executable:	170	Once the script is saved and closed, make the scripts executable:
167		171
168	#+begin_src sh	172	```sh
169	chmod +x ~/ddns/ddns.sh	173	chmod +x ~/ddns/ddns.sh
170	chmod +x ~/ddns/update.sh	174	chmod +x ~/ddns/update.sh
171	#+end_src	175	```
172		176
173	You can test the script by running it manually:	177	You can test the script by running it manually:
174		178
175	#+begin_src sh	179	```sh
176	./update.sh	180	./update.sh
177	#+end_src	181	```
178		182
179	To make sure the scripts run automatically, add it to the =cron= file so	183	To make sure the scripts run automatically, add it to the
180	that it will run on a schedule. To do this, open the cron file:	184	`cron` file so that it will run on a schedule. To do this,
		185	open the cron file:
181		186
182	#+begin_src sh	187	```sh
183	crontab -e	188	crontab -e
184	#+end_src	189	```
185		190
186	In the cron file, paste the following at the bottom of the editor:	191	In the cron file, paste the following at the bottom of the editor:
187		192
188	#+begin_src sh	193	```sh
189	,/5 * ** bash /home/<your_username>/ddns/update.sh	194	/5 * ** bash /home/<your_username>/ddns/update.sh
190	#+end_src	195	```

content/blog/2022-03-23-nextcloud-on-ubuntu.org → content/blog/2022-03-23-nextcloud-on-ubuntu.md renamed +71 −60

	@@ -1,77 +1,84 @@
1	#+title: Nextcloud on Ubuntu	1	+++
2	#+date: 2022-03-23	2	date = 2022-03-23
3	#+description: A guide to self-hosting the NextCloud application on your own server.	3	title = "Self-Hosting Nextcloud"
4	#+filetags: :selfhosting:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* What is Nextcloud?	8	# What is Nextcloud?
7	[[https://nextcloud.com/][Nextcloud]] is a self-hosted solution for	9
		10	[Nextcloud](https://nextcloud.com/) is a self-hosted solution for
8	storage, communications, editing, calendar, contacts, and more.	11	storage, communications, editing, calendar, contacts, and more.
9		12
10	This tutorial assumes that you have an Ubuntu server and a domain name	13	This tutorial assumes that you have an Ubuntu server and a domain name
11	configured to point toward the server.	14	configured to point toward the server.
12		15
13	* Install Dependencies	16	# Install Dependencies
		17
14	To start, you will need to install the packages that Nextcloud requires:	18	To start, you will need to install the packages that Nextcloud requires:
15		19
16	#+begin_src sh	20	```sh
17	sudo apt install apache2 mariadb-server libapache2-mod-php7.4	21	sudo apt install apache2 mariadb-server libapache2-mod-php7.4
18	sudo apt install php7.4-gd php7.4-mysql php7.4-curl php7.4-mbstring php7.4-intl	22	sudo apt install php7.4-gd php7.4-mysql php7.4-curl php7.4-mbstring php7.4-intl
19	sudo apt install php7.4-gmp php7.4-bcmath php-imagick php7.4-xml php7.4-zip	23	sudo apt install php7.4-gmp php7.4-bcmath php-imagick php7.4-xml php7.4-zip
20	#+end_src	24	```
21		25
22	* Set Up MySQL	26	# Set Up MySQL
23	Next, you will need to log in to MySQL as the =root= user of the
24	machine.
25		27
26	#+begin_src sh	28	Next, you will need to log in to MySQL as the `root` user of
		29	the machine.
		30
		31	```sh
27	sudo mysql -uroot -p	32	sudo mysql -uroot -p
28	#+end_src	33	```
29		34
30	Once you've logged in, you must create a new user so that Nextcloud can	35	Once you\'ve logged in, you must create a new user so that Nextcloud can
31	manage the database. You will also create a =nextcloud= database and	36	manage the database. You will also create a `nextcloud`
32	assign privileges:	37	database and assign privileges:
33		38
34	#+begin_src sql	39	``` sql
35	CREATE USER 'username'@'localhost' IDENTIFIED BY 'password';	40	CREATE USER 'username'@'localhost' IDENTIFIED BY 'password';
36	CREATE DATABASE IF NOT EXISTS nextcloud CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;	41	CREATE DATABASE IF NOT EXISTS nextcloud CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;
37	GRANT ALL PRIVILEGES ON nextcloud.** TO 'username'@'localhost';	42	GRANT ALL PRIVILEGES ON nextcloud.** TO 'username'@'localhost';
38	FLUSH PRIVILEGES;	43	FLUSH PRIVILEGES;
39	quit;	44	quit;
40	#+end_src	45	```
		46
		47	# Download & Install Nextcloud
41		48
42	* Download & Install Nextcloud	49	To download Nextcloud, go the [Nextcloud downloads
43	To download Nextcloud, go the	50	page](https://nextcloud.com/install/#instructions-server), click on
44	[[https://nextcloud.com/install/#instructions-server][Nextcloud	51	`Archive File` and right-click the big blue button to copy
45	downloads page]], click on =Archive File= and right-click the big blue	52	the link.
46	button to copy the link.
47		53
48	Then, go to your server and enter the following commands to download,	54	Then, go to your server and enter the following commands to download,
49	unzip, and move the files to your destination directory. This example	55	unzip, and move the files to your destination directory. This example
50	uses =example.com= as the destination, but you can put it wherever you	56	uses `example.com` as the destination, but you can put it
51	want to server your files from.	57	wherever you want to server your files from.
52		58
53	#+begin_src sh	59	```sh
54	wget https://download.nextcloud.com/server/releases/nextcloud-23.0.3.zip	60	wget https://download.nextcloud.com/server/releases/nextcloud-23.0.3.zip
55	sudo apt install unzip	61	sudo apt install unzip
56	unzip nextcloud-23.0.3.zip	62	unzip nextcloud-23.0.3.zip
57	sudo cp -r nextcloud /var/www/example.com	63	sudo cp -r nextcloud /var/www/example.com
58	#+end_src	64	```
		65
		66	# Configure the Apache Web Server
59		67
60	* Configure the Apache Web Server
61	Now that the database is set up and Nextcloud is installed, you need to	68	Now that the database is set up and Nextcloud is installed, you need to
62	set up the Apache configuration files to tell the server how to handle	69	set up the Apache configuration files to tell the server how to handle
63	requests for =example.com/nextcloud=.	70	requests for `example.com/nextcloud`.
64		71
65	First, open the following file in the editor:	72	First, open the following file in the editor:
66		73
67	#+begin_src sh	74	```sh
68	sudo nano /etc/apache2/sites-available/nextcloud.conf	75	sudo nano /etc/apache2/sites-available/nextcloud.conf
69	#+end_src	76	```
70		77
71	Once the editor is open, paste the following information in. Then, save	78	Once the editor is open, paste the following information in. Then, save
72	and close the file.	79	and close the file.
73		80
74	#+begin_src config	81	``` config
75	<VirtualHost *:80>	82	<VirtualHost *:80>
76	DocumentRoot /var/www/example.com	83	DocumentRoot /var/www/example.com
77	ServerName example.com	84	ServerName example.com
	@@ -90,70 +97,74 @@ and close the file.
90	</IfModule>	97	</IfModule>
91	</Directory>	98	</Directory>
92	</VirtualHost>	99	</VirtualHost>
93	#+end_src	100	```
94		101
95	Once the file is saved, enable it with Apache:	102	Once the file is saved, enable it with Apache:
96		103
97	#+begin_src sh	104	```sh
98	sudo a2ensite nextcloud.conf	105	sudo a2ensite nextcloud.conf
99	#+end_src	106	```
100		107
101	Next, enable the Apache mods required by Nextcloud:	108	Next, enable the Apache mods required by Nextcloud:
102		109
103	#+begin_src sh	110	```sh
104	sudo a2enmod rewrite headers env dir mime	111	sudo a2enmod rewrite headers env dir mime
105	#+end_src	112	```
106		113
107	Finally, restart Apache. If any errors arise, you must solve those	114	Finally, restart Apache. If any errors arise, you must solve those
108	before continuing.	115	before continuing.
109		116
110	#+begin_src sh	117	```sh
111	sudo systemctl restart apache2	118	sudo systemctl restart apache2
112	#+end_src	119	```
113		120
114	For the app to work, you must have the correct file permissions on your	121	For the app to work, you must have the correct file permissions on your
115	=nextcloud= directory. Set the owner to be =www-data=:	122	`nextcloud` directory. Set the owner to be
		123	`www-data`:
116		124
117	#+begin_src sh	125	```sh
118	sudo chown -R www-data:www-data /var/www/example.com/nextcloud/	126	sudo chown -R www-data:www-data /var/www/example.com/nextcloud/
119	#+end_src	127	```
		128
		129	# DNS
120		130
121	* DNS
122	If you do not have a static IP address, you will need to update your DNS	131	If you do not have a static IP address, you will need to update your DNS
123	settings (at your DNS provider) whenever your dynamic IP address	132	settings (at your DNS provider) whenever your dynamic IP address
124	changes.	133	changes.
125		134
126	For an example on how I do that with Cloudflare, see my other post:	135	For an example on how I do that with Cloudflare, see my other post:
127	[[../updating-dynamic-dns-with-cloudflare-api/][Updating Dynamic DNS	136	[Updating Dynamic DNS with Cloudflare
128	with Cloudflare API]]	137	API](../updating-dynamic-dns-with-cloudflare-api/)
		138
		139	# Certbot
129		140
130	* Certbot
131	If you want to serve Nextcloud from HTTPS rather than plain HTTP, use	141	If you want to serve Nextcloud from HTTPS rather than plain HTTP, use
132	the following commands to issue Let's Encrypt SSL certificates:	142	the following commands to issue Let\'s Encrypt SSL certificates:
133		143
134	#+begin_src sh	144	```sh
135	sudo apt install snapd	145	sudo apt install snapd
136	sudo snap install core	146	sudo snap install core
137	sudo snap refresh core	147	sudo snap refresh core
138	sudo snap install --classic certbot	148	sudo snap install --classic certbot
139	sudo ln -s /snap/bin/certbot /usr/bin/certbot	149	sudo ln -s /snap/bin/certbot /usr/bin/certbot
140	sudo certbot --apache	150	sudo certbot --apache
141	#+end_src	151	```
		152
		153	# Results
142		154
143	* Results	155	Voilà! You\'re all done and should be able to access Nextcloud from your
144	Voilà! You're all done and should be able to access Nextcloud from your
145	domain or IP address.	156	domain or IP address.
146		157
147	See the screenshots below for the dashboard and a settings page on my	158	See the screenshots below for the dashboard and a settings page on my
148	instance of Nextcloud, using the =Breeze Dark= theme I installed from	159	instance of Nextcloud, using the `Breeze Dark` theme I
149	the Apps page.	160	installed from the Apps page.
150		161
151	#+caption: Nextcloud Dashboard	162	![Nextcloud
152	[[https://img.cleberg.net/blog/20220323-installing-nextcloud-on-ubuntu/nextcloud_dashboard.png]]	163	Dashboard](https://img.cleberg.net/blog/20220323-installing-nextcloud-on-ubuntu/nextcloud_dashboard.png)
153		164
154	/Figure 01: Nextcloud Dashboard/	165	Figure 01: Nextcloud Dashboard
155		166
156	#+caption: Nextcloud Settings	167	![Nextcloud
157	[[https://img.cleberg.net/blog/20220323-installing-nextcloud-on-ubuntu/nextcloud_settings.png]]	168	Settings](https://img.cleberg.net/blog/20220323-installing-nextcloud-on-ubuntu/nextcloud_settings.png)
158		169
159	/Figure 02: Nextcloud Security Settings/	170	Figure 02: Nextcloud Security Settings

content/blog/2022-03-24-server-hardening.md added +353

@@ -0,0 +1,353 @@
	1	+++
	2	date = 2022-03-24
	3	title = "Hardening a Public-Facing Home Server"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Post Updates
	9
	10	> After reviewing this post today (2022-10-04), I noticed quite a few
	11	> gaps in my write-up and wanted to add a few things, even though this
	12	> blog is really just a retrospective and knowledge dump for myself. I
	13	> left things intact and simply crossed them out (~~like this~~) for
	14	> posterity.
	15
	16	# Planning Data Flows & Security
	17
	18	## My Personal Data Flow
	19
	20	``` txt
	21	┌───────┐ ┌─────────────────┐
	22	┌──► VLAN1 ├───► Private Devices │
	23	│ └───────┘ └─────────────────┘
	24	┌──────────┐ ┌────────┐ ┌──────────┐ ┌────────┐ │
	25	│ Internet ├───► Router ├───► Firewall ├───► Switch ├──┤
	26	└──────────┘ └────────┘ └──────────┘ └────────┘ │
	27	│ ┌───────┐ ┌───────────────┐
	28	└──► VLAN2 ├───► Public Server │
	29	└───────┘ └───────────────┘
	30	```
	31
	32	## Thought Process
	33
	34	To serve content from your home server and harden your security posture,
	35	you have to think about the transport of data from `server`
	36	to `client`.
	37
	38	Let\'s start with the actual server itself. Think about the following:
	39
	40	- Do I have a firewall enabled? Do I need to update this to allow new
	41	ports or IPs?
	42	- Do I have an IPS/IDS that may prevent outside traffic?
	43	- Do I have any other security software installed?
	44	- Are the services hosted inside Docker containers, behind a reverse
	45	proxy, or virtualized? If so, are they configured to allow outside
	46	traffic?
	47
	48	Once the data leaves the server, where does it go? In my case, it goes
	49	to a managed switch. In this case, I asked the following:
	50
	51	- What configurations is the switch using?
	52	- Am I using VLANs?
	53	- Yes, I am using 802.1Q VLANs.
	54	- Are the VLANs configured properly?
	55	- Yes, as shown in the Switch section below, I have a separate
	56	VLAN to allow outside traffic to and from the server alone. No
	57	other devices, except for a service port, and in that VLAN.
	58
	59	At this point, the data has been processed through the switch. Where
	60	does it go next? In my case, it\'s pretty simple: it goes to the
	61	router/modem device.
	62
	63	- Does my ISP block any ports that I need?
	64	- This is an important step that a lot of people run into when
	65	self-hosting at home. Use an online port-checker tool for your
	66	IP or call your ISP if you think ports are blocked.
	67	- Is there a router firewall?
	68	- Yes, I checked that it\'s configured to allow the ports I need
	69	to run my services publicly. Common web servers and reverse
	70	proxies require ports 80 and 443, but other services like media
	71	servers or games can require unique ports, so be sure to check
	72	the documentation for your service(s).
	73	- Are there any other settings affecting inbound/outbound traffic?
	74	- Schedules or access blocks
	75	- Static Routing
	76	- QoS
	77	- Port Forwarding
	78	- DMZ Hosting
	79	- Remote Management (this can sometimes mess with services that
	80	also require the use of ports 80 and 443)
	81
	82	Once the data leaves my router, it goes to the upstream ISP and can be
	83	accessed publicly.
	84
	85	### Server
	86
	87	+The services I run on my server are installed straight into the OS,
	88	without any use of Docker or VMs, so I don\'t need any extra application
	89	configuration to make them accessible to the outside world.+
	90
	91	As of 2022-10-04, the paragraph above is no longer true as I now run a
	92	reverse proxy with Nginx and host many services inside Docker. However,
	93	it doesn\'t change anything regarding this post as I still just need to
	94	open ports 80 & 443 and create the necessary website configuration
	95	files.
	96
	97	When creating new services - either installed directly on bare metal or
	98	within something like Docker - I ensure that I read through the
	99	documentation thoroughly to understand a few key things: - What network
	100	activities should this app perform (if any)? Using which ports and
	101	protocols? - Does this app require any commands/services to be run as
	102	`root`? - Does this app log errors, authentication
	103	failures/successes, or anything else that would be useful for an
	104	investigation?
	105
	106	For extra security, I use limit all incoming connections to SSH
	107	connections through my server firewall (`ufw`) and disable
	108	common SSH settings. After all of that, I use `fail2ban` as a
	109	preventative measure against brute-force login attempts.
	110
	111	As another piece of security, you can randomize your SSH port to ensure
	112	that random scanners or attackers can\'t easily try to force their way
	113	into your network. For example, you can edit the port rules in your
	114	server to block all connection requests to port `22` but
	115	forward all remote connections from port `12345` to your
	116	server\'s port `22`. Then you just need to SSH to your
	117	network via your randomized port.
	118
	119	## `ufw`
	120
	121	To see how to configure `ufw`, see my other post: [Secure
	122	Your Network with the Uncomplicated
	123	Firewall](../secure-your-network-with-the-uncomplicated-firewall/).
	124
	125	The general notion with an on-device firewall is that you want to deny
	126	all incoming connections by default and then selectively open certain
	127	ports for services or users that you know need access.
	128
	129	If you know that you will only be logging into this server from a
	130	certain set or list of IPs, you can always set the firewall to only
	131	allow connections to port 22 from those IPs.
	132
	133	For a quick start to only allow SSH connections to the server, use this:
	134
	135	```sh
	136	sudo ufw default deny incoming
	137	sudo ufw default allow outgoing
	138	sudo ufw allow 22
	139	sudo ufw enable
	140	```
	141
	142	![ufw](https://img.cleberg.net/blog/20220324-hardening-a-public-facing-home-server/ufw.png)
	143
	144	## `ssh`
	145
	146	1. Using SSH Keys
	147
	148	First, make sure you have an SSH keypair generated on the device(s)
	149	that you\'ll be using to log in to the server. If you don\'t have an
	150	SSH key, run this command:
	151
	152	```sh
	153	ssh-keygen
	154	```
	155
	156	Now that we have an SSH key, copy it to the server with the
	157	following command, which will ask for the user\'s password before
	158	accepting the key:
	159
	160	```sh
	161	ssh-copy-id my_user@my_server
	162	```
	163
	164	If you have multiple keys, you\'ll need to specify which to use.
	165	After it\'s complete, `ssh` back into the server as that
	166	user and make sure it doesn\'t ask for a password.
	167
	168	2. Disable Password & Root Authentication
	169
	170	Now that we can access the server without a password, we will
	171	disable password authentication and disable anyone from using
	172	`ssh` to login as `root`.
	173
	174	To do this, open the `sshd_config` file:
	175
	176	```sh
	177	sudo nano /etc/ssh/sshd_config
	178	```
	179
	180	You\'ll need to update the parameters to the values below. If one of
	181	these rules is commented-out or doesn\'t exist, create the rule at
	182	the bottom of the file.
	183
	184	``` config
	185	PermitRootLogin no
	186	PasswordAuthentication no
	187	PubkeyAuthentication yes
	188	```
	189
	190	Finally, restart the `ssh` service:
	191
	192	```sh
	193	sudo systemctl restart sshd.service
	194	```
	195
	196	To test that everything\'s working so far, open ANOTHER terminal and
	197	try logging in as `root` over SSH. It is very important
	198	that you keep your current SSH session open and test with an
	199	additional session, or you will lock yourself out at some point and
	200	will need to use a recovery method (e.g., hooking monitor up to home
	201	server) to get yourself back in.
	202
	203	3. Enable MFA for `ssh`
	204
	205	This part is optional, but I highly recommend it. So far, we\'ve
	206	ensured that no one can log into our user on the server without
	207	using our secret key, and we\'ve ensured that no one can log in
	208	remotely as `root`. Next, you can enable MFA
	209	authentication for `ssh` connections.
	210
	211	This process involves editing a couple files and installing an MFA
	212	package, so I will not include all the details in this post. To see
	213	how to configure MFA for `ssh`, see my other post:
	214	[Enabling MFA for SSH](../enable-totp-mfa-for-ssh/).
	215
	216	![SSH
	217	MFA](https://img.cleberg.net/blog/20220324-hardening-a-public-facing-home-server/ssh_mfa.png)
	218
	219	## `fail2ban`
	220
	221	I haven\'t written a post on how I use `fail2ban`, but it\'s
	222	quite simple. I use the default `sshd` jail, but you can
	223	always create new jails for respective applications or ports. For
	224	example, if you use Nginx as your web server, you can use the
	225	`nginx-http-auth` jail.
	226
	227	In order to get it up and running, use the following commands:
	228
	229	```sh
	230	sudo apt install fail2ban
	231	sudo fail2ban-client start sshd
	232	sudo fail2ban-client status sshd
	233	```
	234
	235	This should be used as a last-resort defense and shouldn\'t be a
	236	replacement for the security measures mentioned above.
	237
	238	![fail2ban](https://img.cleberg.net/blog/20220324-hardening-a-public-facing-home-server/fail2ban.png)
	239
	240	# Switch
	241
	242	Between the router and any local devices is my managed switch, which is
	243	used to create VLANs. The example below shows how I would isolate the
	244	VLANs if I were starting to host a single service at home.
	245
	246	## 802.1Q VLAN Configuration
	247
	248	In this configuration, port 8 is the public server that needs to be
	249	accessed from the outside. Port 23 is my \'dedicated service port\' for
	250	this server. In order to SSH to this server, I need to plug my laptop
	251	into port 23 or else I cannot SSH. Otherwise, I\'d need to hook up a
	252	monitor and keyboard directly to the server to manage it.
	253
	254	VLAN ID VLAN Name Member Ports Tagged Ports Untagged Ports
	255	--------- ----------- -------------- -------------- ----------------
	256	1 Default 1-24 1-24
	257	2 Server 1,8,23 1,8,23
	258
	259	## 802.1Q VLAN PVID Setting
	260
	261	Once the VLAN is created, I simply add the `VLAN ID` of
	262	`2` as the `PVID` for any related ports (in this
	263	case, see that ports `8` and `23` have a PVID of
	264	`2`).
	265
	266	Port PVID
	267	------ ------
	268	1 1
	269	2 1
	270	3 1
	271	4 1
	272	5 1
	273	6 1
	274	7 1
	275	8 2
	276	9 1
	277	10 1
	278	11 1
	279	12 1
	280	13 1
	281	14 1
	282	15 1
	283	16 1
	284	17 1
	285	18 1
	286	19 1
	287	20 1
	288	21 1
	289	22 1
	290	23 2
	291	24 1
	292
	293	# Router
	294
	295	On my router, the configuration was as easy as opening the firewall
	296	settings and unblocking the ports I needed for my services (e.g.,
	297	HTTP/S, Plex, SSH, MySQL, etc.).
	298
	299	+Since I\'m relying on an ISP-provided modem/router combo for now (not
	300	by choice), I do not use any other advanced settings on my router that
	301	would inhibit any valid traffic to these services.+
	302
	303	The paragraph above regarding the ISP-owned router is no longer accurate
	304	as I now use the Ubiquiti Unifi Dream Machine Pro as my router. Within
	305	this router, I enabled port forwarding/firewall rules, segregate the
	306	network based on the device, and enable traffic restrictions (e.g.,
	307	silently drop traffic from certain countries and threat categories).
	308
	309	If you have the option with your ISP, I recommend using a personal
	310	router with software that you are familiar with so that you can explore
	311	all the options available to you.
	312
	313	# Physical Security
	314
	315	One large piece of self-hosting that people generally don\'t discuss
	316	online is physical security. However, physical security is very
	317	important for everyone who hosts a server like this. Exactly how
	318	important it is depends on the server use/purpose.
	319
	320	If you self-host customer applications that hold protected data (HIPAA,
	321	GDPR, COPPA, etc.), then physical security is extremely important and
	322	cannot be ignored. If you simply host a blog and some hobby sites, then
	323	it\'s a relatively minor consideration, but one you still need to think
	324	about.
	325
	326	## Location
	327
	328	The first consideration is quite simple: location. - Is the server
	329	within a property you own or housed on someone else\'s property? - Is it
	330	nearby (in your house, in your work office, in your neighbor\'s garage,
	331	in a storage unit, etc.)? - Do you have 24/7 access to the server? - Are
	332	there climate considerations, such as humidity, fires, tornadoes,
	333	monsoons? - Do you have emergency equipment nearby in case of emergency?
	334
	335	## Hardware Ownership
	336
	337	Secondly, consider the hardware itself: - Do you own the server in its
	338	entirety? - Are any other users able to access the server, even if your
	339	data/space is segregated? - If you\'re utilizing a third party, do they
	340	have any documentation to show responsibility? This could be a SOC 1/2/3
	341	report, ISO compliance report, internal security/safety documentation.
	342
	343	## Physical Controls
	344
	345	Regardless of who owns the hardware, ensure that there are adequate
	346	safeguards in place, if necessary. These usually don\'t apply to small
	347	home servers and are usually covered already if you\'re utilizing a
	348	third party.
	349
	350	These can include: - Server bezel locks - Server room locks - physical,
	351	digital, or biometric authentication - Security cameras - Raised
	352	floors/lowered ceilings with proper guards/gates in-place within the
	353	floors or ceilings - Security personnel - Log sheets and/or guest badges

content/blog/2022-03-24-server-hardening.org deleted −334

	@@ -1,334 +0,0 @@
1	#+title: Hardening a Public-Facing Home Server
2	#+date: 2022-03-24
3	#+description: Learn some basic techniques to harden a home server and network.
4	#+filetags: :security:
5
6	* Post Updates
7
8	#+begin_quote
9	After reviewing this post today (2022-10-04), I noticed quite a few gaps
10	in my write-up and wanted to add a few things, even though this blog is
11	really just a retrospective and knowledge dump for myself. I left things
12	intact and simply crossed them out (+like this+) for posterity.
13	#+end_quote
14
15	* Planning Data Flows & Security
16	** My Personal Data Flow
17	#+begin_src txt
18	┌───────┐ ┌─────────────────┐
19	┌──► VLAN1 ├───► Private Devices │
20	│ └───────┘ └─────────────────┘
21	┌──────────┐ ┌────────┐ ┌──────────┐ ┌────────┐ │
22	│ Internet ├───► Router ├───► Firewall ├───► Switch ├──┤
23	└──────────┘ └────────┘ └──────────┘ └────────┘ │
24	│ ┌───────┐ ┌───────────────┐
25	└──► VLAN2 ├───► Public Server │
26	└───────┘ └───────────────┘
27	#+end_src
28
29	** Thought Process
30	To serve content from your home server and harden your security posture,
31	you have to think about the transport of data from =server= to =client=.
32
33	Let's start with the actual server itself. Think about the following:
34
35	- Do I have a firewall enabled? Do I need to update this to allow new
36	ports or IPs?
37	- Do I have an IPS/IDS that may prevent outside traffic?
38	- Do I have any other security software installed?
39	- Are the services hosted inside Docker containers, behind a reverse
40	proxy, or virtualized? If so, are they configured to allow outside
41	traffic?
42
43	Once the data leaves the server, where does it go? In my case, it goes
44	to a managed switch. In this case, I asked the following:
45
46	- What configurations is the switch using?
47	- Am I using VLANs?
48	- Yes, I am using 802.1Q VLANs.
49	- Are the VLANs configured properly?
50	- Yes, as shown in the Switch section below, I have a
51	separate VLAN to allow outside traffic to and from the server alone.
52	No other devices, except for a service port, and in that VLAN.
53
54	At this point, the data has been processed through the switch. Where
55	does it go next? In my case, it's pretty simple: it goes to the
56	router/modem device.
57
58	- Does my ISP block any ports that I need?
59	- This is an important step that a lot of people run into when
60	self-hosting at home. Use an online port-checker tool for your IP or
61	call your ISP if you think ports are blocked.
62	- Is there a router firewall?
63	- Yes, I checked that it's configured to allow the ports I need to run
64	my services publicly. Common web servers and reverse proxies require
65	ports 80 and 443, but other services like media servers or games can
66	require unique ports, so be sure to check the documentation for your
67	service(s).
68	- Are there any other settings affecting inbound/outbound traffic?
69	- Schedules or access blocks
70	- Static Routing
71	- QoS
72	- Port Forwarding
73	- DMZ Hosting
74	- Remote Management (this can sometimes mess with services that also
75	require the use of ports 80 and 443)
76
77	Once the data leaves my router, it goes to the upstream ISP and can be
78	accessed publicly.
79
80	*** Server
81	+The services I run on my server are installed straight into the OS,
82	without any use of Docker or VMs, so I don't need any extra application
83	configuration to make them accessible to the outside world.+
84
85	As of 2022-10-04, the paragraph above is no longer true as I now run a
86	reverse proxy with Nginx and host many services inside Docker. However,
87	it doesn't change anything regarding this post as I still just need to
88	open ports 80 & 443 and create the necessary website configuration
89	files.
90
91	When creating new services - either installed directly on bare metal or
92	within something like Docker - I ensure that I read through the
93	documentation thoroughly to understand a few key things: - What network
94	activities should this app perform (if any)? Using which ports and
95	protocols? - Does this app require any commands/services to be run as
96	=root=? - Does this app log errors, authentication failures/successes,
97	or anything else that would be useful for an investigation?
98
99	For extra security, I use limit all incoming connections to SSH
100	connections through my server firewall (=ufw=) and disable common SSH
101	settings. After all of that, I use =fail2ban= as a preventative measure
102	against brute-force login attempts.
103
104	As another piece of security, you can randomize your SSH port to ensure
105	that random scanners or attackers can't easily try to force their way
106	into your network. For example, you can edit the port rules in your
107	server to block all connection requests to port =22= but forward all
108	remote connections from port =12345= to your server's port =22=. Then
109	you just need to SSH to your network via your randomized port.
110
111	** =ufw=
112	To see how to configure =ufw=, see my other post:
113	[[../secure-your-network-with-the-uncomplicated-firewall/][Secure
114	Your Network with the Uncomplicated Firewall]].
115
116	The general notion with an on-device firewall is that you want to deny
117	all incoming connections by default and then selectively open certain
118	ports for services or users that you know need access.
119
120	If you know that you will only be logging into this server from a
121	certain set or list of IPs, you can always set the firewall to only
122	allow connections to port 22 from those IPs.
123
124	For a quick start to only allow SSH connections to the server, use this:
125
126	#+begin_src sh
127	sudo ufw default deny incoming
128	sudo ufw default allow outgoing
129	sudo ufw allow 22
130	sudo ufw enable
131	#+end_src
132
133	#+caption: ufw
134	[[https://img.cleberg.net/blog/20220324-hardening-a-public-facing-home-server/ufw.png]]
135
136	** =ssh=
137	1. Using SSH Keys
138
139	First, make sure you have an SSH keypair generated on the device(s)
140	that you'll be using to log in to the server. If you don't have an
141	SSH key, run this command:
142
143	#+begin_src sh
144	ssh-keygen
145	#+end_src
146
147	Now that we have an SSH key, copy it to the server with the following
148	command, which will ask for the user's password before accepting the
149	key:
150
151	#+begin_src sh
152	ssh-copy-id my_user@my_server
153	#+end_src
154
155	If you have multiple keys, you'll need to specify which to use. After
156	it's complete, =ssh= back into the server as that user and make sure
157	it doesn't ask for a password.
158
159	2. Disable Password & Root Authentication
160
161	Now that we can access the server without a password, we will disable
162	password authentication and disable anyone from using =ssh= to login
163	as =root=.
164
165	To do this, open the =sshd_config= file:
166
167	#+begin_src sh
168	sudo nano /etc/ssh/sshd_config
169	#+end_src
170
171	You'll need to update the parameters to the values below. If one of
172	these rules is commented-out or doesn't exist, create the rule at the
173	bottom of the file.
174
175	#+begin_src config
176	PermitRootLogin no
177	PasswordAuthentication no
178	PubkeyAuthentication yes
179	#+end_src
180
181	Finally, restart the =ssh= service:
182
183	#+begin_src sh
184	sudo systemctl restart sshd.service
185	#+end_src
186
187	To test that everything's working so far, open ANOTHER terminal and
188	try logging in as =root= over SSH. It is very important that you keep
189	your current SSH session open and test with an additional session, or
190	you will lock yourself out at some point and will need to use a
191	recovery method (e.g., hooking monitor up to home server) to get
192	yourself back in.
193
194	3. Enable MFA for =ssh=
195
196	This part is optional, but I highly recommend it. So far, we've
197	ensured that no one can log into our user on the server without using
198	our secret key, and we've ensured that no one can log in remotely as
199	=root=. Next, you can enable MFA authentication for =ssh=
200	connections.
201
202	This process involves editing a couple files and installing an MFA
203	package, so I will not include all the details in this post. To see
204	how to configure MFA for =ssh=, see my other post:
205	[[../enable-totp-mfa-for-ssh/][Enabling MFA for SSH]].
206
207	#+caption: SSH MFA
208	[[https://img.cleberg.net/blog/20220324-hardening-a-public-facing-home-server/ssh_mfa.png]]
209
210	** =fail2ban=
211	I haven't written a post on how I use =fail2ban=, but it's quite simple.
212	I use the default =sshd= jail, but you can always create new jails for
213	respective applications or ports. For example, if you use Nginx as your
214	web server, you can use the =nginx-http-auth= jail.
215
216	In order to get it up and running, use the following commands:
217
218	#+begin_src sh
219	sudo apt install fail2ban
220	sudo fail2ban-client start sshd
221	sudo fail2ban-client status sshd
222	#+end_src
223
224	This should be used as a last-resort defense and shouldn't be a
225	replacement for the security measures mentioned above.
226
227	#+caption: fail2ban
228	[[https://img.cleberg.net/blog/20220324-hardening-a-public-facing-home-server/fail2ban.png]]
229
230	* Switch
231	Between the router and any local devices is my managed switch, which is
232	used to create VLANs. The example below shows how I would isolate the
233	VLANs if I were starting to host a single service at home.
234
235	** 802.1Q VLAN Configuration
236	In this configuration, port 8 is the public server that needs to be
237	accessed from the outside. Port 23 is my 'dedicated service port' for
238	this server. In order to SSH to this server, I need to plug my laptop
239	into port 23 or else I cannot SSH. Otherwise, I'd need to hook up a
240	monitor and keyboard directly to the server to manage it.
241
242	\| VLAN ID \| VLAN Name \| Member Ports \| Tagged Ports \| Untagged Ports \|
243	\|---------+-----------+--------------+--------------+----------------\|
244	\| 1 \| Default \| 1-24 \| \| 1-24 \|
245	\| 2 \| Server \| 1,8,23 \| \| 1,8,23 \|
246
247	** 802.1Q VLAN PVID Setting
248	Once the VLAN is created, I simply add the =VLAN ID= of =2= as the
249	=PVID= for any related ports (in this case, see that ports =8= and =23=
250	have a PVID of =2=).
251
252	\| Port \| PVID \|
253	\|------+------\|
254	\| 1 \| 1 \|
255	\| 2 \| 1 \|
256	\| 3 \| 1 \|
257	\| 4 \| 1 \|
258	\| 5 \| 1 \|
259	\| 6 \| 1 \|
260	\| 7 \| 1 \|
261	\| 8 \| 2 \|
262	\| 9 \| 1 \|
263	\| 10 \| 1 \|
264	\| 11 \| 1 \|
265	\| 12 \| 1 \|
266	\| 13 \| 1 \|
267	\| 14 \| 1 \|
268	\| 15 \| 1 \|
269	\| 16 \| 1 \|
270	\| 17 \| 1 \|
271	\| 18 \| 1 \|
272	\| 19 \| 1 \|
273	\| 20 \| 1 \|
274	\| 21 \| 1 \|
275	\| 22 \| 1 \|
276	\| 23 \| 2 \|
277	\| 24 \| 1 \|
278
279	* Router
280	On my router, the configuration was as easy as opening the firewall
281	settings and unblocking the ports I needed for my services (e.g.,
282	HTTP/S, Plex, SSH, MySQL, etc.).
283
284	+Since I'm relying on an ISP-provided modem/router combo for now (not by
285	choice), I do not use any other advanced settings on my router that
286	would inhibit any valid traffic to these services.+
287
288	The paragraph above regarding the ISP-owned router is no longer accurate
289	as I now use the Ubiquiti Unifi Dream Machine Pro as my router. Within
290	this router, I enabled port forwarding/firewall rules, segregate the
291	network based on the device, and enable traffic restrictions (e.g.,
292	silently drop traffic from certain countries and threat categories).
293
294	If you have the option with your ISP, I recommend using a personal
295	router with software that you are familiar with so that you can explore
296	all the options available to you.
297
298	* Physical Security
299	One large piece of self-hosting that people generally don't discuss
300	online is physical security. However, physical security is very
301	important for everyone who hosts a server like this. Exactly /how/
302	important it is depends on the server use/purpose.
303
304	If you self-host customer applications that hold protected data (HIPAA,
305	GDPR, COPPA, etc.), then physical security is extremely important and
306	cannot be ignored. If you simply host a blog and some hobby sites, then
307	it's a relatively minor consideration, but one you still need to think
308	about.
309
310	** Location
311	The first consideration is quite simple: location. - Is the server
312	within a property you own or housed on someone else's property? - Is it
313	nearby (in your house, in your work office, in your neighbor's garage,
314	in a storage unit, etc.)? - Do you have 24/7 access to the server? - Are
315	there climate considerations, such as humidity, fires, tornadoes,
316	monsoons? - Do you have emergency equipment nearby in case of emergency?
317
318	** Hardware Ownership
319	Secondly, consider the hardware itself: - Do you own the server in its
320	entirety? - Are any other users able to access the server, even if your
321	data/space is segregated? - If you're utilizing a third party, do they
322	have any documentation to show responsibility? This could be a SOC 1/2/3
323	report, ISO compliance report, internal security/safety documentation.
324
325	** Physical Controls
326	Regardless of who owns the hardware, ensure that there are adequate
327	safeguards in place, if necessary. These usually don't apply to small
328	home servers and are usually covered already if you're utilizing a third
329	party.
330
331	These can include: - Server bezel locks - Server room locks - physical,
332	digital, or biometric authentication - Security cameras - Raised
333	floors/lowered ceilings with proper guards/gates in-place within the
334	floors or ceilings - Security personnel - Log sheets and/or guest badges

content/blog/2022-03-26-ssh-mfa.org → content/blog/2022-03-26-ssh-mfa.md renamed +73 −63

	@@ -1,78 +1,84 @@
1	#+title: Enable TOTP MFA for SSH	1	+++
2	#+date: 2022-03-26	2	date = 2022-03-26
3	#+description: Learn how to enable timed one-time passcodes for SSH.	3	title = "Enablt TOTP MFA for SSH"
4	#+filetags: :security:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Why Do I Need MFA for SSH?
5		9
6	* Why Do I Need MFA for SSH?
7	If you are a sysadmin of a server anywhere (that includes at home!), you	10	If you are a sysadmin of a server anywhere (that includes at home!), you
8	may want an added layer of protection against intruders. This is not a	11	may want an added layer of protection against intruders. This is not a
9	replacement for other security measures, such as:	12	replacement for other security measures, such as:
10		13
11	- Disable root SSH	14	- Disable root SSH
12	- Disable SSH password authentication	15	- Disable SSH password authentication
13	- Allow only certain users to login via SSH	16	- Allow only certain users to login via SSH
14	- Allow SSH only from certain IPs	17	- Allow SSH only from certain IPs
15		18
16	However, MFA can be added as an additional security measure to ensure	19	However, MFA can be added as an additional security measure to ensure
17	that your server is protected. This is especially important if you need	20	that your server is protected. This is especially important if you need
18	to allow password authentication for SSH.	21	to allow password authentication for SSH.
19		22
20	For more guidance on server security measures, see my other post:	23	For more guidance on server security measures, see my other post:
21	[[../hardening-a-public-facing-home-server/][Hardening a	24	[Hardening a Public-Facing Home
22	Public-Facing Home Server]].	25	Server](../hardening-a-public-facing-home-server/).
		26
		27	# Install MFA PAM Module
23		28
24	* Install MFA PAM Module
25	PAM, which stands for Pluggable Authentication Module, is an	29	PAM, which stands for Pluggable Authentication Module, is an
26	authentication infrastructure used on Linux systems to authenticate a	30	authentication infrastructure used on Linux systems to authenticate a
27	user. In order to use this technology, let's install the	31	user. In order to use this technology, let\'s install the
28	=libpam-google-authenticator= package:	32	`libpam-google-authenticator` package:
29		33
30	#+begin_src sh	34	```sh
31	sudo apt-get update	35	sudo apt-get update
32	#+end_src	36	```
33		37
34	#+begin_src sh	38	```sh
35	sudo apt-get install libpam-google-authenticator	39	sudo apt-get install libpam-google-authenticator
36	#+end_src	40	```
		41
		42	# Initialize the PAM Module
		43
		44	## Interactive Method
37		45
38	* Initialize the PAM Module
39	** Interactive Method
40	Once the package is installed, initialize it and following the	46	Once the package is installed, initialize it and following the
41	interactive prompts to generate your OTP or TOTP:	47	interactive prompts to generate your OTP or TOTP:
42		48
43	#+begin_src sh	49	```sh
44	google-authenticator	50	google-authenticator
45	#+end_src	51	```
46		52
47	If you are not sure how to answer, read the prompts carefully and think	53	If you are not sure how to answer, read the prompts carefully and think
48	about having to how each situation would affect your normal login	54	about having to how each situation would affect your normal login
49	attempts. If you are still not sure, use my default responses below.	55	attempts. If you are still not sure, use my default responses below.
50		56
51	#+begin_src txt	57	``` txt
52	OUTPUT	58	OUTPUT
53		59
54	Do you want authentication tokens to be time-based (y/n) y	60	Do you want authentication tokens to be time-based (y/n) y
55	#+end_src	61	```
56		62
57	At this point, use an authenticator app somewhere one of your devices to	63	At this point, use an authenticator app somewhere one of your devices to
58	scan the QR code. Any future login attempts after our upcoming	64	scan the QR code. Any future login attempts after our upcoming
59	configuration changes will require that TOTP.	65	configuration changes will require that TOTP.
60		66
61	#+begin_src txt	67	``` txt
62	OUTPUT	68	OUTPUT
63		69
64	Do you want me to update your "/home/user/.google_authenticator" file? (y/n) y	70	Do you want me to update your "/home/user/.google_authenticator" file? (y/n) y
65	#+end_src	71	```
66		72
67	#+begin_src txt	73	``` txt
68	OUTPUT	74	OUTPUT
69		75
70	Do you want to disallow multiple uses of the same authentication	76	Do you want to disallow multiple uses of the same authentication
71	token? This restricts you to one login about every 30s, but it increases	77	token? This restricts you to one login about every 30s, but it increases
72	your chances to notice or even prevent man-in-the-middle attacks (y/n) y	78	your chances to notice or even prevent man-in-the-middle attacks (y/n) y
73	#+end_src	79	```
74		80
75	#+begin_src txt	81	``` txt
76	OUTPUT	82	OUTPUT
77		83
78	By default, a new token is generated every 30 seconds by the mobile app.	84	By default, a new token is generated every 30 seconds by the mobile app.
	@@ -85,29 +91,30 @@ code, the next code) to 17 permitted codes (the 8 previous codes, the current
85	code, and the 8 next codes). This will permit for a time skew of up to 4 minutes	91	code, and the 8 next codes). This will permit for a time skew of up to 4 minutes
86	between client and server.	92	between client and server.
87	Do you want to do so? (y/n) n	93	Do you want to do so? (y/n) n
88	#+end_src	94	```
89		95
90	#+begin_src txt	96	``` txt
91	OUTPUT	97	OUTPUT
92		98
93	If the computer that you are logging into isn't hardened against brute-force	99	If the computer that you are logging into isn't hardened against brute-force
94	login attempts, you can enable rate-limiting for the authentication module.	100	login attempts, you can enable rate-limiting for the authentication module.
95	By default, this limits attackers to no more than 3 login attempts every 30s.	101	By default, this limits attackers to no more than 3 login attempts every 30s.
96	Do you want to enable rate-limiting? (y/n) y	102	Do you want to enable rate-limiting? (y/n) y
97	#+end_src	103	```
		104
		105	## Non-Interactive Method
98		106
99	** Non-Interactive Method
100	If you need to do this quickly, know your responses to the prompts, or	107	If you need to do this quickly, know your responses to the prompts, or
101	are setting this up for numerous users, the non-interactive method can	108	are setting this up for numerous users, the non-interactive method can
102	be much faster:	109	be much faster:
103		110
104	#+begin_src sh	111	```sh
105	google-authenticator -t -d -f -r 3 -R 30 -w 3	112	google-authenticator -t -d -f -r 3 -R 30 -w 3
106	#+end_src	113	```
107		114
108	The options referenced above are as follows:	115	The options referenced above are as follows:
109		116
110	#+begin_src txt	117	``` txt
111	google-authenticator [<options>]	118	google-authenticator [<options>]
112	-h, --help Print this message	119	-h, --help Print this message
113	-c, --counter-based Set up counter-based (HOTP) verification	120	-c, --counter-based Set up counter-based (HOTP) verification
	@@ -127,63 +134,66 @@ google-authenticator [<options>]
127	-w, --window-size=W Set window of concurrently valid codes	134	-w, --window-size=W Set window of concurrently valid codes
128	-W, --minimal-window Disable window of concurrently valid codes	135	-W, --minimal-window Disable window of concurrently valid codes
129	-e, --emergency-codes=N Number of emergency codes to generate	136	-e, --emergency-codes=N Number of emergency codes to generate
130	#+end_src	137	```
131		138
132	This fully configures the authenticator, saves it to a file, and then	139	This fully configures the authenticator, saves it to a file, and then
133	outputs the secret key, QR code, and recovery codes. (If you add the	140	outputs the secret key, QR code, and recovery codes. (If you add the
134	flag =-q=, then there won't be any output). If you use this command in	141	flag `-q`, then there won\'t be any output). If you use this
135	an automated fashion, make sure your script captures the secret key	142	command in an automated fashion, make sure your script captures the
136	and/or recovery codes and makes them available to the user.	143	secret key and/or recovery codes and makes them available to the user.
		144
		145	# PAM Configuration Settings
137		146
138	* PAM Configuration Settings	147	Once you\'ve enabled the T/OTP and have it saved to an MFA app on your
139	Once you've enabled the T/OTP and have it saved to an MFA app on your	148	phone or other device, open the PAM `sshd` file:
140	phone or other device, open the PAM =sshd= file:
141		149
142	#+begin_src sh	150	```sh
143	sudo nano /etc/pam.d/sshd	151	sudo nano /etc/pam.d/sshd
144	#+end_src	152	```
145		153
146	You need to do two things in this file. First, add the following lines	154	You need to do two things in this file. First, add the following lines
147	to the bottom of the file:	155	to the bottom of the file:
148		156
149	#+begin_src config	157	``` config
150	auth required pam_google_authenticator.so nullok	158	auth required pam_google_authenticator.so nullok
151	auth required pam_permit.so	159	auth required pam_permit.so
152	#+end_src	160	```
153		161
154	Second, comment-out the following line near the top of the file.	162	Second, comment-out the following line near the top of the file.
155		163
156	If you leave this line uncommented, every SSH login attempt will ask for	164	If you leave this line uncommented, every SSH login attempt will ask for
157	the following three authentication factors:	165	the following three authentication factors:
158		166
159	1. Publickey	167	1. Publickey
160	2. Password	168	2. Password
161	3. T/OTP code	169	3. T/OTP code
162		170
163	#+begin_src config	171	``` config
164	#@include common-auth	172	#@include common-auth
165	#+end_src	173	```
		174
		175	# SSH Configuration Settings
166		176
167	* SSH Configuration Settings	177	Finally, edit the `sshd_config` file again:
168	Finally, edit the =sshd_config= file again:
169		178
170	#+begin_src sh	179	```sh
171	sudo nano /etc/ssh/sshd_config	180	sudo nano /etc/ssh/sshd_config
172	#+end_src	181	```
173		182
174	You'll need to change =ChallengeResponseAuthentication= to yes and add	183	You\'ll need to change `ChallengeResponseAuthentication` to
175	the =AuthenticationMethods= line to the bottom of the file.	184	yes and add the `AuthenticationMethods` line to the bottom of
		185	the file.
176		186
177	#+begin_src config	187	``` config
178	ChallengeResponseAuthentication yes	188	ChallengeResponseAuthentication yes
179	AuthenticationMethods publickey,password publickey,keyboard-interactive	189	AuthenticationMethods publickey,password publickey,keyboard-interactive
180	#+end_src	190	```
181		191
182	Finally, restart the =ssh= service:	192	Finally, restart the `ssh` service:
183		193
184	#+begin_src sh	194	```sh
185	sudo systemctl restart sshd.service	195	sudo systemctl restart sshd.service
186	#+end_src	196	```
187		197
188	The next time you log in, you should be greeted with a verification code	198	The next time you log in, you should be greeted with a verification code
189	request!	199	request!

content/blog/2022-04-02-nginx-reverse-proxy.md added +235

@@ -0,0 +1,235 @@
	1	+++
	2	date = 2022-04-02
	3	title = "Set-Up a Reverse Proxy with Nginx"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# What is a Reverse Proxy?
	9
	10	A reverse proxy is a server that is placed between local servers or
	11	services and clients/users (e.g., the internet). The reverse proxy
	12	intercepts all requests from clients at the network edge and uses its
	13	configuration files to determine where each request should be sent.
	14
	15	## A Brief Example
	16
	17	For example, let\'s say that I run three servers in my home:
	18
	19	- Server~01~ (`example.com`)
	20	- Server~02~ (`service01.example.com`)
	21	- Server~03~ (`service02.example.com`)
	22
	23	I also run a reverse proxy in my home that intercepts all public
	24	traffic:
	25
	26	- Reverse Proxy
	27
	28	Assume that I have a domain name (`example.com`) that allows
	29	clients to request websites or services from my home servers.
	30
	31	In this case, the reverse proxy will intercept all traffic from
	32	`example.com` that enters my network and determine if the
	33	client is requesting valid data, based on my configuration.
	34
	35	If the user is requesting `example.com` and my configuration
	36	files say that Server~01~ holds that data, Nginx will send the user to
	37	Server~01~. If I were to change the configuration so that
	38	`example.com` is routed to Server~02~, that same user would
	39	be sent to Server~02~ instead.
	40
	41	``` txt
	42	┌──────┐ ┌───────────┐
	43	│ User │─┐ ┌──► Server_01 │
	44	└──────┘ │ │ └───────────┘
	45	│ ┌──────────┐ ┌───────────────┐ │ ┌───────────┐
	46	├────► Internet ├───► Reverse Proxy ├─────├──► Server_02 │
	47	│ └──────────┘ └───────────────┘ │ └───────────┘
	48	┌──────┐ │ │ ┌───────────┐
	49	│ User │─┘ └──► Server_03 │
	50	└──────┘ └───────────┘
	51	```
	52
	53	# Reverse Proxy Options
	54
	55	There are a lot of options when it comes to reverse proxy servers, so
	56	I\'m just going to list a few of the options I\'ve heard recommended
	57	over the last few years:
	58
	59	- [Nginx](https://nginx.com)
	60	- [Caddy](https://caddyserver.com)
	61	- [Traefik](https://traefik.io/)
	62	- [HAProxy](https://www.haproxy.org/)
	63	- [Squid](https://ubuntu.com/server/docs/proxy-servers-squid)
	64
	65	In this post, we will be using Nginx as our reverse proxy, running on
	66	Ubuntu Server 20.04.4 LTS.
	67
	68	# Nginx Reverse Proxy Example
	69
	70	## Local Applications
	71
	72	You may be like me and have a lot of applications running on your local
	73	network that you\'d like to expose publicly with a domain.
	74
	75	In my case, I have services running in multiple Docker containers within
	76	a single server and want a way to visit those services from anywhere
	77	with a URL. For example, on my local network, [Dashy](https://dashy.to)
	78	runs through port 4000 (`localhost:4000`) and [Uptime
	79	Kuma](https://github.com/louislam/uptime-kuma) runs through port 3001
	80	(`localhost:3001`).
	81
	82	In order to expose these services to the public, I will need to do the
	83	following:
	84
	85	1. Set up DNS records for a domain or subdomain (one per service) to
	86	point toward the IP address of the server.
	87	2. Open up the server network\'s HTTP and HTTPS ports (80 & 443) so
	88	that the reverse proxy can accept traffic and determine where to
	89	send it.
	90	3. Install the reverse proxy software.
	91	4. Configure the reverse proxy to recognize which service should get
	92	traffic from any of the domains or subdomains.
	93
	94	## Step 1: DNS Configuration
	95
	96	To start, update your DNS configuration so that you have an
	97	`A` record for each domain or subdomain.
	98
	99	The `A` records should point toward the public IP address of
	100	the server. If you don\'t know the public IP address, log in to the
	101	server and run the following command:
	102
	103	```sh
	104	curl ifconfig.co
	105	```
	106
	107	In the DNS example below, `xxx.xxx.xxx.xxx` is the public IP
	108	address of the server.
	109
	110	``` config
	111	example.com A xxx.xxx.xxx.xxx
	112	uptime.example.com A xxx.xxx.xxx.xxx
	113	dashy.example.com A xxx.xxx.xxx.xxx
	114	www CNAME example.com
	115	```
	116
	117	Finally, ensure the DNS has propagated correctly with [DNS
	118	Checker](https://dnschecker.org) by entering your domains or subdomains
	119	in the search box and ensuring the results are showing the correct IP
	120	address.
	121
	122	## Step 2: Open Network Ports
	123
	124	This step will be different depending on which router you have in your
	125	home. If you\'re not sure, try to visit
	126	[192.168.1.1](http://192.168.1.1) in your browser. Login credentials are
	127	usually written on a sticker somewhere on your modem/router.
	128
	129	Once you\'re able to log in to your router, find the Port Forwarding
	130	settings. You will need to forward ports `80` and
	131	`443` to whichever machine is running the reverse proxy.
	132
	133	In my case, the table below shows the port-forwarding rules I\'ve
	134	created. In this table, `xxx.xxx.xxx.xxx` is the local device
	135	IP of the reverse proxy server, it will probably be an IP between
	136	`192.168.1.1` and `192.168.1.255`.
	137
	138	NAME FROM PORT DEST PORT/IP ENABLED
	139	------- ------ ------ ----------------- ---------
	140	HTTP \\ 80 xxx.xxx.xxx.xxx TRUE
	141	HTTPS \\ 443 xxx.xxx.xxx.xxx TRUE
	142
	143	Once configured, these rules will direct all web traffic to your reverse
	144	proxy.
	145
	146	## Step 3: Nginx Installation
	147
	148	To install Nginx, simply run the following command:
	149
	150	```sh
	151	sudo apt install nginx
	152	```
	153
	154	If you have a firewall enabled, open up ports `80` and
	155	`443` on your server so that Nginx can accept web traffic
	156	from the router.
	157
	158	For example, if you want to use `ufw` for web traffic and
	159	SSH, run the following commands:
	160
	161	```sh
	162	sudo ufw allow 'Nginx Full'
	163	sudo ufw allow SSH
	164	sudo ufw enable
	165	```
	166
	167	## Step 4: Nginx Configuration
	168
	169	Now that we have domains pointing toward the server, the only step left
	170	is to configure the reverse proxy to direct traffic from domains to
	171	local services.
	172
	173	To start, you\'ll need to create a configuration file for each domain in
	174	`/etc/nginx/sites-available/`. They will look identical
	175	except for the `server_name` variable and the
	176	`proxy_pass` port.
	177
	178	Dashy:
	179
	180	```sh
	181	nano /etc/nginx/sites-available/dashy.example.com
	182	```
	183
	184	``` config
	185	server {
	186	listen 80;
	187	server_name dashy.example.com;
	188
	189	location / {
	190	proxy_pass http://localhost:4000;
	191	}
	192	}
	193	```
	194
	195	Uptime:
	196
	197	```sh
	198	nano /etc/nginx/sites-available/uptime.example.com
	199	```
	200
	201	``` config
	202	server {
	203	listen 80;
	204	server_name uptime.example.com;
	205
	206	location / {
	207	proxy_pass http://localhost:3001;
	208	}
	209	}
	210	```
	211
	212	Once the configuration files are created, you will need to enable them
	213	with the `symlink` command:
	214
	215	```sh
	216	sudo ln -s /etc/nginx/sites-available/dashy.example.com /etc/nginx/sites-enabled/
	217	```
	218
	219	Voilà! Your local services should now be available through their URLs.
	220
	221	# HTTPS with Certbot
	222
	223	If you\'ve followed along, you\'ll notice that your services are only
	224	available via HTTP (not HTTPS).
	225
	226	If you want to enable HTTPS for your new domains, you will need to
	227	generate SSL/TLS certificates for them. The easiest way to generate
	228	certificates on Nginx is [Certbot](https://certbot.eff.org):
	229
	230	```sh
	231	sudo apt install snapd; sudo snap install core; sudo snap refresh core
	232	sudo snap install --classic certbot
	233	sudo ln -s /snap/bin/certbot /usr/bin/certbot
	234	sudo certbot --nginx
	235	```

content/blog/2022-04-02-nginx-reverse-proxy.org deleted −220

	@@ -1,220 +0,0 @@
1	#+title: Set-Up a Reverse Proxy with Nginx
2	#+date: 2022-04-02
3	#+description: Learn how to set-up an Nginx reverse proxy from scratch.
4	#+filetags: :nginx:
5
6	* What is a Reverse Proxy?
7	A reverse proxy is a server that is placed between local servers or
8	services and clients/users (e.g., the internet). The reverse proxy
9	intercepts all requests from clients at the network edge and uses its
10	configuration files to determine where each request should be sent.
11
12	** A Brief Example
13	For example, let's say that I run three servers in my home:
14
15	- Server_{01} (=example.com=)
16	- Server_{02} (=service01.example.com=)
17	- Server_{03} (=service02.example.com=)
18
19	I also run a reverse proxy in my home that intercepts all public
20	traffic:
21
22	- Reverse Proxy
23
24	Assume that I have a domain name (=example.com=) that allows clients to
25	request websites or services from my home servers.
26
27	In this case, the reverse proxy will intercept all traffic from
28	=example.com= that enters my network and determine if the client is
29	requesting valid data, based on my configuration.
30
31	If the user is requesting =example.com= and my configuration files say
32	that Server_{01} holds that data, Nginx will send the user to
33	Server_{01}. If I were to change the configuration so that =example.com=
34	is routed to Server_{02}, that same user would be sent to Server_{02}
35	instead.
36
37	#+begin_src txt
38	┌──────┐ ┌───────────┐
39	│ User │─┐ ┌──► Server_01 │
40	└──────┘ │ │ └───────────┘
41	│ ┌──────────┐ ┌───────────────┐ │ ┌───────────┐
42	├────► Internet ├───► Reverse Proxy ├─────├──► Server_02 │
43	│ └──────────┘ └───────────────┘ │ └───────────┘
44	┌──────┐ │ │ ┌───────────┐
45	│ User │─┘ └──► Server_03 │
46	└──────┘ └───────────┘
47	#+end_src
48
49	* Reverse Proxy Options
50	There are a lot of options when it comes to reverse proxy servers, so
51	I'm just going to list a few of the options I've heard recommended over
52	the last few years:
53
54	- [[https://nginx.com][Nginx]]
55	- [[https://caddyserver.com][Caddy]]
56	- [[https://traefik.io/][Traefik]]
57	- [[https://www.haproxy.org/][HAProxy]]
58	- [[https://ubuntu.com/server/docs/proxy-servers-squid][Squid]]
59
60	In this post, we will be using Nginx as our reverse proxy, running on
61	Ubuntu Server 20.04.4 LTS.
62
63	* Nginx Reverse Proxy Example
64	** Local Applications
65	You may be like me and have a lot of applications running on your local
66	network that you'd like to expose publicly with a domain.
67
68	In my case, I have services running in multiple Docker containers within
69	a single server and want a way to visit those services from anywhere
70	with a URL. For example, on my local network,
71	[[https://dashy.to][Dashy]] runs through port 4000 (=localhost:4000=)
72	and [[https://github.com/louislam/uptime-kuma][Uptime Kuma]] runs
73	through port 3001 (=localhost:3001=).
74
75	In order to expose these services to the public, I will need to do the
76	following:
77
78	1. Set up DNS records for a domain or subdomain (one per service) to
79	point toward the IP address of the server.
80	2. Open up the server network's HTTP and HTTPS ports (80 & 443) so that
81	the reverse proxy can accept traffic and determine where to send it.
82	3. Install the reverse proxy software.
83	4. Configure the reverse proxy to recognize which service should get
84	traffic from any of the domains or subdomains.
85
86	** Step 1: DNS Configuration
87	To start, update your DNS configuration so that you have an =A= record
88	for each domain or subdomain.
89
90	The =A= records should point toward the public IP address of the server.
91	If you don't know the public IP address, log in to the server and run
92	the following command:
93
94	#+begin_src sh
95	curl ifconfig.co
96	#+end_src
97
98	In the DNS example below, =xxx.xxx.xxx.xxx= is the public IP address of
99	the server.
100
101	#+begin_src config
102	example.com A xxx.xxx.xxx.xxx
103	uptime.example.com A xxx.xxx.xxx.xxx
104	dashy.example.com A xxx.xxx.xxx.xxx
105	www CNAME example.com
106	#+end_src
107
108	Finally, ensure the DNS has propagated correctly with
109	[[https://dnschecker.org][DNS Checker]] by entering your domains or
110	subdomains in the search box and ensuring the results are showing the
111	correct IP address.
112
113	** Step 2: Open Network Ports
114	This step will be different depending on which router you have in your
115	home. If you're not sure, try to visit
116	[[http://192.168.1.1][192.168.1.1]] in your browser. Login credentials
117	are usually written on a sticker somewhere on your modem/router.
118
119	Once you're able to log in to your router, find the Port Forwarding
120	settings. You will need to forward ports =80= and =443= to whichever
121	machine is running the reverse proxy.
122
123	In my case, the table below shows the port-forwarding rules I've
124	created. In this table, =xxx.xxx.xxx.xxx= is the local device IP of the
125	reverse proxy server, it will probably be an IP between =192.168.1.1=
126	and =192.168.1.255=.
127
128	\| NAME \| FROM \| PORT \| DEST PORT/IP \| ENABLED \|
129	\|-------+------+------+-----------------+---------\|
130	\| HTTP \| ** \| 80 \| xxx.xxx.xxx.xxx \| TRUE \|
131	\| HTTPS \| ** \| 443 \| xxx.xxx.xxx.xxx \| TRUE \|
132
133	Once configured, these rules will direct all web traffic to your reverse
134	proxy.
135
136	** Step 3: Nginx Installation
137	To install Nginx, simply run the following command:
138
139	#+begin_src sh
140	sudo apt install nginx
141	#+end_src
142
143	If you have a firewall enabled, open up ports =80= and =443= on your
144	server so that Nginx can accept web traffic from the router.
145
146	For example, if you want to use =ufw= for web traffic and SSH, run the
147	following commands:
148
149	#+begin_src sh
150	sudo ufw allow 'Nginx Full'
151	sudo ufw allow SSH
152	sudo ufw enable
153	#+end_src
154
155	** Step 4: Nginx Configuration
156	Now that we have domains pointing toward the server, the only step left
157	is to configure the reverse proxy to direct traffic from domains to
158	local services.
159
160	To start, you'll need to create a configuration file for each domain in
161	=/etc/nginx/sites-available/=. They will look identical except for the
162	=server_name= variable and the =proxy_pass= port.
163
164	Dashy:
165
166	#+begin_src sh
167	nano /etc/nginx/sites-available/dashy.example.com
168	#+end_src
169
170	#+begin_src config
171	server {
172	listen 80;
173	server_name dashy.example.com;
174
175	location / {
176	proxy_pass http://localhost:4000;
177	}
178	}
179	#+end_src
180
181	Uptime:
182
183	#+begin_src sh
184	nano /etc/nginx/sites-available/uptime.example.com
185	#+end_src
186
187	#+begin_src config
188	server {
189	listen 80;
190	server_name uptime.example.com;
191
192	location / {
193	proxy_pass http://localhost:3001;
194	}
195	}
196	#+end_src
197
198	Once the configuration files are created, you will need to enable them
199	with the =symlink= command:
200
201	#+begin_src sh
202	sudo ln -s /etc/nginx/sites-available/dashy.example.com /etc/nginx/sites-enabled/
203	#+end_src
204
205	Voilà! Your local services should now be available through their URLs.
206
207	* HTTPS with Certbot
208	If you've followed along, you'll notice that your services are only
209	available via HTTP (not HTTPS).
210
211	If you want to enable HTTPS for your new domains, you will need to
212	generate SSL/TLS certificates for them. The easiest way to generate
213	certificates on Nginx is [[https://certbot.eff.org][Certbot]]:
214
215	#+begin_src sh
216	sudo apt install snapd; sudo snap install core; sudo snap refresh core
217	sudo snap install --classic certbot
218	sudo ln -s /snap/bin/certbot /usr/bin/certbot
219	sudo certbot --nginx
220	#+end_src

content/blog/2022-04-09-pinetime.org → content/blog/2022-04-09-pinetime.md renamed +75 −63

	@@ -1,39 +1,45 @@
1	#+title: PineTime: An Open-Source Smart Watch	1	+++
2	#+date: 2022-04-09	2	date = 2022-04-09
3	#+description: Playing with the PineTime smart watch.	3	title = "PineTime: An Open-Source Smart Watch"
4	#+filetags: :hardware:	4	description = ""
5		5	draft = false
6	* PineTime Product Information	6	+++
7	** Overview	7
8	The [[https://www.pine64.org/pinetime/][PineTime]] is an open-source	8	# PineTime Product Information
9	smartwatch, created by [[https://www.pine64.org][PINE64]]. Originally	9
		10	## Overview
		11
		12	The [PineTime](https://www.pine64.org/pinetime/) is an open-source
		13	smartwatch, created by [PINE64](https://www.pine64.org). Originally
10	announced in September 2019, this ARM-based watch is a fantastic option	14	announced in September 2019, this ARM-based watch is a fantastic option
11	for users who want the benefits of a modern smartwatch with the backing	15	for users who want the benefits of a modern smartwatch with the backing
12	of open-source components and software.	16	of open-source components and software.
13		17
14	** Product Specifications	18	## Product Specifications
15	I won't dive into too many details that you can find on
16	[[https://www.pine64.org/pinetime/][the product page]], but I wanted to
17	point out the prices for each watch and the primary functions:
18		19
19	1. Price:	20	I won\'t dive into too many details that you can find on [the product
		21	page](https://www.pine64.org/pinetime/), but I wanted to point out the
		22	prices for each watch and the primary functions:
20		23
21	- $26.99 (Sealed)	24	1. Price:
22	- $24.99 (Dev Kit)
23	- $51.98 (One Sealed + One Dev Kit)
24		25
25	2. Primary Functionality:	26	- \$26.99 (Sealed)
		27	- \$24.99 (Dev Kit)
		28	- \$51.98 (One Sealed + One Dev Kit)
26		29
27	- Clock (+ Smartphone Sync)	30	2. Primary Functionality:
28	- Pedometer	31
29	- Heart Rate Monitor	32	- Clock (+ Smartphone Sync)
30	- Sleep Monitor	33	- Pedometer
31	- Calories burned	34	- Heart Rate Monitor
32	- Messaging	35	- Sleep Monitor
33	- Smartphone Notifications	36	- Calories burned
34	- Media Controls	37	- Messaging
		38	- Smartphone Notifications
		39	- Media Controls
		40
		41	# Unboxing
35		42
36	* Unboxing
37	Now, my PineTime was ordered on 2022-02-17, shipped on 2022-02-22, and	43	Now, my PineTime was ordered on 2022-02-17, shipped on 2022-02-22, and
38	was delivered on 2022-03-23. With the current delays on shipping times	44	was delivered on 2022-03-23. With the current delays on shipping times
39	around the world (and the semiconductor shortage), a month for delivery	45	around the world (and the semiconductor shortage), a month for delivery
	@@ -46,76 +52,81 @@ USB wall adapter).
46	The watch itself was able to turn on immediately when I pulled it out of	52	The watch itself was able to turn on immediately when I pulled it out of
47	the box, but the battery was depleted and required charging right away.	53	the box, but the battery was depleted and required charging right away.
48		54
49	#+caption: PineTime Box Contents	55	![PineTime Box
50	[[https://img.cleberg.net/blog/20220409-pinetime-smart-watch/pinetime_box_contents.png]]	56	Contents](https://img.cleberg.net/blog/20220409-pinetime-smart-watch/pinetime_box_contents.png)
		57
		58	# Software
		59
		60	## Watch OS: InfiniTime
51		61
52	* Software
53	** Watch OS: InfiniTime
54	While turning on the watch for the first time, some of the main design	62	While turning on the watch for the first time, some of the main design
55	choices you can see in the watch OS,	63	choices you can see in the watch OS,
56	[[https://wiki.pine64.org/wiki/InfiniTime][InfiniTime]], are:	64	[InfiniTime](https://wiki.pine64.org/wiki/InfiniTime), are:
57		65
58	- A square bezel, not too thin against the sides of the watch.	66	- A square bezel, not too thin against the sides of the watch.
59	- A simple, rubber band.	67	- A simple, rubber band.
60	- Basic font and screen pixel design.	68	- Basic font and screen pixel design.
61	- Swipe gestures to access other screens.	69	- Swipe gestures to access other screens.
62		70
63	#+caption: PineTime Screens	71	![PineTime
64	[[https://img.cleberg.net/blog/20220409-pinetime-smart-watch/pinetime.png]]	72	Screens](https://img.cleberg.net/blog/20220409-pinetime-smart-watch/pinetime.png)
65		73
66	The OS itself is fantastic in terms of functionality for me. It does	74	The OS itself is fantastic in terms of functionality for me. It does
67	exactly what a smartwatch should do - track time, steps, heart rates,	75	exactly what a smartwatch should do - track time, steps, heart rates,
68	and connect to another smart device, without being overly burdensome to	76	and connect to another smart device, without being overly burdensome to
69	the user.	77	the user.
70		78
71	My only gripe so far is that it's /really/ difficult to swipe to	79	My only gripe so far is that it\'s really difficult to swipe to
72	different screens, such as pulling down the notification tray. I'm not	80	different screens, such as pulling down the notification tray. I\'m not
73	sure if this is an OS or hardware issue, but it makes it quite hard to	81	sure if this is an OS or hardware issue, but it makes it quite hard to
74	quickly move around the screens.	82	quickly move around the screens.
75		83
76	However, my absolute favorite design choice is that the button the side	84	However, my absolute favorite design choice is that the button the side
77	turns the screen on and off and tilting/waving my wrist doesn't	85	turns the screen on and off and tilting/waving my wrist doesn\'t
78	accidentally turn on the screen. With other watches, I absolutely hated	86	accidentally turn on the screen. With other watches, I absolutely hated
79	not being able to turn off the raise-to-wake or wave features (i.e.,	87	not being able to turn off the raise-to-wake or wave features (i.e.,
80	blinding myself while wearing a watch at night because I moved my arm).	88	blinding myself while wearing a watch at night because I moved my arm).
81		89
82	** iOS App: InfiniLink	90	## iOS App: InfiniLink
		91
83	Since I am using iOS as my primary mobile device OS, I am using the	92	Since I am using iOS as my primary mobile device OS, I am using the
84	[[https://github.com/xan-m/InfiniLink][InfiniLink]] app to connect my	93	[InfiniLink](https://github.com/xan-m/InfiniLink) app to connect my
85	watch.	94	watch.
86		95
87	This app provides the following for PineTime owners:	96	This app provides the following for PineTime owners:
88		97
89	- Firmware updates	98	- Firmware updates
90	- Steps	99	- Steps
91	- Charts	100	- Charts
92	- Notifications	101	- Notifications
93		102
94	I mashed up a few screenshots to show off the home page, menu, firmware	103	I mashed up a few screenshots to show off the home page, menu, firmware
95	update, and notification test screens:	104	update, and notification test screens:
96		105
97	#+caption: InfiniLink Home	106	![InfiniLink
98	[[https://img.cleberg.net/blog/20220409-pinetime-smart-watch/infinilink_home.png]]	107	Home](https://img.cleberg.net/blog/20220409-pinetime-smart-watch/infinilink_home.png)
99		108
100	Another big feature of InfiniLink is the ability to track pedometer	109	Another big feature of InfiniLink is the ability to track pedometer
101	steps in a collection of beautiful graphs, with the option to change	110	steps in a collection of beautiful graphs, with the option to change
102	your step goal and add in manual steps.	111	your step goal and add in manual steps.
103		112
104	#+caption: InfiniLink Steps	113	![InfiniLink
105	[[https://img.cleberg.net/blog/20220409-pinetime-smart-watch/infinilink_steps.png]]	114	Steps](https://img.cleberg.net/blog/20220409-pinetime-smart-watch/infinilink_steps.png)
106		115
107	Finally, there are charts to display the battery percentage and heart	116	Finally, there are charts to display the battery percentage and heart
108	rates over time. This area also comes with an option to clear data.	117	rates over time. This area also comes with an option to clear data.
109		118
110	#+caption: InfiniLink Charts	119	![InfiniLink
111	[[https://img.cleberg.net/blog/20220409-pinetime-smart-watch/infinilink_charts.png]]	120	Charts](https://img.cleberg.net/blog/20220409-pinetime-smart-watch/infinilink_charts.png)
		121
		122	# Final Thoughts
		123
		124	## Pros
112		125
113	* Final Thoughts
114	** Pros
115	After wearing my watch for a few weeks, I have mostly positive thoughts	126	After wearing my watch for a few weeks, I have mostly positive thoughts
116	about the watch so far. In the past, I have owned smartwatches by	127	about the watch so far. In the past, I have owned smartwatches by
117	FitBit, Fossil, Apple, etc. - *but I prefer the PineTime over all of	128	FitBit, Fossil, Apple, etc. - **but I prefer the PineTime over all of
118	those watches*.	129	those watches**.
119		130
120	The PineTime strips out all the unnecessary features and performs the	131	The PineTime strips out all the unnecessary features and performs the
121	functions that it provides effectively and efficiently.	132	functions that it provides effectively and efficiently.
	@@ -123,11 +134,12 @@ functions that it provides effectively and efficiently.
123	The battery life is amazing on this device. By default, the watch seems	134	The battery life is amazing on this device. By default, the watch seems
124	to last anywhere from a few days to a week before dying.	135	to last anywhere from a few days to a week before dying.
125		136
126	And of course, it's open source and backed by some of the most dedicated	137	And of course, it\'s open source and backed by some of the most
127	enthusiasts and developers I've seen. Watching the Matrix channel,	138	dedicated enthusiasts and developers I\'ve seen. Watching the Matrix
128	forums, and website have been exciting to see.	139	channel, forums, and website have been exciting to see.
		140
		141	## Cons
129		142
130	** Cons
131	If I had to complain about anything, it would simply be the small bugs	143	If I had to complain about anything, it would simply be the small bugs
132	in some features that can be contributed to the companion apps more than	144	in some features that can be contributed to the companion apps more than
133	the watch itself.	145	the watch itself.
	@@ -136,8 +148,8 @@ A regular user would want native notification support out-of-the-box,
136	which is the biggest item not working for me at the moment.	148	which is the biggest item not working for me at the moment.
137		149
138	My only other complaint is that the battery indicator on the watch	150	My only other complaint is that the battery indicator on the watch
139	doesn't seem accurate when it's nearing depletion - it seems that	151	doesn\'t seem accurate when it\'s nearing depletion - it seems that
140	there's a bit of battery life left and then my watch is dead very	152	there\'s a bit of battery life left and then my watch is dead very
141	suddenly after. This could just be me misinterpreting the battery level	153	suddenly after. This could just be me misinterpreting the battery level
142	icons, but it has fooled me a few times into thinking I had more battery	154	icons, but it has fooled me a few times into thinking I had more battery
143	left than I actually did.	155	left than I actually did.

content/blog/2022-06-01-ditching-cloudflare.md added +95

@@ -0,0 +1,95 @@
	1	+++
	2	date = 2022-06-01
	3	title = "Ditching Cloudflare for Njalla"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Registrar
	9
	10	After spending a year or so using Cloudflare for DNS only - no proxying
	11	or applications - I spent the last few months using Cloudflare Tunnels
	12	and Cloudflare Access to protect my self-hosted websites and
	13	applications via their proxy traffic model.
	14
	15	However, I have never liked using Cloudflare due to their increasingly
	16	large share of control over web traffic, as well as their business model
	17	of being a MITM for all of your traffic.
	18
	19	So, as of today, I have switched over to [Njalla](https://njal.la) as my
	20	registrar and DNS manager. I was able to easily transfer my domains over
	21	rapidly, with only one domain taking more than 15-30 minutes to
	22	propagate.
	23
	24	+I do still have two domains sitting at Cloudflare for the moment while
	25	I decide if they\'re worth the higher rates (one domain is 30€ and the
	26	other is 45€).+
	27
	28	> Update (2022.06.03): I ended up transferring my final two domains
	29	> over to Njalla, clearing my Cloudflare account of personal data, and
	30	> deleting the Cloudflare account entirely. *I actually feel relieved to
	31	> have moved on to a provider I trust.*
	32
	33	# DNS
	34
	35	As noted above, I\'m using Njalla exclusively for DNS configurations on
	36	my domains.
	37
	38	However, the transfer process was not ideal. As soon as the domains
	39	transferred over, I switched the nameservers from Cloudflare to Njalla
	40	and lost most of the associated DNS records. So, the majority of the
	41	time spent during the migration was simply re-typing all the DNS records
	42	back in one-by-one.
	43
	44	This would be much simpler if I were able to edit the plain-text format
	45	of the DNS configuration. I was able to do that at a past registrar
	46	(perhaps it was [Gandi.net](https://gandi.net/)?) and it made life a lot
	47	easier.
	48
	49	## Dynamic DNS Updates
	50
	51	I have built an easy Python script to run (or set-up in
	52	`cron` to run automatically) that will check my server\'s
	53	IPv4 and IPv6, compare it to Njalla, and update the DNS records if they
	54	don\'t match. You can see the full script and process in my other post:
	55	[Updating Dynamic DNS with Njalla API](../njalla-dns-api/).
	56
	57	I haven\'t used this other method, but I do know that you can create
	58	`Dynamic` DNS records with Njalla that [work for updating
	59	dynamic subdomains](https://njal.la/docs/ddns/).
	60
	61	## Njalla\'s DNS Tool
	62
	63	One neat upside to Njalla is that they have a [DNS lookup
	64	tool](https://check.njal.la/dns/) that provides a lot of great
	65	information for those of you (AKA: me) who hate using the
	66	`dig` command.
	67
	68	This was very useful for monitoring a couple of my transferred domains
	69	to see when the changes in nameservers, records, and DNSSEC went into
	70	effect.
	71
	72	# Tunnel
	73
	74	Cloudflare Tunnel is a service that acts as a reverse-proxy (hosted on
	75	Cloudflare\'s servers) and allowed me to mask the private IP address of
	76	the server hosting my various websites and apps.
	77
	78	However, as I was moving away from Cloudflare, I was not able to find a
	79	suitable replacement that was both inexpensive and simple. So, I simply
	80	went back to hosting [my own reverse proxy with
	81	Nginx](file:///blog/set-up-nginx-reverse-proxy/). With the recent
	82	additions of Unifi hardware in my server/network rack, I am much more
	83	protected against spam and malicious attacks at the network edge than I
	84	was before I switched to Cloudflare.
	85
	86	# Access
	87
	88	Cloudflare Access, another app I used in combination with Cloudflare
	89	Tunnel, provided an authentication screen that required you to enter
	90	valid credentials before Cloudflare would forward you to the actual
	91	website or app (if the website/app has their own authentication, you\'d
	92	then have to authenticate a second time).
	93
	94	I did not replace this service with anything since I only host a handful
	95	of non-sensitive apps that don\'t require duplicate authentication.

content/blog/2022-06-01-ditching-cloudflare.org deleted −89

	@@ -1,89 +0,0 @@
1	#+title: Ditching Cloudflare for Njalla
2	#+date: 2022-06-01
3	#+description: A retrospective on my decision to leave Cloudflare and move to Njalla for domain registration and DNS.
4	#+filetags: :sysadmin:
5
6	* Registrar
7	After spending a year or so using Cloudflare for DNS only - no proxying
8	or applications - I spent the last few months using Cloudflare Tunnels
9	and Cloudflare Access to protect my self-hosted websites and
10	applications via their proxy traffic model.
11
12	However, I have never liked using Cloudflare due to their increasingly
13	large share of control over web traffic, as well as their business model
14	of being a MITM for all of your traffic.
15
16	So, as of today, I have switched over to [[https://njal.la][Njalla]] as
17	my registrar and DNS manager. I was able to easily transfer my domains
18	over rapidly, with only one domain taking more than 15-30 minutes to
19	propagate.
20
21	+I do still have two domains sitting at Cloudflare for the moment while
22	I decide if they're worth the higher rates (one domain is 30€ and the
23	other is 45€).+
24
25	#+begin_quote
26	Update (2022.06.03): I ended up transferring my final two domains over
27	to Njalla, clearing my Cloudflare account of personal data, and deleting
28	the Cloudflare account entirely. /I actually feel relieved to have moved
29	on to a provider I trust./
30
31	#+end_quote
32
33	* DNS
34	As noted above, I'm using Njalla exclusively for DNS configurations on
35	my domains.
36
37	However, the transfer process was not ideal. As soon as the domains
38	transferred over, I switched the nameservers from Cloudflare to Njalla
39	and lost most of the associated DNS records. So, the majority of the
40	time spent during the migration was simply re-typing all the DNS records
41	back in one-by-one.
42
43	This would be much simpler if I were able to edit the plain-text format
44	of the DNS configuration. I was able to do that at a past registrar
45	(perhaps it was [[https://gandi.net/][Gandi.net]]?) and it made life a
46	lot easier.
47
48	** Dynamic DNS Updates
49	I have built an easy Python script to run (or set-up in =cron= to run
50	automatically) that will check my server's IPv4 and IPv6, compare it to
51	Njalla, and update the DNS records if they don't match. You can see the
52	full script and process in my other post:
53	[[../njalla-dns-api/][Updating Dynamic DNS with Njalla API]].
54
55	I haven't used this other method, but I do know that you can create
56	=Dynamic= DNS records with Njalla that
57	[[https://njal.la/docs/ddns/][work for updating dynamic subdomains]].
58
59	** Njalla's DNS Tool
60	One neat upside to Njalla is that they have a
61	[[https://check.njal.la/dns/][DNS lookup tool]] that provides a lot of
62	great information for those of you (AKA: me) who hate using the =dig=
63	command.
64
65	This was very useful for monitoring a couple of my transferred domains
66	to see when the changes in nameservers, records, and DNSSEC went into
67	effect.
68
69	* Tunnel
70	Cloudflare Tunnel is a service that acts as a reverse-proxy (hosted on
71	Cloudflare's servers) and allowed me to mask the private IP address of
72	the server hosting my various websites and apps.
73
74	However, as I was moving away from Cloudflare, I was not able to find a
75	suitable replacement that was both inexpensive and simple. So, I simply
76	went back to hosting [[/blog/set-up-nginx-reverse-proxy/][my own reverse
77	proxy with Nginx]]. With the recent additions of Unifi hardware in my
78	server/network rack, I am much more protected against spam and malicious
79	attacks at the network edge than I was before I switched to Cloudflare.
80
81	* Access
82	Cloudflare Access, another app I used in combination with Cloudflare
83	Tunnel, provided an authentication screen that required you to enter
84	valid credentials before Cloudflare would forward you to the actual
85	website or app (if the website/app has their own authentication, you'd
86	then have to authenticate a second time).
87
88	I did not replace this service with anything since I only host a handful
89	of non-sensitive apps that don't require duplicate authentication.

content/blog/2022-06-07-self-hosting-freshrss.org → content/blog/2022-06-07-self-hosting-freshrss.md renamed +117 −94

	@@ -1,9 +1,12 @@
1	#+title: Self-Hosting FreshRSS	1	+++
2	#+date: 2022-06-07	2	date = 2022-06-07
3	#+description: A guide to self-hosting the FreshRSS application on your own server.	3	title = "Self-Hosting FreshRSS"
4	#+filetags: :selfhosting:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Why RSS?
5		9
6	* Why RSS?
7	After noticing that I have collected 50+ blogs as bookmarks, I decided	10	After noticing that I have collected 50+ blogs as bookmarks, I decided
8	to migrate back to using RSS feeds to stay up-to-date with my favorite	11	to migrate back to using RSS feeds to stay up-to-date with my favorite
9	websites. Using RSS allows me to read all of these posts in a single app	12	websites. Using RSS allows me to read all of these posts in a single app
	@@ -14,49 +17,56 @@ However, I ran into one issue: syncing subscriptions and read/unread
14	posts across devices. Since I want to be able to easily read on both	17	posts across devices. Since I want to be able to easily read on both
15	mobile and desktop, I decided to look for a self-hosted RSS solution.	18	mobile and desktop, I decided to look for a self-hosted RSS solution.
16		19
17	Thus, I found [[https://www.freshrss.org/][FreshRSS]] and was able to	20	Thus, I found [FreshRSS](https://www.freshrss.org/) and was able to
18	successfully install it on my server in about 30 minutes.	21	successfully install it on my server in about 30 minutes.
19		22
20	* Documentation	23	# Documentation
21	While it's certainly not robust, the	24
22	[[https://freshrss.github.io/FreshRSS/][FreshRSS documentation]] is	25	While it\'s certainly not robust, the [FreshRSS
23	helpful for figuring out basic information about the service.	26	documentation](https://freshrss.github.io/FreshRSS/) is helpful for
		27	figuring out basic information about the service.
24		28
25	However, I wanted to install this service as a Docker container and	29	However, I wanted to install this service as a Docker container and
26	stumbled across the	30	stumbled across the [Docker
27	[[https://github.com/FreshRSS/FreshRSS/tree/edge/Docker][Docker README]]	31	README](https://github.com/FreshRSS/FreshRSS/tree/edge/Docker) within
28	within the GitHub repository.	32	the GitHub repository.
		33
		34	This README was the documentation I actually needed. However, as you\'ll
		35	see below, I still had to manually edit one file
		36	(`config.php`) to access the API externally via my RSS apps.
29		37
30	This README was the documentation I actually needed. However, as you'll	38	# Installation
31	see below, I still had to manually edit one file (=config.php=) to	39
32	access the API externally via my RSS apps.	40	## DNS
33		41
34	* Installation
35	** DNS
36	The first step, as required by any external web service, was assigning a	42	The first step, as required by any external web service, was assigning a
37	domain name to use. I chose to use a subdomain, like =rss.example.com=.	43	domain name to use. I chose to use a subdomain, like
		44	`rss.example.com`.
38		45
39	To assign this, I created an =A= record in my DNS settings with the IPv4	46	To assign this, I created an `A` record in my DNS settings
40	address of the server and an =AAAA= record with the IPv6 address of the	47	with the IPv4 address of the server and an `AAAA` record with
41	server. Note: assigning an IPv6 (=AAAA=) record is optional, but I like	48	the IPv6 address of the server. Note: assigning an IPv6
42	to enable IPV6 for my services.	49	(`AAAA`) record is optional, but I like to enable IPV6 for my
		50	services.
43		51
44	#+begin_src config	52	``` config
45	rss.example.com A xxx.xxx.xxx.xxx	53	rss.example.com A xxx.xxx.xxx.xxx
46	rss.example.com AAAA xxxx:xxxx: ... :xxxx	54	rss.example.com AAAA xxxx:xxxx: ... :xxxx
47	#+end_src	55	```
		56
		57	## Docker
48		58
49	** Docker	59	I initially tried to set up a `docker-compose.yml` file with
50	I initially tried to set up a =docker-compose.yml= file with a =.env=	60	a `.env` file because I prefer to have a file I can look back
51	file because I prefer to have a file I can look back at later to see how	61	at later to see how I initially started the container, but it simply
52	I initially started the container, but it simply wouldn't work for me.	62	wouldn\'t work for me. I\'m not sure why, but I assume I wasn\'t telling
53	I'm not sure why, but I assume I wasn't telling =docker-compose= where	63	`docker-compose` where the `.env` file was.
54	the =.env= file was.
55		64
56	Regardless, I chose to simply run the service with =docker run=. See the	65	Regardless, I chose to simply run the service with
57	following command for my =docker run= configuration:	66	`docker run`. See the following command for my
		67	`docker run` configuration:
58		68
59	#+begin_src sh	69	```sh
60	sudo docker run -d --restart unless-stopped --log-opt max-size=10m \	70	sudo docker run -d --restart unless-stopped --log-opt max-size=10m \
61	-p 8080:80 \	71	-p 8080:80 \
62	-e TZ=America/Chicago \	72	-e TZ=America/Chicago \
	@@ -65,40 +75,44 @@ sudo docker run -d --restart unless-stopped --log-opt max-size=10m \
65	-v freshrss_extensions:/var/www/FreshRSS/extensions \	75	-v freshrss_extensions:/var/www/FreshRSS/extensions \
66	--name freshrss \	76	--name freshrss \
67	freshrss/freshrss	77	freshrss/freshrss
68	#+end_src	78	```
69		79
70	This started the container successfully and allowed me to visit the	80	This started the container successfully and allowed me to visit the
71	FreshRSS instance at =localhost:8080=.	81	FreshRSS instance at `localhost:8080`.
		82
		83	## Fresh RSS Set-Up
72		84
73	** Fresh RSS Set-Up	85	I HIGHLY\* suggest that you set up your user account prior to
74	I HIGHLY* suggest that you set up your user account prior to exposing	86	exposing this service to the public. It\'s unlikely that someone is
75	this service to the public. It's unlikely that someone is trying to	87	trying to access the exact domain or IP/port you\'re assigning here, but
76	access the exact domain or IP/port you're assigning here, but as soon as	88	as soon as you expose this service, the first person to open the URL
77	you expose this service, the first person to open the URL will be able	89	will be able to create the admin user.
78	to create the admin user.
79		90
80	In order to set up your FreshRSS service, open the =localhost:8080= URL	91	In order to set up your FreshRSS service, open the
81	in your browser (you may need to use a local IP instead of =localhost=	92	`localhost:8080` URL in your browser (you may need to use a
82	if you're accessing the page from a different machine on the network -	93	local IP instead of `localhost` if you\'re accessing the page
83	e.g., =192.168.1.20:8080=).	94	from a different machine on the network - e.g.,
		95	`192.168.1.20:8080`).
84		96
85	Once the page loads, set up your default user with a strong username and	97	Once the page loads, set up your default user with a strong username and
86	password. You may also choose to configure other settings prior to	98	password. You may also choose to configure other settings prior to
87	exposing this service.	99	exposing this service.
88		100
89	** Nginx Reverse-Proxy	101	## Nginx Reverse-Proxy
		102
90	In order to access this service outside my home, I needed to set up a	103	In order to access this service outside my home, I needed to set up a
91	reverse-proxy to connect =localhost:8080= to =rss.example.com=.	104	reverse-proxy to connect `localhost:8080` to
		105	`rss.example.com`.
92		106
93	First, I created a new Nginx configuration file:	107	First, I created a new Nginx configuration file:
94		108
95	#+begin_src sh	109	```sh
96	sudo nano /etc/nginx/sites-available/rss.example.com	110	sudo nano /etc/nginx/sites-available/rss.example.com
97	#+end_src	111	```
98		112
99	Within the config file, I pasted the following code:	113	Within the config file, I pasted the following code:
100		114
101	#+begin_src config	115	``` config
102	upstream freshrss {	116	upstream freshrss {
103	server 127.0.0.1:8080;	117	server 127.0.0.1:8080;
104	keepalive 64;	118	keepalive 64;
	@@ -127,79 +141,87 @@ server {
127	proxy_pass_header Authorization;	141	proxy_pass_header Authorization;
128	}	142	}
129	}	143	}
130	#+end_src	144	```
131		145
132	Finally, restart Nginx and you will be able to access your service via	146	Finally, restart Nginx and you will be able to access your service via
133	HTTP:	147	HTTP:
134		148
135	#+begin_src sh	149	```sh
136	sudo systemctl restart nginx.service	150	sudo systemctl restart nginx.service
137	#+end_src	151	```
		152
		153	## HTTPS
138		154
139	** HTTPS	155	However, I don\'t want to access my RSS feeds via HTTP. I want it
140	However, I don't want to access my RSS feeds via HTTP. I want it
141	available only via HTTPS. In order to do this, I ran the	156	available only via HTTPS. In order to do this, I ran the
142	[[https://certbot.eff.org/][certbot]] program to generate SSL	157	[certbot](https://certbot.eff.org/) program to generate SSL certificates
143	certificates for me:	158	for me:
144		159
145	#+begin_src sh	160	```sh
146	sudo certbot --nginx	161	sudo certbot --nginx
147	#+end_src	162	```
148		163
149	This process will automatically generate an SSL certificate for you and	164	This process will automatically generate an SSL certificate for you and
150	modify the Nginx configuration file to include a redirect from HTTP to	165	modify the Nginx configuration file to include a redirect from HTTP to
151	HTTPS.	166	HTTPS.
152		167
153	* Post-Installation Fixes	168	# Post-Installation Fixes
		169
154	At this point, we have a functional FreshRSS website, available from	170	At this point, we have a functional FreshRSS website, available from
155	anywhere and secured with HTTPS. However, attempting to connect this	171	anywhere and secured with HTTPS. However, attempting to connect this
156	service to an RSS app resulted in many errors regarding unavailable URLs	172	service to an RSS app resulted in many errors regarding unavailable URLs
157	and incorrect credentials.	173	and incorrect credentials.
158		174
159	** API Set-Up	175	## API Set-Up
160	First, you need to open your user profile in FreshRSS (=Settings= >	176
161	=Profile=) and set an API password in the field at the bottom. This is	177	First, you need to open your user profile in FreshRSS
162	the password you will need to provide to your RSS apps.	178	(`Settings` \> `Profile`) and set an API password
		179	in the field at the bottom. This is the password you will need to
		180	provide to your RSS apps.
163		181
164	Once that is set and saved, click the link below the API password field	182	Once that is set and saved, click the link below the API password field
165	to open the API check tool. It should look something like	183	to open the API check tool. It should look something like
166	=https://localhost:8080/api/= or =https://rss.example.com/api/=.	184	`https://localhost:8080/api/` or
		185	`https://rss.example.com/api/`.
167		186
168	Within this page, you /should/ see your correct external URL and "PASS"	187	Within this page, you should see your correct external URL and
169	at the bottom of each API type. This would mean everything is set up	188	\"PASS\" at the bottom of each API type. This would mean everything is
170	correctly, and you can now move on and login to any RSS apps that	189	set up correctly, and you can now move on and login to any RSS apps that
171	support self-hosted options.	190	support self-hosted options.
172		191
173	In my case, the URL showed an internal URL and I had a warning that the	192	In my case, the URL showed an internal URL and I had a warning that the
174	=base_url= variable may be misconfigured. If this is the case, see the	193	`base_url` variable may be misconfigured. If this is the
175	next section for a fix.	194	case, see the next section for a fix.
		195
		196	## Base URL Fix
176		197
177	** Base URL Fix	198	In order to fix the `base_url` for the API, I opened up my
178	In order to fix the =base_url= for the API, I opened up my docker	199	docker container with the following command:
179	container with the following command:
180		200
181	#+begin_src sh	201	```sh
182	sudo docker exec -it freshrss bash	202	sudo docker exec -it freshrss bash
183	#+end_src	203	```
184		204
185	Within this container, update the packages and install an editor:	205	Within this container, update the packages and install an editor:
186		206
187	#+begin_src sh	207	```sh
188	apt-get update	208	apt-get update
189	apt-get install nano	209	apt-get install nano
190	#+end_src	210	```
191		211
192	Finally, open up =config.php= in the =data= directory:	212	Finally, open up `config.php` in the `data`
		213	directory:
193		214
194	#+begin_src sh	215	```sh
195	nano data/config.php	216	nano data/config.php
196	#+end_src	217	```
197		218
198	Within =config.php=, you will need to update the =base_url= variable and	219	Within `config.php`, you will need to update the
199	update it to match your external URL. In my case, I simply commented-out	220	`base_url` variable and update it to match your external URL.
200	the incorrect URL with =//= and added the correct one on a new line:	221	In my case, I simply commented-out the incorrect URL with
		222	`//` and added the correct one on a new line:
201		223
202	#+begin_src php	224	``` php
203	<?php	225	<?php
204	return array (	226	return array (
205	...	227	...
	@@ -208,25 +230,26 @@ the incorrect URL with =//= and added the correct one on a new line:
208	...	230	...
209	)	231	)
210	>	232	>
211	#+end_src	233	```
212		234
213	You can now exit the file with =Ctrl + x=, press =y= to save the file,	235	You can now exit the file with `Ctrl + x`, press
214	and then click =Enter= to keep the same file name.	236	`y` to save the file, and then click `Enter` to
		237	keep the same file name.
215		238
216	Finally, just exit out of the docker container:	239	Finally, just exit out of the docker container:
217		240
218	#+begin_src sh	241	```sh
219	exit	242	exit
220	#+end_src	243	```
221		244
222	Next, just restart the container:	245	Next, just restart the container:
223		246
224	#+begin_src sh	247	```sh
225	sudo docker restart freshrss	248	sudo docker restart freshrss
226	#+end_src	249	```
227		250
228	Voilà! Your API check should now "PASS" and you should be able to use	251	Voilà! Your API check should now \"PASS\" and you should be able to use
229	one of the API URLs in your RSS apps.	252	one of the API URLs in your RSS apps.
230		253
231	In my case, I use [[https://netnewswire.com][NetNewsWire]] on my desktop	254	In my case, I use [NetNewsWire](https://netnewswire.com) on my desktop
232	and phone.	255	and phone.

content/blog/2022-06-16-terminal-lifestyle.org → content/blog/2022-06-16-terminal-lifestyle.md renamed +96 −91

	@@ -1,38 +1,42 @@
1	#+title: A Terminal Lifestyle	1	+++
2	#+date: 2022-06-16	2	date = 2022-06-16
3	#+description: Explaining how I live my digital life mostly in the console/terminal.	3	title = "A Terminal Lifestyle"
4	#+filetags: :linux:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Text-Based Simplicity	8	# Text-Based Simplicity
7	I've detailed my views on web-based minimalism and related topics in	9
		10	I\'ve detailed my views on web-based minimalism and related topics in
8	other posts throughout the years; e.g., JavaScript/CSS bloat slowing	11	other posts throughout the years; e.g., JavaScript/CSS bloat slowing
9	down websites that are essentially a text document. However, I have	12	down websites that are essentially a text document. However, I have
10	never really expanded beyond talking about the web and describing how I	13	never really expanded beyond talking about the web and describing how I
11	focus on minimizing distractions in other digital environments.	14	focus on minimizing distractions in other digital environments.
12		15
13	This post is going to set the baseline for how I /try/ to live my	16	This post is going to set the baseline for how I try to live my
14	digital life. It does not necessarily get into my physical life, which	17	digital life. It does not necessarily get into my physical life, which
15	is often harder to control and contain all the noise in our modern	18	is often harder to control and contain all the noise in our modern
16	world.	19	world.
17		20
18	While there are new things to do every day in our digital world, I find	21	While there are new things to do every day in our digital world, I find
19	that keeping a core set of values and interests can ground you and keep	22	that keeping a core set of values and interests can ground you and keep
20	you mindful of /why/ you are participating in the digital world. For	23	you mindful of why you are participating in the digital world. For
21	example, if - at your core - you have no interest in what strangers	24	example, if - at your core - you have no interest in what strangers
22	think about random topics, it would be unwise to start participating in	25	think about random topics, it would be unwise to start participating in
23	social media. However, I am someone who has been dragged in by effective	26	social media. However, I am someone who has been dragged in by effective
24	advertising to participate in communities that I realize I do not care	27	advertising to participate in communities that I realize I do not care
25	for.	28	for.
26		29
27	I won't dive much further into explaining the philosophy of all this,	30	I won\'t dive much further into explaining the philosophy of all this,
28	but I will link a few helpful articles that may pique your interest if	31	but I will link a few helpful articles that may pique your interest if
29	you're in search of more meaningful experiences:	32	you\'re in search of more meaningful experiences:
		33
		34	- [Mindfulness](https://en.wikipedia.org/wiki/Mindfulness)
		35	- [Minimalism](https://en.wikipedia.org/wiki/Minimalism)
		36	- [Stoicism](https://en.wikipedia.org/wiki/Stoicism)
30		37
31	- [[https://en.wikipedia.org/wiki/Mindfulness][Mindfulness]]	38	# Living Life in the Terminal
32	- [[https://en.wikipedia.org/wiki/Minimalism][Minimalism]]
33	- [[https://en.wikipedia.org/wiki/Stoicism][Stoicism]]
34		39
35	* Living Life in the Terminal
36	My personal approach to reducing digital distractions and increasing my	40	My personal approach to reducing digital distractions and increasing my
37	focus on the task at hand is to use a terminal for as much as I possibly	41	focus on the task at hand is to use a terminal for as much as I possibly
38	can.	42	can.
	@@ -40,12 +44,12 @@ can.
40	Most days, this means that I have a few tabs open constantly in my	44	Most days, this means that I have a few tabs open constantly in my
41	terminal:	45	terminal:
42		46
43	1. A web browser	47	1. A web browser
44	2. A chat client	48	2. A chat client
45	3. An email client	49	3. An email client
46	4. An RSS feed reader	50	4. An RSS feed reader
47	5. A local shell for navigating my computer's files	51	5. A local shell for navigating my computer\'s files
48	6. A remote shell for managing servers and other machines	52	6. A remote shell for managing servers and other machines
49		53
50	Beyond this, I rarely open other tabs or GUI applications, unless	54	Beyond this, I rarely open other tabs or GUI applications, unless
51	absolutely necessary. If you look, you may be surprised what can be	55	absolutely necessary. If you look, you may be surprised what can be
	@@ -54,55 +58,56 @@ accomplished in the terminal.
54	For example, I have moved my music and entertainment downloads to the	58	For example, I have moved my music and entertainment downloads to the
55	terminal, along with my device VPN connections. I am exploring options	59	terminal, along with my device VPN connections. I am exploring options
56	for moving my RSS subscriptions to something like	60	for moving my RSS subscriptions to something like
57	[[https://newsboat.org/][Newsboat]], so that I can read my daily	61	[Newsboat](https://newsboat.org/), so that I can read my daily articles
58	articles without all the fuss.	62	without all the fuss.
59		63
60	Now that we have some examples out of the way, let's dive into the	64	Now that we have some examples out of the way, let\'s dive into the
61	specifics.	65	specifics.
62		66
63	** Browsing the Web	67	## Browsing the Web
64	I'm going to start off with a hard topic for those who prefer to live in	68
65	the terminal: web browsing. This task is made hard mostly by websites	69	I\'m going to start off with a hard topic for those who prefer to live
		70	in the terminal: web browsing. This task is made hard mostly by websites
66	and web apps that require JavaScript to run. The other difficult part is	71	and web apps that require JavaScript to run. The other difficult part is
67	that if you're using a text-based browser, that means images won't load	72	that if you\'re using a text-based browser, that means images won\'t
68	(hopefully that's obvious).	73	load (hopefully that\'s obvious).
69		74
70	I am using [[https://lynx.invisible-island.net][Lynx]], a text-based	75	I am using [Lynx](https://lynx.invisible-island.net), a text-based
71	browser that runs quickly and easily in the terminal. Lynx allows me to	76	browser that runs quickly and easily in the terminal. Lynx allows me to
72	browser most websites by simply typing =g= and then typing in the URL I	77	browser most websites by simply typing `g` and then typing in
73	want.	78	the URL I want.
74		79
75	#+caption: Lynx	80	![Lynx](https://img.cleberg.net/blog/20220616-terminal-lifestyle/lynx.png)
76	[[https://img.cleberg.net/blog/20220616-terminal-lifestyle/lynx.png]]
77		81
78	If you need a search engine while in Lynx, I recommend	82	If you need a search engine while in Lynx, I recommend [DuckDuckGo
79	[[https://lite.duckduckgo.com/lite/][DuckDuckGo (Lite)]], which allows	83	(Lite)](https://lite.duckduckgo.com/lite/), which allows you to search
80	you to search the web using their text-only interface.	84	the web using their text-only interface.
81		85
82	#+caption: DuckDuckGo !Lite	86	![DuckDuckGo
83	[[https://img.cleberg.net/blog/20220616-terminal-lifestyle/ddg.png]]	87	!Lite](https://img.cleberg.net/blog/20220616-terminal-lifestyle/ddg.png)
84		88
85	Eventually, you will run into websites that don't work (or are just too	89	Eventually, you will run into websites that don\'t work (or are just too
86	ugly and messy) in a text-only mode, and you'll be forced to switch over	90	ugly and messy) in a text-only mode, and you\'ll be forced to switch
87	to a GUI browser to look at that site. Personally, I don't mind this as	91	over to a GUI browser to look at that site. Personally, I don\'t mind
88	it doesn't happen as often as I thought it would.	92	this as it doesn\'t happen as often as I thought it would.
89		93
90	The only time I need to do this is when I want to browse an	94	The only time I need to do this is when I want to browse an
91	image/video-focused webpage or if I need to log in to a site, and it	95	image/video-focused webpage or if I need to log in to a site, and it
92	doesn't support a text-only login page. For example, I am able to easily	96	doesn\'t support a text-only login page. For example, I am able to
93	log in to [[https://sr.ht][Sourcehut]] in lynx.	97	easily log in to [Sourcehut](https://sr.ht) in lynx.
		98
		99	## Chatting with Friends
94		100
95	** Chatting with Friends
96	After web browsing activities, my main form of terminal communication is	101	After web browsing activities, my main form of terminal communication is
97	Matrix. I use the [[https://docs.mau.fi/gomuks/][gomuks]] client	102	Matrix. I use the [gomuks](https://docs.mau.fi/gomuks/) client
98	currently.	103	currently.
99		104
100	This was incredibly easy to install on macOS (but I will need to see if	105	This was incredibly easy to install on macOS (but I will need to see if
101	it'll be just as easy on Linux when my new laptop arrives):	106	it\'ll be just as easy on Linux when my new laptop arrives):
102		107
103	#+begin_src sh	108	```sh
104	brew install gomuks	109	brew install gomuks
105	#+end_src	110	```
106		111
107	Once you launch gomuks, it will sync and require your username and	112	Once you launch gomuks, it will sync and require your username and
108	password to login. After doing so, the only problem I ran into was	113	password to login. After doing so, the only problem I ran into was
	@@ -110,102 +115,102 @@ verifying my gomuks client so that I could participate in rooms with
110	E2EE.	115	E2EE.
111		116
112	Finally, I was able to verify the session by opening the Element desktop	117	Finally, I was able to verify the session by opening the Element desktop
113	app (I assume you can do this in the browser and mobile app too, but I'm	118	app (I assume you can do this in the browser and mobile app too, but
114	not sure) and manually verifying myself with this process:	119	I\'m not sure) and manually verifying myself with this process:
115		120
116	1. Open the Element desktop app	121	1. Open the Element desktop app
117	2. Open a room I was a member of	122	2. Open a room I was a member of
118	3. Open the =Room Info= pane	123	3. Open the `Room Info` pane
119	4. Open the =People= menu and search for myself	124	4. Open the `People` menu and search for myself
120	5. Click on my profile name	125	5. Click on my profile name
121	6. Click on the session link under the =Security= section and follow the	126	6. Click on the session link under the `Security` section
122	prompts to manually verify the session	127	and follow the prompts to manually verify the session
123		128
124	Overall, I like gomuks and am able to enjoy all the features I was using	129	Overall, I like gomuks and am able to enjoy all the features I was using
125	in Element. The only hiccup I have occurred is manually downloading	130	in Element. The only hiccup I have occurred is manually downloading
126	images to view them, which can be annoying.	131	images to view them, which can be annoying.
127		132
128	#+caption: gomuks	133	![gomuks](https://img.cleberg.net/blog/20220616-terminal-lifestyle/gomuks.png)
129	[[https://img.cleberg.net/blog/20220616-terminal-lifestyle/gomuks.png]]	134
		135	## Email
130		136
131	** Email
132	Moving email to the terminal has been the hardest of the tasks for me.	137	Moving email to the terminal has been the hardest of the tasks for me.
133	Unlike web browsing, where I can simply decide to not look at a website	138	Unlike web browsing, where I can simply decide to not look at a website
134	that does not work in the terminal, I cannot simply ignore emails sent	139	that does not work in the terminal, I cannot simply ignore emails sent
135	to me.	140	to me.
136		141
137	Personally, I am experimenting with [[https://neomutt.org/][neomutt]] as	142	Personally, I am experimenting with [neomutt](https://neomutt.org/) as a
138	a potential email client.	143	potential email client.
139		144
140	However, this requires a TON* of configuration and tweaking to get	145	However, this requires a TON\* of configuration and tweaking to get
141	right. Even when I was able to set up neomutt, configure my email	146	right. Even when I was able to set up neomutt, configure my email
142	account, and customize a few personal preferences, a lot of emails still	147	account, and customize a few personal preferences, a lot of emails still
143	do not display correctly (mostly due to HTML and images).	148	do not display correctly (mostly due to HTML and images).
144		149
145	I won't get into the details of configuring =neomutt=; I mostly followed	150	I won\'t get into the details of configuring `neomutt`; I
146	this blog post:	151	mostly followed this blog post: [Email in the Terminal: Configuring
147	[[https://gideonwolfe.com/posts/workflow/neomutt/intro/][Email in the	152	Neomutt](https://gideonwolfe.com/posts/workflow/neomutt/intro/).
148	Terminal: Configuring Neomutt]].
149		153
150	Finally, I have yet to figure out how to connect my GPG keys to	154	Finally, I have yet to figure out how to connect my GPG keys to
151	=neomutt=, but that's a problem for another day.	155	`neomutt`, but that\'s a problem for another day.
		156
		157	## RSS Feed Reader
152		158
153	** RSS Feed Reader	159	I have just started using [Newsboat](https://newsboat.org/) to read
154	I have just started using [[https://newsboat.org/][Newsboat]] to read
155	articles in my terminal and have found quick success with it.	160	articles in my terminal and have found quick success with it.
156		161
157	I'll show you a quick screenshot first:	162	I\'ll show you a quick screenshot first:
158		163
159	#+caption: Newsboat	164	![Newsboat](https://img.cleberg.net/blog/20220616-terminal-lifestyle/newsboat.png)
160	[[https://img.cleberg.net/blog/20220616-terminal-lifestyle/newsboat.png]]
161		165
162	The configuration was super easy for this app; I simply installed the	166	The configuration was super easy for this app; I simply installed the
163	app, created a file for URLs, and imported my OPML subscriptions that I	167	app, created a file for URLs, and imported my OPML subscriptions that I
164	had exported out of my old feed reader:	168	had exported out of my old feed reader:
165		169
166	#+begin_src sh	170	```sh
167	brew install newsboat	171	brew install newsboat
168	#+end_src	172	```
169		173
170	#+begin_src sh	174	```sh
171	touch ~/.newsboat/urls	175	touch ~/.newsboat/urls
172	#+end_src	176	```
173		177
174	#+begin_src sh	178	```sh
175	newsboat -i=my_subscriptions.opml	179	newsboat -i=my_subscriptions.opml
176	#+end_src	180	```
		181
		182	## Writing & Programming
177		183
178	** Writing & Programming
179	Unfortunately, the weak link in my terminal-based environment right now	184	Unfortunately, the weak link in my terminal-based environment right now
180	is my grasp of the possibilities of editing files within a shell.	185	is my grasp of the possibilities of editing files within a shell.
181		186
182	I am used to the easy extensions found in VSCodium and Kate, so I am	187	I am used to the easy extensions found in VSCodium and Kate, so I am
183	slowly learning how to mold the default editing tools to my needs.	188	slowly learning how to mold the default editing tools to my needs.
184	Currently, this means I am using =nano= with the following	189	Currently, this means I am using `nano` with the following
185	configuration:	190	configuration:
186		191
187	#+begin_src config	192	``` config
188	set breaklonglines	193	set breaklonglines
189	set autoindent	194	set autoindent
190	set linenumbers	195	set linenumbers
191	set tabstospaces	196	set tabstospaces
192	set tabsize 2	197	set tabsize 2
193	set fill 80	198	set fill 80
194	#+end_src	199	```
195		200
196	This configuration allows nano to automatically hard-wrap lines at 80	201	This configuration allows nano to automatically hard-wrap lines at 80
197	characters, autoindent the wrapped lines (if the previous line was	202	characters, autoindent the wrapped lines (if the previous line was
198	indented), use 2 spaces per tab, and display line numbers within each	203	indented), use 2 spaces per tab, and display line numbers within each
199	file I open.	204	file I open.
200		205
201	I am currently looking to see if =vim= or =emacs= would be more useful	206	I am currently looking to see if `vim` or `emacs`
202	for my current needs, but I'm not in any rush, so I don't expect to find	207	would be more useful for my current needs, but I\'m not in any rush, so
203	an answer anytime soon.	208	I don\'t expect to find an answer anytime soon.
204		209
205	With my current life demands, I am not programming at the moment and	210	With my current life demands, I am not programming at the moment and
206	have not explored the best terminal set-up for programming. However, I	211	have not explored the best terminal set-up for programming. However, I
207	have seen many peers find success configuring =vim= and =emacs=, so	212	have seen many peers find success configuring `vim` and
208	that's where I will start when I pick my projects back up.	213	`emacs`, so that\'s where I will start when I pick my
		214	projects back up.
209		215
210	#+caption: nano	216	![nano](https://img.cleberg.net/blog/20220616-terminal-lifestyle/nano.png)
211	[[https://img.cleberg.net/blog/20220616-terminal-lifestyle/nano.png]]

content/blog/2022-06-22-daily-poetry.org → content/blog/2022-06-22-daily-poetry.md renamed +86 −73

	@@ -1,64 +1,73 @@
1	#+title: Daily Plaintext Poetry via Email	1	+++
2	#+date: 2022-06-22	2	date = 2022-06-22
3	#+description: A small project to automatically deliver poetry to your inbox daily.	3	title = "Daily Plaintext Poetry via Email"
4	#+filetags: :selfhosting:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Source Code	8	# Source Code
7	I don't want to bury the lede here, so if you'd like to see the full	9
		10	I don\'t want to bury the lede here, so if you\'d like to see the full
8	source code I use to email myself plaintext poems daily, visit the	11	source code I use to email myself plaintext poems daily, visit the
9	repository: [[https://git.cleberg.net/?p=daily-poem.git;a=summary][daily-poem.git]].	12	repository:
		13	[daily-poem.git](https://git.cleberg.net/?p=daily-poem.git;a=summary).
		14
		15	# My Daily Dose of Poetry
10		16
11	* My Daily Dose of Poetry
12	Most of my programming projects are small, random projects that are made	17	Most of my programming projects are small, random projects that are made
13	strictly to fix some small problem I have or enhance my quality of life.	18	strictly to fix some small problem I have or enhance my quality of life.
14		19
15	In this case, I was looking for a simply and easy way to get a daily	20	In this case, I was looking for a simply and easy way to get a daily
16	dose of literature or poetry to read in the mornings.	21	dose of literature or poetry to read in the mornings.
17		22
18	However, I don't want to sign up for a random mailing list on just any	23	However, I don\'t want to sign up for a random mailing list on just any
19	website. I also don't want to have to work to find the reading content	24	website. I also don\'t want to have to work to find the reading content
20	each morning, as I know I would simply give up and stop reading daily.	25	each morning, as I know I would simply give up and stop reading daily.
21		26
22	Thus, I found a way to deliver poetry to myself in plain-text format, on	27	Thus, I found a way to deliver poetry to myself in plain-text format, on
23	a daily basis, and scheduled to deliver automatically.	28	a daily basis, and scheduled to deliver automatically.
24		29
25	* Prerequisites	30	# Prerequisites
		31
26	This solution uses Python and email, so the following process requires	32	This solution uses Python and email, so the following process requires
27	the following to be installed:	33	the following to be installed:
28		34
29	1. An SMTP server, which can be as easy as installing =mailutils= if	35	1. An SMTP server, which can be as easy as installing
30	you're on a Debian-based distro.	36	`mailutils` if you\'re on a Debian-based distro.
31	2. Python (& pip!)	37	2. Python (& pip!)
32	3. The following Python packages: =email=, =smtplib=, =json=, and	38	3. The following Python packages: `email`,
33	=requests=	39	`smtplib`, `json`, and `requests`
		40
		41	# Breaking Down the Logic
34		42
35	* Breaking Down the Logic	43	I want to break down the logic for this program, as it\'s quite simple
36	I want to break down the logic for this program, as it's quite simple
37	and informational.	44	and informational.
38		45
39	** Required Packages	46	## Required Packages
		47
40	This program starts with a simple import of the required packages, so I	48	This program starts with a simple import of the required packages, so I
41	wanted to explain why each package is used:	49	wanted to explain why each package is used:
42		50
43	#+begin_src python	51	``` python
44	from email.mime.text import MIMEText # Required for translating MIMEText	52	from email.mime.text import MIMEText # Required for translating MIMEText
45	import smtplib # Required to process the SMTP mail delivery	53	import smtplib # Required to process the SMTP mail delivery
46	import json # Required to parse the poetry API results	54	import json # Required to parse the poetry API results
47	import requests # Required to send out a request to the API	55	import requests # Required to send out a request to the API
48	#+end_src	56	```
		57
		58	## Sending the API Request
49		59
50	** Sending the API Request	60	Next, we need to actually send the API request. In my case, I\'m calling
51	Next, we need to actually send the API request. In my case, I'm calling
52	a random poem from the entire API. If you want, you can call specific	61	a random poem from the entire API. If you want, you can call specific
53	poems or authors from this API.	62	poems or authors from this API.
54		63
55	#+begin_src python	64	``` python
56	json_data = requests.get('https://poetrydb.org/random').json()	65	json_data = requests.get('https://poetrydb.org/random').json()
57	#+end_src	66	```
58		67
59	This gives us the following result in JSON:	68	This gives us the following result in JSON:
60		69
61	#+begin_src json	70	``` json
62	[	71	[
63	{	72	{
64	"title": "Sonnet XXII: With Fools and Children",	73	"title": "Sonnet XXII: With Fools and Children",
	@@ -84,40 +93,40 @@ This gives us the following result in JSON:
84	"linecount": "15"	93	"linecount": "15"
85	}	94	}
86	]	95	]
87	#+end_src	96	```
88		97
89	** Parsing the API Results	98	## Parsing the API Results
90	In order to parse this into a readable format, we need to use the =json=
91	package and extract the fields we want. In the example below, I am
92	grabbing every field presented by the API.
93
94	For the actual poem content, we need to loop over each line in the
95	=lines= variable since each line is a separate string by default.
96		99
97	#+begin_quote	100	In order to parse this into a readable format, we need to use the
98	You /could/ also extract the title or author and make another call out	101	`json` package and extract the fields we want. In the example
99	to the API to avoid having to build the plaintext poem with a loop, but	102	below, I am grabbing every field presented by the API.
100	it just doesn't make sense to me to send multiple requests when we can
101	create a simple loop on our local machine to work with the data we
102	already have.
103		103
104	For	104	For the actual poem content, we need to loop over each line in the
105	[[https://poetrydb.org/title/Sonnet%20XXII:%20With%20Fools%20and%20Children/lines.text][example]],	105	`lines` variable since each line is a separate string by
106	look at the raw data response of this link to see the poem's lines	106	default.
107	returned in plaintext.	107
108		108	> You could also extract the title or author and make another call out
109	#+end_quote	109	> to the API to avoid having to build the plaintext poem with a loop,
110		110	> but it just doesn\'t make sense to me to send multiple requests when
111	#+begin_src python	111	> we can create a simple loop on our local machine to work with the data
		112	> we already have.
		113	>
		114	> For
		115	> [example](https://poetrydb.org/title/Sonnet%20XXII:%20With%20Fools%20and%20Children/lines.text),
		116	> look at the raw data response of this link to see the poem\'s lines
		117	> returned in plaintext.
		118
		119	``` python
112	title = json_data[0]['title']	120	title = json_data[0]['title']
113	author = json_data[0]['author']	121	author = json_data[0]['author']
114	line_count = json_data[0]['linecount']	122	line_count = json_data[0]['linecount']
115	lines = ''	123	lines = ''
116	for line in json_data[0]['lines']:	124	for line in json_data[0]['lines']:
117	lines = lines + line + "\n"	125	lines = lines + line + "\n"
118	#+end_src	126	```
		127
		128	## Composing the Email
119		129
120	** Composing the Email
121	Now that I have all the data I need, I just need to compose it into a	130	Now that I have all the data I need, I just need to compose it into a
122	message and prepare the message metadata.	131	message and prepare the message metadata.
123		132
	@@ -126,41 +135,43 @@ by the author, then a blank line, and finally the full poem. This code
126	snippet combines that data and packages it into a MIMEText container,	135	snippet combines that data and packages it into a MIMEText container,
127	ready to be emailed.	136	ready to be emailed.
128		137
129	#+begin_src python	138	``` python
130	msg_body = title + "\n" + author + "\n\n" + lines	139	msg_body = title + "\n" + author + "\n\n" + lines
131	msg = MIMEText(msg_body)	140	msg = MIMEText(msg_body)
132	#+end_src	141	```
133		142
134	Before we send the email, we need to prepare the metadata (subject,	143	Before we send the email, we need to prepare the metadata (subject,
135	from, to, etc.):	144	from, to, etc.):
136		145
137	#+begin_src python	146	``` python
138	sender_email = 'example@server.local'	147	sender_email = 'example@server.local'
139	recipient_emails = ['user@example.com']	148	recipient_emails = ['user@example.com']
140	msg['Subject'] = 'Your Daily Poem (' + line_count + ' lines)'	149	msg['Subject'] = 'Your Daily Poem (' + line_count + ' lines)'
141	msg['From'] = sender_email	150	msg['From'] = sender_email
142	msg['To'] = recipient_email	151	msg['To'] = recipient_email
143	#+end_src	152	```
		153
		154	## Sending the Email
144		155
145	** Sending the Email
146	Now that I have everything ready to be emailed, the last step is to	156	Now that I have everything ready to be emailed, the last step is to
147	simply connect to an SMTP server and send the email out to the	157	simply connect to an SMTP server and send the email out to the
148	recipients. In my case, I installed =mailutils= on Ubuntu and let my	158	recipients. In my case, I installed `mailutils` on Ubuntu and
149	SMTP server be =localhost=.	159	let my SMTP server be `localhost`.
150		160
151	#+begin_src python	161	``` python
152	smtp_server = 'localhost'	162	smtp_server = 'localhost'
153	s = smtplib.SMTP(smtp_server)	163	s = smtplib.SMTP(smtp_server)
154	s.sendmail(sender_email, recipient_emails, msg.as_string())	164	s.sendmail(sender_email, recipient_emails, msg.as_string())
155	s.quit()	165	s.quit()
156	#+end_src	166	```
		167
		168	# The Result!
157		169
158	* The Result!	170	Instead of including a screenshot, I\'ve copied the contents of the
159	Instead of including a screenshot, I've copied the contents of the email	171	email that was delivered to my inbox below since I set this process up
160	that was delivered to my inbox below since I set this process up in	172	in plaintext format.
161	plaintext format.
162		173
163	#+begin_src txt	174	``` txt
164	Date: Wed, 22 Jun 2022 14:37:19 +0000 (UTC)	175	Date: Wed, 22 Jun 2022 14:37:19 +0000 (UTC)
165	From: REDACTED	176	From: REDACTED
166	To: REDACTED	177	To: REDACTED
	@@ -186,23 +197,25 @@ You that behold us, laugh us not to scorn;
186	Give Nature thanks you are not such as we.	197	Give Nature thanks you are not such as we.
187	Yet fools and children sometimes tell in play	198	Yet fools and children sometimes tell in play
188	Some, wise in show, more fools indeed than they.	199	Some, wise in show, more fools indeed than they.
189	#+end_src	200	```
		201
		202	# Scheduling the Daily Email
190		203
191	* Scheduling the Daily Email	204	Last, but not least, is scheduling this Python script with
192	Last, but not least, is scheduling this Python script with =crontab=. To	205	`crontab`. To schedule a script to run daily, you can add it
193	schedule a script to run daily, you can add it to the =crontab= file. To	206	to the `crontab` file. To do this, open `crontab`
194	do this, open =crontab= in editing mode:	207	in editing mode:
195		208
196	#+begin_src sh	209	```sh
197	crontab -e	210	crontab -e
198	#+end_src	211	```
199		212
200	In the file, simply paste the following snippet at the bottom of the	213	In the file, simply paste the following snippet at the bottom of the
201	file and ensure that the file path is correctly pointing to wherever you	214	file and ensure that the file path is correctly pointing to wherever you
202	saved your Python script:	215	saved your Python script:
203		216
204	#+begin_src config	217	``` config
205	0 8 ** python3 /home/<your_user>/dailypoem/main.py	218	0 8 ** python3 /home/<your_user>/dailypoem/main.py
206	#+end_src	219	```
207		220
208	We have now set up the script and scheduled it to run daily at 08:00!	221	We have now set up the script and scheduled it to run daily at 08:00!

content/blog/2022-06-24-fedora-i3.md added +159

@@ -0,0 +1,159 @@
	1	+++
	2	date = 2022-06-24
	3	title = "Rebooting My Love Affair with Linux"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Leaving macOS
	9
	10	As I noted [in a recent post](../foss-macos-apps), I have been planning
	11	on migrating from macOS back to a Linux-based OS. I am happy to say that
	12	I have finally completed my migration and am now stuck in the wonderful
	13	world of Linux again.
	14
	15	My decision to leave macOS really came down to just a few important
	16	things:
	17
	18	- Apple Security (Gatekeeper) restricting me from running any software
	19	I want. Even if you disable Gatekeeper and allow software to bypass
	20	the rest of the device installation security, you still have to
	21	repeat that process every time the allowed software is updated.
	22	- macOS sends out nearly constant connections, pings, telemetry, etc.
	23	to a myriad of mysterious Apple services. I\'m not even going to
	24	dive into how many macOS apps have constant telemetry on, as well.
	25	- Lastly, I just really missed the customization and freedom that
	26	comes with Linux. Being able to switch to entirely new kernel, OS,
	27	or desktop within minutes is a freedom I took for granted when I
	28	switched to macOS.
	29
	30	Now that I\'ve covered macOS, I\'m going to move on to more exciting
	31	topics: my personal choice of OS, DE, and various customizations I\'m
	32	using.
	33
	34	# Fedora
	35
	36	After trying a ton of distros (I think I booted and tested around 20-25
	37	distros), I finally landed on [Fedora Linux](https://getfedora.org/). I
	38	have quite a bit of experience with Fedora and enjoy the
	39	`dnf` package manager. Fedora allows me to keep up-to-date
	40	with recent software (I\'m looking at you, Debian), but still provides a
	41	level of stability you don\'t find in every distro.
	42
	43	In a very close second place was Arch Linux, as well as its spin-off:
	44	Garuda Linux (Garuda w/ sway is beautiful). Arch is great for
	45	compatibility and the massive community it has, but I have just never
	46	had the time to properly sit down and learn the methodology behind their
	47	packaging systems.
	48
	49	Basically, everything else I tested was unacceptable in at least one way
	50	or another. Void (`glibc`) was great, but doesn\'t support
	51	all the software I need. Slackware worked well as a tui, but I wasn\'t
	52	skilled enough to get a tiling window manager (WM) working on it.
	53
	54	## i3
	55
	56	One of the reasons I settled on Fedora is that it comes with an official
	57	i3 spin. Being able to use a tiling WM, such as i3 or sway, is one of
	58	the biggest things I wanted to do as soon as I adopted Linux again.
	59
	60	I will probably set up a dotfile repository soon, so that I don\'t lose
	61	any of my configurations, but nothing big has been configured thus far.
	62
	63	The two main things I have updated in i3wm are natural scrolling and
	64	binding my brightness keys to the `brightnessctl` program.
	65
	66	1. Natural Scrolling
	67
	68	You can enable natural scrolling by opening the following file:
	69
	70	```sh
	71	sudo nano /usr/share/X11/xorg.conf.d/40-libinput.conf
	72	```
	73
	74	Within the `40-libinput.conf` file, find the following
	75	input sections and enable the natural scrolling option.
	76
	77	This is the `pointer` section:
	78
	79	``` conf
	80	Section "InputClass"
	81	Identifier "libinput pointer catchall"
	82	MatchIsPointer "on"
	83	MatchDevicePath "/dev/input/event*"
	84	Driver "libinput"
	85	Option "NaturalScrolling" "True"
	86	EndSection
	87	```
	88
	89	This is the `touchpad` section:
	90
	91	``` conf
	92	Section "InputClass"
	93	Identifier "libinput touchpad catchall"
	94	MatchIsTouchpad "on"
	95	MatchDevicePath "/dev/input/event*"
	96	Driver "libinput"
	97	Option "NaturalScrolling" "True"
	98	EndSection
	99	```
	100
	101	2. Enabling Brightness Keys
	102
	103	Likewise, enabling brightness key functionality is as simple as
	104	binding the keys to the `brightnessctl` program.
	105
	106	To do this, open up your i3 config file. Mine is located here:
	107
	108	```sh
	109	nano /home/<my-user>/.config/i3/config
	110	```
	111
	112	``` conf
	113	# Use brightnessctl to adjust brightness.
	114	bindsym XF86MonBrightnessDown exec --no-startup-id brightnessctl --min-val=2 -q set 3%-
	115	bindsym XF86MonBrightnessUp exec --no-startup-id brightnessctl -q set 3%+
	116	```
	117
	118	3. `polybar`
	119
	120	Instead of using the default `i3status` bar, I have opted
	121	to use `polybar` instead (as you can also see in the
	122	screenshot above).
	123
	124	My config for this menu bar is basically just the default settings
	125	with modified colors and an added battery block to quickly show me
	126	the machine\'s battery info.
	127
	128	4. `alacritty`
	129
	130	Not much to say on this part yet, as I haven\'t configured it much,
	131	but I installed `alacritty` as my default terminal, and I
	132	am using `zsh` and the shell.
	133
	134	# Software Choices
	135
	136	Again, I\'m not going to say much that I haven\'t said yet in other blog
	137	posts, so I\'ll just do a quick rundown of the apps I installed
	138	immediately after I set up the environment.
	139
	140	Flatpak Apps:
	141
	142	- Cryptomator
	143	- pCloud
	144	- Signal
	145
	146	Fedora Packages:
	147
	148	- gomuks
	149	- neomutt
	150	- neofetch
	151	- Firefox
	152	- uBlock Origin
	153	- Bitwarden
	154	- Stylus
	155	- Privacy Redirect
	156
	157	Other:
	158
	159	- exiftool

content/blog/2022-06-24-fedora-i3.org deleted −152

	@@ -1,152 +0,0 @@
1	#+title: Rebooting My Love Affair with Linux
2	#+date: 2022-06-24
3	#+description: A retrospective on moving from macOS to Linux.
4	#+filetags: :linux:
5
6	* Leaving macOS
7	As I noted [[../foss-macos-apps][in a recent post]], I have been
8	planning on migrating from macOS back to a Linux-based OS. I am happy to
9	say that I have finally completed my migration and am now stuck in the
10	wonderful world of Linux again.
11
12	My decision to leave macOS really came down to just a few important
13	things:
14
15	- Apple Security (Gatekeeper) restricting me from running any software I
16	want. Even if you disable Gatekeeper and allow software to bypass the
17	rest of the device installation security, you still have to repeat
18	that process every time the allowed software is updated.
19	- macOS sends out nearly constant connections, pings, telemetry, etc. to
20	a myriad of mysterious Apple services. I'm not even going to dive into
21	how many macOS apps have constant telemetry on, as well.
22	- Lastly, I just /really/ missed the customization and freedom that
23	comes with Linux. Being able to switch to entirely new kernel, OS, or
24	desktop within minutes is a freedom I took for granted when I switched
25	to macOS.
26
27	Now that I've covered macOS, I'm going to move on to more exciting
28	topics: my personal choice of OS, DE, and various customizations I'm
29	using.
30
31	* Fedora
32	After trying a ton of distros (I think I booted and tested around 20-25
33	distros), I finally landed on [[https://getfedora.org/][Fedora Linux]].
34	I have quite a bit of experience with Fedora and enjoy the =dnf= package
35	manager. Fedora allows me to keep up-to-date with recent software (I'm
36	looking at you, Debian), but still provides a level of stability you
37	don't find in every distro.
38
39	In a very close second place was Arch Linux, as well as its spin-off:
40	Garuda Linux (Garuda w/ sway is /beautiful/). Arch is great for
41	compatibility and the massive community it has, but I have just never
42	had the time to properly sit down and learn the methodology behind their
43	packaging systems.
44
45	Basically, everything else I tested was unacceptable in at least one way
46	or another. Void (=glibc=) was great, but doesn't support all the
47	software I need. Slackware worked well as a tui, but I wasn't skilled
48	enough to get a tiling window manager (WM) working on it.
49
50	** i3
51	One of the reasons I settled on Fedora is that it comes with an official
52	i3 spin. Being able to use a tiling WM, such as i3 or sway, is one of
53	the biggest things I wanted to do as soon as I adopted Linux again.
54
55	I will probably set up a dotfile repository soon, so that I don't lose
56	any of my configurations, but nothing big has been configured thus far.
57
58	The two main things I have updated in i3wm are natural scrolling and
59	binding my brightness keys to the =brightnessctl= program.
60
61	1. Natural Scrolling
62
63	You can enable natural scrolling by opening the following file:
64
65	#+begin_src sh
66	sudo nano /usr/share/X11/xorg.conf.d/40-libinput.conf
67	#+end_src
68
69	Within the =40-libinput.conf= file, find the following input sections
70	and enable the natural scrolling option.
71
72	This is the =pointer= section:
73
74	#+begin_src conf
75	Section "InputClass"
76	Identifier "libinput pointer catchall"
77	MatchIsPointer "on"
78	MatchDevicePath "/dev/input/event*"
79	Driver "libinput"
80	Option "NaturalScrolling" "True"
81	EndSection
82	#+end_src
83
84	This is the =touchpad= section:
85
86	#+begin_src conf
87	Section "InputClass"
88	Identifier "libinput touchpad catchall"
89	MatchIsTouchpad "on"
90	MatchDevicePath "/dev/input/event*"
91	Driver "libinput"
92	Option "NaturalScrolling" "True"
93	EndSection
94	#+end_src
95
96	2. Enabling Brightness Keys
97
98	Likewise, enabling brightness key functionality is as simple as
99	binding the keys to the =brightnessctl= program.
100
101	To do this, open up your i3 config file. Mine is located here:
102
103	#+begin_src sh
104	nano /home/<my-user>/.config/i3/config
105	#+end_src
106
107	#+begin_src conf
108	# Use brightnessctl to adjust brightness.
109	bindsym XF86MonBrightnessDown exec --no-startup-id brightnessctl --min-val=2 -q set 3%-
110	bindsym XF86MonBrightnessUp exec --no-startup-id brightnessctl -q set 3%+
111	#+end_src
112
113	3. =polybar=
114
115	Instead of using the default =i3status= bar, I have opted to use
116	=polybar= instead (as you can also see in the screenshot above).
117
118	My config for this menu bar is basically just the default settings
119	with modified colors and an added battery block to quickly show me
120	the machine's battery info.
121
122	4. =alacritty=
123
124	Not much to say on this part yet, as I haven't configured it much,
125	but I installed =alacritty= as my default terminal, and I am using
126	=zsh= and the shell.
127
128	* Software Choices
129	Again, I'm not going to say much that I haven't said yet in other blog
130	posts, so I'll just do a quick rundown of the apps I installed
131	immediately after I set up the environment.
132
133	Flatpak Apps:
134
135	- Cryptomator
136	- pCloud
137	- Signal
138
139	Fedora Packages:
140
141	- gomuks
142	- neomutt
143	- neofetch
144	- Firefox
145	- uBlock Origin
146	- Bitwarden
147	- Stylus
148	- Privacy Redirect
149
150	Other:
151
152	- exiftool

content/blog/2022-07-01-git-server.md added +655

@@ -0,0 +1,655 @@
	1	+++
	2	date = 2022-07-01
	3	title = "Self-Hosting a Personal Git Server"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# My Approach to Self-Hosting Git
	9
	10	I have often tried to self-host my Git repositories, but have always
	11	fallen short when I tried to find a suitable web interface to show on
	12	the front-end.
	13
	14	After a few years, I have finally found a combination of methods that
	15	allow me to easily self-host my projects, view them on the web, and
	16	access them from anywhere.
	17
	18	Before I dive into the details, I want to state a high-level summary of
	19	my self-hosted Git approach:
	20
	21	- This method uses the `ssh://` (read & write) and
	22	`git://` (read-only) protocols for push and pull access.
	23	- For the `git://` protocol, I create a
	24	`git-daemon-export-ok` file in any repository that I
	25	want to be cloneable by anyone.
	26	- The web interface I am using (`cgit`) allows simple
	27	HTTP cloning by default. I do not disable this setting as I want
	28	beginners to be able to clone one of my repositories even if
	29	they don\'t know the proper method.
	30	- I am not enabling Smart HTTPS for any repositories. Updates to
	31	repositories must be pushed via SSH.
	32	- Beyond the actual repository management, I am using
	33	`cgit` for the front-end web interface.
	34	- If you use the `scan-path=<path>` configuration in
	35	the `cgitrc` configuration file to automatically find
	36	repositories, you can\'t exclude a repository from
	37	`cgit` if it\'s stored within the path that
	38	`cgit` reads. To host private repositories, you\'d
	39	need to set up another directory that `cgit` can\'t
	40	read.
	41
	42	# Assumptions
	43
	44	For the purposes of this walkthrough, I am assuming you have a URL
	45	(`git.example.com`) or IP address
	46	(`207.84.26.991`) addressed to the server that you will be
	47	using to host your git repositories.
	48
	49	# Adding a Git User
	50
	51	In order to use the SSH method associated with git, we will need to add
	52	a user named `git`. If you have used the SSH method for other
	53	git hosting sites, you are probably used to the following syntax:
	54
	55	```sh
	56	git clone [user@]server:project.git
	57	```
	58
	59	The syntax above is an `scp`-like syntax for using SSH on the
	60	`git` user on the server to access your repository.
	61
	62	Let\'s delete any remnants of an old `git` user, if any, and
	63	create the new user account:
	64
	65	```sh
	66	sudo deluser --remove-home git
	67	sudo adduser git
	68	```
	69
	70	## Import Your SSH Keys to the Git User
	71
	72	Once the `git` user is created, you will need to copy your
	73	public SSH key on your local development machine to the `git`
	74	user on the server.
	75
	76	If you don\'t have an SSH key yet, create one with this command:
	77
	78	```sh
	79	ssh-keygen
	80	```
	81
	82	Once you create the key pair, the public should be saved to
	83	`~/.ssh/id_rsa.pub`.
	84
	85	If your server still has password-based authentication available, you
	86	can copy it over to your user\'s home directory like this:
	87
	88	```sh
	89	ssh-copy-id git@server
	90	```
	91
	92	Otherwise, copy it over to any user that you can access.
	93
	94	```sh
	95	scp ~/.ssh/id_rsa.pub your_user@your_server:
	96	```
	97
	98	Once on the server, you will need to copy the contents into the
	99	`git` user\'s `authorized_keys` file:
	100
	101	```sh
	102	cat id_rsa.pub > /home/git/.ssh/authorized_keys
	103	```
	104
	105	## (Optional) Disable Password-Based SSH
	106
	107	If you want to lock down your server and ensure that no one can
	108	authenticate in via SSH with a password, you will need to edit your SSH
	109	configuration.
	110
	111	```sh
	112	sudo nano /etc/ssh/sshd_config
	113	```
	114
	115	Within this file, find the following settings and set them to the values
	116	I am showing below:
	117
	118	``` conf
	119	PermitRootLogin no
	120	PasswordAuthentication no
	121	AuthenticationMethods publickey
	122	```
	123
	124	You may have other Authentication Methods required in your personal
	125	set-up, so the key here is just to ensure that
	126	`AuthenticationMethods` does not allow passwords.
	127
	128	### Setting up the Base Directory
	129
	130	Now that we have set up a `git` user to handle all transport
	131	methods, we need to set up the directory that we will be using as our
	132	base of all repositories.
	133
	134	In my case, I am using `/git` as my source folder. To create
	135	this folder and assign it to the user we created, execute the following
	136	commands:
	137
	138	```sh
	139	sudo mkdir /git
	140	sudo chown -R git:git /git
	141	```
	142
	143	### Creating a Test Repository
	144
	145	On your server, switch over to the `git` user in order to
	146	start managing git files.
	147
	148	```sh
	149	su git
	150	```
	151
	152	Once logged-in as the `git` user, go to your base directory
	153	and create a test repository.
	154
	155	```sh
	156	cd /git
	157	mkdir test.git && cd test.git
	158	git init --bare
	159	```
	160
	161	If you want to make this repo viewable/cloneable to the public via the
	162	`git://` protocol, you need to create a
	163	`git-daemon-export-ok` file inside the repository.
	164
	165	```sh
	166	touch git-daemon-export-ok
	167	```
	168
	169	# Change the Login Shell for `git`
	170
	171	To make sure that the `git` user is only used for git
	172	operations and nothing else, you need to change the user\'s login shell.
	173	To do this, simply use the `chsh` command:
	174
	175	```sh
	176	sudo chsh git
	177	```
	178
	179	The interactive prompt will ask which shell you want the
	180	`git` user to use. You must use the following value:
	181
	182	```sh
	183	/usr/bin/git-shell
	184	```
	185
	186	Once done, no one will be able to SSH to the `git` user or
	187	execute commands other than the standard git commands.
	188
	189	# Opening the Firewall
	190
	191	Don\'t forget to open up ports on the device firewall and network
	192	firewall if you want to access these repositories publicly. If you\'re
	193	using default ports, forward ports `22` (ssh) and
	194	`9418` (git) from your router to your server\'s IP address.
	195
	196	If your server also has a firewall, ensure that the firewall allows the
	197	same ports that are forwarded from the router. For example, if you use
	198	`ufw`:
	199
	200	```sh
	201	sudo ufw allow 22
	202	sudo ufw allow 9418
	203	```
	204
	205	## Non-Standard SSH Ports
	206
	207	If you use a non-standard port for SSH, such as `9876`, you
	208	will need to create an SSH configuration file on your local development
	209	machine in order to connect to your server\'s git repositories.
	210
	211	To do this, you\'ll need to define your custom port on your client
	212	machine in your `~/.ssh/config` file:
	213
	214	```sh
	215	nano ~/.ssh/config
	216	```
	217
	218	``` conf
	219	Host git.example.com
	220	# HostName can be a URL or an IP address
	221	HostName git.example.com
	222	Port 9876
	223	User git
	224	```
	225
	226	## Testing SSH
	227
	228	There are two main syntaxes you can use to manage git over SSH:
	229
	230	- `git clone [user@]server:project.git`
	231	- `git clone ssh://[user@]server/project.git`
	232
	233	I prefer the first, which is an `scp`-like syntax. To test
	234	it, try to clone the test repository you set up on the server:
	235
	236	```sh
	237	git clone git@git.example.com:/git/test.git
	238	```
	239
	240	# Enabling Read-Only Access
	241
	242	If you want people to be able to clone any repository where you\'ve
	243	placed a `git-daemon-export-ok` file, you will need to start
	244	the git daemon.
	245
	246	To do this on a system with `systemd`, create a service file:
	247
	248	```sh
	249	sudo nano /etc/systemd/system/git-daemon.service
	250	```
	251
	252	Inside the `git-daemon.service` file, paste the following:
	253
	254	``` conf
	255	[Unit]
	256	Description=Start Git Daemon
	257
	258	[Service]
	259	ExecStart=/usr/bin/git daemon --reuseaddr --base-path=/git/ /git/
	260
	261	Restart=always
	262	RestartSec=500ms
	263
	264	StandardOutput=syslog
	265	StandardError=syslog
	266	SyslogIdentifier=git-daemon
	267
	268	User=git
	269	Group=git
	270
	271	[Install]
	272	WantedBy=multi-user.target
	273	```
	274
	275	Once created, enable and start the service:
	276
	277	```sh
	278	sudo systemctl enable git-daemon.service
	279	sudo systemctl start git-daemon.service
	280	```
	281
	282	To clone read-only via the `git://` protocol, you can use the
	283	following syntax:
	284
	285	```sh
	286	git clone git://git.example.com/test.git
	287	```
	288
	289	# Migrating Repositories
	290
	291	At this point, we have a working git server that works with both SSH and
	292	read-only access.
	293
	294	For each of the repositories I had hosted a different provider, I
	295	executed the following commands in order to place a copy on my server as
	296	my new source of truth:
	297
	298	Server:
	299
	300	```sh
	301	su git
	302	mkdir /git/<REPOSITORY_NAME>.git && cd /git/<REPOSITORY_NAME>.git
	303	git init --bare
	304
	305	# If you want to make this repo viewable/cloneable to the public
	306	touch git-daemon-export-ok
	307	```
	308
	309	Client:
	310
	311	```sh
	312	git clone git@<PREVIOUS_HOST>:<REPOSITORY_NAME>
	313	git remote set-url origin git@git.EXAMPLE.COM:/git/<REPOSITORY_NAME>.git
	314	git push
	315	```
	316
	317	# Optional Web View: `cgit`
	318
	319	If you want a web viewer for your repositories, you can use various
	320	tools, such as `gitweb`, `cgit`, or
	321	`klaus`. I chose `cgit` due to its simple
	322	interface and fairly easy set-up (compared to others). Not to mention
	323	that the [Linux kernel uses `cgit`](https://git.kernel.org/).
	324
	325	## Docker Compose
	326
	327	Instead of using my previous method of using a `docker run`
	328	command, I\'ve updated this section to use `docker-compose`
	329	instead for an easier installation and simpler management and
	330	configuration.
	331
	332	In order to use Docker Compose, you will set up a
	333	`docker-compose.yml` file to automatically connect resources
	334	like the repositories, `cgitrc`, and various files or folders
	335	to the `cgit` container you\'re creating:
	336
	337	```sh
	338	mkdir ~/cgit && cd ~/cgit
	339	nano docker-compose.yml
	340	```
	341
	342	``` conf
	343	# docker-compose.yml
	344	version: '3'
	345
	346	services:
	347	cgit:
	348	image: invokr/cgit
	349	volumes:
	350	- /git:/git
	351	- ./cgitrc:/etc/cgitrc
	352	- ./logo.png:/var/www/htdocs/cgit/logo.png
	353	- ./favicon.png:/var/www/htdocs/cgit/favicon.png
	354	- ./filters:/var/www/htdocs/cgit/filters
	355	ports:
	356	- "8763:80"
	357	restart: always
	358	```
	359
	360	Then, just start the container:
	361
	362	```sh
	363	sudo docker-compose up -d
	364	```
	365
	366	Once it\'s finished installing, you can access the site at
	367	`<SERVER_IP>:8763` or use a reverse-proxy service to forward
	368	`cgit` to a URL, such as `git.example.com`. See
	369	the next section for more details on reverse proxying a URL to a local
	370	port.
	371
	372	## Nginx Reverse Proxy
	373
	374	I am using Nginx as my reverse proxy so that the `cgit`
	375	Docker container can use `git.example.com` as its URL. To do
	376	so, I simply created the following configuration file:
	377
	378	```sh
	379	sudo nano /etc/nginx/sites-available/git.example.com
	380	```
	381
	382	``` conf
	383	server {
	384	listen 80;
	385	server_name git.example.com;
	386
	387	if ($host = git.example.com) {
	388	return 301 https://$host$request_uri;
	389	}
	390
	391	return 404;
	392	}
	393
	394	server {
	395	server_name git.example.com;
	396	listen 443 ssl http2;
	397
	398	location / {
	399	# The final `/` is important.
	400	proxy_pass http://localhost:8763/;
	401	add_header X-Frame-Options SAMEORIGIN;
	402	add_header X-XSS-Protection "1; mode=block";
	403	proxy_redirect off;
	404	proxy_buffering off;
	405	proxy_set_header Host $host;
	406	proxy_set_header X-Real-IP $remote_addr;
	407	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	408	proxy_set_header X-Forwarded-Proto $scheme;
	409	proxy_set_header X-Forwarded-Port $server_port;
	410	}
	411
	412	# INCLUDE ANY SSL CERTS HERE
	413	include /etc/letsencrypt/options-ssl-nginx.conf;
	414	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
	415	}
	416	```
	417
	418	Once created, symlink it and restart the web server.
	419
	420	```sh
	421	sudo ln -s /etc/nginx/sites-available/git.example.com /etc/nginx/sites-enabled/
	422	sudo systemctl restart nginx.service
	423	```
	424
	425	As we can see below, my site at `git.example.com` is
	426	available and running:
	427
	428	## Settings Up Git Details
	429
	430	Once you have `cgit` running, you can add some small details,
	431	such as repository owners and descriptions by editing the following
	432	files within each repository.
	433
	434	Alternatively, you can use the `cgitrc` file to edit these
	435	details if you only care to edit them for the purpose of seeing them on
	436	your website.
	437
	438	The `description` file within the repository on your server
	439	will display the description online.
	440
	441	```sh
	442	cd /git/example.git
	443	nano description
	444	```
	445
	446	You can add a `[gitweb]` block to the `config`
	447	file in order to display the owner of the repository.
	448
	449	```sh
	450	cd /git/example.git
	451	nano config
	452	```
	453
	454	``` conf
	455	[gitweb]
	456	owner = "YourName"
	457	```
	458
	459	Note that you can ignore the configuration within each repository and
	460	simply set up this information in the `cgitrc` file, if you
	461	want to do it that way.
	462
	463	## Editing `cgit`
	464
	465	In order to edit certain items within `cgit`, you need to
	466	edit the `cgitrc` file.
	467
	468	```sh
	469	nano ~/cgit/cgitrc
	470	```
	471
	472	Below is an example configuration for `cgitrc`. You can find
	473	all the configuration options within the \[configuration manual\]
	474	(<https://git.zx2c4.com/cgit/plain/cgitrc.5.txt>).
	475
	476	``` conf
	477	css=/cgit.css
	478	logo=/logo.png
	479	favicon=/favicon.png
	480	robots=noindex, nofollow
	481
	482	enable-index-links=1
	483	enable-commit-graph=1
	484	enable-blame=1
	485	enable-log-filecount=1
	486	enable-log-linecount=1
	487	enable-git-config=1
	488
	489	clone-url=git://git.example.com/$CGIT_REPO_URL ssh://git@git.example.com:/git/$CGIT_REPO_URL
	490
	491	root-title=My Git Website
	492	root-desc=My personal git repositories.
	493
	494	# Allow download of tar.gz, tar.bz2 and zip-files
	495	snapshots=tar.gz tar.bz2 zip
	496
	497	##
	498	## List of common mimetypes
	499	##
	500	mimetype.gif=image/gif
	501	mimetype.html=text/html
	502	mimetype.jpg=image/jpeg
	503	mimetype.jpeg=image/jpeg
	504	mimetype.pdf=application/pdf
	505	mimetype.png=image/png
	506	mimetype.svg=image/svg+xml
	507
	508	# Highlight source code
	509	# source-filter=/var/www/htdocs/cgit/filters/syntax-highlighting.sh
	510	source-filter=/var/www/htdocs/cgit/filters/syntax-highlighting.py
	511
	512	# Format markdown, restructuredtext, manpages, text files, and html files
	513	# through the right converters
	514	about-filter=/var/www/htdocs/cgit/filters/about-formatting.sh
	515
	516	##
	517	## Search for these files in the root of the default branch of repositories
	518	## for coming up with the about page:
	519	##
	520	readme=:README.md
	521	readme=:readme.md
	522	readme=:README.mkd
	523	readme=:readme.mkd
	524	readme=:README.rst
	525	readme=:readme.rst
	526	readme=:README.html
	527	readme=:readme.html
	528	readme=:README.htm
	529	readme=:readme.htm
	530	readme=:README.txt
	531	readme=:readme.txt
	532	readme=:README
	533	readme=:readme
	534
	535	# Repositories
	536
	537	# Uncomment the following line to scan a path instead of adding repositories manually
	538	# scan-path=/git
	539
	540	## Test Section
	541	section=git/test-section
	542
	543	repo.url=test.git
	544	repo.path=/git/test.git
	545	repo.readme=:README.md
	546	repo.owner=John Doe
	547	repo.desc=An example repository!
	548	```
	549
	550	## Final Fixes: Syntax Highlighting & README Rendering
	551
	552	After completing my initial install and playing around with it for a few
	553	days, I noticed two issues:
	554
	555	1. Syntax highlighting did not work when viewing the source code within
	556	a file.
	557	2. The `about` tab within a repository was not rendered to
	558	HTML.
	559
	560	The following process fixes these issues. To start, let\'s go to the
	561	`cgit` directory where we were editing our configuration file
	562	earlier.
	563
	564	```sh
	565	cd ~/cgit
	566	```
	567
	568	In here, create two folders that will hold our syntax files:
	569
	570	```sh
	571	mkdir filters && mkdir filters/html-converters && cd filters
	572	```
	573
	574	Next, download the default filters:
	575
	576	```sh
	577	curl https://git.zx2c4.com/cgit/plain/filters/about-formatting.sh > about-formatting.sh
	578	chmod 755 about-formatting.sh
	579	curl https://git.zx2c4.com/cgit/plain/filters/syntax-highlighting.py > syntax-highlighting.py
	580	chmod 755 syntax-highlighting.py
	581	```
	582
	583	Finally, download the HTML conversion files you need. The example below
	584	downloads the Markdown converter:
	585
	586	```sh
	587	cd html-converters
	588	curl https://git.zx2c4.com/cgit/plain/filters/html-converters/md2html > md2html
	589	chmod 755 md2html
	590	```
	591
	592	If you need other filters or html-converters found within [the cgit
	593	project files](https://git.zx2c4.com/cgit/tree/filters), repeat the
	594	`curl` and `chmod` process above for whichever
	595	files you need.
	596
	597	However, formatting will not work quite yet since the Docker cgit
	598	container we\'re using doesn\'t have the formatting package installed.
	599	You can install this easily by install Python 3+ and the
	600	`pygments` package:
	601
	602	```sh
	603	# Enter the container's command line
	604	sudo docker exec -it cgit bash
	605	```
	606
	607	```sh
	608	# Install the necessary packages and then exit
	609	yum update -y && \
	610	yum upgrade -y && \
	611	yum install python3 python3-pip -y && \
	612	pip3 install markdown pygments && \
	613	exit
	614	```
	615
	616	**You will need to enter the cgit docker container and re-run these
	617	`yum` commands every time you kill and restart the
	618	container!**
	619
	620	If not done already, we need to add the following variables to our
	621	`cgitrc` file in order for `cgit` to know where
	622	our filtering files are:
	623
	624	``` conf
	625	# Highlight source code with python pygments-based highlighter
	626	source-filter=/var/www/htdocs/cgit/filters/syntax-highlighting.py
	627
	628	# Format markdown, restructuredtext, manpages, text files, and html files
	629	# through the right converters
	630	about-filter=/var/www/htdocs/cgit/filters/about-formatting.sh
	631	```
	632
	633	Now you should see that syntax highlighting and README rendering to the
	634	`about` tab is fixed.
	635
	636	## Theming
	637
	638	I won\'t go into much detail in this section, but you can fully theme
	639	your installation of `cgit` since you have access to the
	640	`cgit.css` file in your web root. This is another file you
	641	can add as a volume to the `docker-compose.yml` file if you
	642	want to edit this without entering the container\'s command line.
	643
	644	### :warning: Remember to Back Up Your Data!
	645
	646	The last thing to note is that running services on your own equipment
	647	means that you\'re assuming a level of risk that exists regarding data
	648	loss, catastrophes, etc. In order to reduce the impact of any such
	649	occurrence, I suggest backing up your data regularly.
	650
	651	Backups can be automated via `cron`, by hooking your base
	652	directory up to a cloud provider, or even setting up hooks to push all
	653	repository info to git mirrors on other git hosts. Whatever the method,
	654	make sure that your data doesn\'t vanish in the event that your drives
	655	or servers fail.

content/blog/2022-07-01-git-server.org deleted −617

	@@ -1,617 +0,0 @@
1	#+title: Self-Hosting a Personal Git Server
2	#+date: 2022-07-01
3	#+description: A guide to self-hosting a Git server on your own server.
4	#+filetags: :selfhosting:
5
6	* My Approach to Self-Hosting Git
7	I have often tried to self-host my Git repositories, but have always
8	fallen short when I tried to find a suitable web interface to show on
9	the front-end.
10
11	After a few years, I have finally found a combination of methods that
12	allow me to easily self-host my projects, view them on the web, and
13	access them from anywhere.
14
15	Before I dive into the details, I want to state a high-level summary of
16	my self-hosted Git approach:
17
18	- This method uses the =ssh://= (read & write) and =git://= (read-only)
19	protocols for push and pull access.
20	- For the =git://= protocol, I create a =git-daemon-export-ok= file in
21	any repository that I want to be cloneable by anyone.
22	- The web interface I am using (=cgit=) allows simple HTTP cloning by
23	default. I do not disable this setting as I want beginners to be
24	able to clone one of my repositories even if they don't know the
25	proper method.
26	- I am not enabling Smart HTTPS for any repositories. Updates to
27	repositories must be pushed via SSH.
28	- Beyond the actual repository management, I am using =cgit= for the
29	front-end web interface.
30	- If you use the =scan-path=<path>= configuration in the =cgitrc=
31	configuration file to automatically find repositories, you can't
32	exclude a repository from =cgit= if it's stored within the path that
33	=cgit= reads. To host private repositories, you'd need to set up
34	another directory that =cgit= can't read.
35
36	* Assumptions
37	For the purposes of this walkthrough, I am assuming you have a URL
38	(=git.example.com=) or IP address (=207.84.26.991=) addressed to the
39	server that you will be using to host your git repositories.
40
41	* Adding a Git User
42	In order to use the SSH method associated with git, we will need to add
43	a user named =git=. If you have used the SSH method for other git
44	hosting sites, you are probably used to the following syntax:
45
46	#+begin_src sh
47	git clone [user@]server:project.git
48	#+end_src
49
50	The syntax above is an =scp=-like syntax for using SSH on the =git= user
51	on the server to access your repository.
52
53	Let's delete any remnants of an old =git= user, if any, and create the
54	new user account:
55
56	#+begin_src sh
57	sudo deluser --remove-home git
58	sudo adduser git
59	#+end_src
60
61	** Import Your SSH Keys to the Git User
62	Once the =git= user is created, you will need to copy your public SSH
63	key on your local development machine to the =git= user on the server.
64
65	If you don't have an SSH key yet, create one with this command:
66
67	#+begin_src sh
68	ssh-keygen
69	#+end_src
70
71	Once you create the key pair, the public should be saved to
72	=~/.ssh/id_rsa.pub=.
73
74	If your server still has password-based authentication available, you
75	can copy it over to your user's home directory like this:
76
77	#+begin_src sh
78	ssh-copy-id git@server
79	#+end_src
80
81	Otherwise, copy it over to any user that you can access.
82
83	#+begin_src sh
84	scp ~/.ssh/id_rsa.pub your_user@your_server:
85	#+end_src
86
87	Once on the server, you will need to copy the contents into the =git=
88	user's =authorized_keys= file:
89
90	#+begin_src sh
91	cat id_rsa.pub > /home/git/.ssh/authorized_keys
92	#+end_src
93
94	** (Optional) Disable Password-Based SSH
95	If you want to lock down your server and ensure that no one can
96	authenticate in via SSH with a password, you will need to edit your SSH
97	configuration.
98
99	#+begin_src sh
100	sudo nano /etc/ssh/sshd_config
101	#+end_src
102
103	Within this file, find the following settings and set them to the values
104	I am showing below:
105
106	#+begin_src conf
107	PermitRootLogin no
108	PasswordAuthentication no
109	AuthenticationMethods publickey
110	#+end_src
111
112	You may have other Authentication Methods required in your personal
113	set-up, so the key here is just to ensure that =AuthenticationMethods=
114	does not allow passwords.
115
116	*** Setting up the Base Directory
117	Now that we have set up a =git= user to handle all transport methods, we
118	need to set up the directory that we will be using as our base of all
119	repositories.
120
121	In my case, I am using =/git= as my source folder. To create this folder
122	and assign it to the user we created, execute the following commands:
123
124	#+begin_src sh
125	sudo mkdir /git
126	sudo chown -R git:git /git
127	#+end_src
128
129	*** Creating a Test Repository
130	On your server, switch over to the =git= user in order to start managing
131	git files.
132
133	#+begin_src sh
134	su git
135	#+end_src
136
137	Once logged-in as the =git= user, go to your base directory and create a
138	test repository.
139
140	#+begin_src sh
141	cd /git
142	mkdir test.git && cd test.git
143	git init --bare
144	#+end_src
145
146	If you want to make this repo viewable/cloneable to the public via the
147	=git://= protocol, you need to create a =git-daemon-export-ok= file
148	inside the repository.
149
150	#+begin_src sh
151	touch git-daemon-export-ok
152	#+end_src
153
154	* Change the Login Shell for =git=
155	To make sure that the =git= user is only used for git operations and
156	nothing else, you need to change the user's login shell. To do this,
157	simply use the =chsh= command:
158
159	#+begin_src sh
160	sudo chsh git
161	#+end_src
162
163	The interactive prompt will ask which shell you want the =git= user to
164	use. You must use the following value:
165
166	#+begin_src sh
167	/usr/bin/git-shell
168	#+end_src
169
170	Once done, no one will be able to SSH to the =git= user or execute
171	commands other than the standard git commands.
172
173	* Opening the Firewall
174	Don't forget to open up ports on the device firewall and network
175	firewall if you want to access these repositories publicly. If you're
176	using default ports, forward ports =22= (ssh) and =9418= (git) from your
177	router to your server's IP address.
178
179	If your server also has a firewall, ensure that the firewall allows the
180	same ports that are forwarded from the router. For example, if you use
181	=ufw=:
182
183	#+begin_src sh
184	sudo ufw allow 22
185	sudo ufw allow 9418
186	#+end_src
187
188	** Non-Standard SSH Ports
189	If you use a non-standard port for SSH, such as =9876=, you will need to
190	create an SSH configuration file on your local development machine in
191	order to connect to your server's git repositories.
192
193	To do this, you'll need to define your custom port on your client
194	machine in your =~/.ssh/config= file:
195
196	#+begin_src sh
197	nano ~/.ssh/config
198	#+end_src
199
200	#+begin_src conf
201	Host git.example.com
202	# HostName can be a URL or an IP address
203	HostName git.example.com
204	Port 9876
205	User git
206	#+end_src
207
208	** Testing SSH
209	There are two main syntaxes you can use to manage git over SSH:
210
211	- =git clone [user@]server:project.git=
212	- =git clone ssh://[user@]server/project.git=
213
214	I prefer the first, which is an =scp=-like syntax. To test it, try to
215	clone the test repository you set up on the server:
216
217	#+begin_src sh
218	git clone git@git.example.com:/git/test.git
219	#+end_src
220
221	* Enabling Read-Only Access
222	If you want people to be able to clone any repository where you've
223	placed a =git-daemon-export-ok= file, you will need to start the git
224	daemon.
225
226	To do this on a system with =systemd=, create a service file:
227
228	#+begin_src sh
229	sudo nano /etc/systemd/system/git-daemon.service
230	#+end_src
231
232	Inside the =git-daemon.service= file, paste the following:
233
234	#+begin_src conf
235	[Unit]
236	Description=Start Git Daemon
237
238	[Service]
239	ExecStart=/usr/bin/git daemon --reuseaddr --base-path=/git/ /git/
240
241	Restart=always
242	RestartSec=500ms
243
244	StandardOutput=syslog
245	StandardError=syslog
246	SyslogIdentifier=git-daemon
247
248	User=git
249	Group=git
250
251	[Install]
252	WantedBy=multi-user.target
253	#+end_src
254
255	Once created, enable and start the service:
256
257	#+begin_src sh
258	sudo systemctl enable git-daemon.service
259	sudo systemctl start git-daemon.service
260	#+end_src
261
262	To clone read-only via the =git://= protocol, you can use the following
263	syntax:
264
265	#+begin_src sh
266	git clone git://git.example.com/test.git
267	#+end_src
268
269	* Migrating Repositories
270	At this point, we have a working git server that works with both SSH and
271	read-only access.
272
273	For each of the repositories I had hosted a different provider, I
274	executed the following commands in order to place a copy on my server as
275	my new source of truth:
276
277	Server:
278
279	#+begin_src sh
280	su git
281	mkdir /git/<REPOSITORY_NAME>.git && cd /git/<REPOSITORY_NAME>.git
282	git init --bare
283
284	# If you want to make this repo viewable/cloneable to the public
285	touch git-daemon-export-ok
286	#+end_src
287
288	Client:
289
290	#+begin_src sh
291	git clone git@<PREVIOUS_HOST>:<REPOSITORY_NAME>
292	git remote set-url origin git@git.EXAMPLE.COM:/git/<REPOSITORY_NAME>.git
293	git push
294	#+end_src
295
296	* Optional Web View: =cgit=
297	If you want a web viewer for your repositories, you can use various
298	tools, such as =gitweb=, =cgit=, or =klaus=. I chose =cgit= due to its
299	simple interface and fairly easy set-up (compared to others). Not to
300	mention that the [[https://git.kernel.org/][Linux kernel uses =cgit=]].
301
302	** Docker Compose
303	Instead of using my previous method of using a =docker run= command,
304	I've updated this section to use =docker-compose= instead for an easier
305	installation and simpler management and configuration.
306
307	In order to use Docker Compose, you will set up a =docker-compose.yml=
308	file to automatically connect resources like the repositories, =cgitrc=,
309	and various files or folders to the =cgit= container you're creating:
310
311	#+begin_src sh
312	mkdir ~/cgit && cd ~/cgit
313	nano docker-compose.yml
314	#+end_src
315
316	#+begin_src conf
317	# docker-compose.yml
318	version: '3'
319
320	services:
321	cgit:
322	image: invokr/cgit
323	volumes:
324	- /git:/git
325	- ./cgitrc:/etc/cgitrc
326	- ./logo.png:/var/www/htdocs/cgit/logo.png
327	- ./favicon.png:/var/www/htdocs/cgit/favicon.png
328	- ./filters:/var/www/htdocs/cgit/filters
329	ports:
330	- "8763:80"
331	restart: always
332	#+end_src
333
334	Then, just start the container:
335
336	#+begin_src sh
337	sudo docker-compose up -d
338	#+end_src
339
340	Once it's finished installing, you can access the site at
341	=<SERVER_IP>:8763= or use a reverse-proxy service to forward =cgit= to a
342	URL, such as =git.example.com=. See the next section for more details on
343	reverse proxying a URL to a local port.
344
345	** Nginx Reverse Proxy
346	I am using Nginx as my reverse proxy so that the =cgit= Docker container
347	can use =git.example.com= as its URL. To do so, I simply created the
348	following configuration file:
349
350	#+begin_src sh
351	sudo nano /etc/nginx/sites-available/git.example.com
352	#+end_src
353
354	#+begin_src conf
355	server {
356	listen 80;
357	server_name git.example.com;
358
359	if ($host = git.example.com) {
360	return 301 https://$host$request_uri;
361	}
362
363	return 404;
364	}
365
366	server {
367	server_name git.example.com;
368	listen 443 ssl http2;
369
370	location / {
371	# The final `/` is important.
372	proxy_pass http://localhost:8763/;
373	add_header X-Frame-Options SAMEORIGIN;
374	add_header X-XSS-Protection "1; mode=block";
375	proxy_redirect off;
376	proxy_buffering off;
377	proxy_set_header Host $host;
378	proxy_set_header X-Real-IP $remote_addr;
379	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
380	proxy_set_header X-Forwarded-Proto $scheme;
381	proxy_set_header X-Forwarded-Port $server_port;
382	}
383
384	# INCLUDE ANY SSL CERTS HERE
385	include /etc/letsencrypt/options-ssl-nginx.conf;
386	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
387	}
388	#+end_src
389
390	Once created, symlink it and restart the web server.
391
392	#+begin_src sh
393	sudo ln -s /etc/nginx/sites-available/git.example.com /etc/nginx/sites-enabled/
394	sudo systemctl restart nginx.service
395	#+end_src
396
397	As we can see below, my site at =git.example.com= is available and
398	running:
399
400	** Settings Up Git Details
401	Once you have =cgit= running, you can add some small details, such as
402	repository owners and descriptions by editing the following files within
403	each repository.
404
405	Alternatively, you can use the =cgitrc= file to edit these details if
406	you only care to edit them for the purpose of seeing them on your
407	website.
408
409	The =description= file within the repository on your server will display
410	the description online.
411
412	#+begin_src sh
413	cd /git/example.git
414	nano description
415	#+end_src
416
417	You can add a =[gitweb]= block to the =config= file in order to display
418	the owner of the repository.
419
420	#+begin_src sh
421	cd /git/example.git
422	nano config
423	#+end_src
424
425	#+begin_src conf
426	[gitweb]
427	owner = "YourName"
428	#+end_src
429
430	Note that you can ignore the configuration within each repository and
431	simply set up this information in the =cgitrc= file, if you want to do
432	it that way.
433
434	** Editing =cgit=
435	In order to edit certain items within =cgit=, you need to edit the
436	=cgitrc= file.
437
438	#+begin_src sh
439	nano ~/cgit/cgitrc
440	#+end_src
441
442	Below is an example configuration for =cgitrc=. You can find all the
443	configuration options within the [configuration manual]
444	([[https://git.zx2c4.com/cgit/plain/cgitrc.5.txt]]).
445
446	#+begin_src conf
447	css=/cgit.css
448	logo=/logo.png
449	favicon=/favicon.png
450	robots=noindex, nofollow
451
452	enable-index-links=1
453	enable-commit-graph=1
454	enable-blame=1
455	enable-log-filecount=1
456	enable-log-linecount=1
457	enable-git-config=1
458
459	clone-url=git://git.example.com/$CGIT_REPO_URL ssh://git@git.example.com:/git/$CGIT_REPO_URL
460
461	root-title=My Git Website
462	root-desc=My personal git repositories.
463
464	# Allow download of tar.gz, tar.bz2 and zip-files
465	snapshots=tar.gz tar.bz2 zip
466
467	##
468	## List of common mimetypes
469	##
470	mimetype.gif=image/gif
471	mimetype.html=text/html
472	mimetype.jpg=image/jpeg
473	mimetype.jpeg=image/jpeg
474	mimetype.pdf=application/pdf
475	mimetype.png=image/png
476	mimetype.svg=image/svg+xml
477
478	# Highlight source code
479	# source-filter=/var/www/htdocs/cgit/filters/syntax-highlighting.sh
480	source-filter=/var/www/htdocs/cgit/filters/syntax-highlighting.py
481
482	# Format markdown, restructuredtext, manpages, text files, and html files
483	# through the right converters
484	about-filter=/var/www/htdocs/cgit/filters/about-formatting.sh
485
486	##
487	## Search for these files in the root of the default branch of repositories
488	## for coming up with the about page:
489	##
490	readme=:README.md
491	readme=:readme.md
492	readme=:README.mkd
493	readme=:readme.mkd
494	readme=:README.rst
495	readme=:readme.rst
496	readme=:README.html
497	readme=:readme.html
498	readme=:README.htm
499	readme=:readme.htm
500	readme=:README.txt
501	readme=:readme.txt
502	readme=:README
503	readme=:readme
504
505	# Repositories
506
507	# Uncomment the following line to scan a path instead of adding repositories manually
508	# scan-path=/git
509
510	## Test Section
511	section=git/test-section
512
513	repo.url=test.git
514	repo.path=/git/test.git
515	repo.readme=:README.md
516	repo.owner=John Doe
517	repo.desc=An example repository!
518	#+end_src
519
520	** Final Fixes: Syntax Highlighting & README Rendering
521	After completing my initial install and playing around with it for a few
522	days, I noticed two issues:
523
524	1. Syntax highlighting did not work when viewing the source code within
525	a file.
526	2. The =about= tab within a repository was not rendered to HTML.
527
528	The following process fixes these issues. To start, let's go to the
529	=cgit= directory where we were editing our configuration file earlier.
530
531	#+begin_src sh
532	cd ~/cgit
533	#+end_src
534
535	In here, create two folders that will hold our syntax files:
536
537	#+begin_src sh
538	mkdir filters && mkdir filters/html-converters && cd filters
539	#+end_src
540
541	Next, download the default filters:
542
543	#+begin_src sh
544	curl https://git.zx2c4.com/cgit/plain/filters/about-formatting.sh > about-formatting.sh
545	chmod 755 about-formatting.sh
546	curl https://git.zx2c4.com/cgit/plain/filters/syntax-highlighting.py > syntax-highlighting.py
547	chmod 755 syntax-highlighting.py
548	#+end_src
549
550	Finally, download the HTML conversion files you need. The example below
551	downloads the Markdown converter:
552
553	#+begin_src sh
554	cd html-converters
555	curl https://git.zx2c4.com/cgit/plain/filters/html-converters/md2html > md2html
556	chmod 755 md2html
557	#+end_src
558
559	If you need other filters or html-converters found within
560	[[https://git.zx2c4.com/cgit/tree/filters][the cgit project files]],
561	repeat the =curl= and =chmod= process above for whichever files you
562	need.
563
564	However, formatting will not work quite yet since the Docker cgit
565	container we're using doesn't have the formatting package installed. You
566	can install this easily by install Python 3+ and the =pygments= package:
567
568	#+begin_src sh
569	# Enter the container's command line
570	sudo docker exec -it cgit bash
571	#+end_src
572
573	#+begin_src sh
574	# Install the necessary packages and then exit
575	yum update -y && \
576	yum upgrade -y && \
577	yum install python3 python3-pip -y && \
578	pip3 install markdown pygments && \
579	exit
580	#+end_src
581
582	*You will need to enter the cgit docker container and re-run these =yum=
583	commands every time you kill and restart the container!*
584
585	If not done already, we need to add the following variables to our
586	=cgitrc= file in order for =cgit= to know where our filtering files are:
587
588	#+begin_src conf
589	# Highlight source code with python pygments-based highlighter
590	source-filter=/var/www/htdocs/cgit/filters/syntax-highlighting.py
591
592	# Format markdown, restructuredtext, manpages, text files, and html files
593	# through the right converters
594	about-filter=/var/www/htdocs/cgit/filters/about-formatting.sh
595	#+end_src
596
597	Now you should see that syntax highlighting and README rendering to the
598	=about= tab is fixed.
599
600	** Theming
601	I won't go into much detail in this section, but you can fully theme
602	your installation of =cgit= since you have access to the =cgit.css= file
603	in your web root. This is another file you can add as a volume to the
604	=docker-compose.yml= file if you want to edit this without entering the
605	container's command line.
606
607	*** :warning: Remember to Back Up Your Data!
608	The last thing to note is that running services on your own equipment
609	means that you're assuming a level of risk that exists regarding data
610	loss, catastrophes, etc. In order to reduce the impact of any such
611	occurrence, I suggest backing up your data regularly.
612
613	Backups can be automated via =cron=, by hooking your base directory up
614	to a cloud provider, or even setting up hooks to push all repository
615	info to git mirrors on other git hosts. Whatever the method, make sure
616	that your data doesn't vanish in the event that your drives or servers
617	fail.

content/blog/2022-07-14-gnupg.org → content/blog/2022-07-14-gnupg.md renamed +124 −107

	@@ -1,27 +1,31 @@
1	#+title: GNU Privacy Guard (GPG)	1	+++
2	#+date: 2022-07-14	2	date = 2022-07-14
3	#+description: Learn how to create a PGP key with GNU Privacy Guard (GPG).	3	title = "GNU Privacy Guard (GPG)"
4	#+filetags: :privacy:	4	description = ""
5		5	draft = false
6	* The History of GPG	6	+++
7	[[https://gnupg.org/][GNU Privacy Guard]], also known as GnuPG and GPG,	7
8	is a free ("free" as in both speech and beer) software that fully	8	# The History of GPG
9	implements the OpenPGP Message Format documented in	9
10	[[https://www.rfc-editor.org/rfc/rfc4880][RFC 4880]].	10	[GNU Privacy Guard](https://gnupg.org/), also known as GnuPG and GPG, is
11		11	a free (\"free\" as in both speech and beer) software that fully
12	I won't go in-depth on the full history of the software in this post,	12	implements the OpenPGP Message Format documented in [RFC
		13	4880](https://www.rfc-editor.org/rfc/rfc4880).
		14
		15	I won\'t go in-depth on the full history of the software in this post,
13	but it is important to understand that GPG is not the same as PGP	16	but it is important to understand that GPG is not the same as PGP
14	(Pretty Good Privacy), which is a different implementation of RFC 4880.	17	(Pretty Good Privacy), which is a different implementation of RFC 4880.
15	However, GPG was designed to interoperate with PGP.	18	However, GPG was designed to interoperate with PGP.
16		19
17	GPG was originally developed in the late 1990s by	20	GPG was originally developed in the late 1990s by [Werner
18	[[https://en.wikipedia.org/wiki/Werner_Koch][Werner Koch]] and has	21	Koch](https://en.wikipedia.org/wiki/Werner_Koch) and has historically
19	historically been funded generously by the German government.	22	been funded generously by the German government.
20		23
21	Now that we have all the high-level info out of the way, let's dive into	24	Now that we have all the high-level info out of the way, let\'s dive
22	the different aspects of GPG and its uses.	25	into the different aspects of GPG and its uses.
		26
		27	# Encryption Algorithms
23		28
24	* Encryption Algorithms
25	GPG supports a wide range of different encryption algorithms, including	29	GPG supports a wide range of different encryption algorithms, including
26	public-key, cipher, hash, and compression algorithms. The support for	30	public-key, cipher, hash, and compression algorithms. The support for
27	these algorithms has grown since the adoption of the Libgcrypt library	31	these algorithms has grown since the adoption of the Libgcrypt library
	@@ -31,7 +35,7 @@ As you will be able to see below in an example of a full key generation
31	with the GPG command line tool, GPG recommends the following algorithms	35	with the GPG command line tool, GPG recommends the following algorithms
32	to new users:	36	to new users:
33		37
34	#+begin_src sh	38	```sh
35	Please select what kind of key you want:	39	Please select what kind of key you want:
36	(1) RSA and RSA	40	(1) RSA and RSA
37	(2) DSA and Elgamal	41	(2) DSA and Elgamal
	@@ -39,66 +43,72 @@ Please select what kind of key you want:
39	(4) RSA (sign only)	43	(4) RSA (sign only)
40	(9) ECC (sign and encrypt) default	44	(9) ECC (sign and encrypt) default
41	(10) ECC (sign only)	45	(10) ECC (sign only)
42	#+end_src	46	```
43		47
44	I am not doing an in-depth explanation here in order to keep the focus	48	I am not doing an in-depth explanation here in order to keep the focus
45	on GPG and not encryption algorithms. If you want a deep dive into	49	on GPG and not encryption algorithms. If you want a deep dive into
46	cryptography or encryption algorithms, please read my other posts:	50	cryptography or encryption algorithms, please read my other posts:
47		51
48	- [[../aes-encryption/][AES Encryption]] (2018)	52	- [AES Encryption](../aes-encryption/) (2018)
49	- [[../cryptography-basics/][Cryptography Basics]] (2020)	53	- [Cryptography Basics](../cryptography-basics/) (2020)
		54
		55	## Vulnerabilities
50		56
51	** Vulnerabilities
52	As of 2022-07-14, there are a few different vulnerabilities associated	57	As of 2022-07-14, there are a few different vulnerabilities associated
53	with GPG or the libraries it uses:	58	with GPG or the libraries it uses:
54		59
55	- GPG versions 1.0.2--1.2.3 contains a bug where "as soon as one	60	- GPG versions 1.0.2--1.2.3 contains a bug where \"as soon as one
56	(GPG-generated) ElGamal signature of an arbitrary message is released,	61	(GPG-generated) ElGamal signature of an arbitrary message is
57	one can recover the signer's private key in less than a second on a	62	released, one can recover the signer\'s private key in less than a
58	PC." ([[https://www.di.ens.fr/~pnguyen/pub_Ng04.htm][Source]])	63	second on a PC.\"
59	- GPG versions prior to 1.4.2.1 contain a false positive signature	64	([Source](https://www.di.ens.fr/~pnguyen/pub_Ng04.htm))
60	verification bug.	65	- GPG versions prior to 1.4.2.1 contain a false positive signature
61	([[https://lists.gnupg.%20org/pipermail/gnupg-announce/2006q1/000211.html][Source]])	66	verification bug.
62	- GPG versions prior to 1.4.2.2 cannot detect injection of unsigned	67	([Source](https://lists.gnupg.%20org/pipermail/gnupg-announce/2006q1/000211.html))
63	data. (	68	- GPG versions prior to 1.4.2.2 cannot detect injection of unsigned
64	[[https://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000218.html][Source]])	69	data. (
65	- Libgcrypt, a library used by GPG, contained a bug which enabled full	70	[Source](https://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000218.html))
66	key recovery for RSA-1024 and some RSA-2048 keys. This was resolved in	71	- Libgcrypt, a library used by GPG, contained a bug which enabled full
67	a GPG update in 2017. ([[https://lwn.net/Articles/727179/][Source]])	72	key recovery for RSA-1024 and some RSA-2048 keys. This was resolved
68	- The [[https://en.wikipedia.org/wiki/ROCA_vulnerability][ROCA	73	in a GPG update in 2017.
69	Vulnerability]] affects RSA keys generated by YubiKey 4 tokens.	74	([Source](https://lwn.net/Articles/727179/))
70	([[https://crocs.fi.%20muni.cz/_media/public/papers/nemec_roca_ccs17_preprint.pdf][Source]])	75	- The [ROCA
71	- The [[https://en.wikipedia.org/wiki/SigSpoof][SigSpoof Attack]] allows	76	Vulnerability](https://en.wikipedia.org/wiki/ROCA_vulnerability)
72	an attacker to spoof digital signatures.	77	affects RSA keys generated by YubiKey 4 tokens.
73	([[https://arstechnica.%20com/information-technology/2018/06/decades-old-pgp-bug-allowed-hackers-to-spoof-just-about-anyones-signature/][Source]])	78	([Source](https://crocs.fi.%20muni.cz/_media/public/papers/nemec_roca_ccs17_preprint.pdf))
74	- Libgcrypt 1.9.0 contains a severe flaw related to a heap buffer	79	- The [SigSpoof Attack](https://en.wikipedia.org/wiki/SigSpoof) allows
75	overflow, fixed in Libgcrypt 1.9.1	80	an attacker to spoof digital signatures.
76	([[https://web.archive.%20org/web/20210221012505/https://www.theregister.com/2021/01/29/severe_libgcrypt_bug/][Source]])	81	([Source](https://arstechnica.%20com/information-technology/2018/06/decades-old-pgp-bug-allowed-hackers-to-spoof-just-about-anyones-signature/))
77		82	- Libgcrypt 1.9.0 contains a severe flaw related to a heap buffer
78	*** Platforms	83	overflow, fixed in Libgcrypt 1.9.1
79	Originally developed as a command-line program for *nix systems, GPG now	84	([Source](https://web.archive.%20org/web/20210221012505/https://www.theregister.com/2021/01/29/severe_libgcrypt_bug/))
80	has a wealth of front-end applications and libraries available for	85
		86	### Platforms
		87
		88	Originally developed as a command-line program for \*nix systems, GPG
		89	now has a wealth of front-end applications and libraries available for
81	end-users. However, the most recommended programs remain the same:	90	end-users. However, the most recommended programs remain the same:
82		91
83	- [[https://gnupg.org][GnuPG]] for Linux (depending on distro)	92	- [GnuPG](https://gnupg.org) for Linux (depending on distro)
84	- [[https://gpg4win.org][Gpg4win]] for Windows	93	- [Gpg4win](https://gpg4win.org) for Windows
85	- [[https://gpgtools.org][GPGTools]] for macOS	94	- [GPGTools](https://gpgtools.org) for macOS
		95
		96	# Creating a Key Pair
86		97
87	* Creating a Key Pair
88	In order to create a GPG key pair, a user would first need to install	98	In order to create a GPG key pair, a user would first need to install
89	GPG on their system. If we're assuming that the user is on Fedora Linux,	99	GPG on their system. If we\'re assuming that the user is on Fedora
90	they would execute the following:	100	Linux, they would execute the following:
91		101
92	#+begin_src sh	102	```sh
93	sudo dnf install gpg	103	sudo dnf install gpg
94	#+end_src	104	```
95		105
96	Once installed, a user can create a new key pair with the following	106	Once installed, a user can create a new key pair with the following
97	command(s):	107	command(s):
98		108
99	#+begin_src sh	109	```sh
100	gpg --full-generate-key	110	gpg --full-generate-key
101	#+end_src	111	```
102		112
103	GPG will walk the user through an interactive setup that asks for an	113	GPG will walk the user through an interactive setup that asks for an
104	algorithm preference, expiration date, name, and email to associate with	114	algorithm preference, expiration date, name, and email to associate with
	@@ -107,7 +117,7 @@ this key.
107	See the following example key set-up for a default key generation using	117	See the following example key set-up for a default key generation using
108	the GnuPG command-line interface:	118	the GnuPG command-line interface:
109		119
110	#+begin_src sh	120	```sh
111	gpg (GnuPG) 2.3.6; Copyright (C) 2021 Free Software Foundation, Inc.	121	gpg (GnuPG) 2.3.6; Copyright (C) 2021 Free Software Foundation, Inc.
112	This is free software: you are free to change and redistribute it.	122	This is free software: you are free to change and redistribute it.
113	There is NO WARRANTY, to the extent permitted by law.	123	There is NO WARRANTY, to the extent permitted by law.
	@@ -159,28 +169,30 @@ pub ed25519 2022-07-14 [SC]
159	E955B7700FFC11EF51C2BA1FE096AACDD4C32E9C	169	E955B7700FFC11EF51C2BA1FE096AACDD4C32E9C
160	uid John Doe (test key) <johndoe@example.com>	170	uid John Doe (test key) <johndoe@example.com>
161	sub cv25519 2022-07-14 [E]	171	sub cv25519 2022-07-14 [E]
162	#+end_src	172	```
163		173
164	Please note that GUI apps may differ slightly from the GPG command-line	174	Please note that GUI apps may differ slightly from the GPG command-line
165	interface.	175	interface.
166		176
167	* Common Usage	177	# Common Usage
		178
168	As noted in RFC 4880, the general functions of OpenPGP are as follows:	179	As noted in RFC 4880, the general functions of OpenPGP are as follows:
169		180
170	- digital signatures	181	- digital signatures
171	- encryption	182	- encryption
172	- compression	183	- compression
173	- Radix-64 conversion	184	- Radix-64 conversion
174	- key management and certificate services	185	- key management and certificate services
175		186
176	From this, you can probably gather that the main use of GPG is for	187	From this, you can probably gather that the main use of GPG is for
177	encrypting data and/or signing the data with a key. The purpose of	188	encrypting data and/or signing the data with a key. The purpose of
178	encrypting data with GPG is to ensure that no one except the intended	189	encrypting data with GPG is to ensure that no one except the intended
179	recipient(s) can access the data.	190	recipient(s) can access the data.
180		191
181	Let's explore some specific GPG use-cases.	192	Let\'s explore some specific GPG use-cases.
		193
		194	## Email
182		195
183	** Email
184	One of the more popular uses of GPG is to sign and/or encrypt emails.	196	One of the more popular uses of GPG is to sign and/or encrypt emails.
185	With the use of a GPG keypair, you can encrypt a message, its subject,	197	With the use of a GPG keypair, you can encrypt a message, its subject,
186	and even the attachments within.	198	and even the attachments within.
	@@ -188,16 +200,16 @@ and even the attachments within.
188	The first process, regarding the signing of a message without any	200	The first process, regarding the signing of a message without any
189	encryption, is generally used to provide assurance that an email is	201	encryption, is generally used to provide assurance that an email is
190	truly coming from the sender that the message claims. When I send an	202	truly coming from the sender that the message claims. When I send an
191	email, and it's signed with my public key, the recipient(s) of the	203	email, and it\'s signed with my public key, the recipient(s) of the
192	message can verify that the message was signed with my personal key.	204	message can verify that the message was signed with my personal key.
193		205
194	The second process, regarding the actual encryption of the message and	206	The second process, regarding the actual encryption of the message and
195	its contents, works by using a combination of the sender's keys and the	207	its contents, works by using a combination of the sender\'s keys and the
196	recipient's keys. This process may vary slightly by implementation, but	208	recipient\'s keys. This process may vary slightly by implementation, but
197	it most commonly uses asymmetric cryptography, also known as public-key	209	it most commonly uses asymmetric cryptography, also known as public-key
198	cryptography. In this version of encryption, the sender's private key to	210	cryptography. In this version of encryption, the sender\'s private key
199	sign the message and a combination of the sender's keys and the	211	to sign the message and a combination of the sender\'s keys and the
200	recipient's public key to encrypt the message.	212	recipient\'s public key to encrypt the message.
201		213
202	If two people each have their own private keys and exchange their public	214	If two people each have their own private keys and exchange their public
203	keys, they can send encrypted messages back and forth with GPG. This is	215	keys, they can send encrypted messages back and forth with GPG. This is
	@@ -205,60 +217,64 @@ also possible with symmetric cryptography, but the process differs since
205	there are no key pairs.	217	there are no key pairs.
206		218
207	Implementation of email encryption varies greatly between email clients,	219	Implementation of email encryption varies greatly between email clients,
208	so you will need to reference your email client's documentation to	220	so you will need to reference your email client\'s documentation to
209	ensure you are setting it up correctly for that specific client.	221	ensure you are setting it up correctly for that specific client.
210		222
211	** File Encryption	223	## File Encryption
		224
212	As noted in the section above regarding emails, GPG enables users to be	225	As noted in the section above regarding emails, GPG enables users to be
213	able to send a message to each other if they are both set-up with GPG	226	able to send a message to each other if they are both set-up with GPG
214	keys. In this example, I am going to show how a user could send a file	227	keys. In this example, I am going to show how a user could send a file
215	called =example_file.txt= to another user via the recipient's email.	228	called `example_file.txt` to another user via the
		229	recipient\'s email.
216		230
217	The sender would find the file they want to send and execute the	231	The sender would find the file they want to send and execute the
218	following command:	232	following command:
219		233
220	#+begin_src sh	234	```sh
221	gpg --encrypt --output example_file.txt.gpg --recipient \	235	gpg --encrypt --output example_file.txt.gpg --recipient \
222	recipient@example.com example_file.txt	236	recipient@example.com example_file.txt
223	#+end_src	237	```
224		238
225	Once received, the recipient can decrypt the file with the following	239	Once received, the recipient can decrypt the file with the following
226	command:	240	command:
227		241
228	#+begin_src sh	242	```sh
229	gpg --decrypt --output example_file.txt example_file.txt.gpg	243	gpg --decrypt --output example_file.txt example_file.txt.gpg
230	#+end_src	244	```
		245
		246	## Ownership Signatures
231		247
232	** Ownership Signatures
233	One important aspect of GPG, especially for developers, is the ability	248	One important aspect of GPG, especially for developers, is the ability
234	to sign data without encrypting it. For example, developers often sign	249	to sign data without encrypting it. For example, developers often sign
235	code changes when they commit the changes back to a central repository,	250	code changes when they commit the changes back to a central repository,
236	in order to display ownership of who made the changes. This allows other	251	in order to display ownership of who made the changes. This allows other
237	users to look at a code change and determine that the change was valid.	252	users to look at a code change and determine that the change was valid.
238		253
239	In order to do this using [[https://git-scm.com][Git]], the developer	254	In order to do this using [Git](https://git-scm.com), the developer
240	simply needs to alter the =git commit= command to include the =-S= flag.	255	simply needs to alter the `git commit` command to include the
241	Here's an example:	256	`-S` flag. Here\'s an example:
242		257
243	#+begin_src sh	258	```sh
244	git commit -S -m "my commit message"	259	git commit -S -m "my commit message"
245	#+end_src	260	```
246		261
247	As an expansion of the example above, Git users can configure their	262	As an expansion of the example above, Git users can configure their
248	environment with a default key to use by adding their GPG signature:	263	environment with a default key to use by adding their GPG signature:
249		264
250	#+begin_src sh	265	```sh
251	git config --global user.signingkey XXXXXXXXXXXXXXXX	266	git config --global user.signingkey XXXXXXXXXXXXXXXX
252	#+end_src	267	```
253		268
254	If you're not sure what your signature is, you can find it titled =sig=	269	If you\'re not sure what your signature is, you can find it titled
255	in the output of this command:	270	`sig` in the output of this command:
256		271
257	#+begin_src sh	272	```sh
258	gpg --list-signatures	273	gpg --list-signatures
259	#+end_src	274	```
		275
		276	## File Integrity
260		277
261	** File Integrity
262	When a person generates a signature for data, they are allowing users	278	When a person generates a signature for data, they are allowing users
263	the ability to verify the signature on that data in the future to ensure	279	the ability to verify the signature on that data in the future to ensure
264	the data has not been corrupted. This is most common with software	280	the data has not been corrupted. This is most common with software
	@@ -268,30 +284,31 @@ replaced with dangerous software.
268		284
269	In order to verify signed data, a user needs to have:	285	In order to verify signed data, a user needs to have:
270		286
271	1. The signed data	287	1. The signed data
272	2. A signature file	288	2. A signature file
273	3. The public GPG key of the signer	289	3. The public GPG key of the signer
274		290
275	Once the signer's public key is imported on the user's system, and they	291	Once the signer\'s public key is imported on the user\'s system, and
276	have the data and signature, they can verify the data with the following	292	they have the data and signature, they can verify the data with the
277	commands:	293	following commands:
278		294
279	#+begin_src sh	295	```sh
280	# If the signature is attached to the data	296	# If the signature is attached to the data
281	gpg --verify [signature-file]	297	gpg --verify [signature-file]
282		298
283	# If the signature is detached as a separate file from the data	299	# If the signature is detached as a separate file from the data
284	gpg --verify [signature-file] [original-file]	300	gpg --verify [signature-file] [original-file]
285	#+end_src	301	```
		302
		303	### Finding Public Keys
286		304
287	*** Finding Public Keys
288	In order to use GPG with others, a user needs to know the other user(s)	305	In order to use GPG with others, a user needs to know the other user(s)
289	keys. This is easy to do if the user knows the other user(s) in person,	306	keys. This is easy to do if the user knows the other user(s) in person,
290	but may be hard if the relationship is strictly digital. Luckily, there	307	but may be hard if the relationship is strictly digital. Luckily, there
291	are a few options. The first option is to look at a user's web page or	308	are a few options. The first option is to look at a user\'s web page or
292	social pages if they have them.	309	social pages if they have them.
293		310
294	Otherwise, the best option is to use a keyserver, such as:	311	Otherwise, the best option is to use a keyserver, such as:
295		312
296	- [[https://pgp.mit.edu][pgp.mit.edu]]	313	- [pgp.mit.edu](https://pgp.mit.edu)
297	- [[https://keys.openpgp.org][keys.openpgp.org]]	314	- [keys.openpgp.org](https://keys.openpgp.org)

content/blog/2022-07-25-curseradio.md added +107

@@ -0,0 +1,107 @@
	1	+++
	2	date = 2022-07-25
	3	title = "CurseRadio: Listening to the Radio on the Command Line"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Overview
	9
	10	While exploring some interesting Linux applications, I stumbled across
	11	[curseradio](https://github.com/chronitis/curseradio), a command-line
	12	radio player based on Python.
	13
	14	This application is fantastic and incredibly easy to install, so I
	15	wanted to dedicate a post today to this app. Let\'s look at the features
	16	within the app and then walk through the installation process I took to
	17	get `curseradio` working.
	18
	19	# Features
	20
	21	![curseradio](https://img.cleberg.net/blog/20220725-curseradio/curseradio.png)
	22
	23	The radio player itself is quite minimal. As you can see in the
	24	screenshot above, it contains a simple plaintext list of all available
	25	categories, which can be broken down further and further. In addition,
	26	radio shows are available for listening, alongside regular radio
	27	stations.
	28
	29	For example, the `Sports` \> `Pro Basketball` \>
	30	`Shows` category contains a number of specific shows related
	31	to Professional Basketball.
	32
	33	Aside from being able to play any of the listed stations/shows, you can
	34	make a channel your favorite by pressing `f`. It will now
	35	show up at the top of the radio player in the `Favourites`
	36	category.
	37
	38	## Commands/Shortcuts
	39
	40	Key(s) Command
	41	------------ ---------------------------------
	42	↑, ↓ navigate
	43	PgUp, PgDn navigate quickly
	44	Home, End to top/bottom
	45	Enter open/close folders, play stream
	46	k stop playing stream
	47	q quit
	48	f toggle favourite
	49
	50	# Installation
	51
	52	## Dependencies
	53
	54	Before installing `curseradio`, a handful of system and
	55	Python packages are required. To get started, install
	56	`python3`, `pip3`, and `mpv` on your
	57	system. In this example, I\'m using Fedora Linux, which uses the
	58	`dnf` package manager. You may need to adjust this if you\'re
	59	using a different system.
	60
	61	```sh
	62	sudo dnf install python3 pip3 mpv
	63	```
	64
	65	Next, use `pip3` to install `requests`,
	66	`xdg`, and `lxml`:
	67
	68	```sh
	69	pip3 install requests xdg lxml
	70	```
	71
	72	## Repository Source Installation
	73
	74	Once all the dependencies are installed, we can clone the source code
	75	and enter that directory:
	76
	77	```sh
	78	git clone https://github.com/chronitis/curseradio && cd curseradio
	79	```
	80
	81	Once you\'re within the `curseradio` directory, you can
	82	install the application with the provided `setup.py` script.
	83
	84	```sh
	85	sudo python3 setup.py install
	86	```
	87
	88	In my case, I ran into a few errors and needed to create the folders
	89	that curseradio wanted to use for its installation. If you don\'t get
	90	any errors, you can skip this and run the app.
	91
	92	```sh
	93	sudo mkdir /usr/local/lib/python3.10/
	94	sudo mkdir /usr/local/lib/python3.10/site-packages/
	95	```
	96
	97	```sh
	98	sudo chown -R $USER:$USER /usr/local/lib/python3.10/
	99	```
	100
	101	# Run the Application
	102
	103	Once fully installed without errors, you can run the application!
	104
	105	```sh
	106	python3 /usr/local/bin/curseradio
	107	```

content/blog/2022-07-25-curseradio.org deleted −95

	@@ -1,95 +0,0 @@
1	#+title: CurseRadio: Listening to the Radio on the Command Line
2	#+date: 2022-07-25
3	#+description: Use Curse Radio to listen to radio on the command line.
4	#+filetags: :linux:
5
6	* Overview
7	While exploring some interesting Linux applications, I stumbled across
8	[[https://github.com/chronitis/curseradio][curseradio]], a command-line
9	radio player based on Python.
10
11	This application is fantastic and incredibly easy to install, so I
12	wanted to dedicate a post today to this app. Let's look at the features
13	within the app and then walk through the installation process I took to
14	get =curseradio= working.
15
16	* Features
17	#+caption: curseradio
18	[[https://img.cleberg.net/blog/20220725-curseradio/curseradio.png]]
19
20	The radio player itself is quite minimal. As you can see in the
21	screenshot above, it contains a simple plaintext list of all available
22	categories, which can be broken down further and further. In addition,
23	radio shows are available for listening, alongside regular radio
24	stations.
25
26	For example, the =Sports= > =Pro Basketball= > =Shows= category contains
27	a number of specific shows related to Professional Basketball.
28
29	Aside from being able to play any of the listed stations/shows, you can
30	make a channel your favorite by pressing =f=. It will now show up at the
31	top of the radio player in the =Favourites= category.
32
33	** Commands/Shortcuts
34	\| Key(s) \| Command \|
35	\|------------+---------------------------------\|
36	\| ↑, ↓ \| navigate \|
37	\| PgUp, PgDn \| navigate quickly \|
38	\| Home, End \| to top/bottom \|
39	\| Enter \| open/close folders, play stream \|
40	\| k \| stop playing stream \|
41	\| q \| quit \|
42	\| f \| toggle favourite \|
43
44	* Installation
45	** Dependencies
46	Before installing =curseradio=, a handful of system and Python packages
47	are required. To get started, install =python3=, =pip3=, and =mpv= on
48	your system. In this example, I'm using Fedora Linux, which uses the
49	=dnf= package manager. You may need to adjust this if you're using a
50	different system.
51
52	#+begin_src sh
53	sudo dnf install python3 pip3 mpv
54	#+end_src
55
56	Next, use =pip3= to install =requests=, =xdg=, and =lxml=:
57
58	#+begin_src sh
59	pip3 install requests xdg lxml
60	#+end_src
61
62	** Repository Source Installation
63	Once all the dependencies are installed, we can clone the source code
64	and enter that directory:
65
66	#+begin_src sh
67	git clone https://github.com/chronitis/curseradio && cd curseradio
68	#+end_src
69
70	Once you're within the =curseradio= directory, you can install the
71	application with the provided =setup.py= script.
72
73	#+begin_src sh
74	sudo python3 setup.py install
75	#+end_src
76
77	In my case, I ran into a few errors and needed to create the folders
78	that curseradio wanted to use for its installation. If you don't get any
79	errors, you can skip this and run the app.
80
81	#+begin_src sh
82	sudo mkdir /usr/local/lib/python3.10/
83	sudo mkdir /usr/local/lib/python3.10/site-packages/
84	#+end_src
85
86	#+begin_src sh
87	sudo chown -R $USER:$USER /usr/local/lib/python3.10/
88	#+end_src
89
90	* Run the Application
91	Once fully installed without errors, you can run the application!
92
93	#+begin_src sh
94	python3 /usr/local/bin/curseradio
95	#+end_src

content/blog/2022-07-30-flac-to-opus.org → content/blog/2022-07-30-flac-to-opus.md renamed +67 −58

	@@ -1,65 +1,71 @@
1	#+title: Recursive Command-Line FLAC to Opus Conversion	1	+++
2	#+date: 2022-07-30	2	date = 2022-07-30
3	#+description: Learn how to convert all FLAC files to Opus, including recursive files in subdirectories.	3	title = "Recursive Command-Line FLAC to Opus Conversion"
4	#+filetags: :linux:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Converting FLAC to OPUS
5		9
6	* Converting FLAC to OPUS
7	I am currently rebuilding my music library from scratch so that I can	10	I am currently rebuilding my music library from scratch so that I can
8	effectively archive all the music I own in the	11	effectively archive all the music I own in the [FLAC file
9	[[https://en.wikipedia.org/wiki/FLAC][FLAC file format]], a lossless	12	format](https://en.wikipedia.org/wiki/FLAC), a lossless audio codec.
10	audio codec.
11		13
12	However, streaming FLAC files outside the home can be difficult due to	14	However, streaming FLAC files outside the home can be difficult due to
13	the size of the files, especially if you're using a weak connection.	15	the size of the files, especially if you\'re using a weak connection.
14		16
15	So, in order to archive the music in a lossless format and still be able	17	So, in order to archive the music in a lossless format and still be able
16	to stream it easily, I opted to create a copy of my FLAC files in the	18	to stream it easily, I opted to create a copy of my FLAC files in the
17	[[https://en.wikipedia.org/wiki/Opus_(audio_format)][Opus audio codec]].	19	[Opus audio codec](https://en.wikipedia.org/wiki/Opus_(audio_format)).
18	This allows me to archive a quality, lossless version of the music and	20	This allows me to archive a quality, lossless version of the music and
19	then point my streaming service to the smaller, stream-ready version.	21	then point my streaming service to the smaller, stream-ready version.
20		22
21	** Dependencies	23	## Dependencies
22	The process I follow utilizes the =opus-tools= package in Ubuntu. Before	24
23	proceeding, install the package:	25	The process I follow utilizes the `opus-tools` package in
		26	Ubuntu. Before proceeding, install the package:
24		27
25	#+begin_src sh	28	```sh
26	sudo apt install opus-tools	29	sudo apt install opus-tools
27	#+end_src	30	```
		31
		32	If you want to use a different conversion method, such as
		33	`ffmpeg` or `avconv`, simply install that package
		34	instead.
28		35
29	If you want to use a different conversion method, such as =ffmpeg= or	36	## Conversion Process
30	=avconv=, simply install that package instead.
31		37
32	** Conversion Process	38	The script I\'m using is stored in my home directory, but feel free to
33	The script I'm using is stored in my home directory, but feel free to
34	create it wherever you want. It does not need to be in the same	39	create it wherever you want. It does not need to be in the same
35	directory as your music files.	40	directory as your music files.
36		41
37	#+begin_src sh	42	```sh
38	cd ~ && nano transform.sh	43	cd ~ && nano transform.sh
39	#+end_src	44	```
40		45
41	Once you have your new bash script opened in an editor, go ahead and	46	Once you have your new bash script opened in an editor, go ahead and
42	paste the following logic into the script.	47	paste the following logic into the script.
43		48
44	You MUST edit the following variables in order for it to work:	49	You MUST edit the following variables in order for it to work:
45		50
46	- =source=: The source directory where your FLAC files are stored.	51	- `source`: The source directory where your FLAC files are
47	- =dest=: The destination directory where you want the resulting Opus	52	stored.
48	files to be stored.	53	- `dest`: The destination directory where you want the
		54	resulting Opus files to be stored.
49		55
50	You MAY want to edit the following variables to suit your needs:	56	You MAY want to edit the following variables to suit your needs:
51		57
52	- =filename=: If you are converting to a file format other than Opus,	58	- `filename`: If you are converting to a file format other
53	you'll need to edit this so that your resulting files have the correct	59	than Opus, you\'ll need to edit this so that your resulting files
54	filename extension.	60	have the correct filename extension.
55	- =reldir=: This variable can be edited to strip out more leading	61	- `reldir`: This variable can be edited to strip out more
56	directories in the file path. As you'll see later, I ignore this for	62	leading directories in the file path. As you\'ll see later, I ignore
57	now and simply clean it up afterward.	63	this for now and simply clean it up afterward.
58	- =opusenc=: This is the actual conversion process. You may want to edit	64	- `opusenc`: This is the actual conversion process. You may
59	the bitrate to suit your needs. I set mine at 128 but some prefer 160	65	want to edit the bitrate to suit your needs. I set mine at 128 but
60	or higher.	66	some prefer 160 or higher.
61		67
62	#+begin_src sh	68	```sh
63	#!/bin/bash	69	#!/bin/bash
64	## - The IFS takes care of spaces in file and dirnames	70	## - The IFS takes care of spaces in file and dirnames
65	## - your folders may vary	71	## - your folders may vary
	@@ -121,49 +127,52 @@ opusenc --vbr --bitrate 128 --date "$DATE" \
121	## just for testing	127	## just for testing
122	# sleep 1	128	# sleep 1
123	done	129	done
124	#+end_src	130	```
125		131
126	Once you're done, simply save the file and exit your editor. Don't	132	Once you\'re done, simply save the file and exit your editor. Don\'t
127	forget to enable execution of the script:	133	forget to enable execution of the script:
128		134
129	#+begin_src sh	135	```sh
130	chmod +x transform.sh	136	chmod +x transform.sh
131	#+end_src	137	```
132		138
133	Finally, you may now run the script:	139	Finally, you may now run the script:
134		140
135	#+begin_src sh	141	```sh
136	./transform.sh	142	./transform.sh
137	#+end_src	143	```
138		144
139	If you used =opusenc=, you'll see the conversions happen within the	145	If you used `opusenc`, you\'ll see the conversions happen
140	terminal as it progresses. You will also see variables printed if you	146	within the terminal as it progresses. You will also see variables
141	uncommented any of the bash script's comments.	147	printed if you uncommented any of the bash script\'s comments.
142		148
143	** Cleanup	149	## Cleanup
144	As I noted above, I didn't customize my =reldir= variable in the script,	150
145	which caused my output directory to be =/mnt/music/library/archives=	151	As I noted above, I didn\'t customize my `reldir` variable in
146	instead of =/mnt/music/library=. So, I moved the output up one level and	152	the script, which caused my output directory to be
		153	`/mnt/music/library/archives` instead of
		154	`/mnt/music/library`. So, I moved the output up one level and
147	deleted the accidental directory.	155	deleted the accidental directory.
148		156
149	#+begin_src sh	157	```sh
150	cd /mnt/music/library	158	cd /mnt/music/library
151	mv archives/** .	159	mv archives/** .
152	rm -rf archives	160	rm -rf archives
153	#+end_src	161	```
		162
		163	## Check the Resulting Size
154		164
155	** Check the Resulting Size	165	If you want to see what kind of file size savings you\'ve gained, you
156	If you want to see what kind of file size savings you've gained, you can	166	can always use the `du` command to check:
157	always use the =du= command to check:
158		167
159	#+begin_src sh	168	```sh
160	cd /mnt/music	169	cd /mnt/music
161	du -h --max-depth=1 .	170	du -h --max-depth=1 .
162	#+end_src	171	```
163		172
164	In my case, my small library went from 78GB to 6.3GB!	173	In my case, my small library went from 78GB to 6.3GB!
165		174
166	#+begin_src txt	175	``` txt
167	78G ./archives	176	78G ./archives
168	6.3G ./library	177	6.3G ./library
169	#+end_src	178	```

content/blog/2022-07-31-bash-it.org → content/blog/2022-07-31-bash-it.md renamed +112 −102

	@@ -1,113 +1,118 @@
1	#+title: Upgrade Bash with Bash-It & Ble.sh	1	+++
2	#+date: 2022-07-31	2	date = 2022-07-31
3	#+description: Learn how to increase the power of bash with Bash-It and Ble.sh.	3	title = "Upgrade Bash with Bash-It and Ble.sh"
4	#+filetags: :sysadmin:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Bash
5		9
6	* Bash
7	For those who are not familiar,	10	For those who are not familiar,
8	[[https://en.wikipedia.org/wiki/Bash_(Unix_shell)][Bash]] is a Unix	11	[Bash](https://en.wikipedia.org/wiki/Bash_(Unix_shell)) is a Unix shell
9	shell that is used as the default login shell for most Linux	12	that is used as the default login shell for most Linux distributions.
10	distributions. This shell and command processor should be familiar if	13	This shell and command processor should be familiar if you\'ve used
11	you've used Linux (or older version of macOS) before.	14	Linux (or older version of macOS) before.
12		15
13	However, bash is not the only option. There are numerous other shells	16	However, bash is not the only option. There are numerous other shells
14	that exist. Here are some popular examples:	17	that exist. Here are some popular examples:
15		18
16	- [[https://en.wikipedia.org/wiki/Z_shell][zsh]]	19	- [zsh](https://en.wikipedia.org/wiki/Z_shell)
17	- [[https://en.wikipedia.org/wiki/Fish_(Unix_shell)][fish]]	20	- [fish](https://en.wikipedia.org/wiki/Fish_(Unix_shell))
18	- [[https://github.com/ibara/oksh][oksh]]	21	- [oksh](https://github.com/ibara/oksh)
19	- [[https://wiki.gentoo.org/wiki/Mksh][mksh]]	22	- [mksh](https://wiki.gentoo.org/wiki/Mksh)
20	- [[https://en.wikipedia.org/wiki/Debian_Almquist_shell][dash]]	23	- [dash](https://en.wikipedia.org/wiki/Debian_Almquist_shell)
21		24
22	While each shell has its differences, bash is POSIX compliant and the	25	While each shell has its differences, bash is POSIX compliant and the
23	default for many Linux users. Because of this, I am going to explore a	26	default for many Linux users. Because of this, I am going to explore a
24	program called =bash-it= below that helps bash users increase the	27	program called `bash-it` below that helps bash users increase
25	utility of their shell without installing a completely new shell.	28	the utility of their shell without installing a completely new shell.
		29
		30	## Installation
26		31
27	** Installation
28	First, if bash is not already installed on your system, you can	32	First, if bash is not already installed on your system, you can
29	[[https://www.gnu.org/software/bash/][download bash from GNU]] or use	33	[download bash from GNU](https://www.gnu.org/software/bash/) or use your
30	your package manager to install it.	34	package manager to install it.
31		35
32	For example, this is how you can install bash on Fedora Linux:	36	For example, this is how you can install bash on Fedora Linux:
33		37
34	#+begin_src sh	38	```sh
35	sudo dnf install bash	39	sudo dnf install bash
36	#+end_src	40	```
37		41
38	If you are not using bash as your default shell, use the =chsh= command	42	If you are not using bash as your default shell, use the
39	to change your shell:	43	`chsh` command to change your shell:
40		44
41	#+begin_src sh	45	```sh
42	chsh	46	chsh
43	#+end_src	47	```
44		48
45	You should see a prompt like the one below. If the brackets (=[]=)	49	You should see a prompt like the one below. If the brackets
46	contain =bash= already, you're done, and you can simply continue by	50	(`[]`) contain `bash` already, you\'re done, and
47	hitting the Enter key.	51	you can simply continue by hitting the Enter key.
48		52
49	If the brackets contain another shell path (e.g. =/usr/bin/zsh=), enter	53	If the brackets contain another shell path (e.g.
50	the path to the bash program on your system (it's most likely located at	54	`/usr/bin/zsh`), enter the path to the bash program on your
51	=/usr/bin/bash=).	55	system (it\'s most likely located at `/usr/bin/bash`).
52		56
53	#+begin_src sh	57	```sh
54	Changing shell for <user>.	58	Changing shell for <user>.
55	New shell [/usr/bin/bash]:	59	New shell [/usr/bin/bash]:
56	#+end_src	60	```
57		61
58	You must log out or restart the machine in order for the login shell to	62	You must log out or restart the machine in order for the login shell to
59	be refreshed. You can do it now or wait until you're finished	63	be refreshed. You can do it now or wait until you\'re finished
60	customizing the shell.	64	customizing the shell.
61		65
62	#+begin_src sh	66	```sh
63	sudo reboot now	67	sudo reboot now
64	#+end_src	68	```
65		69
66	* Bash-it	70	# Bash-it
67	As noted on the [[https://github.com/Bash-it/bash-it][Bash-it]]
68	repository:
69		71
70	#+begin_quote	72	As noted on the [Bash-it](https://github.com/Bash-it/bash-it)
71	Bash-it is a collection of community Bash commands and scripts for Bash	73	repository:
72	3.2+. (And a shameless ripoff of oh-my-zsh 😃)
73		74
74	#+end_quote	75	> Bash-it is a collection of community Bash commands and scripts for
		76	> Bash 3.2+. (And a shameless ripoff of oh-my-zsh 😃)
75		77
76	Bash-it makes it easy to install plugins, set up aliases for common	78	Bash-it makes it easy to install plugins, set up aliases for common
77	commands, and easily change the visual theme of your shell.	79	commands, and easily change the visual theme of your shell.
78		80
79	** Installation	81	## Installation
		82
80	To install the framework, simply copy the repository files and use the	83	To install the framework, simply copy the repository files and use the
81	=install.sh= script provided. If you want, you can (and should!) inspect	84	`install.sh` script provided. If you want, you can (and
82	the contents of the installation script before you run it.	85	should!) inspect the contents of the installation script before you run
		86	it.
83		87
84	#+begin_src sh	88	```sh
85	git clone --depth=1 https://github.com/Bash-it/bash-it.git ~/.bash_it	89	git clone --depth=1 https://github.com/Bash-it/bash-it.git ~/.bash_it
86	~/.bash_it/install.sh	90	~/.bash_it/install.sh
87	#+end_src	91	```
88		92
89	If you didn't restart your session after making bash the default, and	93	If you didn\'t restart your session after making bash the default, and
90	are currently working within another shell, be sure to enter a bash	94	are currently working within another shell, be sure to enter a bash
91	session before using =bash-it=:	95	session before using `bash-it`:
92		96
93	#+begin_src sh	97	```sh
94	bash	98	bash
95	#+end_src	99	```
		100
		101	## Aliases
96		102
97	** Aliases
98	Bash-it contains a number of aliases for common commands to help improve	103	Bash-it contains a number of aliases for common commands to help improve
99	efficiency in the terminal. To list all available options, use the	104	efficiency in the terminal. To list all available options, use the
100	following command:	105	following command:
101		106
102	#+begin_src sh	107	```sh
103	bash-it show aliases	108	bash-it show aliases
104	#+end_src	109	```
105		110
106	This will provide you a list that looks like the following text block.	111	This will provide you a list that looks like the following text block.
107	Within this screen, you will be able to see all available options and	112	Within this screen, you will be able to see all available options and
108	which ones are currently enabled.	113	which ones are currently enabled.
109		114
110	#+begin_src txt	115	``` txt
111	Alias Enabled? Description	116	Alias Enabled? Description
112	ag [ ] the silver searcher (ag) aliases	117	ag [ ] the silver searcher (ag) aliases
113	ansible [ ] ansible abbreviations	118	ansible [ ] ansible abbreviations
	@@ -120,32 +125,33 @@ clipboard [ ] xclip shortcuts
120	composer [ ] common composer abbreviations	125	composer [ ] common composer abbreviations
121	curl [x] Curl aliases for convenience.	126	curl [x] Curl aliases for convenience.
122	...	127	...
123	#+end_src	128	```
124		129
125	To enable an alias, do:	130	To enable an alias, do:
126		131
127	#+begin_src sh	132	```sh
128	bash-it enable alias <alias name> [alias name]... -or- $ bash-it enable alias all	133	bash-it enable alias <alias name> [alias name]... -or- $ bash-it enable alias all
129	#+end_src	134	```
130		135
131	To disable an alias, do:	136	To disable an alias, do:
132		137
133	#+begin_src sh	138	```sh
134	bash-it disable alias <alias name> [alias name]... -or- $ bash-it disable alias all	139	bash-it disable alias <alias name> [alias name]... -or- $ bash-it disable alias all
135	#+end_src	140	```
		141
		142	## Plugins
136		143
137	** Plugins
138	Similar to aliases, plugins are available with bash-it. You can find a	144	Similar to aliases, plugins are available with bash-it. You can find a
139	complete list of plugins in the same way as aliases. Simply execute the	145	complete list of plugins in the same way as aliases. Simply execute the
140	following:	146	following:
141		147
142	#+begin_src sh	148	```sh
143	bash-it show plugins	149	bash-it show plugins
144	#+end_src	150	```
145		151
146	You will see the following output showing enabled and disabled plugins:	152	You will see the following output showing enabled and disabled plugins:
147		153
148	#+begin_src txt	154	``` txt
149	Plugin Enabled? Description	155	Plugin Enabled? Description
150	alias-completion [ ]	156	alias-completion [ ]
151	autojump [ ] Autojump configuration, see https://github.com/wting/autojump for more details	157	autojump [ ] Autojump configuration, see https://github.com/wting/autojump for more details
	@@ -156,78 +162,82 @@ battery [x] display info about your battery charge level
156	blesh [ ] load ble.sh, the Bash line editor!	162	blesh [ ] load ble.sh, the Bash line editor!
157	boot2docker [ ] Helpers to get Docker setup correctly for boot2docker	163	boot2docker [ ] Helpers to get Docker setup correctly for boot2docker
158	browser [ ] render commandline output in your browser	164	browser [ ] render commandline output in your browser
159	#+end_src	165	```
160		166
161	To enable a plugin, do:	167	To enable a plugin, do:
162		168
163	#+begin_src sh	169	```sh
164	bash-it enable plugin <plugin name> [plugin name]... -or- $ bash-it enable plugin all	170	bash-it enable plugin <plugin name> [plugin name]... -or- $ bash-it enable plugin all
165	#+end_src	171	```
166		172
167	To disable a plugin, do:	173	To disable a plugin, do:
168		174
169	#+begin_src sh	175	```sh
170	bash-it disable plugin <plugin name> [plugin name]... -or- $ bash-it disable plugin all	176	bash-it disable plugin <plugin name> [plugin name]... -or- $ bash-it disable plugin all
171	#+end_src	177	```
		178
		179	## Themes
172		180
173	** Themes
174	There are quite a few pre-defined	181	There are quite a few pre-defined
175	[[https://bash-it.readthedocs.io/en/latest/themes-list/#list-of-themes][themes]]	182	[themes](https://bash-it.readthedocs.io/en/latest/themes-list/#list-of-themes)
176	available with bash-it.	183	available with bash-it.
177		184
178	To list all themes:	185	To list all themes:
179		186
180	#+begin_src sh	187	```sh
181	ls ~/.bash_it/themes/	188	ls ~/.bash_it/themes/
182	#+end_src	189	```
183		190
184	To use a new theme, you'll need to edit =.bashrc= and alter the	191	To use a new theme, you\'ll need to edit `.bashrc` and alter
185	=BASH_IT_THEME= variable to your desired theme. For example, I am using	192	the `BASH_IT_THEME` variable to your desired theme. For
186	the =zork= theme.	193	example, I am using the `zork` theme.
187		194
188	#+begin_src sh	195	```sh
189	nano ~/.bashrc	196	nano ~/.bashrc
190	#+end_src	197	```
191		198
192	#+begin_src sh	199	```sh
193	export BASH_IT_THEME='zork'	200	export BASH_IT_THEME='zork'
194	#+end_src	201	```
195		202
196	Once you save your changes, you just need to exit your terminal and	203	Once you save your changes, you just need to exit your terminal and
197	create a new one in order to see your changes to the =.bashrc= file. You	204	create a new one in order to see your changes to the
198	can also =source= the file to see changes, but I recommend starting a	205	`.bashrc` file. You can also `source` the file to
199	completely new shell instead.	206	see changes, but I recommend starting a completely new shell instead.
200		207
201	*** ble.sh	208	### ble.sh
202	One big feature I was missing in Bash that both =zsh= and =fish= have is	209
203	an autosuggestion feature. To explain: as you type, an autosuggestion	210	One big feature I was missing in Bash that both `zsh` and
204	feature in the shell will offer suggestions in a lighter font color	211	`fish` have is an autosuggestion feature. To explain: as you
205	beyond the characters already typed. Once you see the command you want,	212	type, an autosuggestion feature in the shell will offer suggestions in a
206	you can click the right arrow and have the shell auto-complete that line	213	lighter font color beyond the characters already typed. Once you see the
207	for you.	214	command you want, you can click the right arrow and have the shell
208		215	auto-complete that line for you.
209	Luckily, the [[https://github.com/akinomyoga/ble.sh][Bash Line Editor]]	216
		217	Luckily, the [Bash Line Editor](https://github.com/akinomyoga/ble.sh)
210	(ble.sh) exists! This program provides a wonderful autosuggestions	218	(ble.sh) exists! This program provides a wonderful autosuggestions
211	feature perfectly, among other features that I haven't tested yet.	219	feature perfectly, among other features that I haven\'t tested yet.
212		220
213	In order to install ble.sh, execute the following:	221	In order to install ble.sh, execute the following:
214		222
215	#+begin_src sh	223	```sh
216	git clone --recursive https://github.com/akinomyoga/ble.sh.git	224	git clone --recursive https://github.com/akinomyoga/ble.sh.git
217	make -C ble.sh install PREFIX=~/.local	225	make -C ble.sh install PREFIX=~/.local
218	echo 'source ~/.local/share/blesh/ble.sh' >> ~/.bashrc	226	echo 'source ~/.local/share/blesh/ble.sh' >> ~/.bashrc
219	#+end_src	227	```
220		228
221	Again, exit the terminal and open a new one in order to see the	229	Again, exit the terminal and open a new one in order to see the
222	newly-configured shell.	230	newly-configured shell.
223		231
224	* Restart the Session	232	# Restart the Session
225	Finally, as mentioned above, you'll need to restart the session to	233
		234	Finally, as mentioned above, you\'ll need to restart the session to
226	ensure that your user is using bash by default.	235	ensure that your user is using bash by default.
227		236
228	You will also need to exit and re-open a shell (e.g., terminal or	237	You will also need to exit and re-open a shell (e.g., terminal or
229	terminal tab) any time you make changes to the =.bashrc= file.	238	terminal tab) any time you make changes to the `.bashrc`
		239	file.
230		240
231	#+begin_src sh	241	```sh
232	sudo reboot now	242	sudo reboot now
233	#+end_src	243	```

content/blog/2022-08-31-privacy-com-changes.org → content/blog/2022-08-31-privacy-com-changes.md renamed +41 −36

	@@ -1,25 +1,29 @@
1	#+title: Concerning Changes on Privacy.com	1	+++
2	#+date: 2022-08-31	2	date = 2022-08-31
3	#+description: My thoughts on Privacy.com changing from a prepaid model to a credit charge model.	3	title = "Concerning Changes on Privacy.com"
4	#+filetags: :privacy:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Privacy.com Changes Their Terms
5		9
6	* Privacy.com Changes Their Terms
7	Recently, Privacy.com reached out to their customers regarding a change	10	Recently, Privacy.com reached out to their customers regarding a change
8	in their terms of use. Further, all customers are required to agree to	11	in their terms of use. Further, all customers are required to agree to
9	the changes in order to continue using their accounts.	12	the changes in order to continue using their accounts.
10		13
11	[[https://privacy.com/commercial-cardholder-agreement][You can view the	14	[You can view the new cardholder agreement
12	new cardholder agreement here]].	15	here](https://privacy.com/commercial-cardholder-agreement).
13		16
14	When you log in, you'll be greeted with a pop-up window asking you to	17	When you log in, you\'ll be greeted with a pop-up window asking you to
15	review and agree to the new terms of use. You will also not be able to	18	review and agree to the new terms of use. You will also not be able to
16	open any new cards until the terms are agreed to.	19	open any new cards until the terms are agreed to.
17		20
18	** Changing from a "Prepaid Debit" Model to a "Charge Card" Model	21	## Changing from a \"Prepaid Debit\" Model to a \"Charge Card\" Model
		22
19	The actual content of the changes is interesting. While the historical	23	The actual content of the changes is interesting. While the historical
20	model of using Privacy.com was akin to prepaid debit cards, the new	24	model of using Privacy.com was akin to prepaid debit cards, the new
21	model is very similar to a credit card (they use the term "charge	25	model is very similar to a credit card (they use the term \"charge
22	card").	26	card\").
23		27
24	I have used Privacy.com for 1-2 years, and the process was always that	28	I have used Privacy.com for 1-2 years, and the process was always that
25	you would create a single-use or merchant-locked card. This card could	29	you would create a single-use or merchant-locked card. This card could
	@@ -31,17 +35,18 @@ The benefit this service provides with a premium account is masking the
31	merchant names from your funding source. If you have a concern that your	35	merchant names from your funding source. If you have a concern that your
32	bank account uses merchant data from your account, you could direct all	36	bank account uses merchant data from your account, you could direct all
33	charges through Privacy.com and set the merchant as one of their pre-set	37	charges through Privacy.com and set the merchant as one of their pre-set
34	options, such as "Smiley's Corner Store" or "NSA Gift Shop."	38	options, such as \"Smiley\'s Corner Store\" or \"NSA Gift Shop.\"
35		39
36	The new model still works with a bank account as a funding source, but	40	The new model still works with a bank account as a funding source, but
37	the model is changed so that you get a "line of credit" set according to	41	the model is changed so that you get a \"line of credit\" set according
38	a 14-day billing cycle. It seems that Privacy.com will now allow charges	42	to a 14-day billing cycle. It seems that Privacy.com will now allow
39	to be incurred without being immediately paid.	43	charges to be incurred without being immediately paid.
40		44
41	** Daily Payments and Available Credit	45	## Daily Payments and Available Credit
42	Instead of paying as charges are incurred, you must make a "Daily	46
43	Payment" and your "Available Credit" will be locked until you make that	47	Instead of paying as charges are incurred, you must make a \"Daily
44	payment. There are also "End of Billing Cycle Payments" that are	48	Payment\" and your \"Available Credit\" will be locked until you make
		49	that payment. There are also \"End of Billing Cycle Payments\" that are
45	assigned a due date.	50	assigned a due date.
46		51
47	Further, Privacy.com will decline charges that would cause you to exceed	52	Further, Privacy.com will decline charges that would cause you to exceed
	@@ -49,20 +54,18 @@ your Available Credit or Credit Limit.
49		54
50	One particular interesting section states the following:	55	One particular interesting section states the following:
51		56
52	#+begin_quote	57	> YOUR OBLIGATION TO PAY US BACK FOR ALL CARD TRANSACTIONS AND OTHER
53	YOUR OBLIGATION TO PAY US BACK FOR ALL CARD TRANSACTIONS AND OTHER	58	> OBLIGATIONS YOU INCUR IS SECURED BY THE SECURED ACCOUNT. IF YOU DO NOT
54	OBLIGATIONS YOU INCUR IS SECURED BY THE SECURED ACCOUNT. IF YOU DO NOT	59	> PAY US BACK FOR ANY AMOUNT YOU OWE US WHEN YOUR PAYMENTS ARE DUE, WE
55	PAY US BACK FOR ANY AMOUNT YOU OWE US WHEN YOUR PAYMENTS ARE DUE, WE	60	> WILL EXERCISE OUR INTEREST AND DEBIT THE SECURED ACCOUNT, AND YOU WILL
56	WILL EXERCISE OUR INTEREST AND DEBIT THE SECURED ACCOUNT, AND YOU WILL	61	> LOSE THE MONEY IN THE SECURED ACCOUNT. SEE SECTION 8: SECURITY
57	LOSE THE MONEY IN THE SECURED ACCOUNT. SEE SECTION 8: SECURITY AGREEMENT	62	> AGREEMENT FOR MORE INFORMATION.
58	FOR MORE INFORMATION.
59		63
60	#+end_quote	64	## Personal Information
61		65
62	** Personal Information
63	Now that Privacy.com is more of a financial institution, they are	66	Now that Privacy.com is more of a financial institution, they are
64	obligated to comply with the	67	obligated to comply with the [know your
65	[[https://en.wikipedia.org/wiki/Know_your_customer][know your customer]]	68	customer](https://en.wikipedia.org/wiki/Know_your_customer)
66	guidelines/laws.	69	guidelines/laws.
67		70
68	I did not proceed with the change to my Privacy.com account, but I have	71	I did not proceed with the change to my Privacy.com account, but I have
	@@ -71,11 +74,13 @@ to be submitted, such as SSN. I am not aware of all new personal
71	information required or if the funding source is now required to only be	74	information required or if the funding source is now required to only be
72	a bank account.	75	a bank account.
73		76
74	** Fees	77	## Fees
		78
75	Luckily, the fees section did not change much. The subscription fees for	79	Luckily, the fees section did not change much. The subscription fees for
76	a premium account are still the only fees.	80	a premium account are still the only fees.
77		81
78	* My Thoughts	82	# My Thoughts
		83
79	Personally, I wiped my personal information from my account and then	84	Personally, I wiped my personal information from my account and then
80	permanently deleted it when I heard about these changes. I have no	85	permanently deleted it when I heard about these changes. I have no
81	interest in yet another method of credit lending offered by private	86	interest in yet another method of credit lending offered by private
	@@ -85,10 +90,10 @@ payments, I have no interest in incurring charges that will need to be
85	paid back at a later date. I also have no interest in submitting	90	paid back at a later date. I also have no interest in submitting
86	personal information to Privacy.com.	91	personal information to Privacy.com.
87		92
88	This type of change toward a "buy it now, pay us later" model is	93	This type of change toward a \"buy it now, pay us later\" model is
89	concerning, and I will be watching Privacy.com to see if they further	94	concerning, and I will be watching Privacy.com to see if they further
90	their interests in the credit model as time goes on.	95	their interests in the credit model as time goes on.
91		96
92	Could we see them start charging interest, fees, etc.? I'm not sure, but	97	Could we see them start charging interest, fees, etc.? I\'m not sure,
93	this change does not inspire confidence in their mission as a	98	but this change does not inspire confidence in their mission as a
94	privacy-focused company.	99	privacy-focused company.

content/blog/2022-09-17-serenity-os.md added +122

@@ -0,0 +1,122 @@
	1	+++
	2	date = 2022-09-17
	3	title = "Serenity OS: Testing Out a Unique System"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Overview
	9
	10	[SerenityOS](https://serenityos.org) is a unique operating system (OS)
	11	that I have seen pop up in my news feed a few times over the last few
	12	years, but I have never had time to test it out until now.
	13
	14	Testing out this system brought back fond memories of yellowed,
	15	modem-screeching, 100-pound computers that brought so many fond memories
	16	to my youth.
	17
	18	Per their website:
	19
	20	> A graphical Unix-like operating system for desktop computers!
	21	>
	22	> SerenityOS is a love letter to \'90s user interfaces with a custom
	23	> Unix-like core. It flatters with sincerity by stealing beautiful ideas
	24	> from various other systems.
	25	>
	26	> Roughly speaking, the goal is a marriage between the aesthetic of
	27	> late-1990s productivity software and the power-user accessibility of
	28	> late-2000s \*nix.
	29	>
	30	> This is a system by us, for us, based on the things we like.
	31
	32	# Building
	33
	34	Your first question may be \"Where\'s the iso?\" and the answer is...
	35	there are none. SerenityOS does not provide pre-built images for
	36	testing. You must build the images yourself. This seems intentionally to
	37	limit participation to only those who are truly interested enough to
	38	learn how to build the OS.
	39
	40	## Clone
	41
	42	In order to get started, you\'ll need to clone the source repository:
	43
	44	```sh
	45	git clone https://github.com/SerenityOS/serenity && cd serenity
	46	```
	47
	48	## Build
	49
	50	Note that I followed the [Build
	51	Instructions](https://github.com/SerenityOS/serenity/blob/master/Documentation/BuildInstructions.md)
	52	in the SerenityOS repository as of commit
	53	`660d2b53b1206e868d5470eee80b5e62d7e30da7`. Things may have
	54	changed since my installation, and you should double-check the
	55	instructions first.
	56
	57	Regardless, I want to repeat my steps here to illustrate any errors or
	58	differing commands I needed to run in order to build and run SerenityOS.
	59
	60	Since I am running Fedora, I needed to install these packages in order
	61	to build the OS images:
	62
	63	```sh
	64	sudo dnf install texinfo binutils-devel curl cmake mpfr-devel libmpc-devel gmp-devel e2fsprogs ninja-build patch ccache rsync @"C Development Tools and Libraries" @Virtualization
	65	```
	66
	67	Next, make sure you\'re inside the `serenity` directory
	68	created earlier during the git cloning process and process to build the
	69	toolchain:
	70
	71	```sh
	72	Meta/serenity.sh rebuild-toolchain
	73	```
	74
	75	Once the toolchain is built, you can Build and run the OS!
	76
	77	```sh
	78	Meta/serenity.sh run
	79	```
	80
	81	After this process is completed, the image should run automatically and
	82	launch.
	83
	84	# Issues
	85
	86	I played around in SerenityOS for an hour or two in order to see what I
	87	could do and had a lot of fun with it. The only issue I ran into was a
	88	lack of working internet. I didn\'t try very hard, but I could tell that
	89	the main network link wasn\'t connecting to my Fedora host properly.
	90
	91	# Screenshots
	92
	93	The initial launch of the image displays the SerenityOS desktop, with a
	94	simple terminal already launched:
	95
	96	![SerenityOS
	97	Terminal](https://img.cleberg.net/blog/20220917-serenityos/initial_launch.png)
	98
	99	Here you can see the Fire application (literally just shows fire
	100	burning), a browser with the local Serenity Browser page loaded, and a
	101	text editor.
	102
	103	![SerenityOS
	104	Fire](https://img.cleberg.net/blog/20220917-serenityos/basic_apps.png)
	105
	106	I also poked around the system utilities and found most tools you\'d
	107	expect to find within a standard desktop.
	108
	109	![SerenityOS System
	110	Monitor](https://img.cleberg.net/blog/20220917-serenityos/system_monitor.png)
	111
	112	Lastly, I noted that the default desktop contains numerous pre-defined
	113	themes to choose from. This is a small piece, but it\'s actually
	114	wonderful to see desktop developers consider theming directly out of the
	115	box rather than using an addon-based mentality.
	116
	117	![SerenityOS
	118	Themes](https://img.cleberg.net/blog/20220917-serenityos/themes.png)
	119
	120	I didn\'t take a screenshot of the other pre-installed games, but I did
	121	spend nearly 30 minutes playing Solitaire before remembering that I was
	122	supposed to be writing a post about the OS.

content/blog/2022-09-17-serenity-os.org deleted −116

	@@ -1,116 +0,0 @@
1	#+title: Serenity OS: Testing Out a Unique System
2	#+date: 2022-09-17
3	#+description: A quick look at the Serenity operating system.
4	#+filetags: :dev:
5
6	* Overview
7	[[https://serenityos.org][SerenityOS]] is a unique operating system (OS)
8	that I have seen pop up in my news feed a few times over the last few
9	years, but I have never had time to test it out until now.
10
11	Testing out this system brought back fond memories of yellowed,
12	modem-screeching, 100-pound computers that brought so many fond memories
13	to my youth.
14
15	Per their website:
16
17	#+begin_quote
18	A graphical Unix-like operating system for desktop computers!
19
20	SerenityOS is a love letter to '90s user interfaces with a custom
21	Unix-like core. It flatters with sincerity by stealing beautiful ideas
22	from various other systems.
23
24	Roughly speaking, the goal is a marriage between the aesthetic of
25	late-1990s productivity software and the power-user accessibility of
26	late-2000s *nix.
27
28	This is a system by us, for us, based on the things we like.
29
30	#+end_quote
31
32	* Building
33	Your first question may be "Where's the iso?" and the answer is... there
34	are none. SerenityOS does not provide pre-built images for testing. You
35	must build the images yourself. This seems intentionally to limit
36	participation to only those who are truly interested enough to learn how
37	to build the OS.
38
39	** Clone
40	In order to get started, you'll need to clone the source repository:
41
42	#+begin_src sh
43	git clone https://github.com/SerenityOS/serenity && cd serenity
44	#+end_src
45
46	** Build
47	Note that I followed the
48	[[https://github.com/SerenityOS/serenity/blob/master/Documentation/BuildInstructions.md][Build
49	Instructions]] in the SerenityOS repository as of commit
50	=660d2b53b1206e868d5470eee80b5e62d7e30da7=. Things may have changed
51	since my installation, and you should double-check the instructions
52	first.
53
54	Regardless, I want to repeat my steps here to illustrate any errors or
55	differing commands I needed to run in order to build and run SerenityOS.
56
57	Since I am running Fedora, I needed to install these packages in order
58	to build the OS images:
59
60	#+begin_src sh
61	sudo dnf install texinfo binutils-devel curl cmake mpfr-devel libmpc-devel gmp-devel e2fsprogs ninja-build patch ccache rsync @"C Development Tools and Libraries" @Virtualization
62	#+end_src
63
64	Next, make sure you're inside the =serenity= directory created earlier
65	during the git cloning process and process to build the toolchain:
66
67	#+begin_src sh
68	Meta/serenity.sh rebuild-toolchain
69	#+end_src
70
71	Once the toolchain is built, you can Build and run the OS!
72
73	#+begin_src sh
74	Meta/serenity.sh run
75	#+end_src
76
77	After this process is completed, the image should run automatically and
78	launch.
79
80	* Issues
81	I played around in SerenityOS for an hour or two in order to see what I
82	could do and had a lot of fun with it. The only issue I ran into was a
83	lack of working internet. I didn't try very hard, but I could tell that
84	the main network link wasn't connecting to my Fedora host properly.
85
86	* Screenshots
87	The initial launch of the image displays the SerenityOS desktop, with a
88	simple terminal already launched:
89
90	#+caption: SerenityOS Terminal
91	[[https://img.cleberg.net/blog/20220917-serenityos/initial_launch.png]]
92
93	Here you can see the Fire application (literally just shows fire
94	burning), a browser with the local Serenity Browser page loaded, and a
95	text editor.
96
97	#+caption: SerenityOS Fire
98	[[https://img.cleberg.net/blog/20220917-serenityos/basic_apps.png]]
99
100	I also poked around the system utilities and found most tools you'd
101	expect to find within a standard desktop.
102
103	#+caption: SerenityOS System Monitor
104	[[https://img.cleberg.net/blog/20220917-serenityos/system_monitor.png]]
105
106	Lastly, I noted that the default desktop contains numerous pre-defined
107	themes to choose from. This is a small piece, but it's actually
108	wonderful to see desktop developers consider theming directly out of the
109	box rather than using an addon-based mentality.
110
111	#+caption: SerenityOS Themes
112	[[https://img.cleberg.net/blog/20220917-serenityos/themes.png]]
113
114	I didn't take a screenshot of the other pre-installed games, but I did
115	spend nearly 30 minutes playing Solitaire before remembering that I was
116	supposed to be writing a post about the OS.

content/blog/2022-09-21-graphene-os.md added +168

@@ -0,0 +1,168 @@
	1	+++
	2	date = 2022-09-21
	3	title = "Installing Graphene OS on the Pixel 6 Pro"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Introduction
	9
	10	After using iOS for a couple of years, I finally took the plunge and
	11	purchased a Pixel 6 Pro in order to test and use \[GrapheneOS\]
	12	(<https://grapheneos.org>).
	13
	14	The installation process was rather quick once you have the tools and
	15	files you need. Overall, it can be done in just a few minutes.
	16
	17	# Gathering Tools & Files
	18
	19	## Android Tools
	20
	21	First, in order to interact with the device, we will need the [Android
	22	platform
	23	tools](https://developer.android.com/studio/releases/platform-tools.html).
	24	Find the Linux download and save the ZIP folder to your preferred
	25	location.
	26
	27	Once we\'ve downloaded the files, we will need to unzip them, enter the
	28	directory, and move the necessary executables to a central location,
	29	such as `/usr/bin/`. For this installation, we only need the
	30	`fastboot` and `adb` executables.
	31
	32	```sh
	33	cd ~/Downloads
	34	```
	35
	36	```sh
	37	unzip platform-tools_r33.0.3-linux.zip
	38	cd platform-tools
	39	sudo mv fastboot /usr/bin/
	40	sudo mv adb /usr/bin
	41	```
	42
	43	## GrapheneOS Files
	44
	45	Next, we need the [GrapheneOS files](https://grapheneos.org/releases)
	46	for our device and model. For example, the Pixel 6 Pro is codenamed
	47	`raven` on the release page.
	48
	49	Once we have the links, let\'s download them to our working directory:
	50
	51	```sh
	52	curl -O https://releases.grapheneos.org/factory.pub
	53	curl -0 https://releases.grapheneos.org/raven-factory-2022091400.zip
	54	curl -0 https://releases.grapheneos.org/raven-factory-2022091400.zip.sig
	55	```
	56
	57	1. Validate Integrity
	58
	59	In order to validate the integrity of the downloaded files, we will
	60	need the `signify` package and Graphene\'s
	61	`factory.pub` file.
	62
	63	```sh
	64	sudo dnf install signify
	65	```
	66
	67	```sh
	68	curl -O https://releases.grapheneos.org/factory.pub
	69	```
	70
	71	Then we can validate the files and ensure that no data was corrupted
	72	or modified before it was saved to our device.
	73
	74	```sh
	75	signify -Cqp factory.pub -x raven-factory-2022091400.zip.sig && echo verified
	76	```
	77
	78	2. Unzip Files
	79
	80	Once the files are verified, we can unzip the Graphene image and
	81	enter the directory:
	82
	83	```sh
	84	unzip raven-factory-2022091400.zip && cd raven-factory-2022091400
	85	```
	86
	87	# Installation Process
	88
	89	## Enable Developer Debugging & OEM Unlock
	90
	91	Before we can actually flash anything to the phone, we will need to
	92	enable OEM Unlocking, as well as either USB Debugging or Wireless
	93	Debugging, depending on which method we will be using.
	94
	95	To start, enable developer mode by going to `Settings` \>
	96	`About` and tapping `Build Number` seven (7)
	97	times. You may need to enter your PIN to enable this mode.
	98
	99	Once developer mode is enabled, go to `Settings` \>
	100	`System` \> `Devloper Options` and enable OEM
	101	Unlocking, as well as USB or Wireless Debugging. In my case, I chose USB
	102	Debugging and performed all actions via USB cable.
	103
	104	Once these options are enabled, plug the phone into the computer and
	105	execute the following command:
	106
	107	```sh
	108	adb devices
	109	```
	110
	111	If an unauthorized error occurs, make sure the USB mode on the phone is
	112	changed from charging to something like \"File Transfer\" or \"PTP.\"
	113	You can find the USB mode in the notification tray.
	114
	115	## Reboot Device
	116
	117	Once we have found the device via `adb`, we can either boot
	118	into the bootloader interface by holding the volume down button while
	119	the phone reboots or by executing the following command:
	120
	121	```sh
	122	adb reboot bootloader
	123	```
	124
	125	## Unlock the Bootloader
	126
	127	The phone will reboot and load the bootloader screen upon startup. At
	128	this point, we are ready to start the actual flashing of GrapheneOS onto
	129	the device.
	130
	131	NOTE: In my situation, I needed to use `sudo` with every
	132	`fastboot` command, but not with `adb` commands. I
	133	am not sure if this is standard or a Fedora quirk, but I\'m documenting
	134	my commands verbatim in this post.
	135
	136	First, we start by unlocking the bootloader so that we can load other
	137	ROMs:
	138
	139	```sh
	140	sudo fastboot flashing unlock
	141	```
	142
	143	## Flashing Factory Images
	144
	145	Once the phone is unlocked, we can flash it with the
	146	`flash-all.sh` script found inside the
	147	`raven-factory-2022091400` folder we entered earlier:
	148
	149	```sh
	150	sudo ./flash-all.sh
	151	```
	152
	153	This process should take a few minutes and will print informational
	154	messages as things progress. Avoid doing anything on the phone while
	155	this process is operating.
	156
	157	## Lock the Bootloader
	158
	159	If everything was successful, the phone should reboot a few times and
	160	finally land back on the bootloader screen. At this point, we can
	161	re-lock the bootloader to enable full verified boot and protect the
	162	device from unwanted flashing or erasure of data.
	163
	164	```sh
	165	sudo fastboot flashing lock
	166	```
	167
	168	Once done, the device will be wiped and ready for a fresh set-up!

content/blog/2022-09-21-graphene-os.org deleted −154

	@@ -1,154 +0,0 @@
1	#+title: Installing Graphene OS on the Pixel 6 Pro
2	#+date: 2022-09-21
3	#+description: A retrospective on the successful command-line installation of Graphene OS on a Pixel 6 Pro.
4	#+filetags: :privacy:
5
6	* Introduction
7	After using iOS for a couple of years, I finally took the plunge and
8	purchased a Pixel 6 Pro in order to test and use [GrapheneOS]
9	([[https://grapheneos.org]]).
10
11	The installation process was rather quick once you have the tools and
12	files you need. Overall, it can be done in just a few minutes.
13
14	* Gathering Tools & Files
15	** Android Tools
16	First, in order to interact with the device, we will need the
17	[[https://developer.android.com/studio/releases/platform-tools.html][Android
18	platform tools]]. Find the Linux download and save the ZIP folder to
19	your preferred location.
20
21	Once we've downloaded the files, we will need to unzip them, enter the
22	directory, and move the necessary executables to a central location,
23	such as =/usr/bin/=. For this installation, we only need the =fastboot=
24	and =adb= executables.
25
26	#+begin_src sh
27	cd ~/Downloads
28	#+end_src
29
30	#+begin_src sh
31	unzip platform-tools_r33.0.3-linux.zip
32	cd platform-tools
33	sudo mv fastboot /usr/bin/
34	sudo mv adb /usr/bin
35	#+end_src
36
37	** GrapheneOS Files
38	Next, we need the [[https://grapheneos.org/releases][GrapheneOS files]]
39	for our device and model. For example, the Pixel 6 Pro is codenamed
40	=raven= on the release page.
41
42	Once we have the links, let's download them to our working directory:
43
44	#+begin_src sh
45	curl -O https://releases.grapheneos.org/factory.pub
46	curl -0 https://releases.grapheneos.org/raven-factory-2022091400.zip
47	curl -0 https://releases.grapheneos.org/raven-factory-2022091400.zip.sig
48	#+end_src
49
50	1. Validate Integrity
51
52	In order to validate the integrity of the downloaded files, we will
53	need the =signify= package and Graphene's =factory.pub= file.
54
55	#+begin_src sh
56	sudo dnf install signify
57	#+end_src
58
59	#+begin_src sh
60	curl -O https://releases.grapheneos.org/factory.pub
61	#+end_src
62
63	Then we can validate the files and ensure that no data was corrupted
64	or modified before it was saved to our device.
65
66	#+begin_src sh
67	signify -Cqp factory.pub -x raven-factory-2022091400.zip.sig && echo verified
68	#+end_src
69
70	2. Unzip Files
71
72	Once the files are verified, we can unzip the Graphene image and
73	enter the directory:
74
75	#+begin_src sh
76	unzip raven-factory-2022091400.zip && cd raven-factory-2022091400
77	#+end_src
78
79	* Installation Process
80	** Enable Developer Debugging & OEM Unlock
81	Before we can actually flash anything to the phone, we will need to
82	enable OEM Unlocking, as well as either USB Debugging or Wireless
83	Debugging, depending on which method we will be using.
84
85	To start, enable developer mode by going to =Settings= > =About= and
86	tapping =Build Number= seven (7) times. You may need to enter your PIN
87	to enable this mode.
88
89	Once developer mode is enabled, go to =Settings= > =System= >
90	=Devloper Options= and enable OEM Unlocking, as well as USB or Wireless
91	Debugging. In my case, I chose USB Debugging and performed all actions
92	via USB cable.
93
94	Once these options are enabled, plug the phone into the computer and
95	execute the following command:
96
97	#+begin_src sh
98	adb devices
99	#+end_src
100
101	If an unauthorized error occurs, make sure the USB mode on the phone is
102	changed from charging to something like "File Transfer" or "PTP." You
103	can find the USB mode in the notification tray.
104
105	** Reboot Device
106	Once we have found the device via =adb=, we can either boot into the
107	bootloader interface by holding the volume down button while the phone
108	reboots or by executing the following command:
109
110	#+begin_src sh
111	adb reboot bootloader
112	#+end_src
113
114	** Unlock the Bootloader
115	The phone will reboot and load the bootloader screen upon startup. At
116	this point, we are ready to start the actual flashing of GrapheneOS onto
117	the device.
118
119	NOTE: In my situation, I needed to use =sudo= with every =fastboot=
120	command, but not with =adb= commands. I am not sure if this is standard
121	or a Fedora quirk, but I'm documenting my commands verbatim in this
122	post.
123
124	First, we start by unlocking the bootloader so that we can load other
125	ROMs:
126
127	#+begin_src sh
128	sudo fastboot flashing unlock
129	#+end_src
130
131	** Flashing Factory Images
132	Once the phone is unlocked, we can flash it with the =flash-all.sh=
133	script found inside the =raven-factory-2022091400= folder we entered
134	earlier:
135
136	#+begin_src sh
137	sudo ./flash-all.sh
138	#+end_src
139
140	This process should take a few minutes and will print informational
141	messages as things progress. Avoid doing anything on the phone while
142	this process is operating.
143
144	** Lock the Bootloader
145	If everything was successful, the phone should reboot a few times and
146	finally land back on the bootloader screen. At this point, we can
147	re-lock the bootloader to enable full verified boot and protect the
148	device from unwanted flashing or erasure of data.
149
150	#+begin_src sh
151	sudo fastboot flashing lock
152	#+end_src
153
154	Once done, the device will be wiped and ready for a fresh set-up!

content/blog/2022-10-04-mtp-linux.org → content/blog/2022-10-04-mtp-linux.md renamed +40 −32

	@@ -1,73 +1,81 @@
1	#+title: How to Mount an MTP Mobile Device on Fedora Linux	1	+++
2	#+date: 2022-10-04	2	date = 2022-10-04
3	#+description: Learn how to mount an MTP mobile device on Fedora Linux.	3	title = "How to Mount an MTP Mobile Device on Fedora Linux"
4	#+filetags: :linux:	4	description = ""
		5	draft = false
		6	+++
5		7
6	I recently ran into trouble attempting to mount my GrapheneOS phone to	8	I recently ran into trouble attempting to mount my GrapheneOS phone to
7	my laptop running Fedora Linux via the	9	my laptop running Fedora Linux via the [Media Transfer
8	[[https://en.wikipedia.org/wiki/Media_transfer_protocol][Media Transfer	10	Protocol](https://en.wikipedia.org/wiki/Media_transfer_protocol) (MTP)
9	Protocol]] (MTP) and discovered a simple and effective solution.	11	and discovered a simple and effective solution.
		12
		13	# Use a USB 3.0 Port
10		14
11	* Use a USB 3.0 Port
12	First, ensure that the device was plugged in to the laptop through a USB	15	First, ensure that the device was plugged in to the laptop through a USB
13	3.0 port, if possible. From a brief glance online, it seems that USB 2.0	16	3.0 port, if possible. From a brief glance online, it seems that USB 2.0
14	ports may cause issues with dropped connections over MTP. This is purely	17	ports may cause issues with dropped connections over MTP. This is purely
15	anecdotal since I don't have any evidence to link showing that USB 2.0	18	anecdotal since I don\'t have any evidence to link showing that USB 2.0
16	causes issues, but I can confirm that switching to a USB 3.0 port seemed	19	causes issues, but I can confirm that switching to a USB 3.0 port seemed
17	to cut out most of my issues.	20	to cut out most of my issues.
18		21
19	* Switch USB Preferences to MTP	22	# Switch USB Preferences to MTP
20	Secondly, you need to ensure that the phone's USB preferences/mode is	23
		24	Secondly, you need to ensure that the phone\'s USB preferences/mode is
21	changed to MTP or File Transfer once the phone is plugged in. Other	25	changed to MTP or File Transfer once the phone is plugged in. Other
22	modes will not allow you to access the phone's file system.	26	modes will not allow you to access the phone\'s file system.
		27
		28	# Install `jmtpfs`
23		29
24	* Install =jmtpfs=	30	Next, I used the `jmtpfs` package to mount my phone to my
25	Next, I used the =jmtpfs= package to mount my phone to my laptop. There	31	laptop. There are other packages that exist, but this one worked
26	are other packages that exist, but this one worked perfectly for me. On	32	perfectly for me. On Fedora Linux, you can install it like this:
27	Fedora Linux, you can install it like this:
28		33
29	#+begin_src sh	34	```sh
30	sudo dnf install jmtpfs -y	35	sudo dnf install jmtpfs -y
31	#+end_src	36	```
		37
		38	# Create a Mount Point
32		39
33	* Create a Mount Point
34	Once you have the package installed, you just need to create a folder	40	Once you have the package installed, you just need to create a folder
35	for the device to use as a mount point. In my case, I used =/mnt/pixel=:	41	for the device to use as a mount point. In my case, I used
		42	`/mnt/pixel`:
36		43
37	#+begin_src sh	44	```sh
38	sudo mkdir /mnt/pixel	45	sudo mkdir /mnt/pixel
39	sudo chown -R $USER:$USER /mnt/pixel	46	sudo chown -R $USER:$USER /mnt/pixel
40	#+end_src	47	```
		48
		49	# Mount & Access the Phone\'s File System
41		50
42	* Mount & Access the Phone's File System
43	Finally, plug-in and mount the device, and you should be able to see all	51	Finally, plug-in and mount the device, and you should be able to see all
44	storage (internal and external) inside your new folder!	52	storage (internal and external) inside your new folder!
45		53
46	#+begin_src sh	54	```sh
47	jmtpfs /mnt/pixel	55	jmtpfs /mnt/pixel
48	#+end_src	56	```
49		57
50	The output should look something like this:	58	The output should look something like this:
51		59
52	#+begin_src sh	60	```sh
53	Device 0 (VID=18d1 and PID=4ee1) is a Google Inc Nexus/Pixel (MTP).	61	Device 0 (VID=18d1 and PID=4ee1) is a Google Inc Nexus/Pixel (MTP).
54	Android device detected, assigning default bug flags	62	Android device detected, assigning default bug flags
55	#+end_src	63	```
56		64
57	Now you are mounted and can do anything you'd like with the device's	65	Now you are mounted and can do anything you\'d like with the device\'s
58	files:	66	files:
59		67
60	#+begin_src sh	68	```sh
61	cd /mnt/pixel	69	cd /mnt/pixel
62	ls -lha	70	ls -lha
63	#+end_src	71	```
64		72
65	From here, you will be able to see any internal or external storage	73	From here, you will be able to see any internal or external storage
66	available on the device:	74	available on the device:
67		75
68	#+begin_src sh	76	```sh
69	total 0	77	total 0
70	drwxr-xr-x. 3 user user 0 Jan 1 1970 .	78	drwxr-xr-x. 3 user user 0 Jan 1 1970 .
71	drwxr-xr-x. 1 root root 10 Oct 4 13:29 ..	79	drwxr-xr-x. 1 root root 10 Oct 4 13:29 ..
72	drwxr-xr-x. 16 user user 0 Apr 21 4426383 'Internal shared storage'	80	drwxr-xr-x. 16 user user 0 Apr 21 4426383 'Internal shared storage'
73	#+end_src	81	```

content/blog/2022-10-04-syncthing.md added +179

@@ -0,0 +1,179 @@
	1	+++
	2	date = 2022-10-04
	3	title = "Syncthing: A Minimal Self-Hosted Cloud Storage Solution"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# An Overview of Syncthing
	9
	10	If you\'ve been looking around the self-hosted cloud storage space for a
	11	while, you\'ve undoubtedly run into someone suggesting
	12	[Syncthing](https://syncthing.net) as an option. However, it is an
	13	unusual alternative for those users out there who are used to having a
	14	centralized cloud server that serves as the \"controller\" of the data
	15	and interacts with clients on devices to fetch files.
	16
	17	This post is a walkthrough of the Syncthing software, how I set up my
	18	personal storage, and some pros and cons of using the software.
	19
	20	# Installing Syncthing
	21
	22	To install Syncthing, visit the
	23	[Downloads](https://syncthing.net/downloads/) page or install via your
	24	device\'s package manager.
	25
	26	## Server & Desktop
	27
	28	You can install Syncthing on servers and desktops via the Downloads page
	29	linked above or via the command-line.
	30
	31	For Debian-based distros:
	32
	33	```sh
	34	sudo apt install syncthing
	35	```
	36
	37	For Fedora-based distros:
	38
	39	```sh
	40	sudo dnf install syncthing
	41	```
	42
	43	## Mobile
	44
	45	Syncthing for Android is available on
	46	[F-Droid](https://f-droid.org/packages/com.nutomic.syncthingandroid/)
	47	and [Google
	48	Play](https://play.google.com/store/apps/details?id=com.nutomic.syncthingandroid).
	49	Syncthing does not have an official iOS client, but there is a
	50	third-party client called [Möbius
	51	Sync](https://apps.apple.com/us/app/m%C3%B6bius-sync/id1539203216).
	52
	53	# How Does Syncthing Work?
	54
	55	To start, I wanted to include the main marketing blurb from their
	56	website:
	57
	58	> Syncthing is a continuous file synchronization program. It
	59	> synchronizes files between two or more computers in real time, safely
	60	> protected from prying eyes. Your data is your data alone, and you
	61	> deserve to choose where it is stored, whether it is shared with some
	62	> third party, and how it\'s transmitted over the internet.
	63
	64	Let\'s break this apart and add in some other details to help explain
	65	what exactly Syncthing does in order to sync files between devices.
	66
	67	## Local Syncthing Server(s)
	68
	69	Syncthing syncs files between multiple devices by creating a local
	70	server on each device. These local servers handle a few different
	71	things, such as watching files and directories for changes, hosting an
	72	administrative GUI website, and authenticating with connected devices.
	73
	74	You can also start, stop, and restart the Syncthing server via the
	75	command-line or web dashboard. If you\'re running Syncthing on a device
	76	with `systemd`, you can use the following commands:
	77
	78	```sh
	79	sudo systemctl start syncthing@username.service
	80	sudo systemctl restart syncthing@username.service
	81	sudo systemctl stop syncthing@username.service
	82	```
	83
	84	## Syncthing Dashboard
	85
	86	This biggest part of Syncthing is the admin GUI website that runs on
	87	each device (note that mobile devices will use the Syncthing app rather
	88	than the web GUI). The admin GUI is available through the web browser on
	89	the local device that is running Syncthing - simply go to
	90	`http://localhost:8384` or
	91	`http://127.0.0.1:8384`. This web page is the place where you
	92	will change settings, add/modify synced files, and add/modify connected
	93	devices.
	94
	95	Here\'s an example web GUI dashboard:
	96
	97	![Syncthing
	98	Dashboard](https://img.cleberg.net/blog/20221020-syncthing/syncthing_gui.png)
	99
	100	## Remote Devices
	101
	102	A cloud storage solution wouldn\'t be very useful if you aren\'t able to
	103	share data among various devices. Syncthing does this by sharing Device
	104	IDs to connect servers, and then by manually sharing Folders with
	105	devices that have been connected.
	106
	107	For instance, if you have a laptop running Syncthing and then install
	108	the Syncthing mobile app on a phone, you could scan the laptop\'s QR
	109	code for Device ID and then accept the authentication on the laptop\'s
	110	dashboard. Next, you can use either device to select a folder for
	111	sharing and dictating which device should send, receive, or both.
	112
	113	When you connect devices, you can set one device as an \"Introducer,\"
	114	which can add devices from the introducer to the device list, for
	115	mutually shared folders. You can also configure Auto Accept,
	116	compression, rate limits, and more settings per device.
	117
	118	# My Personal Cloud Storage Set-up
	119
	120	Personally, I use a model similar to a traditional cloud storage
	121	service. I have a \"centralized\" server running 24/7 that acts as an
	122	Introducer for my Syncthing network. I think of this as my main storage
	123	and all other devices as tertiary client devices. I will likely add
	124	additional servers as backups as time goes on so that I don\'t have to
	125	rely on my laptop or phone as the only backups.
	126
	127	Currently, I have one desktop and one mobile device connected to the
	128	network, both running intermittently as they are not powered-on 24/7.
	129
	130	The initial set-up of the software was easy enough, but data transfer
	131	rates were incredibly slow for me due to the Wi-Fi. Instead, I plugged
	132	my laptop into the ethernet network that my server is on and manually
	133	copied my folders over to the server with `scp`. Once
	134	complete, Syncthing validated that all files were there and not missing,
	135	and it did not need to transfer any data through the WAN.
	136
	137	As slow as the transfer was going, this probably saved me a few days of
	138	waiting for my \~100GB sync.
	139
	140	# Pros & Cons
	141
	142	I\'ve put together a short list of pros and cons for Syncthing. I
	143	thought about my experiences with Nextcloud, WebDAV, proprietary
	144	services (Google Drive, iCloud, etc.), and privacy-focused cloud
	145	solutions (pCloud, Tresorit, etc.).
	146
	147	Pros:
	148
	149	- I\'ve faced no data loss at all through my two-month trial run.
	150	- No third-parties store your data on their servers.
	151	- You have full control over your data and can take your data and
	152	leave at any time.
	153	- It\'s possible to encrypt client-side easily with software like
	154	Cryptomator.
	155	- No proprietary clients or mounted volumes, just plain files and
	156	folders.
	157
	158	Cons:
	159
	160	- The learning curve is steeper than traditional cloud services and is
	161	focused on a technical audience.
	162	- If a device needs to modify files in a Folder, the devices will need
	163	to sync ALL files from the folder, which may be large. To avoid size
	164	restraints, split large folders into smaller folders for syncing.
	165	- Syncing can be slow due to the clients/servers initially connecting
	166	or re-connecting after sleeping.
	167	- Multiple personal devices are required and require the user to own
	168	or rent them as no third-party servers are involved in the storage
	169	of data.
	170
	171	Overall, I\'ve had a great experience with Syncthing so far. I\'ve had
	172	no data loss, syncing has been quick and easy when changes are made to
	173	files, device connections are reliable, and I love the freedom of
	174	controlling the clients and servers as I choose.
	175
	176	Not to mention that I appreciate that I - or someone else - could pull
	177	the Syncthing [source code](https://github.com/syncthing) and continue
	178	development/support if the Syncthing Foundation decides to stop
	179	developing the software or sells the business.

content/blog/2022-10-04-syncthing.org deleted −169

	@@ -1,169 +0,0 @@
1	#+title: Syncthing: A Minimal Self-Hosted Cloud Storage Solution
2	#+date: 2022-10-04
3	#+description: An overview of how you can use Syncthing as a minimal alternative to cloud storage.
4	#+filetags: :selfhosting:
5
6	* An Overview of Syncthing
7	If you've been looking around the self-hosted cloud storage space for a
8	while, you've undoubtedly run into someone suggesting
9	[[https://syncthing.net][Syncthing]] as an option. However, it is an
10	unusual alternative for those users out there who are used to having a
11	centralized cloud server that serves as the "controller" of the data and
12	interacts with clients on devices to fetch files.
13
14	This post is a walkthrough of the Syncthing software, how I set up my
15	personal storage, and some pros and cons of using the software.
16
17	* Installing Syncthing
18	To install Syncthing, visit the
19	[[https://syncthing.net/downloads/][Downloads]] page or install via your
20	device's package manager.
21
22	** Server & Desktop
23	You can install Syncthing on servers and desktops via the Downloads page
24	linked above or via the command-line.
25
26	For Debian-based distros:
27
28	#+begin_src sh
29	sudo apt install syncthing
30	#+end_src
31
32	For Fedora-based distros:
33
34	#+begin_src sh
35	sudo dnf install syncthing
36	#+end_src
37
38	** Mobile
39	Syncthing for Android is available on
40	[[https://f-droid.org/packages/com.nutomic.syncthingandroid/][F-Droid]]
41	and
42	[[https://play.google.com/store/apps/details?id=com.nutomic.syncthingandroid][Google
43	Play]]. Syncthing does not have an official iOS client, but there is a
44	third-party client called
45	[[https://apps.apple.com/us/app/m%C3%B6bius-sync/id1539203216][Möbius
46	Sync]].
47
48	* How Does Syncthing Work?
49	To start, I wanted to include the main marketing blurb from their
50	website:
51
52	#+begin_quote
53	Syncthing is a continuous file synchronization program. It synchronizes
54	files between two or more computers in real time, safely protected from
55	prying eyes. Your data is your data alone, and you deserve to choose
56	where it is stored, whether it is shared with some third party, and how
57	it's transmitted over the internet.
58	#+end_quote
59
60	Let's break this apart and add in some other details to help explain
61	what exactly Syncthing does in order to sync files between devices.
62
63	** Local Syncthing Server(s)
64	Syncthing syncs files between multiple devices by creating a local
65	server on each device. These local servers handle a few different
66	things, such as watching files and directories for changes, hosting an
67	administrative GUI website, and authenticating with connected devices.
68
69	You can also start, stop, and restart the Syncthing server via the
70	command-line or web dashboard. If you're running Syncthing on a device
71	with =systemd=, you can use the following commands:
72
73	#+begin_src sh
74	sudo systemctl start syncthing@username.service
75	sudo systemctl restart syncthing@username.service
76	sudo systemctl stop syncthing@username.service
77	#+end_src
78
79	** Syncthing Dashboard
80	This biggest part of Syncthing is the admin GUI website that runs on
81	each device (note that mobile devices will use the Syncthing app rather
82	than the web GUI). The admin GUI is available through the web browser on
83	the local device that is running Syncthing - simply go to
84	=http://localhost:8384= or =http://127.0.0.1:8384=. This web page is the
85	place where you will change settings, add/modify synced files, and
86	add/modify connected devices.
87
88	Here's an example web GUI dashboard:
89
90	#+caption: Syncthing Dashboard
91	[[https://img.cleberg.net/blog/20221020-syncthing/syncthing_gui.png]]
92
93	** Remote Devices
94	A cloud storage solution wouldn't be very useful if you aren't able to
95	share data among various devices. Syncthing does this by sharing Device
96	IDs to connect servers, and then by manually sharing Folders with
97	devices that have been connected.
98
99	For instance, if you have a laptop running Syncthing and then install
100	the Syncthing mobile app on a phone, you could scan the laptop's QR code
101	for Device ID and then accept the authentication on the laptop's
102	dashboard. Next, you can use either device to select a folder for
103	sharing and dictating which device should send, receive, or both.
104
105	When you connect devices, you can set one device as an "Introducer,"
106	which can add devices from the introducer to the device list, for
107	mutually shared folders. You can also configure Auto Accept,
108	compression, rate limits, and more settings per device.
109
110	* My Personal Cloud Storage Set-up
111	Personally, I use a model similar to a traditional cloud storage
112	service. I have a "centralized" server running 24/7 that acts as an
113	Introducer for my Syncthing network. I think of this as my main storage
114	and all other devices as tertiary client devices. I will likely add
115	additional servers as backups as time goes on so that I don't have to
116	rely on my laptop or phone as the only backups.
117
118	Currently, I have one desktop and one mobile device connected to the
119	network, both running intermittently as they are not powered-on 24/7.
120
121	The initial set-up of the software was easy enough, but data transfer
122	rates were incredibly slow for me due to the Wi-Fi. Instead, I plugged
123	my laptop into the ethernet network that my server is on and manually
124	copied my folders over to the server with =scp=. Once complete,
125	Syncthing validated that all files were there and not missing, and it
126	did not need to transfer any data through the WAN.
127
128	As slow as the transfer was going, this probably saved me a few days of
129	waiting for my ~100GB sync.
130
131	* Pros & Cons
132	I've put together a short list of pros and cons for Syncthing. I thought
133	about my experiences with Nextcloud, WebDAV, proprietary services
134	(Google Drive, iCloud, etc.), and privacy-focused cloud solutions
135	(pCloud, Tresorit, etc.).
136
137	Pros:
138
139	- I've faced no data loss at all through my two-month trial run.
140	- No third-parties store your data on their servers.
141	- You have full control over your data and can take your data and leave
142	at any time.
143	- It's possible to encrypt client-side easily with software like
144	Cryptomator.
145	- No proprietary clients or mounted volumes, just plain files and
146	folders.
147
148	Cons:
149
150	- The learning curve is steeper than traditional cloud services and is
151	focused on a technical audience.
152	- If a device needs to modify files in a Folder, the devices will need
153	to sync ALL files from the folder, which may be large. To avoid size
154	restraints, split large folders into smaller folders for syncing.
155	- Syncing can be slow due to the clients/servers initially connecting or
156	re-connecting after sleeping.
157	- Multiple personal devices are required and require the user to own or
158	rent them as no third-party servers are involved in the storage of
159	data.
160
161	Overall, I've had a great experience with Syncthing so far. I've had no
162	data loss, syncing has been quick and easy when changes are made to
163	files, device connections are reliable, and I love the freedom of
164	controlling the clients and servers as I choose.
165
166	Not to mention that I appreciate that I - or someone else - could pull
167	the Syncthing [[https://github.com/syncthing][source code]] and continue
168	development/support if the Syncthing Foundation decides to stop
169	developing the software or sells the business.

content/blog/2022-10-22-alpine-linux.md added +281

@@ -0,0 +1,281 @@
	1	+++
	2	date = 2022-10-22
	3	title = "Alpine Linux: My New Server OS"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Alpine Linux
	9
	10	[Alpine Linux](https://alpinelinux.org) is a very small distro, built on
	11	musl libc and busybox. It uses ash as the default shell, OpenRC as the
	12	init system, and apk as the package manager. According to their website,
	13	an Alpine container \"requires no more than 8 MB and a minimal
	14	installation to disk requires around 130 MB of storage.\" An actual bare
	15	metal machine is recommended to have 100 MB of RAM and 0-700 MB of
	16	storage space.
	17
	18	Historically, I\'ve used Ubuntu\'s minimal installation image as my
	19	server OS for the last five years. Ubuntu worked well and helped as my
	20	original server contained an nVidia GPU and no onboard graphics, so
	21	quite a few distros won\'t boot or install without a lot of tinkering.
	22
	23	Alpine has given me a huge increase in performance across my Docker apps
	24	and Nginx websites. CPU load for the new server I\'m using to test
	25	Alpine hovers around 0-5% on average with an Intel(R) Core(TM) i3-6100
	26	CPU @ 3.70GHz.
	27
	28	The only services I haven\'t moved over to Alpine are Plex Media Server
	29	and Syncthing, which may increase CPU load quite a bit depending on how
	30	many streams are running.
	31
	32	## Installation
	33
	34	In terms of installation, Alpine has an incredibly useful
	35	[wiki](https://wiki.alpinelinux.org/wiki/Installation) that will guide a
	36	user throughout the installation and post-installation processes, as
	37	well as various other articles and guides.
	38
	39	To install Alpine, find an appropriate [image to
	40	download](https://alpinelinux.org/downloads/) and flash it to a USB
	41	using software such as Rufus or Etcher. I opted to use the Standard
	42	image for my x86~64~ architecture.
	43
	44	Once the USB is ready, plug it into the machine and reboot. Note that
	45	you may have to use a key such as `Esc` or `F1-12`
	46	to access the boot menu. The Alpine Linux terminal will load quickly and
	47	for a login.
	48
	49	To log in to the installation image, use the `root` account;
	50	there is no password. Once logged-in, execute the setup command:
	51
	52	```sh
	53	setup-alpine
	54	```
	55
	56	The setup script will ask a series of questions to configure the system.
	57	Be sure to answer carefully or else you may have to re-configure the
	58	system after boot.
	59
	60	- Keyboard Layout (Local keyboard language and usage mode, e.g., us
	61	and variant of us-nodeadkeys.)
	62	- Hostname (The name for the computer.)
	63	- Network (For example, automatic IP address discovery with the
	64	\"DHCP\" protocol.)
	65	- DNS Servers (Domain Name Servers to query. For privacy reasons, it
	66	is NOT recommended to route every local request to servers like
	67	Google\'s 8.8.8.8 .)
	68	- Timezone
	69	- Proxy (Proxy server to use for accessing the web. Use \"none\" for
	70	direct connections to the internet.)
	71	- Mirror (From where to download packages. Choose the organization you
	72	trust giving your usage patterns to.)
	73	- SSH (Secure SHell remote access server. \"Openssh\" is part of the
	74	default install image. Use \"none\" to disable remote login, e.g. on
	75	laptops.)
	76	- NTP (Network Time Protocol client used for keeping the system clock
	77	in sync with a time-server. Package \"chrony\" is part of the
	78	default install image.)
	79	- Disk Mode (Select between diskless (disk=\"none\"), \"data\" or
	80	\"sys\", as described above.)
	81
	82	Once the setup script is finished, be sure to reboot the machine and
	83	remove the USB device.
	84
	85	```sh
	86	reboot
	87	```
	88
	89	## Post-Installation
	90
	91	There are many things you can do once your Alpine Linux system is up and
	92	running, and it largely depends on what you\'ll use the machine for.
	93	I\'m going to walk through my personal post-installation setup for my
	94	web server.
	95
	96	1. Upgrade the System
	97
	98	First, login as `root` in order to update and upgrade the
	99	system:
	100
	101	```sh
	102	apk -U upgrade
	103	```
	104
	105	2. Adding a User
	106
	107	I needed to add a user so that I don\'t need to log in as root. Note
	108	that if you\'re used to using the `sudo` command, you
	109	will now need to use the `doas` command on Alpine Linux.
	110
	111	```sh
	112	apk add doas
	113	adduser <username>
	114	adduser <username> wheel
	115	```
	116
	117	You can now log out and log back in using the newly-created user:
	118
	119	```sh
	120	exit
	121	```
	122
	123	3. Enable Community Packages
	124
	125	In order to install more common packages that aren\'t found in the
	126	`main` repository, you will need to enable the
	127	`community` repository:
	128
	129	```sh
	130	doas nano /etc/apk/repositories
	131	```
	132
	133	Uncomment the community line for whichever version of Alpine you\'re
	134	running:
	135
	136	```sh
	137	/media/usb/apks
	138	http://dl-cdn.alpinelinux.org/alpine/v3.16/main
	139	http://dl-cdn.alpinelinux.org/alpine/v3.16/community
	140	#http://dl-cdn.alpinelinux.org/alpine/edge/main
	141	#http://dl-cdn.alpinelinux.org/alpine/edge/community
	142	#http://dl-cdn.alpinelinux.org/alpine/edge/testing
	143	```
	144
	145	4. Install Required Packages
	146
	147	Now that the community packages are available, you can install any
	148	packages you need. In my case, I installed the web server packages I
	149	need for my services:
	150
	151	```sh
	152	doas apk add nano nginx docker docker-compose ufw
	153	```
	154
	155	5. SSH
	156
	157	If you didn\'t install OpenSSH as part of the installation, you can
	158	do so now:
	159
	160	```sh
	161	doas apk add openssh
	162	```
	163
	164	Next, either create a new key or copy your SSH key to the server
	165	from your current machines:
	166
	167	```sh
	168	# Create a new key
	169	ssh-keygen
	170	```
	171
	172	If you need to copy an existing SSH key from a current machine:
	173
	174	```sh
	175	# Copy key from existing machines
	176	ssh-copy-id <username>@<ip_address>
	177	```
	178
	179	6. Firewall
	180
	181	Lastly, I installed `ufw` above as my firewall. To set
	182	up, default to deny incoming and allow outgoing connections. Then
	183	selectively allow other ports or apps as needed.
	184
	185	```sh
	186	doas ufw default deny incoming
	187	doas ufw default allow outgoing
	188	doas ufw allow SSH
	189	doas ufw allow "WWW Full"
	190	doas ufw allow 9418 # Git server port
	191	```
	192
	193	7. Change Hostname
	194
	195	If you don\'t like the hostname set during installation, you just
	196	need to edit two files. First, edit the simple hostname file:
	197
	198	```sh
	199	doas nano /etc/hostname
	200	```
	201
	202	```sh
	203	<hostname>
	204	```
	205
	206	Next, edit the `hosts` file:
	207
	208	```sh
	209	doas nano /etc/hosts
	210	```
	211
	212	```sh
	213	127.0.0.1 <hostname>.local <hostname> localhost.local localhost
	214	::1 <hostname> <hostname>.local
	215	```
	216
	217	# Nginx Web Server
	218
	219	To set up my web server, I simply created the `www` user and
	220	created the necessary files.
	221
	222	```sh
	223	doas adduser -D -g 'www' www
	224	mkdir /www
	225	doas mkdir /www
	226	doas chown -R www:www /var/lib/nginx/
	227	doas chown -R www:www /www
	228	```
	229
	230	If you\'re running a simple webroot, you can alter the main
	231	`nginx.conf` file. Otherwise, you can drop configuration
	232	files in the following directory. You don\'t need to enable or symlink
	233	the configuration file like you do in other systems.
	234
	235	```sh
	236	doas nano /etc/nginx/http.d/example_website.conf
	237	```
	238
	239	Once the configuration is set and pointed at the `/www`
	240	directory to serve files, enable the Nginx service:
	241
	242	```sh
	243	# Note that 'default' must be included or Nginx will not start on boot
	244	doas rc-update add nginx default
	245	```
	246
	247	# Docker Containers
	248
	249	Docker works exactly the same as other systems. Either execute a
	250	`docker run` command or create a
	251	`docker-compose.yml` file and do
	252	`docker-compose up -d`.
	253
	254	# Git Server
	255
	256	I went in-depth on how to self-host a git server in another post:
	257	[Self-Hosting a Personal Git Server](../git-server/).
	258
	259	However, there are a few differences with Alpine. First note that in
	260	order to change the `git` user\'s shell, you must do a few
	261	things a little different:
	262
	263	```sh
	264	doas apk add libuser
	265	doas touch /etc/login.defs
	266	doas mkdir /etc/default
	267	doas touch /etc/default/useradd
	268	doas lchsh git
	269	```
	270
	271	# Thoughts on Alpine
	272
	273	So far, I love Alpine Linux. I have no complaints about anything at this
	274	point, but I\'m not completely finished with the migration yet. Once
	275	I\'m able to upgrade my hardware to a rack-mounted server, I will
	276	migrate Plex and Syncthing over to Alpine as well - possibly putting
	277	Plex into a container or VM.
	278
	279	The performance is stellar, the `apk` package manager is
	280	seamless, and system administration tasks are effortless. My only regret
	281	is that I didn\'t install Alpine sooner.

content/blog/2022-10-22-alpine-linux.org deleted −269

	@@ -1,269 +0,0 @@
1	#+title: Alpine Linux: My New Server OS
2	#+date: 2022-10-22
3	#+description: A retrospective on installing and configuring Alpine Linux as my new server operating system.
4	#+filetags: :linux:
5
6	* Alpine Linux
7	[[https://alpinelinux.org][Alpine Linux]] is a very small distro, built
8	on musl libc and busybox. It uses ash as the default shell, OpenRC as
9	the init system, and apk as the package manager. According to their
10	website, an Alpine container "requires no more than 8 MB and a minimal
11	installation to disk requires around 130 MB of storage." An actual bare
12	metal machine is recommended to have 100 MB of RAM and 0-700 MB of
13	storage space.
14
15	Historically, I've used Ubuntu's minimal installation image as my server
16	OS for the last five years. Ubuntu worked well and helped as my original
17	server contained an nVidia GPU and no onboard graphics, so quite a few
18	distros won't boot or install without a lot of tinkering.
19
20	Alpine has given me a huge increase in performance across my Docker apps
21	and Nginx websites. CPU load for the new server I'm using to test Alpine
22	hovers around 0-5% on average with an Intel(R) Core(TM) i3-6100 CPU @
23	3.70GHz.
24
25	The only services I haven't moved over to Alpine are Plex Media Server
26	and Syncthing, which may increase CPU load quite a bit depending on how
27	many streams are running.
28
29	** Installation
30	In terms of installation, Alpine has an incredibly useful
31	[[https://wiki.alpinelinux.org/wiki/Installation][wiki]] that will guide
32	a user throughout the installation and post-installation processes, as
33	well as various other articles and guides.
34
35	To install Alpine, find an appropriate
36	[[https://alpinelinux.org/downloads/][image to download]] and flash it
37	to a USB using software such as Rufus or Etcher. I opted to use the
38	Standard image for my x86_{64} architecture.
39
40	Once the USB is ready, plug it into the machine and reboot. Note that
41	you may have to use a key such as =Esc= or =F1-12= to access the boot
42	menu. The Alpine Linux terminal will load quickly and for a login.
43
44	To log in to the installation image, use the =root= account; there is no
45	password. Once logged-in, execute the setup command:
46
47	#+begin_src sh
48	setup-alpine
49	#+end_src
50
51	The setup script will ask a series of questions to configure the system.
52	Be sure to answer carefully or else you may have to re-configure the
53	system after boot.
54
55	- Keyboard Layout (Local keyboard language and usage mode, e.g., us and
56	variant of us-nodeadkeys.)
57	- Hostname (The name for the computer.)
58	- Network (For example, automatic IP address discovery with the "DHCP"
59	protocol.)
60	- DNS Servers (Domain Name Servers to query. For privacy reasons, it is
61	NOT recommended to route every local request to servers like Google's
62	8.8.8.8 .)
63	- Timezone
64	- Proxy (Proxy server to use for accessing the web. Use "none" for
65	direct connections to the internet.)
66	- Mirror (From where to download packages. Choose the organization you
67	trust giving your usage patterns to.)
68	- SSH (Secure SHell remote access server. "Openssh" is part of the
69	default install image. Use "none" to disable remote login, e.g. on
70	laptops.)
71	- NTP (Network Time Protocol client used for keeping the system clock in
72	sync with a time-server. Package "chrony" is part of the default
73	install image.)
74	- Disk Mode (Select between diskless (disk="none"), "data" or "sys", as
75	described above.)
76
77	Once the setup script is finished, be sure to reboot the machine and
78	remove the USB device.
79
80	#+begin_src sh
81	reboot
82	#+end_src
83
84	** Post-Installation
85	There are many things you can do once your Alpine Linux system is up and
86	running, and it largely depends on what you'll use the machine for. I'm
87	going to walk through my personal post-installation setup for my web
88	server.
89
90	1. Upgrade the System
91
92	First, login as =root= in order to update and upgrade the system:
93
94	#+begin_src sh
95	apk -U upgrade
96	#+end_src
97
98	2. Adding a User
99
100	I needed to add a user so that I don't need to log in as root. Note
101	that if you're used to using the =sudo= command, you will now need to
102	use the =doas= command on Alpine Linux.
103
104	#+begin_src sh
105	apk add doas
106	adduser <username>
107	adduser <username> wheel
108	#+end_src
109
110	You can now log out and log back in using the newly-created user:
111
112	#+begin_src sh
113	exit
114	#+end_src
115
116	3. Enable Community Packages
117
118	In order to install more common packages that aren't found in the
119	=main= repository, you will need to enable the =community=
120	repository:
121
122	#+begin_src sh
123	doas nano /etc/apk/repositories
124	#+end_src
125
126	Uncomment the community line for whichever version of Alpine you're
127	running:
128
129	#+begin_src sh
130	/media/usb/apks
131	http://dl-cdn.alpinelinux.org/alpine/v3.16/main
132	http://dl-cdn.alpinelinux.org/alpine/v3.16/community
133	#http://dl-cdn.alpinelinux.org/alpine/edge/main
134	#http://dl-cdn.alpinelinux.org/alpine/edge/community
135	#http://dl-cdn.alpinelinux.org/alpine/edge/testing
136	#+end_src
137
138	4. Install Required Packages
139
140	Now that the community packages are available, you can install any
141	packages you need. In my case, I installed the web server packages I
142	need for my services:
143
144	#+begin_src sh
145	doas apk add nano nginx docker docker-compose ufw
146	#+end_src
147
148	5. SSH
149
150	If you didn't install OpenSSH as part of the installation, you can do
151	so now:
152
153	#+begin_src sh
154	doas apk add openssh
155	#+end_src
156
157	Next, either create a new key or copy your SSH key to the server from
158	your current machines:
159
160	#+begin_src sh
161	# Create a new key
162	ssh-keygen
163	#+end_src
164
165	If you need to copy an existing SSH key from a current machine:
166
167	#+begin_src sh
168	# Copy key from existing machines
169	ssh-copy-id <username>@<ip_address>
170	#+end_src
171
172	6. Firewall
173
174	Lastly, I installed =ufw= above as my firewall. To set up, default to
175	deny incoming and allow outgoing connections. Then selectively allow
176	other ports or apps as needed.
177
178	#+begin_src sh
179	doas ufw default deny incoming
180	doas ufw default allow outgoing
181	doas ufw allow SSH
182	doas ufw allow "WWW Full"
183	doas ufw allow 9418 # Git server port
184	#+end_src
185
186	7. Change Hostname
187
188	If you don't like the hostname set during installation, you just need
189	to edit two files. First, edit the simple hostname file:
190
191	#+begin_src sh
192	doas nano /etc/hostname
193	#+end_src
194
195	#+begin_src sh
196	<hostname>
197	#+end_src
198
199	Next, edit the =hosts= file:
200
201	#+begin_src sh
202	doas nano /etc/hosts
203	#+end_src
204
205	#+begin_src sh
206	127.0.0.1 <hostname>.local <hostname> localhost.local localhost
207	::1 <hostname> <hostname>.local
208	#+end_src
209
210	* Nginx Web Server
211	To set up my web server, I simply created the =www= user and created the
212	necessary files.
213
214	#+begin_src sh
215	doas adduser -D -g 'www' www
216	mkdir /www
217	doas mkdir /www
218	doas chown -R www:www /var/lib/nginx/
219	doas chown -R www:www /www
220	#+end_src
221
222	If you're running a simple webroot, you can alter the main =nginx.conf=
223	file. Otherwise, you can drop configuration files in the following
224	directory. You don't need to enable or symlink the configuration file
225	like you do in other systems.
226
227	#+begin_src sh
228	doas nano /etc/nginx/http.d/example_website.conf
229	#+end_src
230
231	Once the configuration is set and pointed at the =/www= directory to
232	serve files, enable the Nginx service:
233
234	#+begin_src sh
235	# Note that 'default' must be included or Nginx will not start on boot
236	doas rc-update add nginx default
237	#+end_src
238
239	* Docker Containers
240	Docker works exactly the same as other systems. Either execute a
241	=docker run= command or create a =docker-compose.yml= file and do
242	=docker-compose up -d=.
243
244	* Git Server
245	I went in-depth on how to self-host a git server in another post:
246	[[../git-server/][Self-Hosting a Personal Git Server]].
247
248	However, there are a few differences with Alpine. First note that in
249	order to change the =git= user's shell, you must do a few things a
250	little different:
251
252	#+begin_src sh
253	doas apk add libuser
254	doas touch /etc/login.defs
255	doas mkdir /etc/default
256	doas touch /etc/default/useradd
257	doas lchsh git
258	#+end_src
259
260	* Thoughts on Alpine
261	So far, I love Alpine Linux. I have no complaints about anything at this
262	point, but I'm not completely finished with the migration yet. Once I'm
263	able to upgrade my hardware to a rack-mounted server, I will migrate
264	Plex and Syncthing over to Alpine as well - possibly putting Plex into a
265	container or VM.
266
267	The performance is stellar, the =apk= package manager is seamless, and
268	system administration tasks are effortless. My only regret is that I
269	didn't install Alpine sooner.

content/blog/2022-10-30-linux-display-manager.md added +82

@@ -0,0 +1,82 @@
	1	+++
	2	date = 2022-10-30
	3	title = "How to Disable or Change the Display Manager on Void Linux"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Display Manager Services
	9
	10	In order to change the [display
	11	manager](https://en.wikipedia.org/wiki/Display_manager) on Void Linux -
	12	or any other Linux distro - you need to identify the currently enabled
	13	display manager.
	14
	15	## Disabling the Current Display Manager
	16
	17	Void Linux only has one ISO available for download with a pre-built
	18	display manager at the time of this post: the XFCE ISO. If you\'ve
	19	installed this version, the pre-assigned display manager is
	20	`lxdm`. If you installed another display manager, replace
	21	`lxdm` in the following command with the display manager you
	22	have installed.
	23
	24	To disable `lxdm`, simply remove the service symlink:
	25
	26	```sh
	27	sudo rm /var/service/lxdm
	28	```
	29
	30	## Enabling a New Display Manager
	31
	32	If you want to enable a new display manager, you can do so after
	33	`lxdm` is disabled. Make sure to replace
	34	`<new_display_manager>` with your new DM, such as
	35	`gdm`, `xdm`, etc.
	36
	37	```sh
	38	sudo ln -s /etc/sv/<new_display_manager> /var/service
	39	```
	40
	41	# Set Up `.xinitrc`
	42
	43	Depending on your setup, you may need to create a few X files, such as
	44	`~/.xinitrc`. For my personal set-up, I created this file to
	45	launch the i3wm as my desktop.
	46
	47	```sh
	48	nano ~/.xinitrc
	49	```
	50
	51	```sh
	52	#!/bin/sh
	53
	54	exec i3
	55	```
	56
	57	If you run a desktop other than i3, simply replace `i3` with
	58	the shell command that launches that desktop.
	59
	60	# Set Up Your Shell Profile
	61
	62	Finally, in order to automatically launch an X session upon login, you
	63	will need to edit the `.bash_profile` (bash) or
	64	`.zprofile` (zsh) files for your shell:
	65
	66	```sh
	67	nano ~/.zprofile
	68	```
	69
	70	Add the following snippet to the end of the shell profile file. This
	71	will execute the `startx` command upon login.
	72
	73	```sh
	74	if [ -z "${DISPLAY}" ] && [ "${XDG_VTNR}" -eq 1 ]; then
	75	exec startx
	76	fi
	77	```
	78
	79	Alternatively, you can ignore this step and simply choose to manually
	80	execute `startx` upon login. This can be useful if you have
	81	issues with your desktop or like to manually launch different desktops
	82	by choice.

content/blog/2022-10-30-linux-display-manager.org deleted −72

	@@ -1,72 +0,0 @@
1	#+title: How to Disable or Change the Display Manager on Void Linux
2	#+date: 2022-10-30
3	#+description: Learn how to remove or modify the display manager on Void Linux.
4	#+filetags: :linux:
5
6	* Display Manager Services
7	In order to change the
8	[[https://en.wikipedia.org/wiki/Display_manager][display manager]] on
9	Void Linux - or any other Linux distro - you need to identify the
10	currently enabled display manager.
11
12	** Disabling the Current Display Manager
13	Void Linux only has one ISO available for download with a pre-built
14	display manager at the time of this post: the XFCE ISO. If you've
15	installed this version, the pre-assigned display manager is =lxdm=. If
16	you installed another display manager, replace =lxdm= in the following
17	command with the display manager you have installed.
18
19	To disable =lxdm=, simply remove the service symlink:
20
21	#+begin_src sh
22	sudo rm /var/service/lxdm
23	#+end_src
24
25	** Enabling a New Display Manager
26	If you want to enable a new display manager, you can do so after =lxdm=
27	is disabled. Make sure to replace =<new_display_manager>= with your new
28	DM, such as =gdm=, =xdm=, etc.
29
30	#+begin_src sh
31	sudo ln -s /etc/sv/<new_display_manager> /var/service
32	#+end_src
33
34	* Set Up =.xinitrc=
35	Depending on your setup, you may need to create a few X files, such as
36	=~/.xinitrc=. For my personal set-up, I created this file to launch the
37	i3wm as my desktop.
38
39	#+begin_src sh
40	nano ~/.xinitrc
41	#+end_src
42
43	#+begin_src sh
44	#!/bin/sh
45
46	exec i3
47	#+end_src
48
49	If you run a desktop other than i3, simply replace =i3= with the shell
50	command that launches that desktop.
51
52	* Set Up Your Shell Profile
53	Finally, in order to automatically launch an X session upon login, you
54	will need to edit the =.bash_profile= (bash) or =.zprofile= (zsh) files
55	for your shell:
56
57	#+begin_src sh
58	nano ~/.zprofile
59	#+end_src
60
61	Add the following snippet to the end of the shell profile file. This
62	will execute the =startx= command upon login.
63
64	#+begin_src sh
65	if [ -z "${DISPLAY}" ] && [ "${XDG_VTNR}" -eq 1 ]; then
66	exec startx
67	fi
68	#+end_src
69
70	Alternatively, you can ignore this step and simply choose to manually
71	execute =startx= upon login. This can be useful if you have issues with
72	your desktop or like to manually launch different desktops by choice.

content/blog/2022-11-07-self-hosting-matrix.org → content/blog/2022-11-07-self-hosting-matrix.md renamed +87 −73

	@@ -1,98 +1,107 @@
1	#+title: Self-Hosting Matrix Synapse on Alpine Linux	1	+++
2	#+date: 2022-11-07	2	date = 2022-11-07
3	#+description: A guide to self-hosting the Matrix Synapse application on your own server.	3	title = "Self-Hosting Matrix Synapse on Alpine Linux"
4	#+filetags: :selfhosting:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Synpase	8	# Synpase
7	If you're reading this, you likely know that	9
8	[[https://github.com/matrix-org/synapse/][Synapse]] is a popular	10	If you\'re reading this, you likely know that
9	[[https://matrix.org/][Matrix]] home server software that allows users	11	[Synapse](https://github.com/matrix-org/synapse/) is a popular
10	to run their own Matrix home server.	12	[Matrix](https://matrix.org/) home server software that allows users to
		13	run their own Matrix home server.
11		14
12	This post is a short guide describing how I was able to get Synapse	15	This post is a short guide describing how I was able to get Synapse
13	working in a minimally-usable state on Alpine Linux.	16	working in a minimally-usable state on Alpine Linux.
14		17
15	* Installation Process	18	# Installation Process
16	** Dependencies	19
		20	## Dependencies
		21
17	First, since there is no Alpine-specific package for Synapse, we need to	22	First, since there is no Alpine-specific package for Synapse, we need to
18	ensure that Alpine has the required dependencies for the Python-based	23	ensure that Alpine has the required dependencies for the Python-based
19	installation method.	24	installation method.
20		25
21	#+begin_src sh	26	```sh
22	doas apk -U update	27	doas apk -U update
23	doas apk add python3 py3-virtualenv	28	doas apk add python3 py3-virtualenv
24	#+end_src	29	```
25		30
26	Next, we need to set up a Python virtual environment for Synapse:	31	Next, we need to set up a Python virtual environment for Synapse:
27		32
28	#+begin_src sh	33	```sh
29	mkdir -p ~/synapse && cd ~/synapse	34	mkdir -p ~/synapse && cd ~/synapse
30	virtualenv -p python3 ~/synapse/env	35	virtualenv -p python3 ~/synapse/env
31	source ~/synapse/env/bin/activate	36	source ~/synapse/env/bin/activate
32	pip install --upgrade pip	37	pip install --upgrade pip
33	pip install --upgrade setuptools	38	pip install --upgrade setuptools
34	pip install matrix-synapse	39	pip install matrix-synapse
35	#+end_src	40	```
		41
		42	## Running Synapse
36		43
37	** Running Synapse
38	Once installed, running Synapse is easy. Simply execute the following	44	Once installed, running Synapse is easy. Simply execute the following
39	command, replacing =example.com= with the domain name that will be used	45	command, replacing `example.com` with the domain name that
40	with this home server. This will generate the configuration files needed	46	will be used with this home server. This will generate the configuration
41	to run the server.	47	files needed to run the server.
42		48
43	#+begin_src sh	49	```sh
44	python -m synapse.app.homeserver \	50	python -m synapse.app.homeserver \
45	--server-name example.com \	51	--server-name example.com \
46	--config-path homeserver.yaml \	52	--config-path homeserver.yaml \
47	--generate-config \	53	--generate-config \
48	--report-stats=no	54	--report-stats=no
49	#+end_src	55	```
50		56
51	Once the configuration is generated, we can start up the Synapse server:	57	Once the configuration is generated, we can start up the Synapse server:
52		58
53	#+begin_src sh	59	```sh
54	synctl start	60	synctl start
55	#+end_src	61	```
56		62
57	** Configuring Synapse	63	## Configuring Synapse
58	To make any change to Synapse, we need to edit the =YAML= configuration
59	file:
60		64
61	#+begin_src sh	65	To make any change to Synapse, we need to edit the `YAML`
		66	configuration file:
		67
		68	```sh
62	nano ~/synapse/homeserver.yaml	69	nano ~/synapse/homeserver.yaml
63	#+end_src	70	```
64		71
65	For now, we just need to ensure the =server_name= is accurate. However,	72	For now, we just need to ensure the `server_name` is
66	there are a lot of other configuration options found in the	73	accurate. However, there are a lot of other configuration options found
67	[[https://matrix-org.github.io/synapse/develop/usage/configuration/config_documentation.html][Configuring	74	in the [Configuring
68	Synapse]] documentation that can be enabled/disabled at any point.	75	Synapse](https://matrix-org.github.io/synapse/develop/usage/configuration/config_documentation.html)
		76	documentation that can be enabled/disabled at any point.
69		77
70	#+begin_src yaml	78	``` yaml
71	server_name: "example.com"	79	server_name: "example.com"
72	#+end_src	80	```
73		81
74	Make sure to restart Synapse when you make changes to the configuration:	82	Make sure to restart Synapse when you make changes to the configuration:
75		83
76	#+begin_src sh	84	```sh
77	synctl restart	85	synctl restart
78	#+end_src	86	```
		87
		88	## Nginx Reverse-Proxy
79		89
80	** Nginx Reverse-Proxy
81	To ensure that Synapse is reachable from the public, we need to connect	90	To ensure that Synapse is reachable from the public, we need to connect
82	our domain to the Synapse server. In my case, I use a Nginx	91	our domain to the Synapse server. In my case, I use a Nginx
83	reverse-proxy for this purpose.	92	reverse-proxy for this purpose.
84		93
85	To use Nginx, we need to create a reverse-proxy configuration file:	94	To use Nginx, we need to create a reverse-proxy configuration file:
86		95
87	#+begin_src sh	96	```sh
88	doas nano /etc/nginx/http.d/example.com.conf	97	doas nano /etc/nginx/http.d/example.com.conf
89	#+end_src	98	```
90		99
91	If you already have TLS certificates for this domain (=example.com=),	100	If you already have TLS certificates for this domain
92	you can simply use the SSL configuration and point toward your TLS	101	(`example.com`), you can simply use the SSL configuration and
93	certificates.	102	point toward your TLS certificates.
94		103
95	#+begin_src conf	104	``` conf
96	server {	105	server {
97	listen 443 ssl http2;	106	listen 443 ssl http2;
98	listen [::]:443 ssl http2;	107	listen [::]:443 ssl http2;
	@@ -131,15 +140,15 @@ server {
131	listen 80;	140	listen 80;
132	return 404;	141	return 404;
133	}	142	}
134	#+end_src	143	```
135		144
136	If you need to generate TLS certificates (I recommend	145	If you need to generate TLS certificates (I recommend
137	[[https://certbot.eff.org/][Certbot]]), you'll need a more minimal Nginx	146	[Certbot](https://certbot.eff.org/)), you\'ll need a more minimal Nginx
138	conf file before you can use the TLS-enabled example above. Instead, use	147	conf file before you can use the TLS-enabled example above. Instead, use
139	this configuration file during the Certbot certificate generation	148	this configuration file during the Certbot certificate generation
140	process:	149	process:
141		150
142	#+begin_src conf	151	``` conf
143	server {	152	server {
144	server_name example.com;	153	server_name example.com;
145	location / {	154	location / {
	@@ -147,60 +156,65 @@ server {
147	}	156	}
148	listen 80;	157	listen 80;
149	}	158	}
150	#+end_src	159	```
151		160
152	Once you're done editing the Nginx conf file, restart Nginx:	161	Once you\'re done editing the Nginx conf file, restart Nginx:
153		162
154	#+begin_src sh	163	```sh
155	doas rc-service nginx restart	164	doas rc-service nginx restart
156	#+end_src	165	```
157		166
158	If you still need to generate TLS certificates, run =certbot= now and	167	If you still need to generate TLS certificates, run `certbot`
159	obtain the certificates. Certbot will ask if you want to use a webroot	168	now and obtain the certificates. Certbot will ask if you want to use a
160	or spin up a temporary web server. I highly* recommend using the	169	webroot or spin up a temporary web server. I highly\* recommend
161	temporary web server due to the many issues with using a webroot.	170	using the temporary web server due to the many issues with using a
		171	webroot.
162		172
163	You will need to stop Nginx in order to user the temporary web server	173	You will need to stop Nginx in order to user the temporary web server
164	option with Certbot:	174	option with Certbot:
165		175
166	#+begin_src sh	176	```sh
167	# Stop Nginx so certbot can spin up a temp webserver for cert generation	177	# Stop Nginx so certbot can spin up a temp webserver for cert generation
168	doas rc-service nginx stop	178	doas rc-service nginx stop
169	doas certbot certonly -v	179	doas certbot certonly -v
170	doas rc-service nginx start	180	doas rc-service nginx start
171	#+end_src	181	```
172		182
173	** Open Firewall & Router Ports	183	## Open Firewall & Router Ports
174	If you use a firewall on the server, open the =8448= port for discovery
175	and federation, as well as the normal web server ports if you're using a
176	reverse proxy. If you want additional services, such as voice calls, you
177	will need to read the Synapse documentation to see which ports need to
178	be opened for those features.
179		184
180	Here's an example of the Universal Firewall (UFW) software:	185	If you use a firewall on the server, open the `8448` port for
		186	discovery and federation, as well as the normal web server ports if
		187	you\'re using a reverse proxy. If you want additional services, such as
		188	voice calls, you will need to read the Synapse documentation to see
		189	which ports need to be opened for those features.
181		190
182	#+begin_src sh	191	Here\'s an example of the Universal Firewall (UFW) software:
		192
		193	```sh
183	# Matrix port	194	# Matrix port
184	doas ufw allow 8448	195	doas ufw allow 8448
185	# Standard web server ports	196	# Standard web server ports
186	doas ufw allow "Nginx Full"	197	doas ufw allow "Nginx Full"
187	#+end_src	198	```
		199
		200	Remember to forward any Synapse ports, such as `8448`,
		201	`80`, and `443`, in your Router from the internet
		202	to your server\'s IP address.
188		203
189	Remember to forward any Synapse ports, such as =8448=, =80=, and =443=,	204	## Adding Matrix Users
190	in your Router from the internet to your server's IP address.
191		205
192	** Adding Matrix Users	206	Finally, if you didn\'t enable public registration in the
193	Finally, if you didn't enable public registration in the	207	`homeserver.yaml` file, you can manually create users via the
194	=homeserver.yaml= file, you can manually create users via the
195	command-line:	208	command-line:
196		209
197	#+begin_src sh	210	```sh
198	cd ~/synapse	211	cd ~/synapse
199	register_new_matrix_user -c homeserver.yaml	212	register_new_matrix_user -c homeserver.yaml
200	#+end_src	213	```
201		214
202	Remember that the format for federated Matrix usernames is	215	Remember that the format for federated Matrix usernames is
203	=@username:example.com= when logging in to client applications.	216	`@username:example.com` when logging in to client
		217	applications.
204		218
205	Once Synapse is running, and you have a username, you are ready to log	219	Once Synapse is running, and you have a username, you are ready to log
206	in to a Matrix client and start sending messages, joining rooms, and	220	in to a Matrix client and start sending messages, joining rooms, and

content/blog/2022-11-11-nginx-tmp-errors.md added +80

@@ -0,0 +1,80 @@
	1	+++
	2	date = 2022-11-11
	3	title = "Fixing Permission Errors in /var/lib/nginx"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	*This is a brief post so that I personally remember the solution as it
	9	has occurred multiple times for me.*
	10
	11	# The Problem
	12
	13	After migrating to a new server OS, I started receiving quite a few
	14	permission errors like the one below. These popped up for various
	15	different websites I\'m serving via Nginx on this server, but did not
	16	prevent the website from loading.
	17
	18	I found the errors in the standard log file:
	19
	20	```sh
	21	cat /var/log/nginx/error.log
	22	```
	23
	24	```sh
	25	2022/11/11 11:30:34 [crit] 8970#8970: *10 open() "/var/lib/nginx/tmp/proxy/3/00/0000000003" failed (13: Permission denied) while reading upstream, client: 169.150.203.10, server: cyberchef.example.com, request: "GET /assets/main.css HTTP/2.0", upstream: "http://127.0.0.1:8111/assets/main.css", host: "cyberchef.example.com", referrer: "https://cyberchef.example.com/"
	26	```
	27
	28	You can see that the error is `13: Permission denied` and it
	29	occurs in the `/var/lib/nginx/tmp/` directory. In my case, I
	30	had thousands of errors where Nginx was denied permission to read/write
	31	files in this directory.
	32
	33	So how do I fix it?
	34
	35	# The Solution
	36
	37	In order to resolve the issue, I had to ensure the
	38	`/var/lib/nginx` directory is owned by Nginx. Mine was owned
	39	by the `www` user and Nginx was not able to read or write
	40	files within that directory. This prevented Nginx from caching temporary
	41	files.
	42
	43	```sh
	44	# Alpine Linux
	45	doas chown -R nginx:nginx /var/lib/nginx
	46
	47	# Other Distros
	48	sudo chown -R nginx:nginx /var/lib/nginx
	49	```
	50
	51	You may also be able to change the `proxy_temp_path` in
	52	your Nginx config, but I did not try this. Here\'s a suggestion I found
	53	online that may work if the above solution does not:
	54
	55	```sh
	56	nano /etc/nginx/http.d/example.com.conf
	57	```
	58
	59	``` conf
	60	server {
	61	...
	62
	63	# Set the proxy_temp_path to your preference, make sure it's owned by the
	64	# `nginx` user
	65	proxy_temp_path /tmp;
	66
	67	...
	68	}
	69	```
	70
	71	Finally, restart Nginx and your server should be able to cache temporary
	72	files again.
	73
	74	```sh
	75	# Alpine Linux (OpenRC)
	76	doas rc-service nginx restart
	77
	78	# Other Distros (systemd)
	79	sudo systemctl restart nginx
	80	```

content/blog/2022-11-11-nginx-tmp-errors.org deleted −75

	@@ -1,75 +0,0 @@
1	#+title: Fixing Permission Errors in /var/lib/nginx
2	#+date: 2022-11-11
3	#+description: Learn how to fix permission errors related to the Nginx temporary file storage.
4	#+filetags: :nginx:
5
6	/This is a brief post so that I personally remember the solution as it
7	has occurred multiple times for me./
8
9	* The Problem
10	After migrating to a new server OS, I started receiving quite a few
11	permission errors like the one below. These popped up for various
12	different websites I'm serving via Nginx on this server, but did not
13	prevent the website from loading.
14
15	I found the errors in the standard log file:
16
17	#+begin_src sh
18	cat /var/log/nginx/error.log
19	#+end_src
20
21	#+begin_src sh
22	2022/11/11 11:30:34 [crit] 8970#8970: *10 open() "/var/lib/nginx/tmp/proxy/3/00/0000000003" failed (13: Permission denied) while reading upstream, client: 169.150.203.10, server: cyberchef.example.com, request: "GET /assets/main.css HTTP/2.0", upstream: "http://127.0.0.1:8111/assets/main.css", host: "cyberchef.example.com", referrer: "https://cyberchef.example.com/"
23	#+end_src
24
25	You can see that the error is =13: Permission denied= and it occurs in
26	the =/var/lib/nginx/tmp/= directory. In my case, I had thousands of
27	errors where Nginx was denied permission to read/write files in this
28	directory.
29
30	So how do I fix it?
31
32	* The Solution
33	In order to resolve the issue, I had to ensure the =/var/lib/nginx=
34	directory is owned by Nginx. Mine was owned by the =www= user and Nginx
35	was not able to read or write files within that directory. This
36	prevented Nginx from caching temporary files.
37
38	#+begin_src sh
39	# Alpine Linux
40	doas chown -R nginx:nginx /var/lib/nginx
41
42	# Other Distros
43	sudo chown -R nginx:nginx /var/lib/nginx
44	#+end_src
45
46	You /may/ also be able to change the =proxy_temp_path= in your Nginx
47	config, but I did not try this. Here's a suggestion I found online that
48	may work if the above solution does not:
49
50	#+begin_src sh
51	nano /etc/nginx/http.d/example.com.conf
52	#+end_src
53
54	#+begin_src conf
55	server {
56	...
57
58	# Set the proxy_temp_path to your preference, make sure it's owned by the
59	# `nginx` user
60	proxy_temp_path /tmp;
61
62	...
63	}
64	#+end_src
65
66	Finally, restart Nginx and your server should be able to cache temporary
67	files again.
68
69	#+begin_src sh
70	# Alpine Linux (OpenRC)
71	doas rc-service nginx restart
72
73	# Other Distros (systemd)
74	sudo systemctl restart nginx
75	#+end_src

content/blog/2022-11-27-server-build.org → content/blog/2022-11-27-server-build.md renamed +63 −56

	@@ -1,9 +1,12 @@
1	#+title: Building a Custom Rack-Mounted Server	1	+++
2	#+date: 2022-11-27	2	date = 2022-11-27
3	#+description: A retrospective on building my own rack-mounted server.	3	title = "Building a Custom Rack-Mounted Server"
4	#+filetags: :hardware:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# The Dilemma
5		9
6	* The Dilemma
7	For years, I have been using desktops and a Raspberry Pi as the backbone	10	For years, I have been using desktops and a Raspberry Pi as the backbone
8	of my homelab. I have always wanted to move toward a single dedicated	11	of my homelab. I have always wanted to move toward a single dedicated
9	server that could handle all of my tasks, but was often put off by the	12	server that could handle all of my tasks, but was often put off by the
	@@ -19,59 +22,62 @@ After returning the R720XD, I decided that I wanted to build my own
19	server with modern, consumer-grade PC components. This time, I am very	22	server with modern, consumer-grade PC components. This time, I am very
20	happy with the results of my server.	23	happy with the results of my server.
21		24
22	* Components	25	# Components
23	I'll start by listing all the components I used for this server build:	26
24		27	I\'ll start by listing all the components I used for this server build:
25	- Case:	28
26	[[https://www.rosewill.com/rosewill-rsv-r4100u-black/p/9SIA072GJ92825][Rosewill	29	- Case: [Rosewill RSV-R4100U 4U Server Chassis Rackmount
27	RSV-R4100U 4U Server Chassis Rackmount Case]]	30	Case](https://www.rosewill.com/rosewill-rsv-r4100u-black/p/9SIA072GJ92825)
28	- Motherboard: [[https://nzxt.com/product/n7-b550][NZXT B550]]	31	- Motherboard: [NZXT B550](https://nzxt.com/product/n7-b550)
29	- CPU: AMD Ryzen 7 5700G with Radeon Graphics	32	- CPU: AMD Ryzen 7 5700G with Radeon Graphics
30	- GPU: N/A - I specifically chose one of the few AMD CPUs that support	33	- GPU: N/A - I specifically chose one of the few AMD CPUs that
31	onboard graphics.	34	support onboard graphics.
32	- RAM: 64GB RAM (2x32GB) /Max of 128GB RAM on this motherboard/	35	- RAM: 64GB RAM (2x32GB) Max of 128GB RAM on this motherboard
33	- Boot Drive: Western Digital 500GB M.2 NVME SSD	36	- Boot Drive: Western Digital 500GB M.2 NVME SSD
34	- HDD Bay:	37	- HDD Bay:
35	- 10TB WD White /(shucked, moved from previous server)/	38	- 10TB WD White (shucked, moved from previous server)
36	- 8TB WD White /(shucked, moved from previous server)/	39	- 8TB WD White (shucked, moved from previous server)
37	- 2 x 8TB WD Red Plus /(Black Friday lined up perfectly with this	40	- 2 x 8TB WD Red Plus *(Black Friday lined up perfectly with this
38	build, so I grabbed two of these)/	41	build, so I grabbed two of these)*
39	- PSU: Corsair RM850 PSU	42	- PSU: Corsair RM850 PSU
40	- Extras:	43	- Extras:
41	- Corsair TM3Q Thermal Paste	44	- Corsair TM3Q Thermal Paste
42	- Noctua 120mm fan /(replacement for front case fan)/	45	- Noctua 120mm fan (replacement for front case fan)
43	- 2 x Noctua 80mm fans /(replacement for rear case fans)/	46	- 2 x Noctua 80mm fans (replacement for rear case fans)
44	- CableMatters 6Gbps SATA Cables	47	- CableMatters 6Gbps SATA Cables
45		48
46	* Building the Server	49	# Building the Server
		50
47	This took quite a while for me to build (in my opinion of time),	51	This took quite a while for me to build (in my opinion of time),
48	totaling around 3 hours from start to finish. The case has some peculiar	52	totaling around 3 hours from start to finish. The case has some peculiar
49	construction, so you have to completely remove the ODD & HDD cages to	53	construction, so you have to completely remove the ODD & HDD cages to
50	install the motherboard and other components first.	54	install the motherboard and other components first.
51		55
52	Now, I've never built a computer of any kind before, so I was quite	56	Now, I\'ve never built a computer of any kind before, so I was quite
53	nervous. Personally, the only challenging part was getting the CPU	57	nervous. Personally, the only challenging part was getting the CPU
54	cooler to screw into the motherboard without sliding the thermal paste	58	cooler to screw into the motherboard without sliding the thermal paste
55	around too much underneath. I'm still not entirely sure if I did a great	59	around too much underneath. I\'m still not entirely sure if I did a
56	job of it, but nothing's broken yet.	60	great job of it, but nothing\'s broken yet.
57		61
58	The main components were all fine and simple. However, installing the	62	The main components were all fine and simple. However, installing the
59	hard drives is slightly tedious as I need to power off the server and	63	hard drives is slightly tedious as I need to power off the server and
60	completely unscrew the HDD cage to install or remove any drives.	64	completely unscrew the HDD cage to install or remove any drives.
61	Additionally, the drives are screwed directly into the metal cage with	65	Additionally, the drives are screwed directly into the metal cage with
62	small screws, which are quite a bit different from the HDD trays I'm	66	small screws, which are quite a bit different from the HDD trays I\'m
63	used to in other machines.	67	used to in other machines.
64		68
65	Seeing that the cases with hot-swap bays were 3-4x the price, I'm okay	69	Seeing that the cases with hot-swap bays were 3-4x the price, I\'m okay
66	dealing with the tedium of removing the cage to install new drives.	70	dealing with the tedium of removing the cage to install new drives.
67		71
68	* Software	72	# Software
69	I'm not going to dive into the software as I have done so in other	73
		74	I\'m not going to dive into the software as I have done so in other
70	recent posts. However, I wanted to note that I am using Alpine Linux on	75	recent posts. However, I wanted to note that I am using Alpine Linux on
71	this server and hosting most services inside Docker. No virtual machines	76	this server and hosting most services inside Docker. No virtual machines
72	(VMs) and very few bare-metal services.	77	(VMs) and very few bare-metal services.
73		78
74	* The Results	79	# The Results
		80
75	How did my build turn out? Well, after migrating my other servers and	81	How did my build turn out? Well, after migrating my other servers and
76	their services over, I found that my server is blazing fast. The	82	their services over, I found that my server is blazing fast. The
77	heaviest of my applications, Plex, is handled with ease. Even 4k	83	heaviest of my applications, Plex, is handled with ease. Even 4k
	@@ -81,28 +87,29 @@ I am very happy with the results and will likely continue to improve on
81	this server as the years go by rather than buying another used server	87	this server as the years go by rather than buying another used server
82	online.	88	online.
83		89
84	** Mistakes I Made	90	## Mistakes I Made
85	This post wouldn't be complete unless I wrote about the mistakes I made	91
86	while building. The only real mistake I made beyond a "whoops I dropped	92	This post wouldn\'t be complete unless I wrote about the mistakes I made
87	a screw" related to airflow and fan direction.	93	while building. The only real mistake I made beyond a \"whoops I dropped
		94	a screw\" related to airflow and fan direction.
88		95
89	While installing the two new hard drives that showed up on 2022-11-30	96	While installing the two new hard drives that showed up on 2022-11-30
90	and getting ready to install the case in my rack, I noticed that the	97	and getting ready to install the case in my rack, I noticed that the
91	hard drive temperatures were quite high.	98	hard drive temperatures were quite high.
92		99
93	I used the =smartctl= command for each of my drives (=/dev/sda= through	100	I used the `smartctl` command for each of my drives
94	=/dev/sdd=):	101	(`/dev/sda` through `/dev/sdd`):
95		102
96	#+begin_src sh	103	```sh
97	doas smartctl -a /dev/sda \| grep Temperature_Celsius	104	doas smartctl -a /dev/sda \| grep Temperature_Celsius
98	#+end_src	105	```
99		106
100	The results were unusual - all four drives were idling at ~44-46 degrees	107	The results were unusual - all four drives were idling at \~44-46
101	Celsius. The only drive that was cooler was my 10TB drive, which was at	108	degrees Celsius. The only drive that was cooler was my 10TB drive, which
102	38 degrees Celsius. I noted that this 10TB drive was also closest to the	109	was at 38 degrees Celsius. I noted that this 10TB drive was also closest
103	case fan.	110	to the case fan.
104		111
105	#+begin_src sh	112	```sh
106	ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE	113	ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
107	# /dev/sda	114	# /dev/sda
108	194 Temperature_Celsius 0x0002 147 147 000 Old_age Always - 44 (Min/Max 22/46)	115	194 Temperature_Celsius 0x0002 147 147 000 Old_age Always - 44 (Min/Max 22/46)
	@@ -112,7 +119,7 @@ ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_
112	194 Temperature_Celsius 0x0002 144 144 000 Old_age Always - 45 (Min/Max 19/61)	119	194 Temperature_Celsius 0x0002 144 144 000 Old_age Always - 45 (Min/Max 19/61)
113	# /dev/sdd	120	# /dev/sdd
114	194 Temperature_Celsius 0x0002 171 171 000 Old_age Always - 38 (Min/Max 14/56)	121	194 Temperature_Celsius 0x0002 171 171 000 Old_age Always - 38 (Min/Max 14/56)
115	#+end_src	122	```
116		123
117	After looking to see if I could fit more fans into the case, I noticed	124	After looking to see if I could fit more fans into the case, I noticed
118	that the 120mm fan used for intake from the front of the case was	125	that the 120mm fan used for intake from the front of the case was
	@@ -120,11 +127,11 @@ actually pushing air out of the case by mistake. This fan sits right in
120	front of the hard drive bay.	127	front of the hard drive bay.
121		128
122	Once I flipped the fan around to act as an intake fan, the temperatures	129	Once I flipped the fan around to act as an intake fan, the temperatures
123	dropped immediately! They are now idling at ~31-33 degrees Celsius. A	130	dropped immediately! They are now idling at \~31-33 degrees Celsius. A
124	single fan spinning the wrong way caused my drives to idle 10-15 degrees	131	single fan spinning the wrong way caused my drives to idle 10-15 degrees
125	higher than they should have.	132	higher than they should have.
126		133
127	#+begin_src sh	134	```sh
128	ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE	135	ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
129	# /dev/sda	136	# /dev/sda
130	194 Temperature_Celsius 0x0002 209 209 000 Old_age Always - 31 (Min/Max 14/56)	137	194 Temperature_Celsius 0x0002 209 209 000 Old_age Always - 31 (Min/Max 14/56)
	@@ -134,8 +141,8 @@ ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_
134	194 Temperature_Celsius 0x0002 203 203 000 Old_age Always - 32 (Min/Max 21/48)	141	194 Temperature_Celsius 0x0002 203 203 000 Old_age Always - 32 (Min/Max 21/48)
135	# /dev/sdd	142	# /dev/sdd
136	194 Temperature_Celsius 0x0002 196 196 000 Old_age Always - 33 (Min/Max 22/46)	143	194 Temperature_Celsius 0x0002 196 196 000 Old_age Always - 33 (Min/Max 22/46)
137	#+end_src	144	```
138		145
139	This was a silly error to make, but I'm glad I found it today before I	146	This was a silly error to make, but I\'m glad I found it today before I
140	screwed the case into the rack and made things a lot more tedious to	147	screwed the case into the rack and made things a lot more tedious to
141	fix.	148	fix.

content/blog/2022-11-29-nginx-referrer-ban-list.md added +134

@@ -0,0 +1,134 @@
	1	+++
	2	date = 2022-11-29
	3	title = "Creating a Referrer Ban List in Nginx"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Creating the Ban List
	9
	10	In order to ban list referral domains or websites with Nginx, you need
	11	to create a ban list file. The file below will accept regexes for
	12	different domains or websites you wish to block.
	13
	14	First, create the file in your nginx directory:
	15
	16	```sh
	17	doas nano /etc/nginx/banlist.conf
	18	```
	19
	20	Next, paste the following contents in and fill out the regexes with
	21	whichever domains you\'re blocking.
	22
	23	``` conf
	24	# /etc/nginx/banlist.conf
	25
	26	map $http_referer $bad_referer {
	27	hostnames;
	28
	29	default 0;
	30
	31	# Put regexes for undesired referrers here
	32	"~news.ycombinator.com" 1;
	33	}
	34	```
	35
	36	# Configuring Nginx
	37
	38	In order for the ban list to work, Nginx needs to know it exists and how
	39	to handle it. For this, edit the `nginx.conf` file.
	40
	41	```sh
	42	doas nano /etc/nginx/nginx.conf
	43	```
	44
	45	Within this file, find the `http` block and add your ban list
	46	file location to the end of the block.
	47
	48	``` conf
	49	# /etc/nginx/nginx.conf
	50
	51	http {
	52	...
	53
	54	# Include ban list
	55	include /etc/nginx/banlist.conf;
	56	}
	57	```
	58
	59	# Enabling the Ban List
	60
	61	Finally, we need to take action when a bad referral site is found. To do
	62	so, edit the configuration file for your website. For example, I have
	63	all website configuration files in the `http.d` directory.
	64	You may have them in the `sites-available` directory on some
	65	distributions.
	66
	67	```sh
	68	doas nano /etc/nginx/http.d/example.com.conf
	69	```
	70
	71	Within each website\'s configuration file, edit the `server`
	72	blocks that are listening to ports 80 and 443 and create a check for the
	73	`$bad_referrer` variable we created in the ban list file.
	74
	75	If a matching site is found, you can return any [HTTP Status
	76	Code](https://en.wikipedia.org/wiki/List_of_HTTP_status_codes) you want.
	77	Code 403 (Forbidden) is logical in this case since you are preventing a
	78	client connection due to a banned domain.
	79
	80	``` conf
	81	server {
	82	...
	83
	84	# If a referral site is banned, return an error
	85	if ($bad_referer) {
	86	return 403;
	87	}
	88
	89	...
	90	}
	91	```
	92
	93	# Restart Nginx
	94
	95	Lastly, restart Nginx to enable all changes made.
	96
	97	```sh
	98	doas rc-service nginx restart
	99	```
	100
	101	# Testing Results
	102
	103	In order to test the results, let\'s curl the contents of our site. To
	104	start, I\'ll curl the site normally:
	105
	106	```sh
	107	curl https://cleberg.net
	108	```
	109
	110	The HTML contents of the page come back successfully:
	111
	112	``` html
	113	<!doctype html>...</html>
	114	```
	115
	116	Next, let\'s include a banned referrer:
	117
	118	```sh
	119	curl --referer https://news.ycombinator.com https://cleberg.net
	120	```
	121
	122	This time, I\'m met with a 403 Forbidden response page. That means we
	123	are successful and any clients being referred from a banned domain will
	124	be met with this same response code.
	125
	126	``` html
	127	<html>
	128	<head><title>403 Forbidden</title></head>
	129	<body>
	130	<center><h1>403 Forbidden</h1></center>
	131	<hr><center>nginx</center>
	132	</body>
	133	</html>
	134	```

content/blog/2022-11-29-nginx-referrer-ban-list.org deleted −126

	@@ -1,126 +0,0 @@
1	#+title: Creating a Referrer Ban List in Nginx
2	#+date: 2022-11-29
3	#+description: Learn how to create a ban list for referring sites in Nginx.
4	#+filetags: :nginx:
5
6	* Creating the Ban List
7	In order to ban list referral domains or websites with Nginx, you need
8	to create a ban list file. The file below will accept regexes for
9	different domains or websites you wish to block.
10
11	First, create the file in your nginx directory:
12
13	#+begin_src sh
14	doas nano /etc/nginx/banlist.conf
15	#+end_src
16
17	Next, paste the following contents in and fill out the regexes with
18	whichever domains you're blocking.
19
20	#+begin_src conf
21	# /etc/nginx/banlist.conf
22
23	map $http_referer $bad_referer {
24	hostnames;
25
26	default 0;
27
28	# Put regexes for undesired referrers here
29	"~news.ycombinator.com" 1;
30	}
31	#+end_src
32
33	* Configuring Nginx
34	In order for the ban list to work, Nginx needs to know it exists and how
35	to handle it. For this, edit the =nginx.conf= file.
36
37	#+begin_src sh
38	doas nano /etc/nginx/nginx.conf
39	#+end_src
40
41	Within this file, find the =http= block and add your ban list file
42	location to the end of the block.
43
44	#+begin_src conf
45	# /etc/nginx/nginx.conf
46
47	http {
48	...
49
50	# Include ban list
51	include /etc/nginx/banlist.conf;
52	}
53	#+end_src
54
55	* Enabling the Ban List
56	Finally, we need to take action when a bad referral site is found. To do
57	so, edit the configuration file for your website. For example, I have
58	all website configuration files in the =http.d= directory. You may have
59	them in the =sites-available= directory on some distributions.
60
61	#+begin_src sh
62	doas nano /etc/nginx/http.d/example.com.conf
63	#+end_src
64
65	Within each website's configuration file, edit the =server= blocks that
66	are listening to ports 80 and 443 and create a check for the
67	=$bad_referrer= variable we created in the ban list file.
68
69	If a matching site is found, you can return any
70	[[https://en.wikipedia.org/wiki/List_of_HTTP_status_codes][HTTP Status
71	Code]] you want. Code 403 (Forbidden) is logical in this case since you
72	are preventing a client connection due to a banned domain.
73
74	#+begin_src conf
75	server {
76	...
77
78	# If a referral site is banned, return an error
79	if ($bad_referer) {
80	return 403;
81	}
82
83	...
84	}
85	#+end_src
86
87	* Restart Nginx
88	Lastly, restart Nginx to enable all changes made.
89
90	#+begin_src sh
91	doas rc-service nginx restart
92	#+end_src
93
94	* Testing Results
95	In order to test the results, let's curl the contents of our site. To
96	start, I'll curl the site normally:
97
98	#+begin_src sh
99	curl https://cleberg.net
100	#+end_src
101
102	The HTML contents of the page come back successfully:
103
104	#+begin_src html
105	<!doctype html>...</html>
106	#+end_src
107
108	Next, let's include a banned referrer:
109
110	#+begin_src sh
111	curl --referer https://news.ycombinator.com https://cleberg.net
112	#+end_src
113
114	This time, I'm met with a 403 Forbidden response page. That means we are
115	successful and any clients being referred from a banned domain will be
116	met with this same response code.
117
118	#+begin_src html
119	<html>
120	<head><title>403 Forbidden</title></head>
121	<body>
122	<center><h1>403 Forbidden</h1></center>
123	<hr><center>nginx</center>
124	</body>
125	</html>
126	#+end_src

content/blog/2022-12-01-nginx-compression.md added +80

@@ -0,0 +1,80 @@
	1	+++
	2	date = 2022-12-01
	3	title = "Enable GZIP Compression in Nginx"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Text Compression
	9
	10	Text compression allows a web server to serve text-based resources
	11	faster than uncompressed data. This can speed up things like First
	12	Contentful Paint, Tie to Interactive, and Speed Index.
	13
	14	# Enable Nginx Compression with gzip
	15
	16	In order to enable text compression on Nginx, we need to enable it
	17	within the configuration file:
	18
	19	```sh
	20	nano /etc/nginx/nginx.conf
	21	```
	22
	23	Within the `http` block, find the section that shows
	24	something like the block below. This is the default gzip configuration I
	25	found in my `nginx.conf` file on Alpine Linux 3.17. Yours may
	26	look slightly different, just make sure that you\'re not creating any
	27	duplicate gzip options.
	28
	29	``` conf
	30	# Enable gzipping of responses.
	31	#gzip on;
	32
	33	# Set the Vary HTTP header as defined in the RFC 2616. Default is 'off'.
	34	gzip_vary on;
	35	```
	36
	37	Remove the default gzip lines and replace them with the following:
	38
	39	``` conf
	40	# Enable gzipping of responses.
	41	gzip on;
	42	gzip_vary on;
	43	gzip_min_length 10240;
	44	gzip_proxied expired no-cache no-store private auth;
	45	gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/xml;
	46	gzip_disable "MSIE [1-6]";
	47	```
	48
	49	# Explanations of ngx~httpgzipmodule~ Options
	50
	51	Each of the lines above enables a different aspect of the gzip response
	52	for Nginx. Here are the full explanations:
	53
	54	- `gzip` -- Enables or disables gzipping of responses.
	55	- `gzip_vary` -- Enables or disables inserting the \"Vary:
	56	Accept-Encoding\" response header field if the directives gzip,
	57	gzip~static~, or gunzip are active.
	58	- `gzip_min_length` -- Sets the minimum length of a
	59	response that will be gzipped. The length is determined only from
	60	the \"Content-Length\" response header field.
	61	- `gzip_proxied` -- Enables or disables gzipping of
	62	responses for proxied requests depending on the request and
	63	response. The fact that the request is proxied is determined by the
	64	presence of the \"Via\" request header field.
	65	- `gzip_types` -- Enables gzipping of responses for the
	66	specified MIME types in addition to \"text/html\". The special value
	67	"\*" matches any MIME type (0.8.29). Responses with the
	68	\"text/html\" type are always compressed.
	69	- `gzip_disable` -- Disables gzipping of responses for
	70	requests with \"User-Agent\" header fields matching any of the
	71	specified regular expressions.
	72	- The special mask \"msie6\" (0.7.12) corresponds to the regular
	73	expression \"MSIE \[4-6\].\", but works faster. Starting from
	74	version 0.8.11, \"MSIE 6.0; ... SV1\" is excluded from this
	75	mask.
	76
	77	More information on these directives and their options can be found on
	78	the [Module
	79	ngx~httpgzipmodule~](https://nginx.org/en/docs/http/ngx_http_gzip_module.html)
	80	page in Nginx\'s documentation.

content/blog/2022-12-01-nginx-compression.org deleted −73

	@@ -1,73 +0,0 @@
1	#+title: Enable GZIP Compression in Nginx
2	#+date: 2022-12-01
3	#+description: Learn how to enable compression in Nginx.
4	#+filetags: :nginx:
5
6	* Text Compression
7	Text compression allows a web server to serve text-based resources
8	faster than uncompressed data. This can speed up things like First
9	Contentful Paint, Tie to Interactive, and Speed Index.
10
11	* Enable Nginx Compression with gzip
12	In order to enable text compression on Nginx, we need to enable it
13	within the configuration file:
14
15	#+begin_src sh
16	nano /etc/nginx/nginx.conf
17	#+end_src
18
19	Within the =http= block, find the section that shows something like the
20	block below. This is the default gzip configuration I found in my
21	=nginx.conf= file on Alpine Linux 3.17. Yours may look slightly
22	different, just make sure that you're not creating any duplicate gzip
23	options.
24
25	#+begin_src conf
26	# Enable gzipping of responses.
27	#gzip on;
28
29	# Set the Vary HTTP header as defined in the RFC 2616. Default is 'off'.
30	gzip_vary on;
31	#+end_src
32
33	Remove the default gzip lines and replace them with the following:
34
35	#+begin_src conf
36	# Enable gzipping of responses.
37	gzip on;
38	gzip_vary on;
39	gzip_min_length 10240;
40	gzip_proxied expired no-cache no-store private auth;
41	gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/xml;
42	gzip_disable "MSIE [1-6]";
43	#+end_src
44
45	* Explanations of ngx_{httpgzipmodule} Options
46	Each of the lines above enables a different aspect of the gzip response
47	for Nginx. Here are the full explanations:
48
49	- =gzip= -- Enables or disables gzipping of responses.
50	- =gzip_vary= -- Enables or disables inserting the "Vary:
51	Accept-Encoding" response header field if the directives gzip,
52	gzip_{static}, or gunzip are active.
53	- =gzip_min_length= -- Sets the minimum length of a response that will
54	be gzipped. The length is determined only from the "Content-Length"
55	response header field.
56	- =gzip_proxied= -- Enables or disables gzipping of responses for
57	proxied requests depending on the request and response. The fact that
58	the request is proxied is determined by the presence of the "Via"
59	request header field.
60	- =gzip_types= -- Enables gzipping of responses for the specified MIME
61	types in addition to "text/html". The special value “*” matches any
62	MIME type (0.8.29). Responses with the "text/html" type are always
63	compressed.
64	- =gzip_disable= -- Disables gzipping of responses for requests with
65	"User-Agent" header fields matching any of the specified regular
66	expressions.
67	- The special mask "msie6" (0.7.12) corresponds to the regular
68	expression "MSIE [4-6].", but works faster. Starting from version
69	0.8.11, "MSIE 6.0; ... SV1" is excluded from this mask.
70
71	More information on these directives and their options can be found on
72	the [[https://nginx.org/en/docs/http/ngx_http_gzip_module.html][Module
73	ngx_{httpgzipmodule}]] page in Nginx's documentation.

content/blog/2022-12-07-nginx-wildcard-redirect.org → content/blog/2022-12-07-nginx-wildcard-redirect.md renamed +40 −33

-#+title: Redirect Nginx Subdomains & Trailing Content with Regex
++++
-#+date: 2022-12-07
+date = 2022-12-07
-#+description: A simple Nginx configuration to redirect all subdomains and trailing content.
+title = "Redirect Nginx Subdomains and Trailing Content with Regex"
-#+filetags: :nginx:
+description = ""
+draft = false
++++
+# Problem
-* Problem
 I recently migrated domains and replaced the old webpage with a simple
 info page with instructions to users on how to edit their bookmarks and
 URLs to get to the page they were seeking.
 This was not ideal as it left the work up to the user and may have
 caused friction for users who accessed my RSS feed.
-* Solution
+# Solution
 Instead, I finally found a solution that allows me to redirect both
 subdomains AND trailing content. For example, both of these URLs now
-redirect properly using the logic I'll explain below:
+redirect properly using the logic I\'ll explain below:
-#+begin_src txt
+``` txt
 # Example 1 - Simple base domain redirect with trailing content
 https://domain1.com/blog/alpine-linux/ -> https://domain2.com/blog/alpine-linux/
 https://libreddit.domain1.com/r/history/comments/7z8cbg/new_discovery_mode_turns_video_game_assassins/
 ->
 https://libreddit.domain2.com/r/history/comments/7z8cbg/new_discovery_mode_turns_video_game_assassins/
-#+end_src
+```
 Go ahead, try the URLs if you want to test them.
-** Nginx Config
+## Nginx Config
 To make this possible. I needed to configure a proper redirect scheme in
 my Nginx configuration.
-#+begin_src sh
+```sh
 doas nano /etc/nginx/http.d/domain1.conf
-#+end_src
+```
 Within this file, I had one block configured to redirect HTTP requests
 to HTTPS for the base domain and all subdomains.
-#+begin_src conf
+``` conf
 server {
         listen [::]:80;
         listen 80;
         return 404;
 }
-#+end_src
+```
-For the base domain, I have another =server= block dedicated to
+For the base domain, I have another `server` block dedicated
-redirecting all base domain requests. You can see that the =rewrite=
+to redirecting all base domain requests. You can see that the
-line is instructing Nginx to gather all trailing content and append it
+`rewrite` line is instructing Nginx to gather all trailing
-to the new =domain2.com= URL.
+content and append it to the new `domain2.com` URL.
-#+begin_src conf
+``` conf
 server {
         listen [::]:443 ssl http2;
         listen 443 ssl http2;
         ssl_certificate     /etc/letsencrypt/live/domain1.com/fullchain.pem;
         ssl_certificate_key /etc/letsencrypt/live/domain1.com/privkey.pem;
 }
-#+end_src
+```
 Finally, the tricky part is figuring out how to tell Nginx to redirect
 while keeping both a subdomain and trailing content intact. I found that
-the easiest way to do this is to give it a =server= block of its own.
+the easiest way to do this is to give it a `server` block of
+its own.
-Within this block, we need to do some regex on the =server_name= line
+Within this block, we need to do some regex on the
-before we can rewrite anything. This creates a variable called
+`server_name` line before we can rewrite anything. This
-=subdomain=.
+creates a variable called `subdomain`.
-Once the server gets to the =rewrite= line, it pulls the =subdomain=
+Once the server gets to the `rewrite` line, it pulls the
-variable from above and uses it on the new =domain2.com= domain before
+`subdomain` variable from above and uses it on the new
-appending the trailing content (=$request_uri=).
+`domain2.com` domain before appending the trailing content
+(`$request_uri`).
-#+begin_src conf
+``` conf
 server {
         listen [::]:443 ssl http2;
         listen 443 ssl http2;
         ssl_certificate     /etc/letsencrypt/live/domain1.com/fullchain.pem;
         ssl_certificate_key /etc/letsencrypt/live/domain1.com/privkey.pem;
 }
-#+end_src
+```
-That's all there is to it. With this, I simply restarted Nginx and
+That\'s all there is to it. With this, I simply restarted Nginx and
 watched the redirections work in-action.
-#+begin_src sh
+```sh
 doas rc-service nginx restart
-#+end_src
+```
 Looking back on it, I wish I had done this sooner. Who knows how many
 people went looking for my sites or bookmarks and gave up when they saw
 the redirect instructions page.
-Oh well, it's done now. Live and learn.
+Oh well, it\'s done now. Live and learn.

content/blog/2022-12-17-st.md added +95

@@ -0,0 +1,95 @@
	1	+++
	2	date = 2022-12-17
	3	title = "Simple Terminal"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# st
	9
	10	[st](https://st.suckless.org) standards for Simple Terminal, a simple
	11	terminal implementation for X made by the
	12	[suckless](https://suckless.org) team.
	13
	14	This post walks through the dependencies needed and process to build and
	15	install `st` on Fedora Workstation.
	16
	17	## Obtain Files
	18
	19	To start, obtain the source files for `st` via
	20	`git clone`.
	21
	22	```sh
	23	mkdir ~/suckless && cd ~/suckless
	24	git clone https://git.suckless.org/st && cd st
	25	```
	26
	27	## Dependencies
	28
	29	Once you have the files and are in the `st` directory, ensure
	30	the following packages are installed.
	31
	32	```sh
	33	sudo dnf update && sudo dnf upgrade
	34	sudo dnf install gcc patch libX11-devel libXft-devel
	35	```
	36
	37	## Building
	38
	39	Before building, ensure that you read the README file.
	40
	41	```sh
	42	cat README
	43	```
	44
	45	Once you\'ve read the instructions, open the `config.mk` file
	46	and ensure it matches your setup. If you\'re not sure, leave the default
	47	options within the file.
	48
	49	Finally, you can build `st` with the following command.
	50	Ensure you run as root (e.g., `sudo`) or else you may not end
	51	up with a usable application file.
	52
	53	```sh
	54	sudo make clean install
	55	```
	56
	57	## Customization (Patches)
	58
	59	Note that customizing `st` requires you to modify the source
	60	files or to download one of the [available
	61	patches](https://st.suckless.org/patches/) for suckless.org.
	62
	63	If you\'ve already installed `st` and want to customize or
	64	install a patch, start by uninstalling the current program.
	65
	66	```sh
	67	cd ~/suckless/st
	68	sudo make uninstall
	69	```
	70
	71	Next, grab the `<path>.diff` file from the page of the patch
	72	you chose. For example, I will be using the
	73	[defaultfontsize](https://st.suckless.org/patches/defaultfontsize/)
	74	patch in the below example.
	75
	76	```sh
	77	wget https://st.suckless.org/patches/defaultfontsize/st-defaultfontsize-20210225-4ef0cbd.diff
	78	```
	79
	80	Once the file is downloaded inside the `st` folder, apply the
	81	patch and re-install the program. You may need to install the
	82	`patch` command if you don\'t have it installed already (you
	83	should have installed it above).
	84
	85	```sh
	86	patch -i st-defaultfontsize-20210225-4ef0cbd.diff
	87	sudo make clean install
	88	```
	89
	90	Once installed, you can use the default font size patch to launch
	91	`st` with any font size you wish:
	92
	93	```sh
	94	st -z 16
	95	```

content/blog/2022-12-17-st.org deleted −87

	@@ -1,87 +0,0 @@
1	#+title: Simple Terminal
2	#+date: 2022-12-17
3	#+description: Instructions for building simple terminal on Fedora.
4	#+filetags: :linux:
5
6	* st
7	[[https://st.suckless.org][st]] standards for Simple Terminal, a simple
8	terminal implementation for X made by the
9	[[https://suckless.org][suckless]] team.
10
11	This post walks through the dependencies needed and process to build and
12	install =st= on Fedora Workstation.
13
14	** Obtain Files
15	To start, obtain the source files for =st= via =git clone=.
16
17	#+begin_src sh
18	mkdir ~/suckless && cd ~/suckless
19	git clone https://git.suckless.org/st && cd st
20	#+end_src
21
22	** Dependencies
23	Once you have the files and are in the =st= directory, ensure the
24	following packages are installed.
25
26	#+begin_src sh
27	sudo dnf update && sudo dnf upgrade
28	sudo dnf install gcc patch libX11-devel libXft-devel
29	#+end_src
30
31	** Building
32	Before building, ensure that you read the README file.
33
34	#+begin_src sh
35	cat README
36	#+end_src
37
38	Once you've read the instructions, open the =config.mk= file and ensure
39	it matches your setup. If you're not sure, leave the default options
40	within the file.
41
42	Finally, you can build =st= with the following command. Ensure you run
43	as root (e.g., =sudo=) or else you may not end up with a usable
44	application file.
45
46	#+begin_src sh
47	sudo make clean install
48	#+end_src
49
50	** Customization (Patches)
51	Note that customizing =st= requires you to modify the source files or to
52	download one of the [[https://st.suckless.org/patches/][available
53	patches]] for suckless.org.
54
55	If you've already installed =st= and want to customize or install a
56	patch, start by uninstalling the current program.
57
58	#+begin_src sh
59	cd ~/suckless/st
60	sudo make uninstall
61	#+end_src
62
63	Next, grab the =<path>.diff= file from the page of the patch you chose.
64	For example, I will be using the
65	[[https://st.suckless.org/patches/defaultfontsize/][defaultfontsize]]
66	patch in the below example.
67
68	#+begin_src sh
69	wget https://st.suckless.org/patches/defaultfontsize/st-defaultfontsize-20210225-4ef0cbd.diff
70	#+end_src
71
72	Once the file is downloaded inside the =st= folder, apply the patch and
73	re-install the program. You may need to install the =patch= command if
74	you don't have it installed already (you should have installed it
75	above).
76
77	#+begin_src sh
78	patch -i st-defaultfontsize-20210225-4ef0cbd.diff
79	sudo make clean install
80	#+end_src
81
82	Once installed, you can use the default font size patch to launch =st=
83	with any font size you wish:
84
85	#+begin_src sh
86	st -z 16
87	#+end_src

content/blog/2022-12-23-alpine-desktop.org → content/blog/2022-12-23-alpine-desktop.md renamed +94 −82

	@@ -1,86 +1,92 @@
1	#+title: Alpine Linux as a Desktop OS	1	+++
2	#+date: 2022-12-23	2	date = 2022-12-23
3	#+description: Learn how to set up Alpine Linux with Sway to use as a desktop operating system.	3	title = "Alpine Linux as a Desktop OS"
4	#+filetags: :linux:	4	description = ""
5	#+slug: alpine-desktop	5	draft = false
		6	+++
		7
		8
		9	# Isn\'t Alpine Linux for Servers?
6		10
7	* Isn't Alpine Linux for Servers?
8	This is a question I see a lot when people are presented with an example	11	This is a question I see a lot when people are presented with an example
9	of Alpine Linux running as a desktop OS.	12	of Alpine Linux running as a desktop OS.
10		13
11	While Alpine is small, fast, and minimal, that doesn't stop it from	14	While Alpine is small, fast, and minimal, that doesn\'t stop it from
12	functioning at a productive level for desktop users.	15	functioning at a productive level for desktop users.
13		16
14	This post is documentation of how I installed and modified Alpine Linux	17	This post is documentation of how I installed and modified Alpine Linux
15	to become my daily desktop OS.	18	to become my daily desktop OS.
16		19
17	* Installation	20	# Installation
		21
18	Note that I cover the installation of Alpine Linux in my other post, so	22	Note that I cover the installation of Alpine Linux in my other post, so
19	I won't repeat it here: [[../alpine-linux/][Alpine Linux: My New	23	I won\'t repeat it here: [Alpine Linux: My New Server
20	Server OS]].	24	OS](../alpine-linux/).
21		25
22	Basically, get a bootable USB or whatever you prefer with Alpine on it,	26	Basically, get a bootable USB or whatever you prefer with Alpine on it,
23	boot the ISO, and run the setup script.	27	boot the ISO, and run the setup script.
24		28
25	#+begin_src sh	29	```sh
26	setup-alpine	30	setup-alpine
27	#+end_src	31	```
28		32
29	Once you have gone through all the options and installer finishes	33	Once you have gone through all the options and installer finishes
30	without errors, reboot.	34	without errors, reboot.
31		35
32	#+begin_src sh	36	```sh
33	reboot	37	reboot
34	#+end_src	38	```
		39
		40	# Initial Setup
35		41
36	* Initial Setup
37	Once Alpine is installed and the machine has rebooted, login is as root	42	Once Alpine is installed and the machine has rebooted, login is as root
38	initially or =su= to root once you log in as your user. From here, you	43	initially or `su` to root once you log in as your user. From
39	should start by updating and upgrading the system in case the ISO was	44	here, you should start by updating and upgrading the system in case the
40	not fully up-to-date.	45	ISO was not fully up-to-date.
41		46
42	#+begin_src sh	47	```sh
43	# Update and upgrade system	48	# Update and upgrade system
44	apk -U update && apk -U upgrade	49	apk -U update && apk -U upgrade
45		50
46	# Add an editor so we can enable the community repository	51	# Add an editor so we can enable the community repository
47	apk add nano	52	apk add nano
48	#+end_src	53	```
49		54
50	You need to uncomment the =community= repository for your version of	55	You need to uncomment the `community` repository for your
51	Alpine Linux.	56	version of Alpine Linux.
52		57
53	For v3.17, the =repositories= file should look like this:	58	For v3.17, the `repositories` file should look like this:
54		59
55	#+begin_src sh	60	```sh
56	nano /etc/apk/repositories	61	nano /etc/apk/repositories
57	#+end_src	62	```
58		63
59	#+begin_src conf	64	``` conf
60	#/media/sda/apks	65	#/media/sda/apks
61	http://mirrors.gigenet.com/alpinelinux/v3.17/main	66	http://mirrors.gigenet.com/alpinelinux/v3.17/main
62	http://mirrors.gigenet.com/alpinelinux/v3.17/community	67	http://mirrors.gigenet.com/alpinelinux/v3.17/community
63	#http://mirrors.gigenet.com/alpinelinux/edge/main	68	#http://mirrors.gigenet.com/alpinelinux/edge/main
64	#http://mirrors.gigenet.com/alpinelinux/edge/community	69	#http://mirrors.gigenet.com/alpinelinux/edge/community
65	#http://mirrors.gigenet.com/alpinelinux/edge/testing	70	#http://mirrors.gigenet.com/alpinelinux/edge/testing
66	#+end_src	71	```
67		72
68	#+begin_src sh	73	```sh
69	# Add the rest of your packages	74	# Add the rest of your packages
70	apk add linux-firmware iwd doas git curl wget	75	apk add linux-firmware iwd doas git curl wget
71		76
72	# Add yourself to the wheel group so you can use the doas command	77	# Add yourself to the wheel group so you can use the doas command
73	adduser $USER wheel	78	adduser $USER wheel
74	#+end_src	79	```
		80
		81	# Window Manager (Desktop)
75		82
76	* Window Manager (Desktop)	83	The [Sway installation guide](https://wiki.alpinelinux.org/wiki/Sway)
77	The [[https://wiki.alpinelinux.org/wiki/Sway][Sway installation guide]]
78	has everything you need to get Sway working on Alpine.	84	has everything you need to get Sway working on Alpine.
79		85
80	However, I'll include a brief list of the commands I ran and their	86	However, I\'ll include a brief list of the commands I ran and their
81	purpose for posterity here.	87	purpose for posterity here.
82		88
83	#+begin_src sh	89	```sh
84	# Add eudev and set it up	90	# Add eudev and set it up
85	apk add eudev	91	apk add eudev
86	setup-devd udev	92	setup-devd udev
	@@ -117,21 +123,22 @@ apk add \ # Install optional dependencies:
117	swaylock swaylockd \ # lockscreen tool	123	swaylock swaylockd \ # lockscreen tool
118	swaybg \ # wallpaper daemon	124	swaybg \ # wallpaper daemon
119	swayidle # idle management (DPMS) daemon	125	swayidle # idle management (DPMS) daemon
120	#+end_src	126	```
121		127
122	Once you have the packages installed and set-up, you need to export the	128	Once you have the packages installed and set-up, you need to export the
123	=XDG_RUNTIME_DIR= upon login. To do this, edit your =.profile= file.	129	`XDG_RUNTIME_DIR` upon login. To do this, edit your
		130	`.profile` file.
124		131
125	If you use another shell, such as =zsh=, you need to edit that shell's	132	If you use another shell, such as `zsh`, you need to edit
126	profile (e.g., =~/.zprofile=)!	133	that shell\'s profile (e.g., `~/.zprofile`)!
127		134
128	#+begin_src sh	135	```sh
129	nano ~/.profile	136	nano ~/.profile
130	#+end_src	137	```
131		138
132	Within the file, paste this:	139	Within the file, paste this:
133		140
134	#+begin_src sh	141	```sh
135	if test -z "${XDG_RUNTIME_DIR}"; then	142	if test -z "${XDG_RUNTIME_DIR}"; then
136	export XDG_RUNTIME_DIR=/tmp/$(id -u)-runtime-dir	143	export XDG_RUNTIME_DIR=/tmp/$(id -u)-runtime-dir
137	if ! test -d "${XDG_RUNTIME_DIR}"; then	144	if ! test -d "${XDG_RUNTIME_DIR}"; then
	@@ -139,19 +146,20 @@ if test -z "${XDG_RUNTIME_DIR}"; then
139	chmod 0700 "${XDG_RUNTIME_DIR}"	146	chmod 0700 "${XDG_RUNTIME_DIR}"
140	fi	147	fi
141	fi	148	fi
142	#+end_src	149	```
143		150
144	Once that's complete, you can launch Sway manually.	151	Once that\'s complete, you can launch Sway manually.
145		152
146	#+begin_src sh	153	```sh
147	dbus-run-session -- sway	154	dbus-run-session -- sway
148	#+end_src	155	```
		156
		157	## Personal Touches
149		158
150	** Personal Touches
151	I also added the following packages, per my personal preferences and	159	I also added the following packages, per my personal preferences and
152	situation.	160	situation.
153		161
154	#+begin_src sh	162	```sh
155	doas apk add brightnessctl \ # Brightness controller	163	doas apk add brightnessctl \ # Brightness controller
156	zsh \ # Shell	164	zsh \ # Shell
157	firefox \ # Browser	165	firefox \ # Browser
	@@ -161,89 +169,93 @@ doas apk add brightnessctl \ # Brightness controller
161	neomutt \ # CLI email client	169	neomutt \ # CLI email client
162	thunderbird \ # GUI email client	170	thunderbird \ # GUI email client
163	gnupg # GPG key manager	171	gnupg # GPG key manager
164	#+end_src	172	```
165		173
166	From here, I use my Syncthing storage to pull all the configuration	174	From here, I use my Syncthing storage to pull all the configuration
167	files I stored from prior desktops, such as	175	files I stored from prior desktops, such as [my
168	[[https://git.sr.ht/~cmc/dotfiles][my dotfiles]].	176	dotfiles](https://git.sr.ht/~cmc/dotfiles).
		177
		178	# Resolving Issues
169		179
170	* Resolving Issues	180	## WiFi Issues
171	** WiFi Issues
172	I initially tried to set up my Wi-Fi the standard way with =iwd=, but it
173	didn't work.
174		181
175	Here is what I initially tried (I did all of this as =root=):	182	I initially tried to set up my Wi-Fi the standard way with
		183	`iwd`, but it didn\'t work.
176		184
177	#+begin_src sh	185	Here is what I initially tried (I did all of this as `root`):
		186
		187	```sh
178	apk add iwd	188	apk add iwd
179	rc-service iwd start	189	rc-service iwd start
180	iwctl station wlan0 connect <SSID> # This will prompt for the password	190	iwctl station wlan0 connect <SSID> # This will prompt for the password
181	rc-update add iwd boot && rc-update add dbus boot	191	rc-update add iwd boot && rc-update add dbus boot
182	#+end_src	192	```
183		193
184	Then, I added the Wi-Fi entry to the bottom of the networking interface	194	Then, I added the Wi-Fi entry to the bottom of the networking interface
185	file:	195	file:
186		196
187	#+begin_src sh	197	```sh
188	nano /etc/network/interfaces	198	nano /etc/network/interfaces
189	#+end_src	199	```
190		200
191	#+begin_src conf	201	``` conf
192	auto wlan0	202	auto wlan0
193	iface wlan0 inet dhcp	203	iface wlan0 inet dhcp
194	#+end_src	204	```
195		205
196	Finally, restart the networking service:	206	Finally, restart the networking service:
197		207
198	#+begin_src sh	208	```sh
199	rc-service networking restart	209	rc-service networking restart
200	#+end_src	210	```
201		211
202	My Wi-Fi interface would receive an IP address from the router, but it	212	My Wi-Fi interface would receive an IP address from the router, but it
203	could not ping anything in the network. To solve the Wi-Fi issues, I	213	could not ping anything in the network. To solve the Wi-Fi issues, I
204	originally upgraded to Alpine's =edge= repositories, which was	214	originally upgraded to Alpine\'s `edge` repositories, which
205	unnecessary.	215	was unnecessary.
206		216
207	Really, the solution was to enable the =NameResolvingService=resolvconf=	217	Really, the solution was to enable the
208	in =/etc/iwd/main.conf=.	218	`NameResolvingService=resolvconf` in
		219	`/etc/iwd/main.conf`.
209		220
210	#+begin_src sh	221	```sh
211	doas nano /etc/iwd/main.conf	222	doas nano /etc/iwd/main.conf
212	#+end_src	223	```
213		224
214	#+begin_src conf	225	``` conf
215	[Network]	226	[Network]
216		227
217	NameResolvingService=resolvconf	228	NameResolvingService=resolvconf
218	#+end_src	229	```
219		230
220	Once I finished this process, my Wi-Fi is working flawlessly.	231	Once I finished this process, my Wi-Fi is working flawlessly.
221		232
222	** Sound Issues	233	## Sound Issues
		234
223	Same as with the Wi-Fi, I had no sound and could not control the	235	Same as with the Wi-Fi, I had no sound and could not control the
224	mute/unmute or volume buttons on my laptop.	236	mute/unmute or volume buttons on my laptop.
225		237
226	To resolve this, I installed	238	To resolve this, I installed
227	[[https://wiki.alpinelinux.org/wiki/PipeWire][pipewire]].	239	[pipewire](https://wiki.alpinelinux.org/wiki/PipeWire).
228		240
229	#+begin_src sh	241	```sh
230	# Add your user to the following groups	242	# Add your user to the following groups
231	addgroup $USER audio	243	addgroup $USER audio
232	addgroup $USER video	244	addgroup $USER video
233		245
234	# Install pipewire and other useful packages	246	# Install pipewire and other useful packages
235	apk add pipewire wireplumber pipewire-pulse pipewire-jack pipewire-alsa	247	apk add pipewire wireplumber pipewire-pulse pipewire-jack pipewire-alsa
236	#+end_src	248	```
237		249
238	Finally, I needed to add =/usr/libexec/pipewire-launcher= to my	250	Finally, I needed to add `/usr/libexec/pipewire-launcher` to
239	=.config/sway/config= file so that Pipewire would run every time I	251	my `.config/sway/config` file so that Pipewire would run
240	launched sway.	252	every time I launched sway.
241		253
242	#+begin_src sh	254	```sh
243	nano ~/.config/sway/config	255	nano ~/.config/sway/config
244	#+end_src	256	```
245		257
246	#+begin_src conf	258	``` conf
247	# Run pipewire audio server	259	# Run pipewire audio server
248	exec /usr/libexec/pipewire-launcher	260	exec /usr/libexec/pipewire-launcher
249		261
	@@ -252,9 +264,9 @@ bindsym XF86AudioRaiseVolume exec --no-startup-id pactl set-sink-volume @DEFAULT
252	bindsym XF86AudioLowerVolume exec --no-startup-id pactl set-sink-volume @DEFAULT_SINK@ -5%	264	bindsym XF86AudioLowerVolume exec --no-startup-id pactl set-sink-volume @DEFAULT_SINK@ -5%
253	bindsym XF86AudioMute exec --no-startup-id pactl set-sink-mute @DEFAULT_SINK@ toggle	265	bindsym XF86AudioMute exec --no-startup-id pactl set-sink-mute @DEFAULT_SINK@ toggle
254	bindsym XF86AudioMicMute exec --no-startup-id pactl set-source-mute @DEFAULT_SOURCE@ toggle	266	bindsym XF86AudioMicMute exec --no-startup-id pactl set-source-mute @DEFAULT_SOURCE@ toggle
255	#+end_src	267	```
256		268
257	Note that I do not use bluetooth or screen sharing, so I won't cover	269	Note that I do not use bluetooth or screen sharing, so I won\'t cover
258	those options in this post.	270	those options in this post.
259		271
260	Other than these issues, I have a working Alpine desktop. No other	272	Other than these issues, I have a working Alpine desktop. No other

content/blog/2023-01-03-recent-website-changes.org → content/blog/2023-01-03-recent-website-changes.md renamed +45 −33

	@@ -1,36 +1,44 @@
1	#+title: Recent Website Changes	1	+++
2	#+date: 2023-01-03	2	date = 2023-01-03
3	#+description: A retrospective of recent changes to my website.	3	title = "Recent Website Changes"
4	#+filetags: :dev:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# The State of This Website
5		9
6	* The State of This Website
7	Over the years, this website has changed URLs, styles, content focus,	10	Over the years, this website has changed URLs, styles, content focus,
8	and much more. However, it seems that I am never done, as I am yet again	11	and much more. However, it seems that I am never done, as I am yet again
9	changing this page to fit my current needs and wants.	12	changing this page to fit my current needs and wants.
10		13
11	While this site was already minimal (~12kb), it contained a lot of	14	While this site was already minimal (\~12kb), it contained a lot of
12	disorganized content and some poorly chosen color schemes.	15	disorganized content and some poorly chosen color schemes.
13		16
14	The recent updates attempt to fix these items while focusing on what I	17	The recent updates attempt to fix these items while focusing on what I
15	truly care about here: the content within each page.	18	truly care about here: the content within each page.
16		19
17	* Recent Changes	20	# Recent Changes
18	I've made quite a few changes to the style of this website today, both	21
		22	I\'ve made quite a few changes to the style of this website today, both
19	in the CSS and in the HTML.	23	in the CSS and in the HTML.
20		24
21	Here are some of the key takeaways from today's changes:	25	Here are some of the key takeaways from today\'s changes:
		26
		27	1. Reduce the width of the website from `60em` to
		28	`40em`.
		29	2. Remove breadcrumb navigation and replaced with a simple \"Return
		30	Home\" link when visiting anything other than the homepage.
		31	3. Remove syntax highlighting from code blocks. CSS now loads from a
		32	single file.
		33	4. Move blog posts on the homepage to the top, pushing tertiary content
		34	down.
		35	5. Update font-family from `monospace` to
		36	`sans-serif` for readability.
		37
		38	# Future Focus
22		39
23	1. Reduce the width of the website from =60em= to =40em=.	40	## Accessibility
24	2. Remove breadcrumb navigation and replaced with a simple "Return Home"
25	link when visiting anything other than the homepage.
26	3. Remove syntax highlighting from code blocks. CSS now loads from a
27	single file.
28	4. Move blog posts on the homepage to the top, pushing tertiary content
29	down.
30	5. Update font-family from =monospace= to =sans-serif= for readability.
31		41
32	* Future Focus
33	** Accessibility
34	My main focus amidst all the changes this past year was accessibility. I	42	My main focus amidst all the changes this past year was accessibility. I
35	tried to improve the accessibility of all pages on this site as well as	43	tried to improve the accessibility of all pages on this site as well as
36	I know how. For example, I added aria labels to identify different	44	I know how. For example, I added aria labels to identify different
	@@ -39,7 +47,8 @@ navigation menus in November.
39	I want to continue this in 2023 and learn more about the accessibility	47	I want to continue this in 2023 and learn more about the accessibility
40	features I can utilize to help those who may need them.	48	features I can utilize to help those who may need them.
41		49
42	** Content First	50	## Content First
		51
43	Beyond accessibility, I am making a concerted effort to bring the	52	Beyond accessibility, I am making a concerted effort to bring the
44	content of this site to the forefront and push the tertiary information	53	content of this site to the forefront and push the tertiary information
45	(e.g., About Me, Services, etc.) down below the content.	54	(e.g., About Me, Services, etc.) down below the content.
	@@ -48,27 +57,30 @@ Further, I want to review and edit previous blog posts for grammar,
48	accuracy, dead links, and more. Where necessary, I may even add a blurb	57	accuracy, dead links, and more. Where necessary, I may even add a blurb
49	at the top of old posts that are no longer accurate or helpful.	58	at the top of old posts that are no longer accurate or helpful.
50		59
51	** Style	60	## Style
		61
52	As always, I will be searching for ways to reduce distractions and bring	62	As always, I will be searching for ways to reduce distractions and bring
53	a minimalistic approach to this site. While there are certainly more	63	a minimalistic approach to this site. While there are certainly more
54	drastic measures I could take, such as making this a	64	drastic measures I could take, such as making this a [Shinobi
55	[[https://shinobi.bt.ht][Shinobi Website]] or a [[https://nocss.club][No	65	Website](https://shinobi.bt.ht) or a [No CSS
56	CSS Website]], I prefer to keep some modern features here.	66	Website](https://nocss.club), I prefer to keep some modern features
		67	here.
57		68
58	Two ideas have been floating around in my head, but I am not sure how I	69	Two ideas have been floating around in my head, but I am not sure how I
59	feel about these approaches yet:	70	feel about these approaches yet:
60		71
61	1. Going all-in with Emacs org-mode and creating a script to	72	1. Going all-in with Emacs org-mode and creating a script to
62	auto-publish all my blog posts from org-mode to plain HTML files and	73	auto-publish all my blog posts from org-mode to plain HTML files and
63	then letting my CSS style it after the fact.	74	then letting my CSS style it after the fact.
64	2. Focus on publishing for Gemini or Gopher and then utilize a	75	2. Focus on publishing for Gemini or Gopher and then utilize a
65	conversion program to translate the pages to HTML.	76	conversion program to translate the pages to HTML.
		77
		78	# Looking Back
66		79
67	* Looking Back
68	As I sit here and finalize the changes, as well as this post, I am happy	80	As I sit here and finalize the changes, as well as this post, I am happy
69	with the current state of this website. It's certainly a long way from	81	with the current state of this website. It\'s certainly a long way from
70	my first attempts (parallax background images, anyone?) and it's good to	82	my first attempts (parallax background images, anyone?) and it\'s good
71	see the progress.	83	to see the progress.
72		84
73	I can only hope and work hard to ensure that I make more meaningful	85	I can only hope and work hard to ensure that I make more meaningful
74	progress by this time next year.	86	progress by this time next year.

content/blog/2023-01-05-mass-unlike-tumblr-posts.org → content/blog/2023-01-05-mass-unlike-tumblr-posts.md renamed +43 −35

	@@ -1,15 +1,19 @@
1	#+title: How to Easily Mass Unlike Tumblr Posts with Javascript	1	+++
2	#+date: 2023-01-05	2	date = 2023-01-05
3	#+description: Learn how to unlike Tumblr posts en masse in the browser.	3	title = " How to Easily Mass Unlike Tumblr Posts with Javascript"
4	#+filetags: :dev:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# The Dilemma
5		9
6	* The Dilemma
7	The dilemma I had was pretty simple: I wanted to unlike all the posts I	10	The dilemma I had was pretty simple: I wanted to unlike all the posts I
8	have liked on Tumblr so that I could follow a new focus on blogs and	11	have liked on Tumblr so that I could follow a new focus on blogs and
9	start fresh. Otherwise, Tumblr will keep recommending content based on	12	start fresh. Otherwise, Tumblr will keep recommending content based on
10	your previous likes.	13	your previous likes.
11		14
12	* The Solution	15	# The Solution
		16
13	I searched the web for a while and noted that most solutions referenced	17	I searched the web for a while and noted that most solutions referenced
14	Tumblr setting and dashboard pages that no longer exist. Additionally, I	18	Tumblr setting and dashboard pages that no longer exist. Additionally, I
15	did not want to install a third party extension to do this, as some	19	did not want to install a third party extension to do this, as some
	@@ -19,12 +23,13 @@ Luckily, I used Javascript for a while a few years ago and figured it
19	would be easy enough to script a solution, as long as Tumblr had a	23	would be easy enough to script a solution, as long as Tumblr had a
20	system for the unlike buttons.	24	system for the unlike buttons.
21		25
22	** Identifying Unlike Buttons	26	## Identifying Unlike Buttons
23	Tumblr's unlike buttons are structured as you can see in the following	27
24	code block. All unlike buttons have an =aria-label= with a value of	28	Tumblr\'s unlike buttons are structured as you can see in the following
25	=Unlike=.	29	code block. All unlike buttons have an `aria-label` with a
		30	value of `Unlike`.
26		31
27	#+begin_src html	32	``` html
28	<button class="TRX6J" aria-label="Unlike">	33	<button class="TRX6J" aria-label="Unlike">
29	<span class="EvhBA B1Z5w ztpfZ" tabindex="-1">	34	<span class="EvhBA B1Z5w ztpfZ" tabindex="-1">
30	<svg xmlns="http://www.w3.org/2000/svg" height="21" width="23"	35	<svg xmlns="http://www.w3.org/2000/svg" height="21" width="23"
	@@ -33,53 +38,56 @@ code block. All unlike buttons have an =aria-label= with a value of
33	</svg>	38	</svg>
34	</span>	39	</span>
35	</button>	40	</button>
36	#+end_src	41	```
37		42
38	** Running a Script to Unlike All Likes	43	## Running a Script to Unlike All Likes
39	To run this script, you will need to load the	44
40	[[https://www.tumblr.com/likes][Likes \| Tumblr]] page while logged in to	45	To run this script, you will need to load the [Likes \\|
41	your account.	46	Tumblr](https://www.tumblr.com/likes) page while logged in to your
		47	account.
42		48
43	Further, be sure to scroll down to the bottom and force Tumblr to load	49	Further, be sure to scroll down to the bottom and force Tumblr to load
44	more posts so that this script unlikes more posts at a time.	50	more posts so that this script unlikes more posts at a time.
45		51
46	Once you are logged in and the page is loaded, open the Developer Tools	52	Once you are logged in and the page is loaded, open the Developer Tools
47	and be sure you're on the "Console" tab. It should look something like	53	and be sure you\'re on the \"Console\" tab. It should look something
48	this (this is in Firefox, Chromium should be similar):	54	like this (this is in Firefox, Chromium should be similar):
49		55
50	#+caption: Firefox Dev !Tools	56	![Firefox Dev
51	[[https:///img.cleberg.net/blog/20230105-mass-unlike-tumblr-posts/dev_console.png]]	57	!Tools](https:///img.cleberg.net/blog/20230105-mass-unlike-tumblr-posts/dev_console.png)
52		58
53	All you need to do is paste the following snippet into the dev console.	59	All you need to do is paste the following snippet into the dev console.
54	This code will collect all unlike buttons (=elements=) and then click	60	This code will collect all unlike buttons (`elements`) and
55	each button to unlike it.	61	then click each button to unlike it.
56		62
57	Optionally, you can comment-out the line =elements[i].click();= and	63	Optionally, you can comment-out the line
58	uncomment the =console.log()= lines to simply print out information	64	`elements[i].click();` and uncomment the
59	without performing any actions. This can be useful to debug issues or	65	`console.log()` lines to simply print out information without
60	confirm that the code below isn't doing anything you don't want it to.	66	performing any actions. This can be useful to debug issues or confirm
		67	that the code below isn\'t doing anything you don\'t want it to.
61		68
62	#+begin_src javascript	69	``` javascript
63	const elements = document.querySelectorAll('[aria-label="Unlike"]');	70	const elements = document.querySelectorAll('[aria-label="Unlike"]');
64	// console.log(elements); // 👉 [button]	71	// console.log(elements); // 👉 [button]
65		72
66	for (let i=0; i < elements.length; i++) {	73	for (let i=0; i < elements.length; i++) {
67	// console.log(elements[i]);	74	// console.log(elements[i]);
68	elements[i].click();	75	elements[i].click();
69	}	76	}
70	#+end_src	77	```
		78
		79	# Results
71		80
72	* Results	81	The results were quick for my situation, as it unliked \~200 posts
73	The results were quick for my situation, as it unliked ~200 posts within	82	within 2-3 seconds. I am not sure how this will perform on larger sets
74	2-3 seconds. I am not sure how this will perform on larger sets of likes	83	of likes (or if Tumblr has a limit to unliking posts).
75	(or if Tumblr has a limit to unliking posts).
76		84
77	You can see the below screenshot showing that I pasted the snippet into	85	You can see the below screenshot showing that I pasted the snippet into
78	the console, pressed Enter, and then the posts are automatically	86	the console, pressed Enter, and then the posts are automatically
79	unliked.	87	unliked.
80		88
81	#+caption: Script !Results	89	![Script
82	[[https:///img.cleberg.net/blog/20230105-mass-unlike-tumblr-posts/script_results.png]]	90	!Results](https:///img.cleberg.net/blog/20230105-mass-unlike-tumblr-posts/script_results.png)
83		91
84	Thinking about this further, I would bet that this would be fairly	92	Thinking about this further, I would bet that this would be fairly
85	simple to package into a browser add-on so that users could install the	93	simple to package into a browser add-on so that users could install the

content/blog/2023-01-08-fedora-login-manager.org → content/blog/2023-01-08-fedora-login-manager.md renamed +23 −18

	@@ -1,10 +1,13 @@
1	#+title: How to Remove the Login Manager from Fedora i3	1	+++
2	#+date: 2023-01-08	2	date = 2023-01-08
3	#+description: Learn how to completely remove the login manager from Fedora i3.	3	title = "How to Remove the Login Manager from Fedora i3"
4	#+filetags: :linux:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Fedora i3's Login Manager	8	# Fedora i3\'s Login Manager
7	Since I use the i3 spin of Fedora Workstation, I don't like to have a	9
		10	Since I use the i3 spin of Fedora Workstation, I don\'t like to have a
8	login manager installed by default. As of the current version of Fedora	11	login manager installed by default. As of the current version of Fedora
9	i3, the default login manager is LightDM.	12	i3, the default login manager is LightDM.
10		13
	@@ -12,29 +15,31 @@ If this is no longer the case, you can search for currently-installed
12	packages with the following command and see if you can identify a	15	packages with the following command and see if you can identify a
13	different login manager.	16	different login manager.
14		17
15	#+begin_src sh	18	```sh
16	sudo dnf list installed	19	sudo dnf list installed
17	#+end_src	20	```
		21
		22	# Removing the Login Manager
18		23
19	* Removing the Login Manager
20	In order to remove the login manager, simply uninstall the package.	24	In order to remove the login manager, simply uninstall the package.
21		25
22	#+begin_src sh	26	```sh
23	sudo dnf remove lightdm	27	sudo dnf remove lightdm
24	#+end_src	28	```
		29
		30	# Launching i3 Manually
25		31
26	* Launching i3 Manually
27	In order to launch i3 manually, you need to set up your X session	32	In order to launch i3 manually, you need to set up your X session
28	properly. To start, create or edit the =~/.xinitrc= file to include the	33	properly. To start, create or edit the `~/.xinitrc` file to
29	following at the bottom.	34	include the following at the bottom.
30		35
31	#+begin_src config	36	``` config
32	exec i3	37	exec i3
33	#+end_src	38	```
34		39
35	Now, whenever you log in to the TTY, you can launch your desktop with	40	Now, whenever you log in to the TTY, you can launch your desktop with
36	the following command.	41	the following command.
37		42
38	#+begin_src sh	43	```sh
39	startx	44	startx
40	#+end_src	45	```

content/blog/2023-01-21-flatpak-symlinks.md added +51

@@ -0,0 +1,51 @@
	1	+++
	2	date = 2023-01-21
	3	title = "Running Flatpak Apps with Symlinks"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Running Flatpak Apps Should Be Faster
	9
	10	If you\'re like me and use Flatpak for those pesky apps that cannot run
	11	on your system for one reason or another, you likely get annoyed with
	12	opening a terminal and manually running the Flatpak app with the lengthy
	13	`flatpak run ...` command.
	14
	15	In the past, I manually created aliases in my `.zshrc` file
	16	for certain apps. For example, an alias would look like the example
	17	below.
	18
	19	This would allow me to run the command fast within the terminal, but it
	20	wouldn\'t allow me to run it in an application launcher.
	21
	22	```sh
	23	# ~/.zshrc
	24	alias librewolf = "flatpak run io.gitlab.librewolf-community"
	25	```
	26
	27	However, I now use a much faster and better method that integrates with
	28	the tiling WMs I use and their application launchers -
	29	`dmenu` and `bemenu`.
	30
	31	# Creating Symlinks for Flatpak Apps
	32
	33	Let\'s use the example of Librewolf below. I can install the application
	34	like so:
	35
	36	```sh
	37	flatpak install flathub io.gitlab.librewolf-community
	38	```
	39
	40	Once installed, I can create a symlink to link the flatpak app to my new
	41	symlink in a location commonly included in your PATH. In this case, I
	42	chose `/usr/bin`. You may need to choose a different location
	43	if `/usr/bin` isn\'t in your PATH.
	44
	45	```sh
	46	ln -s /var/lib/flatpak/exports/bin/io.gitlab.librewolf-community /usr/bin/librewolf
	47	```
	48
	49	Once complete, you should be able to launch the app using the command
	50	name you chose above in the symlink (`librewolf`) from a
	51	terminal or from your application launcher!

content/blog/2023-01-21-flatpak-symlinks.org deleted −46

	@@ -1,46 +0,0 @@
1	#+title: Running Flatpak Apps with Symlinks
2	#+date: 2023-01-21
3	#+description: Learn how to run Flatpak apps through menu launchers with symlinks.
4	#+filetags: :linux:
5
6	* Running Flatpak Apps Should Be Faster
7	If you're like me and use Flatpak for those pesky apps that cannot run
8	on your system for one reason or another, you likely get annoyed with
9	opening a terminal and manually running the Flatpak app with the lengthy
10	=flatpak run ...= command.
11
12	In the past, I manually created aliases in my =.zshrc= file for certain
13	apps. For example, an alias would look like the example below.
14
15	This would allow me to run the command fast within the terminal, but it
16	wouldn't allow me to run it in an application launcher.
17
18	#+begin_src sh
19	# ~/.zshrc
20	alias librewolf = "flatpak run io.gitlab.librewolf-community"
21	#+end_src
22
23	However, I now use a much faster and better method that integrates with
24	the tiling WMs I use and their application launchers - =dmenu= and
25	=bemenu=.
26
27	* Creating Symlinks for Flatpak Apps
28	Let's use the example of Librewolf below. I can install the application
29	like so:
30
31	#+begin_src sh
32	flatpak install flathub io.gitlab.librewolf-community
33	#+end_src
34
35	Once installed, I can create a symlink to link the flatpak app to my new
36	symlink in a location commonly included in your PATH. In this case, I
37	chose =/usr/bin=. You may need to choose a different location if
38	=/usr/bin= isn't in your PATH.
39
40	#+begin_src sh
41	ln -s /var/lib/flatpak/exports/bin/io.gitlab.librewolf-community /usr/bin/librewolf
42	#+end_src
43
44	Once complete, you should be able to launch the app using the command
45	name you chose above in the symlink (=librewolf=) from a terminal or
46	from your application launcher!

content/blog/2023-01-23-random-wireguard.md added +117

@@ -0,0 +1,117 @@
	1	+++
	2	date = 2023-01-23
	3	title = "Connecting to a Random Mullvad Wireguard Host on Boot"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Mullvad Wireguard
	9
	10	If you\'re using an OS that does not support one of Mullvad\'s apps,
	11	you\'re likely using the Wireguard configuration files instead.
	12
	13	If not, the first step is to visit Mullvad\'s [Wireguard configuration
	14	files](https://mullvad.net/en/account/#/wireguard-config) page and
	15	download a ZIP of the configuration files you want to use.
	16
	17	Personally, I downloaded all configuration files across the world and
	18	chose my connections using the script below.
	19
	20	Once the files are downloaded, unzip them and move them to your
	21	preferred location:
	22
	23	```sh
	24	cd Downloads
	25	unzip mullvad_wireguard_linux_all_all.zip
	26	mkdir ~/mullvad && mv ~/Downloads/*.conf ~/mullvad/
	27	```
	28
	29	### Creating a Script to Connect to a Random Host
	30
	31	Once you have a folder of Wireguard configuration files from Mullvad,
	32	you can create a script to randomly connect to any one of the locations.
	33
	34	Start by creating a shell script - mine is called `vpn.sh`.
	35
	36	```sh
	37	nano ~/vpn.sh
	38	```
	39
	40	Within this script, you can paste the following info. Note that I
	41	specify `us-*` in my script, which means that it will only
	42	consider US-based VPN locations. You can alter this or simply change it
	43	`*` to consider all locations.
	44
	45	```sh
	46	#!/bin/sh
	47
	48	ls /home/$USER/mullvad/us-** \|sort -R \|tail -n 1 \|while read file; do
	49	# Replace `doas` with `sudo` if your machine uses `sudo`,
	50	# or remove `doas` if users don't need to su to run wg-quick
	51	doas wg-quick up $file;
	52	printf "\nCreated Mullvad wireguard connection with file: $file";
	53	printf "\n\nPrinting new IP info:\n"
	54	curl https://am.i.mullvad.net/connected
	55	done
	56	```
	57
	58	Once you\'ve modified the script to your liking, add executable
	59	permissions and run the script:
	60
	61	```sh
	62	chmod +x ~/vpn.sh
	63	~/vpn.sh
	64	```
	65
	66	The output should look like the following:
	67
	68	``` txt
	69	doas (user@host) password:
	70
	71	# ... The script will process all of the iptables and wg commands here
	72
	73	Created Mullvad wireguard connection with file: /home/user/mullvad/us-nyc-wg-210.conf
	74
	75	Printing new IP info:
	76	You are connected to Mullvad (server country-city-wg-num). Your IP address is 12.345.678.99
	77	```
	78
	79	That\'s all there is to it. You can see your new location and IP via the
	80	`printf` and `curl` commands included in the
	81	script.
	82
	83	You can also go to the [Connection Check \\|
	84	Mullvad](https://mullvad.net/en/check/) page to see if you are fully
	85	connected to Mullvad and if any leaks exist.
	86
	87	![Mullvad Connection
	88	Check](https://img.cleberg.net/blog/20230123-random-mullvad-wireguard/mullvad_check.png)
	89
	90	# Disconnecting from the Wireguard Connection
	91
	92	If you forget which connection you\'re using, you can execute the
	93	following command to see where Wireguard is currently connected:
	94
	95	```sh
	96	wg show
	97	```
	98
	99	This command will show you the Wireguard interfaces and should output a
	100	connection like so: `interface: us-lax-wg-104`.
	101
	102	Once you have this, just disconnect using that files\' full path:
	103
	104	```sh
	105	wg-quick down /home/user/mullvad/us-lax-wg-104.conf
	106	```
	107
	108	I have a TODO item on figuring out how to easily export an environment
	109	variable that contains the configuration file\'s full name, so that I
	110	can just execute the following:
	111
	112	```sh
	113	# Ideal situation if I can export the $file variable to the environment
	114	wg-quick down $file
	115	```
	116
	117	If you have an idea on how to do this, email me!

content/blog/2023-01-23-random-wireguard.org deleted −112

	@@ -1,112 +0,0 @@
1	#+title: Connecting to a Random Mullvad Wireguard Host on Boot
2	#+date: 2023-01-23
3	#+description: Learn how to connect to a random Mullvad Wireguard host on boot.
4	#+filetags: :linux:
5
6	* Mullvad Wireguard
7	If you're using an OS that does not support one of Mullvad's apps,
8	you're likely using the Wireguard configuration files instead.
9
10	If not, the first step is to visit Mullvad's
11	[[https://mullvad.net/en/account/#/wireguard-config][Wireguard
12	configuration files]] page and download a ZIP of the configuration files
13	you want to use.
14
15	Personally, I downloaded all configuration files across the world and
16	chose my connections using the script below.
17
18	Once the files are downloaded, unzip them and move them to your
19	preferred location:
20
21	#+begin_src sh
22	cd Downloads
23	unzip mullvad_wireguard_linux_all_all.zip
24	mkdir ~/mullvad && mv ~/Downloads/*.conf ~/mullvad/
25	#+end_src
26
27	*** Creating a Script to Connect to a Random Host
28	Once you have a folder of Wireguard configuration files from Mullvad,
29	you can create a script to randomly connect to any one of the locations.
30
31	Start by creating a shell script - mine is called =vpn.sh=.
32
33	#+begin_src sh
34	nano ~/vpn.sh
35	#+end_src
36
37	Within this script, you can paste the following info. Note that I
38	specify =us-*= in my script, which means that it will only consider
39	US-based VPN locations. You can alter this or simply change it =*= to
40	consider all locations.
41
42	#+begin_src sh
43	#!/bin/sh
44
45	ls /home/$USER/mullvad/us-** \|sort -R \|tail -n 1 \|while read file; do
46	# Replace `doas` with `sudo` if your machine uses `sudo`,
47	# or remove `doas` if users don't need to su to run wg-quick
48	doas wg-quick up $file;
49	printf "\nCreated Mullvad wireguard connection with file: $file";
50	printf "\n\nPrinting new IP info:\n"
51	curl https://am.i.mullvad.net/connected
52	done
53	#+end_src
54
55	Once you've modified the script to your liking, add executable
56	permissions and run the script:
57
58	#+begin_src sh
59	chmod +x ~/vpn.sh
60	~/vpn.sh
61	#+end_src
62
63	The output should look like the following:
64
65	#+begin_src txt
66	doas (user@host) password:
67
68	# ... The script will process all of the iptables and wg commands here
69
70	Created Mullvad wireguard connection with file: /home/user/mullvad/us-nyc-wg-210.conf
71
72	Printing new IP info:
73	You are connected to Mullvad (server country-city-wg-num). Your IP address is 12.345.678.99
74	#+end_src
75
76	That's all there is to it. You can see your new location and IP via the
77	=printf= and =curl= commands included in the script.
78
79	You can also go to the [[https://mullvad.net/en/check/][Connection Check
80	\| Mullvad]] page to see if you are fully connected to Mullvad and if any
81	leaks exist.
82
83	#+caption: Mullvad Connection Check
84	[[https://img.cleberg.net/blog/20230123-random-mullvad-wireguard/mullvad_check.png]]
85
86	* Disconnecting from the Wireguard Connection
87	If you forget which connection you're using, you can execute the
88	following command to see where Wireguard is currently connected:
89
90	#+begin_src sh
91	wg show
92	#+end_src
93
94	This command will show you the Wireguard interfaces and should output a
95	connection like so: =interface: us-lax-wg-104=.
96
97	Once you have this, just disconnect using that files' full path:
98
99	#+begin_src sh
100	wg-quick down /home/user/mullvad/us-lax-wg-104.conf
101	#+end_src
102
103	I have a TODO item on figuring out how to easily export an environment
104	variable that contains the configuration file's full name, so that I can
105	just execute the following:
106
107	#+begin_src sh
108	# Ideal situation if I can export the $file variable to the environment
109	wg-quick down $file
110	#+end_src
111
112	If you have an idea on how to do this, email me!

content/blog/2023-01-28-self-hosting-wger.md added +154

@@ -0,0 +1,154 @@
	1	+++
	2	date = 2023-01-28
	3	title = "Self-Hosting Wger Workout Manager"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Wger: The Self-Hosted Workout Manager
	9
	10	[Wger Workout Manager](https://wger.de) is a fitness tracking tool for
	11	those who enjoy self-hosting their data. You can also register an
	12	account on their main website if you\'d prefer to try without
	13	self-hosting.
	14
	15	## Features
	16
	17	I didn\'t see a full listing of features anywhere, so I compiled this
	18	list of my own after installing wger:
	19
	20	1. Dashboard
	21
	22	- Dashboard view of Workout Schedule, Nutrition Plan, Weight
	23	Graph, & last 5 Weight Logs
	24
	25	2. Training
	26
	27	- Workout Log
	28	- Workout Schedule
	29	- Calendar (shows weight logs and Bad/Neutral/Good days)
	30	- Gallery (shows images you upload)
	31	- Workout templates
	32	- Public templates
	33	- Exercises
	34
	35	3. Nutrition
	36
	37	- Nutrition plans
	38	- BMI calculator
	39	- Daily calories calculator
	40	- Ingredient overview
	41
	42	4. Body Weight
	43
	44	- Weight overview
	45
	46	## Documentation
	47
	48	In order to self-host wger, I opted to use the Docker version of the
	49	application. You can read the README within the
	50	[wger-project/docker](https://github.com/wger-project/docker) project on
	51	GitHub for information and installation instructions.
	52
	53	## Installation
	54
	55	To start the installation, I created a folder for wger and started
	56	creating the three necessary files:
	57
	58	```sh
	59	mkdir ~/wger && mkdir ~/wger/config
	60	touch ~/wger/docker-compose.yml && \
	61	touch ~/wger/config/prod.env && \
	62	touch ~/wger/config/nginx.conf
	63	```
	64
	65	Once you have the folders and files created, you will need to copy the
	66	contents of the `docker-compose.yml`, `prod.env`,
	67	and `nginx.conf` from the GitHub link above.
	68
	69	A few notes to explain the changes I made to the default files:
	70
	71	- I updated the `ALLOW_REGISTRAION` variable in
	72	`prod.env` to `False` after I created an
	73	account via my LAN connection, before\* I connected this app to
	74	a publicly-available domain.
	75	- I uncommented and updated `CSRF_TRUSTED_ORIGINS` to be
	76	equal to the public version of this app:
	77	`https://wger.example.com`.
	78	- I updated the port within `docker-compose.yml`, within
	79	the `nginx` block. The port I updated this to will be
	80	reflected in my nginx configuration file on the server (NOT the wger
	81	nginx.conf file).
	82
	83	## Deploy
	84
	85	Once all files are created and modified to your needs, simply start the
	86	container.
	87
	88	```sh
	89	docker-compose up -d
	90	```
	91
	92	You can now visit the website on your LAN by going to
	93	`localhost:YOUR_PORT` or by the server\'s IP, if you\'re not
	94	on the same machine that is running the container.
	95
	96	If you wish to connect this app to a public domain name, you\'ll need to
	97	point an `A` DNS record from the domain to your server\'s
	98	public IP. You\'ll then need to create a configuration file for
	99	whichever web server or reverse proxy you\'re using.
	100
	101	Wger\'s README suggests the following reverse proxy configuration for
	102	Nginx:
	103
	104	``` conf
	105	upstream wger {
	106	# This port should match the port in the `nginx` block of docker-compose.yml
	107	# If the container is running on this same machine, replace this with
	108	# server 127.0.0.1:8080
	109	server 123.456.789.0:8080;
	110	}
	111
	112	server {
	113	listen 80;
	114	listen [::]:443 ssl;
	115	listen 443 ssl;
	116
	117	location / {
	118	proxy_pass http://wger;
	119	proxy_set_header Host $http_host;
	120	proxy_set_header X-Real-IP $remote_addr;
	121	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	122	proxy_set_header X-Forwarded-Proto $scheme;
	123	proxy_redirect off;
	124	}
	125
	126	server_name my.domain.example.com;
	127
	128	ssl_certificate /path/to/https/certificate.crt;
	129	ssl_certificate_key /path/to/https/certificate.key;
	130	}
	131	```
	132
	133	# Thoughts on Wger
	134
	135	I\'m still playing around with the app itself, but it seems to be a
	136	solid all-around workout manager, weight log, and food log.
	137
	138	I like that the weight log graph is fluid and updates quickly. You can
	139	also import or export data in CSV format if you\'d like to move your
	140	data elsewhere.
	141
	142	The workout manager is slightly odd, as it requires you to enter sets
	143	and reps for each exercise when you enter it into the plan. Then, when
	144	you add a log entry for performing a workout, you then add what you
	145	actually performed, in terms of reps and weight.
	146
	147	I haven\'t tried the food log yet and I likely will not, at least for a
	148	while. I have no need for a food log or calorie tracker at the moment.
	149
	150	## Screenshot Example
	151
	152	You can see an example of a dashboard with placeholder data here:
	153
	154	![wger dashboard](https://img.cleberg.net/blog/20230128-wger/wger.png)

content/blog/2023-01-28-self-hosting-wger.org deleted −143

	@@ -1,143 +0,0 @@
1	#+title: Self-Hosting Wger Workout Manager
2	#+date: 2023-01-28
3	#+description: A guide to self-hosting the Wger application on your own server.
4	#+filetags: :selfhosting:
5
6	* Wger: The Self-Hosted Workout Manager
7	[[https://wger.de][Wger Workout Manager]] is a fitness tracking tool for
8	those who enjoy self-hosting their data. You can also register an
9	account on their main website if you'd prefer to try without
10	self-hosting.
11
12	** Features
13	I didn't see a full listing of features anywhere, so I compiled this
14	list of my own after installing wger:
15
16	1. Dashboard
17
18	- Dashboard view of Workout Schedule, Nutrition Plan, Weight Graph, &
19	last 5 Weight Logs
20
21	2. Training
22
23	- Workout Log
24	- Workout Schedule
25	- Calendar (shows weight logs and Bad/Neutral/Good days)
26	- Gallery (shows images you upload)
27	- Workout templates
28	- Public templates
29	- Exercises
30
31	3. Nutrition
32
33	- Nutrition plans
34	- BMI calculator
35	- Daily calories calculator
36	- Ingredient overview
37
38	4. Body Weight
39
40	- Weight overview
41
42	** Documentation
43	In order to self-host wger, I opted to use the Docker version of the
44	application. You can read the README within the
45	[[https://github.com/wger-project/docker][wger-project/docker]] project
46	on GitHub for information and installation instructions.
47
48	** Installation
49	To start the installation, I created a folder for wger and started
50	creating the three necessary files:
51
52	#+begin_src sh
53	mkdir ~/wger && mkdir ~/wger/config
54	touch ~/wger/docker-compose.yml && \
55	touch ~/wger/config/prod.env && \
56	touch ~/wger/config/nginx.conf
57	#+end_src
58
59	Once you have the folders and files created, you will need to copy the
60	contents of the =docker-compose.yml=, =prod.env=, and =nginx.conf= from
61	the GitHub link above.
62
63	A few notes to explain the changes I made to the default files:
64
65	- I updated the =ALLOW_REGISTRAION= variable in =prod.env= to =False=
66	after I created an account via my LAN connection, before* I connected
67	this app to a publicly-available domain.
68	- I uncommented and updated =CSRF_TRUSTED_ORIGINS= to be equal to the
69	public version of this app: =https://wger.example.com=.
70	- I updated the port within =docker-compose.yml=, within the =nginx=
71	block. The port I updated this to will be reflected in my nginx
72	configuration file on the server (NOT the wger nginx.conf file).
73
74	** Deploy
75	Once all files are created and modified to your needs, simply start the
76	container.
77
78	#+begin_src sh
79	docker-compose up -d
80	#+end_src
81
82	You can now visit the website on your LAN by going to
83	=localhost:YOUR_PORT= or by the server's IP, if you're not on the same
84	machine that is running the container.
85
86	If you wish to connect this app to a public domain name, you'll need to
87	point an =A= DNS record from the domain to your server's public IP.
88	You'll then need to create a configuration file for whichever web server
89	or reverse proxy you're using.
90
91	Wger's README suggests the following reverse proxy configuration for
92	Nginx:
93
94	#+begin_src conf
95	upstream wger {
96	# This port should match the port in the `nginx` block of docker-compose.yml
97	# If the container is running on this same machine, replace this with
98	# server 127.0.0.1:8080
99	server 123.456.789.0:8080;
100	}
101
102	server {
103	listen 80;
104	listen [::]:443 ssl;
105	listen 443 ssl;
106
107	location / {
108	proxy_pass http://wger;
109	proxy_set_header Host $http_host;
110	proxy_set_header X-Real-IP $remote_addr;
111	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
112	proxy_set_header X-Forwarded-Proto $scheme;
113	proxy_redirect off;
114	}
115
116	server_name my.domain.example.com;
117
118	ssl_certificate /path/to/https/certificate.crt;
119	ssl_certificate_key /path/to/https/certificate.key;
120	}
121	#+end_src
122
123	* Thoughts on Wger
124	I'm still playing around with the app itself, but it seems to be a solid
125	all-around workout manager, weight log, and food log.
126
127	I like that the weight log graph is fluid and updates quickly. You can
128	also import or export data in CSV format if you'd like to move your data
129	elsewhere.
130
131	The workout manager is slightly odd, as it requires you to enter sets
132	and reps for each exercise when you enter it into the plan. Then, when
133	you add a log entry for performing a workout, you then add what you
134	actually performed, in terms of reps and weight.
135
136	I haven't tried the food log yet and I likely will not, at least for a
137	while. I have no need for a food log or calorie tracker at the moment.
138
139	** Screenshot Example
140	You can see an example of a dashboard with placeholder data here:
141
142	#+caption: wger dashboard
143	[[https://img.cleberg.net/blog/20230128-wger/wger.png]]

content/blog/2023-02-02-exploring-hare.md added +172

@@ -0,0 +1,172 @@
	1	+++
	2	date = 2023-02-02
	3	title = "Exploring the Hare Programming Language"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# A Quick Note
	9
	10	By no means am I a professional developer, so this post will be rather
	11	short. I won\'t be going into depth on the specification or anything
	12	that technical.
	13
	14	Instead, I will simply be talking about how I (a relatively basic
	15	hobbyist programmer) have been playing with Hare and what intrigues me
	16	about the language.
	17
	18	# Hare
	19
	20	The [Hare](https://harelang.org) programming language is a
	21	straightforward language that should look familiar if you\'ve ever
	22	programmed with C, Rust, or other languages that aim to build software
	23	at the system-level.
	24
	25	The Hare homepage states the following:
	26
	27	> Hare is a systems programming language designed to be simple, stable,
	28	> and robust. Hare uses a static type system, manual memory management,
	29	> and minimal runtime. It is well-suited to writing operating systems,
	30	> system tools, compilers, networking software, and other low-level,
	31	> high performance tasks.
	32
	33	I have found this all to be true while playing with it for the first
	34	time today. In the next few sections, I\'m going to walk through my
	35	installation and first program.
	36
	37	## Installation
	38
	39	I\'m currently running Alpine Linux on my Thinkpad, so the installation
	40	was quite easy as there is a package for Hare in the `apk`
	41	repositories.
	42
	43	```sh
	44	doas apk add hare hare-doc
	45	```
	46
	47	However, I was able to install Hare from scratch on Fedora Linux a short
	48	while ago, which was also very easy to do. If you need further
	49	instructions and Hare doesn\'t have a package on your system, take a
	50	look at the [Hare Installation](https://harelang.org/installation/)
	51	page.
	52
	53	## Creating a Test Project
	54
	55	In order to play with the language, I created
	56	[hare-test](https://git.sr.ht/~cmc/hare-projects) and will be putting
	57	any of my Hare-related adventures in here.
	58
	59	> Update:\* I also created a simple Hare program for creating a file
	60	> from user input:
	61	> [files.ha](https://git.sr.ht/~cmc/hare-projects/tree/main/item/files/files.ha)
	62
	63	Luckily, Hare doesn\'t require any complex set-up tools or build
	64	environment. Once you have Hare installed, you simply need to create a
	65	file ending with `.ha` and you can run a Hare program.
	66
	67	I created a file called `rgb.ha` in order to test out the
	68	random number generation and passing parameters between functions.
	69
	70	```sh
	71	nano rgb.ha
	72	```
	73
	74	Within this file, I was able to easily import a few of the [standard
	75	library modules](https://harelang.org/tutorials/stdlib/):
	76	`fmt`, `math::random`, and `datetime`.
	77
	78	With these modules, I created two functions:
	79
	80	1. `main`: This function calls the `generate_rgb`
	81	function and then prints out the returned values.
	82	2. `generate_rgb`: This function uses the current Unix epoch
	83	time to generate a pseudo-random value and uses this value to create
	84	three more random values between 0 and 255. These three numbers
	85	represent a color in RGB format.
	86
	87	> Note: Some syntax coloring may look odd, as Zola currently
	88	> doesn\'t have a syntax highlighting theme for Hare. Instead, I\'m
	89	> using the C theme, which may not be exactly accurate when coloring the
	90	> code below.
	91
	92	```c
	93	use datetime;
	94	use fmt;
	95	use math::random;
	96
	97	export fn main() void = {
	98	const rgb = generate_rgb();
	99	fmt::printfln("RGB: ({}, {}, {})", rgb[0], rgb[1], rgb[2])!;
	100	};
	101
	102	fn generate_rgb() []u64 = {
	103	// Use the current Unix epoch time as the seed value
	104	let datetime = datetime::epochunix(&datetime::now());
	105
	106	// Generate initial pseudo-random value
	107	// You must cast the datetime from int to u64
	108	let x = random::init(datetime: u64);
	109
	110	// Generate RGB values between (0, 255) using pseudo-random init value
	111	let r = random::u64n(&x, 255);
	112	let g = random::u64n(&x, 255);
	113	let b = random::u64n(&x, 255);
	114
	115	// Structure data as array and return
	116	let rgb_array: [3]u64 = [r, g, b];
	117	return rgb_array;
	118	};
	119	```
	120
	121	## Running a Program
	122
	123	Once you have a Hare file written and ready to run, you simply need to
	124	run it:
	125
	126	```sh
	127	hare run file.ha
	128	```
	129
	130	You can also compile the program into an executable:
	131
	132	```sh
	133	hare build -o example file.ha
	134	./example
	135	```
	136
	137	## Initial Thoughts
	138
	139	1. Documentation Improvements Would Help
	140
	141	While I was able to piece everything together eventually, the
	142	biggest downfall right now in Hare\'s documentation. For such a new
	143	project, the documentation is in a great spot. However, bare
	144	specifications don\'t help as much as a brief examples section
	145	would.
	146
	147	For example, it took me a while to figure out what the
	148	`u64n` function was looking for. I could tell that it
	149	took two parameters and the second was my max value (255), but
	150	couldn\'t figure out what the first value should be. Eventually, I
	151	inspected the `random.ha` file in the [Hare source
	152	code](https://git.sr.ht/~sircmpwn/hare/tree/master/item/math/random/random.ha)
	153	and found the test suite that helped me discover that it needed an
	154	`init()` value in the form of `&var`.
	155
	156	2. More Basic Modules
	157
	158	This is another point that comes from Hare being new and awaiting
	159	more contributions, but there are some basic functions that I would
	160	personally enjoy seeing in Hare, such as one to convert decimal
	161	(base 10) values to hexadecimal (base 16).
	162
	163	If I\'m feeling comfortable with my math, I may work on the list of
	164	functions I want and see if any can make it into the Hare source
	165	code.
	166
	167	3. Overall Thoughts
	168
	169	Overall, I actually really enjoy Hare. It\'s not as tedious to get a
	170	project up and running as Rust, but it\'s also simpler and more
	171	user-friendly than learning C. I am going to continue playing with
	172	it and see if I can make anything of particular value.

content/blog/2023-02-02-exploring-hare.org deleted −169

	@@ -1,169 +0,0 @@
1	#+title: Exploring the Hare Programming Language
2	#+date: 2023-02-02
3	#+description: A retrospective on my first time using the Hare Programming Language.
4	#+filetags: :dev:
5
6	* A Quick Note
7	By no means am I a professional developer, so this post will be rather
8	short. I won't be going into depth on the specification or anything that
9	technical.
10
11	Instead, I will simply be talking about how I (a relatively basic
12	hobbyist programmer) have been playing with Hare and what intrigues me
13	about the language.
14
15	* Hare
16	The [[https://harelang.org][Hare]] programming language is a
17	straightforward language that should look familiar if you've ever
18	programmed with C, Rust, or other languages that aim to build software
19	at the system-level.
20
21	The Hare homepage states the following:
22
23	#+begin_quote
24	Hare is a systems programming language designed to be simple, stable,
25	and robust. Hare uses a static type system, manual memory management,
26	and minimal runtime. It is well-suited to writing operating systems,
27	system tools, compilers, networking software, and other low-level, high
28	performance tasks.
29
30	#+end_quote
31
32	I have found this all to be true while playing with it for the first
33	time today. In the next few sections, I'm going to walk through my
34	installation and first program.
35
36	** Installation
37	I'm currently running Alpine Linux on my Thinkpad, so the installation
38	was quite easy as there is a package for Hare in the =apk= repositories.
39
40	#+begin_src sh
41	doas apk add hare hare-doc
42	#+end_src
43
44	However, I was able to install Hare from scratch on Fedora Linux a short
45	while ago, which was also very easy to do. If you need further
46	instructions and Hare doesn't have a package on your system, take a look
47	at the [[https://harelang.org/installation/][Hare Installation]] page.
48
49	** Creating a Test Project
50	In order to play with the language, I created
51	[[https://git.sr.ht/~cmc/hare-projects][hare-test]] and will be putting
52	any of my Hare-related adventures in here.
53
54	#+begin_quote
55	Update:* I also created a simple Hare program for creating a file from
56	user input:
57	[[https://git.sr.ht/~cmc/hare-projects/tree/main/item/files/files.ha][files.ha]]
58
59	#+end_quote
60
61	Luckily, Hare doesn't require any complex set-up tools or build
62	environment. Once you have Hare installed, you simply need to create a
63	file ending with =.ha= and you can run a Hare program.
64
65	I created a file called =rgb.ha= in order to test out the random number
66	generation and passing parameters between functions.
67
68	#+begin_src sh
69	nano rgb.ha
70	#+end_src
71
72	Within this file, I was able to easily import a few of the
73	[[https://harelang.org/tutorials/stdlib/][standard library modules]]:
74	=fmt=, =math::random=, and =datetime=.
75
76	With these modules, I created two functions:
77
78	1. =main=: This function calls the =generate_rgb= function and then
79	prints out the returned values.
80	2. =generate_rgb=: This function uses the current Unix epoch time to
81	generate a pseudo-random value and uses this value to create three
82	more random values between 0 and 255. These three numbers represent a
83	color in RGB format.
84
85	#+begin_quote
86	Note: Some syntax coloring may look odd, as Zola currently doesn't
87	have a syntax highlighting theme for Hare. Instead, I'm using the C
88	theme, which may not be exactly accurate when coloring the code below.
89
90	#+end_quote
91
92	#+begin_src C
93	use datetime;
94	use fmt;
95	use math::random;
96
97	export fn main() void = {
98	const rgb = generate_rgb();
99	fmt::printfln("RGB: ({}, {}, {})", rgb[0], rgb[1], rgb[2])!;
100	};
101
102	fn generate_rgb() []u64 = {
103	// Use the current Unix epoch time as the seed value
104	let datetime = datetime::epochunix(&datetime::now());
105
106	// Generate initial pseudo-random value
107	// You must cast the datetime from int to u64
108	let x = random::init(datetime: u64);
109
110	// Generate RGB values between (0, 255) using pseudo-random init value
111	let r = random::u64n(&x, 255);
112	let g = random::u64n(&x, 255);
113	let b = random::u64n(&x, 255);
114
115	// Structure data as array and return
116	let rgb_array: [3]u64 = [r, g, b];
117	return rgb_array;
118	};
119	#+end_src
120
121	** Running a Program
122	Once you have a Hare file written and ready to run, you simply need to
123	run it:
124
125	#+begin_src sh
126	hare run file.ha
127	#+end_src
128
129	You can also compile the program into an executable:
130
131	#+begin_src sh
132	hare build -o example file.ha
133	./example
134	#+end_src
135
136	** Initial Thoughts
137	1. Documentation Improvements Would Help
138
139	While I was able to piece everything together eventually, the biggest
140	downfall right now in Hare's documentation. For such a new project,
141	the documentation is in a great spot. However, bare specifications
142	don't help as much as a brief examples section would.
143
144	For example, it took me a while to figure out what the =u64n=
145	function was looking for. I could tell that it took two parameters
146	and the second was my max value (255), but couldn't figure out what
147	the first value should be. Eventually, I inspected the =random.ha=
148	file in the
149	[[https://git.sr.ht/~sircmpwn/hare/tree/master/item/math/random/random.ha][Hare
150	source code]] and found the test suite that helped me discover that
151	it needed an =init()= value in the form of =&var=.
152
153	2. More Basic Modules
154
155	This is another point that comes from Hare being new and awaiting
156	more contributions, but there are some basic functions that I would
157	personally enjoy seeing in Hare, such as one to convert decimal
158	(base 10) values to hexadecimal (base 16).
159
160	If I'm feeling comfortable with my math, I may work on the list of
161	functions I want and see if any can make it into the Hare source
162	code.
163
164	3. Overall Thoughts
165
166	Overall, I actually really enjoy Hare. It's not as tedious to get a
167	project up and running as Rust, but it's also simpler and more
168	user-friendly than learning C. I am going to continue playing with it
169	and see if I can make anything of particular value.

content/blog/2023-05-22-burnout.org → content/blog/2023-05-22-burnout.md renamed +25 −21

	@@ -1,17 +1,20 @@
1	#+title: RE: Burnout	1	+++
2	#+date: 2023-05-22	2	date = 2023-05-22
3	#+description: A response to Drew DeVault's burnout post.	3	title = "RE: Burnout"
4	#+filetags: :personal:	4	description = ""
5		5	draft = false
6	* RE: Burnout	6	+++
7	I recently read	7
8	[[https://drewdevault.com/2023/05/01/2023-05-01-Burnout.html][Drew	8	# RE: Burnout {#re-burnout-1}
9	DeVault's post on burnout]] around the same time I was pulling out of a	9
10	burnout rut myself earlier this month. Finally, seeing the light at the	10	I recently read [Drew DeVault\'s post on
11	end of my burnout tunnel made me want to write my first post back on	11	burnout](https://drewdevault.com/2023/05/01/2023-05-01-Burnout.html)
12	this topic.	12	around the same time I was pulling out of a burnout rut myself earlier
13		13	this month. Finally, seeing the light at the end of my burnout tunnel
14	* Busy Seasons on Busy Seasons	14	made me want to write my first post back on this topic.
		15
		16	# Busy Seasons on Busy Seasons
		17
15	My career deals with busy seasons, generally driven by client demand.	18	My career deals with busy seasons, generally driven by client demand.
16	This last year, I dealt with a harsh busy season from Aug to Oct 2022 to	19	This last year, I dealt with a harsh busy season from Aug to Oct 2022 to
17	issue a few SOC reports for the period ending 2022-09-30. Immediately	20	issue a few SOC reports for the period ending 2022-09-30. Immediately
	@@ -24,18 +27,19 @@ The result? A busy season that has lasted from August 2022 through
24	today. I will likely be rushing throughout the next month or two before	27	today. I will likely be rushing throughout the next month or two before
25	I have a brief break and need to focus on the 2023-09-30 SOC reports	28	I have a brief break and need to focus on the 2023-09-30 SOC reports
26	again. While auditing and consulting always involve a busy season, this	29	again. While auditing and consulting always involve a busy season, this
27	is the first time I've had one last 9+ months without a break.	30	is the first time I\'ve had one last 9+ months without a break.
		31
		32	While it\'s been tough, I have a handful of breaks pre-planned
		33	throughout this next cycle and should be able to moderate the level of
		34	commitment required for each client.
28		35
29	While it's been tough, I have a handful of breaks pre-planned throughout	36	# Refocusing
30	this next cycle and should be able to moderate the level of commitment
31	required for each client.
32		37
33	* Refocusing
34	Outside of work, I finally have time to work on hobbies such as this	38	Outside of work, I finally have time to work on hobbies such as this
35	website, programming, athletics, games, etc.	39	website, programming, athletics, games, etc.
36		40
37	You may have noticed my absence if you're in the same channels, forums,	41	You may have noticed my absence if you\'re in the same channels, forums,
38	and rooms that I am, but I should finally be active again.	42	and rooms that I am, but I should finally be active again.
39		43
40	I'm hoping to break an item out of my backlog soon and start working on	44	I\'m hoping to break an item out of my backlog soon and start working on
41	building a new project or hack around with a stale one.	45	building a new project or hack around with a stale one.

content/blog/2023-06-08-goaccess-geoip.md added +70

@@ -0,0 +1,70 @@
	1	+++
	2	date = 2023-06-08
	3	title = "Inspecting Nginx Logs with GoAccess and MaxMind GeoIP Data"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Overview
	9
	10	[GoAccess](https://goaccess.io/) is an open source real-time web log
	11	analyzer and interactive viewer that runs in a terminal in \*nix systems
	12	or through your browser.
	13
	14	# Installation
	15
	16	To start, you\'ll need to install GoAccess for your OS. Here\'s an
	17	example for Debian-based distros:
	18
	19	```sh
	20	sudo apt install goaccess
	21	```
	22
	23	Next, find any number of the MaxMind GeoIP database files on GitHub or
	24	another file hosting website. We\'re going to use P3TERX\'s version in
	25	this example:
	26
	27	```sh
	28	wget https://github.com/P3TERX/GeoLite.mmdb/raw/download/GeoLite2-City.mmdb
	29	```
	30
	31	Be sure to save this file in an easy to remember location!
	32
	33	# Usage
	34
	35	In order to utilize the full capabilities of GoAccess and MMDB, start
	36	with the command template below and customize as necessary. This will
	37	export an HTML view of the GoAccess dashboard, showing all relevant
	38	information related to that site\'s access log. You can also omit the
	39	`-o output.html` parameter if you prefer to view the data
	40	within the CLI instead of creating an HTML file.
	41
	42	With the addition of the GeoIP Database parameter, section
	43	`16 - Geo Location` will be added with the various countries
	44	that are associated with the collected IP addresses.
	45
	46	```sh
	47	zcat /var/log/nginx/example.access.log.*.gz \| goaccess \
	48	--geoip-database=/home/user/GeoLite2-City.mmdb \
	49	--date-format=%d/%b/%Y \
	50	--time-format=%H:%M:%S \
	51	--log-format=COMBINED \
	52	-o output.html \
	53	/var/log/nginx/example.access.log -
	54	```
	55
	56	## Example Output
	57
	58	See below for an example of the HTML output:
	59
	60	![GoAccess
	61	HTML](https://img.cleberg.net/blog/20230608-goaccess/goaccess-dashboard.png)
	62
	63	You can also see the GeoIP card created by the integration of the
	64	MaxMind database information.
	65
	66	![GoAccess
	67	GeoIP](https://img.cleberg.net/blog/20230608-goaccess/goaccess-geoip.png)
	68
	69	That\'s all there is to it! Informational data is provided in an
	70	organized fashion with minimal effort.

content/blog/2023-06-08-goaccess-geoip.org deleted −64

	@@ -1,64 +0,0 @@
1	#+title: Inspecting Nginx Logs with GoAccess and MaxMind GeoIP Data
2	#+date: 2023-06-08
3	#+description: Learn how to use GoAccess and MaxMind to evaluate visitors to your web server.
4	#+filetags: :sysadmin:
5
6	* Overview
7	[[https://goaccess.io/][GoAccess]] is an open source real-time web log
8	analyzer and interactive viewer that runs in a terminal in *nix systems
9	or through your browser.
10
11	* Installation
12	To start, you'll need to install GoAccess for your OS. Here's an example
13	for Debian-based distros:
14
15	#+begin_src sh
16	sudo apt install goaccess
17	#+end_src
18
19	Next, find any number of the MaxMind GeoIP database files on GitHub or
20	another file hosting website. We're going to use P3TERX's version in
21	this example:
22
23	#+begin_src sh
24	wget https://github.com/P3TERX/GeoLite.mmdb/raw/download/GeoLite2-City.mmdb
25	#+end_src
26
27	Be sure to save this file in an easy to remember location!
28
29	* Usage
30	In order to utilize the full capabilities of GoAccess and MMDB, start
31	with the command template below and customize as necessary. This will
32	export an HTML view of the GoAccess dashboard, showing all relevant
33	information related to that site's access log. You can also omit the
34	=-o output.html= parameter if you prefer to view the data within the CLI
35	instead of creating an HTML file.
36
37	With the addition of the GeoIP Database parameter, section
38	=16 - Geo Location= will be added with the various countries that are
39	associated with the collected IP addresses.
40
41	#+begin_src sh
42	zcat /var/log/nginx/example.access.log.*.gz \| goaccess \
43	--geoip-database=/home/user/GeoLite2-City.mmdb \
44	--date-format=%d/%b/%Y \
45	--time-format=%H:%M:%S \
46	--log-format=COMBINED \
47	-o output.html \
48	/var/log/nginx/example.access.log -
49	#+end_src
50
51	** Example Output
52	See below for an example of the HTML output:
53
54	#+caption: GoAccess HTML
55	[[https://img.cleberg.net/blog/20230608-goaccess/goaccess-dashboard.png]]
56
57	You can also see the GeoIP card created by the integration of the
58	MaxMind database information.
59
60	#+caption: GoAccess GeoIP
61	[[https://img.cleberg.net/blog/20230608-goaccess/goaccess-geoip.png]]
62
63	That's all there is to it! Informational data is provided in an
64	organized fashion with minimal effort.

content/blog/2023-06-08-self-hosting-baikal.org → content/blog/2023-06-08-self-hosting-baikal.md renamed +63 −53

	@@ -1,30 +1,35 @@
1	#+title: Self-Hosting Baikal Server (CalDAV & CardDAV)	1	+++
2	#+date: 2023-06-08	2	date = 2023-06-08
3	#+description: A guide to self-hosting the Baikal application on your own server.	3	title = "Self-Hosting Baikal Server (CalDAV & CardDAV)"
4	#+filetags: :selfhosting:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* What is Baikal?	8	# What is Baikal?
7	[[https://sabre.io/baikal/][Baikal]] is a lightweight CalDAV + CardDAV	9
		10	[Baikal](https://sabre.io/baikal/) is a lightweight CalDAV + CardDAV
8	server that you can self-host on your own machine. While I have tried (&	11	server that you can self-host on your own machine. While I have tried (&
9	failed) to get this CalDAV + CardDAV server running before, it was quite	12	failed) to get this CalDAV + CardDAV server running before, it was quite
10	easy this time. Not really sure what I did differently this time, but	13	easy this time. Not really sure what I did differently this time, but
11	I'm documenting my process here to ensure I don't forget.	14	I\'m documenting my process here to ensure I don\'t forget.
		15
		16	# Installation
12		17
13	* Installation	18	First, create a folder on your server and open a
14	First, create a folder on your server and open a =docker-compose.yml=	19	`docker-compose.yml` file for editing:
15	file for editing:
16		20
17	#+begin_src sh	21	```sh
18	mkdir baikal && cd baikal	22	mkdir baikal && cd baikal
19	nano docker-compose.yml	23	nano docker-compose.yml
20	#+end_src	24	```
21		25
22	Within this file, you'll need to paste the information below. You can	26	Within this file, you\'ll need to paste the information below. You can
23	customize the =ports= section to use any port on your server to pass	27	customize the `ports` section to use any port on your server
24	through to port 80 in the container. You can also edit the =volumes=	28	to pass through to port 80 in the container. You can also edit the
25	section to use docker volumes instead of local folders.	29	`volumes` section to use docker volumes instead of local
		30	folders.
26		31
27	#+begin_src conf	32	``` conf
28	version: "2"	33	version: "2"
29	services:	34	services:
30	baikal:	35	baikal:
	@@ -35,59 +40,63 @@ services:
35	volumes:	40	volumes:
36	- ./config:/var/www/baikal/config	41	- ./config:/var/www/baikal/config
37	- ./data:/var/www/baikal/Specific	42	- ./data:/var/www/baikal/Specific
38	#+end_src	43	```
39		44
40	Once finished with editing, save and close the file. Then, launch the	45	Once finished with editing, save and close the file. Then, launch the
41	docker container:	46	docker container:
42		47
43	#+begin_src sh	48	```sh
44	sudo docker-compose up -d	49	sudo docker-compose up -d
45	#+end_src	50	```
		51
		52	# Intial Setup
46		53
47	* Intial Setup
48	As long as no issues came up when starting the container, you should be	54	As long as no issues came up when starting the container, you should be
49	able to visit the server's set-up page at =http://<server_ip>:<port>=.	55	able to visit the server\'s set-up page at
50	The application will ask you to create an administrator account and	56	`http://<server_ip>:<port>`. The application will ask you to
51	choose the database type for your storage. Personally, I opted to use	57	create an administrator account and choose the database type for your
52	SQLite.	58	storage. Personally, I opted to use SQLite.
53		59
54	Make sure the administrator credentials are adequate to protect against	60	Make sure the administrator credentials are adequate to protect against
55	common attacks.	61	common attacks.
56		62
57	* Creating Users	63	# Creating Users
58	Once you've set up the application, you will be greeted by the Dashboard	64
59	page, which will show the version of the app, status of the	65	Once you\'ve set up the application, you will be greeted by the
		66	Dashboard page, which will show the version of the app, status of the
60	admin/CalDAV/CardDAV services, and the number of users, calendars,	67	admin/CalDAV/CardDAV services, and the number of users, calendars,
61	events, address books, and contacts.	68	events, address books, and contacts.
62		69
63	#+caption: Baikal Dashboard	70	![Baikal
64	[[https://img.cleberg.net/blog/20230608-baikal/baikal-dashboard.png]]	71	Dashboard](https://img.cleberg.net/blog/20230608-baikal/baikal-dashboard.png)
65		72
66	To create a new user, navigate to the =Users and resources= page. This	73	To create a new user, navigate to the `Users and resources`
67	process is as simple as entering a username, password, and email.	74	page. This process is as simple as entering a username, password, and
		75	email.
68		76
69	Once a user has been created, you can create any number of calendars and	77	Once a user has been created, you can create any number of calendars and
70	address books for user, as well as inspect their information.	78	address books for user, as well as inspect their information.
71		79
72	* Setting Up a Public URL	80	# Setting Up a Public URL
		81
73	Once your application is working locally, you can open access remotely	82	Once your application is working locally, you can open access remotely
74	via a URL by using a reverse-proxy like Nginx.	83	via a URL by using a reverse-proxy like Nginx.
75		84
76	As a prerequisite, you must own a domain name and set up DNS records to	85	As a prerequisite, you must own a domain name and set up DNS records to
77	point a domain name to the server hosting Baikal.	86	point a domain name to the server hosting Baikal.
78		87
79	Start by navigating to your web server's configuration directory and	88	Start by navigating to your web server\'s configuration directory and
80	create a new file for this application.	89	create a new file for this application.
81		90
82	#+begin_src sh	91	```sh
83	cd /etc/nginx/sites-available/	92	cd /etc/nginx/sites-available/
84	nano dav	93	nano dav
85	#+end_src	94	```
86		95
87	Within this file, paste in the configuration from below and change	96	Within this file, paste in the configuration from below and change
88	=dav.example.com= to match the URL you'll be using.	97	`dav.example.com` to match the URL you\'ll be using.
89		98
90	#+begin_src conf	99	``` conf
91	server {	100	server {
92	if ($host ~ ^[^.]+\.example\.com$) {	101	if ($host ~ ^[^.]+\.example\.com$) {
93	return 301 https://$host$request_uri;	102	return 301 https://$host$request_uri;
	@@ -117,34 +126,35 @@ server {
117	include /etc/letsencrypt/options-ssl-nginx.conf;	126	include /etc/letsencrypt/options-ssl-nginx.conf;
118	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;	127	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
119	}	128	}
120	#+end_src	129	```
121		130
122	For Nginx on Ubuntu, you'll need to symlink the configuration file to	131	For Nginx on Ubuntu, you\'ll need to symlink the configuration file to
123	the =sites-enabled= directory and then restart Nginx.	132	the `sites-enabled` directory and then restart Nginx.
124		133
125	#+begin_src sh	134	```sh
126	sudo ln -s /etc/nginx/sites-available/dav /etc/nginx/sites-enabled/dav	135	sudo ln -s /etc/nginx/sites-available/dav /etc/nginx/sites-enabled/dav
127	sudo systemctl restart nginx.service	136	sudo systemctl restart nginx.service
128	#+end_src	137	```
129		138
130	At this point, the Baikal server should be available over the internet	139	At this point, the Baikal server should be available over the internet
131	at the URL configured above!	140	at the URL configured above!
132		141
133	* Configuring Clients	142	# Configuring Clients
		143
134	Lastly, configuring clients and applications is essential to making sure	144	Lastly, configuring clients and applications is essential to making sure
135	the DAV server is being fully utilized.	145	the DAV server is being fully utilized.
136		146
137	You can also use the =Users and resources= page to inspect a user's	147	You can also use the `Users and resources` page to inspect a
138	personal link to their calendars and address books by clicking the info	148	user\'s personal link to their calendars and address books by clicking
139	(i) button. It will show a URI like	149	the info (i) button. It will show a URI like
140	=/dav.php/calendars/your-user/default/=.	150	`/dav.php/calendars/your-user/default/`.
141		151
142	However, I found that the following URL works for most applications:	152	However, I found that the following URL works for most applications:
143	=/dav.php/principals/your-user/=.	153	`/dav.php/principals/your-user/`.
144		154
145	I used the =principals= URL above for Thunderbird (calendar, tasks, and	155	I used the `principals` URL above for Thunderbird (calendar,
146	contacts), as well as iOS (calendar, tasks, and contacts) and everything	156	tasks, and contacts), as well as iOS (calendar, tasks, and contacts) and
147	works flawlessly so far.	157	everything works flawlessly so far.
148		158
149	Syncing is quick between the server and clients, and I haven't seen any	159	Syncing is quick between the server and clients, and I haven\'t seen any
150	disruptions in the service or data integrity.	160	disruptions in the service or data integrity.

content/blog/2023-06-18-unifi-ip-blocklist.md added +88

@@ -0,0 +1,88 @@
	1	+++
	2	date = 2023-06-18
	3	title = "Block IP Addresses and Subnets with Unifi Network Firewall"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Identifying Abusive IPs
	9
	10	If you\'re like me and use Unifi network equipment at the edge of the
	11	network you manage, you may know that Unifi is only somewhat decent at
	12	identifying and blocking IPs that represent abusive or threat actors.
	13
	14	While Unifi has a [threat
	15	management](https://help.ui.com/hc/en-us/articles/360006893234-UniFi-Gateway-Threat-Management)
	16	tool inside their Network application, it can be lacking in
	17	functionality and identification. For example, I have my UDM Pro set to
	18	identify and block almost all categories of threats available within the
	19	Unifi settings. However, I regularly identify abusive actors on my web
	20	server via the server logs.
	21
	22	In addition, I have identified IP addresses and subnets directly within
	23	Unifi\'s logs that the UDM did not block for whatever reason.
	24
	25	This guide is meant to be another step in the process to manually block
	26	abusive IP addresses or subnets that you have identified but are not
	27	being automatically blocked yet.
	28
	29	# Create an IP Group Profile
	30
	31	To start, login to the Unifi machine\'s web GUI and navigate to the
	32	Network app \> Settings \> Profiles.
	33
	34	Within this page, choose the `IP Groups` tab and click
	35	`Create New`.
	36
	37	![Network
	38	Profiles](https://img.cleberg.net/blog/20230618-unifi-ip-blocklist/unifi_profiles.png)
	39
	40	Each IP Group profile can be used as one of three options:
	41
	42	1. Port Group
	43	2. IPv4 Address/Subnet
	44	3. IPv6 Address/Subnet
	45
	46	In this example, I\'m creating an IPv4 Address/Subnet group and adding a
	47	few different IP addresses and a subnet. Once you\'ve added all IP
	48	addresses and subnets, click the `Apply` button that should
	49	appear at the bottom.
	50
	51	![Network Profile
	52	IPs](https://img.cleberg.net/blog/20230618-unifi-ip-blocklist/abusive_ips.png)
	53
	54	At this point, the IPv4 Address/Subnet has been created but not yet
	55	used.
	56
	57	# Drop IP Group Profile via the Unifi Firewall
	58
	59	To instruct the Unifi machine to block the profile we just created, we
	60	need to navigate to the Network app \> Settings \> Firewall & Security.
	61
	62	Within this screen, find the Firewall Rules table and click
	63	`Create Entry`. This entry should contain the following
	64	settings:
	65
	66	- Type: `Internet In`
	67	- Description: `<Your Custom Rule>`
	68	- Rule Applied: `Before Predefined Rules`
	69	- Action: `Drop`
	70	- Source Type: `Port/IP Group`
	71	- IPv4 Address Group:
	72	`<Name of the Group Profile You Created Above>`
	73
	74	Customize the remaining configurations to your liking, and then save and
	75	enable the firewall rule.
	76
	77	![Firewall
	78	Rule](https://img.cleberg.net/blog/20230618-unifi-ip-blocklist/firewall_drop_rule.png)
	79
	80	Once enabled, the Unifi machine will be able to drop all incoming
	81	connections from the defined IP addresses and subnets within the created
	82	profile.
	83
	84	> As a personal aside to this topic, I\'m looking for a convenient way
	85	> to update the firewall rules or profiles remotely (within the LAN)
	86	> from the web server to accelerate this process. If you have an idea on
	87	> how to automatically update Unifi IP groups or firewall rules, let me
	88	> know!

content/blog/2023-06-18-unifi-ip-blocklist.org deleted −82

	@@ -1,82 +0,0 @@
1	#+title: Block IP Addresses and Subnets with Unifi Network Firewall
2	#+date: 2023-06-18
3	#+description: Learn how to use the Unifi Network Firewall to block IP addresses and subnets.
4	#+filetags: :network:
5
6	* Identifying Abusive IPs
7	If you're like me and use Unifi network equipment at the edge of the
8	network you manage, you may know that Unifi is only somewhat decent at
9	identifying and blocking IPs that represent abusive or threat actors.
10
11	While Unifi has a
12	[[https://help.ui.com/hc/en-us/articles/360006893234-UniFi-Gateway-Threat-Management][threat
13	management]] tool inside their Network application, it can be lacking in
14	functionality and identification. For example, I have my UDM Pro set to
15	identify and block almost all categories of threats available within the
16	Unifi settings. However, I regularly identify abusive actors on my web
17	server via the server logs.
18
19	In addition, I have identified IP addresses and subnets directly within
20	Unifi's logs that the UDM did not block for whatever reason.
21
22	This guide is meant to be another step in the process to manually block
23	abusive IP addresses or subnets that you have identified but are not
24	being automatically blocked yet.
25
26	* Create an IP Group Profile
27	To start, login to the Unifi machine's web GUI and navigate to the
28	Network app > Settings > Profiles.
29
30	Within this page, choose the =IP Groups= tab and click =Create New=.
31
32	#+caption: Network Profiles
33	[[https://img.cleberg.net/blog/20230618-unifi-ip-blocklist/unifi_profiles.png]]
34
35	Each IP Group profile can be used as one of three options:
36
37	1. Port Group
38	2. IPv4 Address/Subnet
39	3. IPv6 Address/Subnet
40
41	In this example, I'm creating an IPv4 Address/Subnet group and adding a
42	few different IP addresses and a subnet. Once you've added all IP
43	addresses and subnets, click the =Apply= button that should appear at
44	the bottom.
45
46	#+caption: Network Profile IPs
47	[[https://img.cleberg.net/blog/20230618-unifi-ip-blocklist/abusive_ips.png]]
48
49	At this point, the IPv4 Address/Subnet has been created but not yet
50	used.
51
52	* Drop IP Group Profile via the Unifi Firewall
53	To instruct the Unifi machine to block the profile we just created, we
54	need to navigate to the Network app > Settings > Firewall & Security.
55
56	Within this screen, find the Firewall Rules table and click
57	=Create Entry=. This entry should contain the following settings:
58
59	- Type: =Internet In=
60	- Description: =<Your Custom Rule>=
61	- Rule Applied: =Before Predefined Rules=
62	- Action: =Drop=
63	- Source Type: =Port/IP Group=
64	- IPv4 Address Group: =<Name of the Group Profile You Created Above>=
65
66	Customize the remaining configurations to your liking, and then save and
67	enable the firewall rule.
68
69	#+caption: Firewall Rule
70	[[https://img.cleberg.net/blog/20230618-unifi-ip-blocklist/firewall_drop_rule.png]]
71
72	Once enabled, the Unifi machine will be able to drop all incoming
73	connections from the defined IP addresses and subnets within the created
74	profile.
75
76	#+begin_quote
77	As a personal aside to this topic, I'm looking for a convenient way to
78	update the firewall rules or profiles remotely (within the LAN) from the
79	web server to accelerate this process. If you have an idea on how to
80	automatically update Unifi IP groups or firewall rules, let me know!
81
82	#+end_quote

content/blog/2023-06-20-audit-review-template.md added +81

@@ -0,0 +1,81 @@
	1	+++
	2	date = 2023-06-20
	3	title = "Audit Testing Review Template"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Overview
	9
	10	This post is a very brief overview on the basic process to review
	11	audit test results, focusing on work done as part of a financial
	12	statement audit (FSA) or service organization controls (SOC) report.
	13
	14	While there are numerous different things to review and look for - all
	15	varying wildly depending on the report, client, and tester - this list
	16	serves as a solid base foundation for a reviewer.
	17
	18	I have used this throughout my career as a starting point to my reviews,
	19	and it has worked wonders for creating a consistent and objective
	20	template to my reviews. The goal is to keep this base high-level enough
	21	to be used on a wide variety of engagements, while still ensuring that
	22	all key areas are covered.
	23
	24	# Review Template
	25
	26	1. [ ] Check all documents for spelling and grammar.
	27	2. [ ] Ensure all acronyms are fully explained upon first use.
	28	3. [ ] For all people referenced, use their full names and job titles
	29	upon first use.
	30	4. [ ] All supporting documents must cross-reference to the lead sheet
	31	and vice-versa.
	32	5. [ ] Verify that the control has been adequately tested:
	33	- [ ] Test of Design: Did the tester obtain information
	34	regarding how the control should perform normally and abnormally
	35	(e.g., emergency scenarios)?
	36	- [ ] Test of Operating Effectiveness: Did the tester inquire,
	37	observe, inspect, or re-perform sufficient evidence to support
	38	their conclusion over the control? Inquiry alone is not
	39	adequate!
	40	6. [ ] For any information used in the control, whether by the control
	41	operator or by the tester, did the tester appropriately document the
	42	source (system or person), extraction method, parameters, and
	43	completeness and accuracy (C&A)?
	44	- [ ] For any reports, queries, etc. used in the extraction, did
	45	the tester include a copy and notate C&A considerations?
	46	7. [ ] Did the tester document the specific criteria that the control
	47	is being tested against?
	48	8. [ ] Did the tester notate in the supporting documents where each
	49	criterion was satisfied?
	50	9. [ ] If testing specific policies or procedures, are the documents
	51	adequate?
	52	- [ ] e.g., a test to validate that a review of policy XYZ occurs
	53	periodically should also evaluate the sufficiency of the policy
	54	itself, if meant to cover the risk that such a policy does not
	55	exist and is not reviewed.
	56	10. [ ] Does the test cover the appropriate period under review?
	57	- [ ] If the test is meant to cover only a portion of the audit
	58	period, do other controls exist to mitigate the risks that exist
	59	for the remainder of the period?
	60	11. [ ] For any computer-aided audit tools (CAATs) or other automation
	61	techniques used in the test, is the use of such tools explained and
	62	appropriately documented?
	63	12. [ ] If prior-period documentation exists, are there any missing
	64	pieces of evidence that would further enhance the quality of the
	65	test?
	66	13. [ ] Was any information discovered during the walkthrough or inquiry
	67	phase that was not incorporated into the test?
	68	14. [ ] Are there new rules or expectations from your company\'s
	69	internal guidance or your regulatory bodies that would affect the
	70	audit approach for this control?
	71	15. [ ] Was an exception, finding, or deficiency identified as a result
	72	of this test?
	73	- [ ] Was the control deficient in design, operation, or both?
	74	- [ ] What was the root cause of the finding?
	75	- [ ] Does the finding indicate other findings or potential fraud?
	76	- [ ] What\'s the severity and scope of the finding?
	77	- [ ] Do other controls exist as a form of compensation against
	78	the finding\'s severity, and do they mitigate the risk within
	79	the control objective?
	80	- [ ] Does the finding exist at the end of the period, or was it
	81	resolved within the audit period?

content/blog/2023-06-20-audit-review-template.org deleted −76

	@@ -1,76 +0,0 @@
1	#+title: Audit Testing Review Template
2	#+date: 2023-06-20
3	#+description: A handy reference template for audit review.
4	#+filetags: :audit:
5
6	* Overview
7	This post is a /very/ brief overview on the basic process to review
8	audit test results, focusing on work done as part of a financial
9	statement audit (FSA) or service organization controls (SOC) report.
10
11	While there are numerous different things to review and look for - all
12	varying wildly depending on the report, client, and tester - this list
13	serves as a solid base foundation for a reviewer.
14
15	I have used this throughout my career as a starting point to my reviews,
16	and it has worked wonders for creating a consistent and objective
17	template to my reviews. The goal is to keep this base high-level enough
18	to be used on a wide variety of engagements, while still ensuring that
19	all key areas are covered.
20
21	* Review Template
22	1. [ ] Check all documents for spelling and grammar.
23	2. [ ] Ensure all acronyms are fully explained upon first use.
24	3. [ ] For all people referenced, use their full names and job titles
25	upon first use.
26	4. [ ] All supporting documents must cross-reference to the lead sheet
27	and vice-versa.
28	5. [ ] Verify that the control has been adequately tested:
29	- [ ] Test of Design: Did the tester obtain information regarding
30	how the control should perform normally and abnormally (e.g.,
31	emergency scenarios)?
32	- [ ] Test of Operating Effectiveness: Did the tester inquire,
33	observe, inspect, or re-perform sufficient evidence to support
34	their conclusion over the control? Inquiry alone is not adequate!
35	6. [ ] For any information used in the control, whether by the control
36	operator or by the tester, did the tester appropriately document the
37	source (system or person), extraction method, parameters, and
38	completeness and accuracy (C&A)?
39	- [ ] For any reports, queries, etc. used in the extraction, did the
40	tester include a copy and notate C&A considerations?
41	7. [ ] Did the tester document the specific criteria that the control is
42	being tested against?
43	8. [ ] Did the tester notate in the supporting documents where each
44	criterion was satisfied?
45	9. [ ] If testing specific policies or procedures, are the documents
46	adequate?
47	- [ ] e.g., a test to validate that a review of policy XYZ occurs
48	periodically should also evaluate the sufficiency of the policy
49	itself, if meant to cover the risk that such a policy does not
50	exist and is not reviewed.
51	10. [ ] Does the test cover the appropriate period under review?
52	- [ ] If the test is meant to cover only a portion of the audit
53	period, do other controls exist to mitigate the risks that exist
54	for the remainder of the period?
55	11. [ ] For any computer-aided audit tools (CAATs) or other automation
56	techniques used in the test, is the use of such tools explained and
57	appropriately documented?
58	12. [ ] If prior-period documentation exists, are there any missing
59	pieces of evidence that would further enhance the quality of the
60	test?
61	13. [ ] Was any information discovered during the walkthrough or inquiry
62	phase that was not incorporated into the test?
63	14. [ ] Are there new rules or expectations from your company's internal
64	guidance or your regulatory bodies that would affect the audit
65	approach for this control?
66	15. [ ] Was an exception, finding, or deficiency identified as a result
67	of this test?
68	- [ ] Was the control deficient in design, operation, or both?
69	- [ ] What was the root cause of the finding?
70	- [ ] Does the finding indicate other findings or potential fraud?
71	- [ ] What's the severity and scope of the finding?
72	- [ ] Do other controls exist as a form of compensation against the
73	finding's severity, and do they mitigate the risk within the
74	control objective?
75	- [ ] Does the finding exist at the end of the period, or was it
76	resolved within the audit period?

content/blog/2023-06-23-byobu.org → content/blog/2023-06-23-byobu.md renamed +21 −17

	@@ -1,33 +1,37 @@
1	#+title: Byobu	1	+++
2	#+date: 2023-06-23	2	date = 2023-06-23
3	#+description: Learning about the Byobu application for terminals.	3	title = "Byobu"
4	#+filetags: :linux:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Byobu	8	# Byobu {#byobu-1}
7	[[https://www.byobu.org][byobu]] is a command-line tool that allows you	9
8	to use numerous screens within a single terminal emulator instance. More	10	[byobu](https://www.byobu.org) is a command-line tool that allows you to
9	specifically, it's a text based window manager, using either =screen= or	11	use numerous screens within a single terminal emulator instance. More
10	=tmux=.	12	specifically, it\'s a text based window manager, using either
		13	`screen` or `tmux`.
11		14
12	This post is mostly just a self-reference as I explore byobu, so I may	15	This post is mostly just a self-reference as I explore byobu, so I may
13	come back later and update this post with more content.	16	come back later and update this post with more content.
14		17
15	** Screenshot	18	## Screenshot
		19
16	Take a look below at my current multi-window set-up in byobu while I	20	Take a look below at my current multi-window set-up in byobu while I
17	write this blog post:	21	write this blog post:
18		22
19	#+caption: byobu	23	![byobu](https://img.cleberg.net/blog/20230623-byobu/byobu.png)
20	[[https://img.cleberg.net/blog/20230623-byobu/byobu.png]]	24
		25	### Keybindings
21		26
22	*** Keybindings
23	You can open the help menu with either of the following commands; they	27	You can open the help menu with either of the following commands; they
24	will both open the same manpage:	28	will both open the same manpage:
25		29
26	#+begin_src sh	30	```sh
27	byobu --help	31	byobu --help
28	# or	32	# or
29	man byobu	33	man byobu
30	#+end_src	34	```
31		35
32	While the manpage contains a ton of information about the functionality	36	While the manpage contains a ton of information about the functionality
33	of byobu (such as status notifications, sessions, and windows), the	37	of byobu (such as status notifications, sessions, and windows), the
	@@ -35,7 +39,7 @@ first location to explore should be the keybindings section.
35		39
36	The keybindings are configured as follows:	40	The keybindings are configured as follows:
37		41
38	#+begin_src txt	42	``` txt
39	byobu keybindings can be user defined in /usr/share/byobu/keybindings/ (or	43	byobu keybindings can be user defined in /usr/share/byobu/keybindings/ (or
40	within .screenrc if byobu-export was used). The common key bindings are:	44	within .screenrc if byobu-export was used). The common key bindings are:
41		45
	@@ -63,4 +67,4 @@ Ctrl-a R - Reload profile
63	Ctrl-a ! - Toggle key bindings on and off	67	Ctrl-a ! - Toggle key bindings on and off
64	Ctrl-a k - Kill the current window	68	Ctrl-a k - Kill the current window
65	Ctrl-a ~ - Save the current window's scrollback buffer	69	Ctrl-a ~ - Save the current window's scrollback buffer
66	#+end_src	70	```

content/blog/2023-06-23-self-hosting-convos.org → content/blog/2023-06-23-self-hosting-convos.md renamed +72 −63

	@@ -1,39 +1,44 @@
1	#+title: Self-Hosting Convos IRC Web Client	1	+++
2	#+date: 2023-06-23	2	date = 2023-06-23
3	#+description: A guide to self-hosting the Convos application on your own server.	3	title = "Self-Hosting Convos IRC Web Client"
4	#+filetags: :selfhosting:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Convos	8	# Convos
7	[[https://convos.chat/][Convos]] is an always-online web client for IRC.	9
		10	[Convos](https://convos.chat/) is an always-online web client for IRC.
8	It has a few features that made it attractive to me as a self-hosted	11	It has a few features that made it attractive to me as a self-hosted
9	option:	12	option:
10		13
11	- Extremely simple Docker Compose installation method.	14	- Extremely simple Docker Compose installation method.
12	- Runs in the background and monitors chats even while you're not logged	15	- Runs in the background and monitors chats even while you\'re not
13	in.	16	logged in.
14	- Neatly organized sidebar for conversation and client settings.	17	- Neatly organized sidebar for conversation and client settings.
15	- Ability to connect to different hosts and create profiles for hosts.	18	- Ability to connect to different hosts and create profiles for hosts.
16	- By default, registration is closed to the public. You can enable	19	- By default, registration is closed to the public. You can enable
17	public registration on the Settings page or generate invitation links	20	public registration on the Settings page or generate invitation
18	on the Users page.	21	links on the Users page.
19	- Customization of the client theme, organization name and URL, admin	22	- Customization of the client theme, organization name and URL, admin
20	email, and video service.	23	email, and video service.
21		24
22	* Docker Installation	25	# Docker Installation
23	To install Convos, simply create a directory and a =docker-compose.yml=	26
24	file:	27	To install Convos, simply create a directory and a
25		28	`docker-compose.yml` file:
26	#+begin_src sh	29
		30	```sh
27	mkdir ~/convos && cd ~/convos	31	mkdir ~/convos && cd ~/convos
28	nano docker-compose.yml	32	nano docker-compose.yml
29	#+end_src	33	```
30		34
31	With the =docker-compose.yml= file open, paste the configuration below	35	With the `docker-compose.yml` file open, paste the
32	into the file. You can customize the host port to be something unique,	36	configuration below into the file. You can customize the host port to be
33	such as =21897:3000=. You can also change the =data= folder to be a	37	something unique, such as `21897:3000`. You can also change
34	docker volume instead, if you prefer.	38	the `data` folder to be a docker volume instead, if you
		39	prefer.
35		40
36	#+begin_src config	41	``` config
37	version: '3'	42	version: '3'
38		43
39	services:	44	services:
	@@ -46,31 +51,33 @@ services:
46	environment:	51	environment:
47	- CONVOS_REVERSE_PROXY=1	52	- CONVOS_REVERSE_PROXY=1
48	restart: always	53	restart: always
49	#+end_src	54	```
50		55
51	Save the =docker-compose.yml= file and bring the container up:	56	Save the `docker-compose.yml` file and bring the container
		57	up:
52		58
53	#+begin_src sh	59	```sh
54	sudo docker-compose up -d	60	sudo docker-compose up -d
55	#+end_src	61	```
56		62
57	At this point, Convos is available at =<server_ip>:3000= but not	63	At this point, Convos is available at `<server_ip>:3000` but
58	available to the public.	64	not available to the public.
59		65
60	* Nginx Reverse Proxy	66	# Nginx Reverse Proxy
61	If you're using Nginx, you can create a configuration file for the	67
		68	If you\'re using Nginx, you can create a configuration file for the
62	convos application. Start by opening the file:	69	convos application. Start by opening the file:
63		70
64	#+begin_src sh	71	```sh
65	nano /etc/nginx/sites-available/convos	72	nano /etc/nginx/sites-available/convos
66	#+end_src	73	```
67		74
68	Within the nginx configuration file, paste the following content and be	75	Within the nginx configuration file, paste the following content and be
69	sure to update =convos.example.com= to match your domain and	76	sure to update `convos.example.com` to match your domain and
70	=127.0.0.1:3000= to match the port you opened in the	77	`127.0.0.1:3000` to match the port you opened in the
71	=docker-compose.yml= file.	78	`docker-compose.yml` file.
72		79
73	#+begin_src config	80	``` config
74	# Host and port where convos is running	81	# Host and port where convos is running
75	upstream convos_upstream { server 127.0.0.1:3000; }	82	upstream convos_upstream { server 127.0.0.1:3000; }
76		83
	@@ -108,53 +115,55 @@ server {
108	include /etc/letsencrypt/options-ssl-nginx.conf;	115	include /etc/letsencrypt/options-ssl-nginx.conf;
109	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;	116	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
110	}	117	}
111	#+end_src	118	```
112		119
113	Once the file is saved, link it to the =sites-enabled= directory and	120	Once the file is saved, link it to the `sites-enabled`
114	restart Nginx.	121	directory and restart Nginx.
115		122
116	#+begin_src sh	123	```sh
117	sudo ln -s /etc/nginx/sites-available/convos /etc/nginx/sites-enabled/convos	124	sudo ln -s /etc/nginx/sites-available/convos /etc/nginx/sites-enabled/convos
118	sudo systemctl restart nginx.service	125	sudo systemctl restart nginx.service
119	#+end_src	126	```
		127
		128	# Screenshots
120		129
121	* Screenshots
122	See the screenshots below for an example of the Convos homepage and an	130	See the screenshots below for an example of the Convos homepage and an
123	excerpt of the chat screen.	131	excerpt of the chat screen.
124		132
125	There are numerous themes to choose from; the theme shown in the images	133	There are numerous themes to choose from; the theme shown in the images
126	below is Dracula.	134	below is Dracula.
127		135
128	#+caption: Convos Home	136	![Convos
129	[[https://img.cleberg.net/blog/20230623-convos/convos_home.png]]	137	Home](https://img.cleberg.net/blog/20230623-convos/convos_home.png)
		138
		139	![Convos
		140	Chat](https://img.cleberg.net/blog/20230623-convos/convos_chat.png)
130		141
131	#+caption: Convos Chat	142	# Registering a Nickname
132	[[https://img.cleberg.net/blog/20230623-convos/convos_chat.png]]
133		143
134	* Registering a Nickname
135	Hop into the server channel so that you can message NickServ. In the	144	Hop into the server channel so that you can message NickServ. In the
136	case of Convos, the default sever is libera.chat. Simply click the	145	case of Convos, the default sever is libera.chat. Simply click the
137	=libera= conversation at the top of the sidebar to open it. Once the	146	`libera` conversation at the top of the sidebar to open it.
138	chat is open, you can claim a nickname by typing:	147	Once the chat is open, you can claim a nickname by typing:
139		148
140	#+begin_src txt	149	``` txt
141	/nick <nick>	150	/nick <nick>
142	#+end_src	151	```
143		152
144	If the nickname is available, and you'd like to register the nickname to	153	If the nickname is available, and you\'d like to register the nickname
145	yourself, you'll need to type another command:	154	to yourself, you\'ll need to type another command:
146		155
147	#+begin_src txt	156	``` txt
148	/msg NickServ REGISTER	157	/msg NickServ REGISTER
149	<password> <email>	158	<password> <email>
150	#+end_src	159	```
151		160
152	On libera.chat, the server will send a confirmation email with a command	161	On libera.chat, the server will send a confirmation email with a command
153	that you must message in IRC to verify registration of the nickname:	162	that you must message in IRC to verify registration of the nickname:
154		163
155	#+begin_src txt	164	``` txt
156	/msg NickServ VERIFY REGISTER <nick> <verification_code>	165	/msg NickServ VERIFY REGISTER <nick> <verification_code>
157	#+end_src	166	```
158		167
159	Once entered, the server should confirm registration of the nickname to	168	Once entered, the server should confirm registration of the nickname to
160	the supplied email with the password specified.	169	the supplied email with the password specified.

content/blog/2023-06-28-backblaze-b2.md added +189

@@ -0,0 +1,189 @@
	1	+++
	2	date = 2023-06-28
	3	title = "Getting Started with Backblaze B2 Cloud Storage"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Overview
	9
	10	Backblaze [B2 Cloud
	11	Storage](https://www.backblaze.com/b2/cloud-storage.html) is an
	12	inexpensive and reliable on-demand cloud storage and backup solution.
	13
	14	The service starts at \$5/TB/month (\$0.005/GB/month) with a download
	15	rate of \$0.01/GB/month.
	16
	17	However, there are free tiers:
	18
	19	- The first 10 GB of storage is free.
	20	- The first 1 GB of data downloaded each day is free.
	21	- Class A transactions are free.
	22	- The first 2500 Class B transactions each day are free.
	23	- The first 2500 Class C transactions each day are free.
	24
	25	You can see which API calls fall into categories A, B, or C here:
	26	[Pricing Organized by API
	27	Calls](https://www.backblaze.com/b2/b2-transactions-price.html).
	28
	29	For someone like me, who wants an offsite backup of their server\'s
	30	`/home/` directory and various other server configs that fall
	31	under 10 GB total, Backblaze is a great solution from a financial
	32	perspective.
	33
	34	# Create An Account
	35
	36	To start with Backblaze, you\'ll need to [create a free
	37	account](https://www.backblaze.com/b2/sign-up.html) - no payment method
	38	is required to sign up.
	39
	40	Once you have an account, you can test out the service with their web
	41	GUI, their mobile app, or their CLI tool. I\'m going to use the CLI tool
	42	below to test a file upload and then sync an entire directory to my
	43	Backblaze bucket.
	44
	45	# Create a Bucket
	46
	47	Before you can start uploading, you need to create a bucket. If you\'re
	48	familiar with other object storage services, this will feel familiar. If
	49	not, it\'s pretty simple to create one.
	50
	51	As their webpage says:
	52
	53	> A bucket is a container that holds files that are uploaded into B2
	54	> Cloud Storage. The bucket name must be globally unique and must have a
	55	> minimum of 6 characters. A limit of 100 buckets may be created per
	56	> account. An unlimited number of files may be uploaded into a bucket.
	57
	58	Once you click the `Create a Bucket` button on their webpage
	59	or mobile app, you need to provide the following:
	60
	61	- Bucket Unique Name
	62	- Files in Bucket are: `Private` or `Public`
	63	- Default Encryption: `Disable` or `Enable`
	64	- Object Lock: `Disable` or `Enable`
	65
	66	For my bucket, I created a private bucket with encryption enabled and
	67	object lock disabled.
	68
	69	Once your bucket is created, you can test the upload/download feature on
	70	their web GUI or mobile app! At this point, you have a fully functional
	71	bucket and account.
	72
	73	# Linux CLI Tool
	74
	75	## Installation
	76
	77	To install the `b2` CLI tool, you\'ll need to download it
	78	from the [CLI
	79	Tools](https://www.backblaze.com/docs/cloud-storage-command-line-tools)
	80	page. I recommend copying the URL from the link that says
	81	`Linux` and using wget to download it, as shown below.
	82
	83	Once downloaded, make the file executable and move it to a location on
	84	your `$PATH`, so that you can execute that command from
	85	anywhere on the machine.
	86
	87	```sh
	88	wget <b2_cli_url>
	89	chmod +x b2_linux
	90	mv b2_linux /usr/bin/b2
	91	```
	92
	93	## Log In
	94
	95	The first step after installation is to log in. To do this, execute the
	96	following command and provide your `<applicationKeyId>` and
	97	`<applicationKey>`.
	98
	99	If you don\'t want to provide these values in the command itself, you
	100	can simply execute the base command and it will request them in an
	101	interactive prompt.
	102
	103	```sh
	104	# if you want to provide the keys directly:
	105	b2 authorize-account [<applicationKeyId>] [<applicationKey>]
	106
	107	# or, if you don't want your keys in your shell history:
	108	b2 authorize-account
	109	```
	110
	111	## Upload a Test File
	112
	113	In order to test the functionality of the CLI tool, I\'ll start by
	114	uploading a single test file to the bucket I created above. We can do
	115	this with the `upload_file` function.
	116
	117	The command is issued as follows:
	118
	119	```sh
	120	b2 upload_file <bucket_name> <local_file> <remote_file>
	121	```
	122
	123	In my situation, I executed the following command with my username.
	124
	125	```sh
	126	b2 upload_file my_unique_bucket /home/<user>/test.md test.md
	127	```
	128
	129	To confirm that the file was uploaded successfully, list the files in
	130	your bucket:
	131
	132	```sh
	133	b2 ls <bucket_name>
	134	```
	135
	136	``` txt
	137	test.md
	138	```
	139
	140	## Sync a Directory
	141
	142	If you have numerous files, you can use the `sync` function
	143	to perform functionality similar to `rsync`, where you can
	144	check what\'s in your bucket and sync anything that is new or modified.
	145
	146	The command is issued as follows:
	147
	148	```sh
	149	b2 sync <source file location> <B2 bucket destination>
	150	```
	151
	152	In my case, I can sync my user\'s entire home directory to my bucket
	153	without specifying any of the files directly:
	154
	155	```sh
	156	b2 sync /home/<user>/ "b2://<bucketName>/home/<user>"
	157	```
	158
	159	# Caveats
	160
	161	## Timing of Updates to the Web GUI
	162
	163	When performing actions over a bucket, there is a slight delay in the
	164	web GUI when inspecting a bucket or its file. Note that simple actions
	165	such as uploading or deleting files may have a delay of a few minutes up
	166	to 24 hours. In my experience (\<10 GB and \~20,000 files), any actions
	167	took only a few minutes to update across clients.
	168
	169	## Symlinks
	170
	171	Note that symlinks are resolved by b2, so if you have a link from
	172	`/home/<user>/nas-storage` that symlinks out to a
	173	`/mnt/nas-storage` folder that has 10TB of data,
	174	`b2` will resolve that link and start uploading all 10TB of
	175	data linked within the folder.
	176
	177	If you\'re not sure if you have any symlinks, a symlink will look like
	178	this (note the `->` symbol):
	179
	180	```sh
	181	> ls -lha
	182	lrwxrwxrwx 1 root root 20 Jun 28 13:32 nas -> /mnt/nas-storage/
	183	```
	184
	185	You can recursively find symlink in a path with the following command:
	186
	187	```sh
	188	ls -lR /path/to/search \| grep '^l'
	189	```

content/blog/2023-06-28-backblaze-b2.org deleted −176

	@@ -1,176 +0,0 @@
1	#+title: Getting Started with Backblaze B2 Cloud Storage
2	#+date: 2023-06-28
3	#+description: An introduction to the free ttier of Backblaze B2 Cloud Storage.
4	#+filetags: :sysadmin:
5
6	* Overview
7	Backblaze [[https://www.backblaze.com/b2/cloud-storage.html][B2 Cloud
8	Storage]] is an inexpensive and reliable on-demand cloud storage and
9	backup solution.
10
11	The service starts at $5/TB/month ($0.005/GB/month) with a download rate
12	of $0.01/GB/month.
13
14	However, there are free tiers:
15
16	- The first 10 GB of storage is free.
17	- The first 1 GB of data downloaded each day is free.
18	- Class A transactions are free.
19	- The first 2500 Class B transactions each day are free.
20	- The first 2500 Class C transactions each day are free.
21
22	You can see which API calls fall into categories A, B, or C here:
23	[[https://www.backblaze.com/b2/b2-transactions-price.html][Pricing
24	Organized by API Calls]].
25
26	For someone like me, who wants an offsite backup of their server's
27	=/home/= directory and various other server configs that fall under 10
28	GB total, Backblaze is a great solution from a financial perspective.
29
30	* Create An Account
31	To start with Backblaze, you'll need to
32	[[https://www.backblaze.com/b2/sign-up.html][create a free account]] -
33	no payment method is required to sign up.
34
35	Once you have an account, you can test out the service with their web
36	GUI, their mobile app, or their CLI tool. I'm going to use the CLI tool
37	below to test a file upload and then sync an entire directory to my
38	Backblaze bucket.
39
40	* Create a Bucket
41	Before you can start uploading, you need to create a bucket. If you're
42	familiar with other object storage services, this will feel familiar. If
43	not, it's pretty simple to create one.
44
45	As their webpage says:
46
47	#+begin_quote
48	A bucket is a container that holds files that are uploaded into B2 Cloud
49	Storage. The bucket name must be globally unique and must have a minimum
50	of 6 characters. A limit of 100 buckets may be created per account. An
51	unlimited number of files may be uploaded into a bucket.
52
53	#+end_quote
54
55	Once you click the =Create a Bucket= button on their webpage or mobile
56	app, you need to provide the following:
57
58	- Bucket Unique Name
59	- Files in Bucket are: =Private= or =Public=
60	- Default Encryption: =Disable= or =Enable=
61	- Object Lock: =Disable= or =Enable=
62
63	For my bucket, I created a private bucket with encryption enabled and
64	object lock disabled.
65
66	Once your bucket is created, you can test the upload/download feature on
67	their web GUI or mobile app! At this point, you have a fully functional
68	bucket and account.
69
70	* Linux CLI Tool
71	** Installation
72	To install the =b2= CLI tool, you'll need to download it from the
73	[[https://www.backblaze.com/docs/cloud-storage-command-line-tools][CLI
74	Tools]] page. I recommend copying the URL from the link that says
75	=Linux= and using wget to download it, as shown below.
76
77	Once downloaded, make the file executable and move it to a location on
78	your =$PATH=, so that you can execute that command from anywhere on the
79	machine.
80
81	#+begin_src sh
82	wget <b2_cli_url>
83	chmod +x b2_linux
84	mv b2_linux /usr/bin/b2
85	#+end_src
86
87	** Log In
88	The first step after installation is to log in. To do this, execute the
89	following command and provide your =<applicationKeyId>= and
90	=<applicationKey>=.
91
92	If you don't want to provide these values in the command itself, you can
93	simply execute the base command and it will request them in an
94	interactive prompt.
95
96	#+begin_src sh
97	# if you want to provide the keys directly:
98	b2 authorize-account [<applicationKeyId>] [<applicationKey>]
99
100	# or, if you don't want your keys in your shell history:
101	b2 authorize-account
102	#+end_src
103
104	** Upload a Test File
105	In order to test the functionality of the CLI tool, I'll start by
106	uploading a single test file to the bucket I created above. We can do
107	this with the =upload_file= function.
108
109	The command is issued as follows:
110
111	#+begin_src sh
112	b2 upload_file <bucket_name> <local_file> <remote_file>
113	#+end_src
114
115	In my situation, I executed the following command with my username.
116
117	#+begin_src sh
118	b2 upload_file my_unique_bucket /home/<user>/test.md test.md
119	#+end_src
120
121	To confirm that the file was uploaded successfully, list the files in
122	your bucket:
123
124	#+begin_src sh
125	b2 ls <bucket_name>
126	#+end_src
127
128	#+begin_src txt
129	test.md
130	#+end_src
131
132	** Sync a Directory
133	If you have numerous files, you can use the =sync= function to perform
134	functionality similar to =rsync=, where you can check what's in your
135	bucket and sync anything that is new or modified.
136
137	The command is issued as follows:
138
139	#+begin_src sh
140	b2 sync <source file location> <B2 bucket destination>
141	#+end_src
142
143	In my case, I can sync my user's entire home directory to my bucket
144	without specifying any of the files directly:
145
146	#+begin_src sh
147	b2 sync /home/<user>/ "b2://<bucketName>/home/<user>"
148	#+end_src
149
150	* Caveats
151	** Timing of Updates to the Web GUI
152	When performing actions over a bucket, there is a slight delay in the
153	web GUI when inspecting a bucket or its file. Note that simple actions
154	such as uploading or deleting files may have a delay of a few minutes up
155	to 24 hours. In my experience (<10 GB and ~20,000 files), any actions
156	took only a few minutes to update across clients.
157
158	** Symlinks
159	Note that symlinks are resolved by b2, so if you have a link from
160	=/home/<user>/nas-storage= that symlinks out to a =/mnt/nas-storage=
161	folder that has 10TB of data, =b2= will resolve that link and start
162	uploading all 10TB of data linked within the folder.
163
164	If you're not sure if you have any symlinks, a symlink will look like
165	this (note the =->= symbol):
166
167	#+begin_src sh
168	> ls -lha
169	lrwxrwxrwx 1 root root 20 Jun 28 13:32 nas -> /mnt/nas-storage/
170	#+end_src
171
172	You can recursively find symlink in a path with the following command:
173
174	#+begin_src sh
175	ls -lR /path/to/search \| grep '^l'
176	#+end_src

content/blog/2023-06-30-self-hosting-voyager.org → content/blog/2023-06-30-self-hosting-voyager.md renamed +50 −42

	@@ -1,50 +1,56 @@
1	#+title: Self-Hosting Voyager - A Lemmy Web Client	1	+++
2	#+date: 2023-06-30	2	date = 2023-06-30
3	#+description: A guide to self-hosting the Voyager application on your own server.	3	title = "Self-Hosting Voyager - A Lemmy Web Client"
4	#+filetags: :selfhosting:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Installation Guide	8	# Installation Guide
7	[[https://github.com/aeharding/voyager][Voyager]] is a mobile-first	9
8	Lemmy web client, based on iOS design standards. It follows very closely	10	[Voyager](https://github.com/aeharding/voyager) is a mobile-first Lemmy
9	to Apollo's design.	11	web client, based on iOS design standards. It follows very closely to
		12	Apollo\'s design.
10		13
11	This post is a guide showing how I was able to build and launch my own	14	This post is a guide showing how I was able to build and launch my own
12	instance of Voyager via Docker Compose.	15	instance of Voyager via Docker Compose.
13		16
14	** Clone the Repository	17	## Clone the Repository
		18
15	Start by cloning the repository and entering it:	19	Start by cloning the repository and entering it:
16		20
17	#+begin_src sh	21	```sh
18	git clone https://github.com/aeharding/voyager	22	git clone https://github.com/aeharding/voyager
19	cd voyager	23	cd voyager
20	#+end_src	24	```
		25
		26	## Build the Image
21		27
22	** Build the Image
23	With this repository, you can build the image yourself without any	28	With this repository, you can build the image yourself without any
24	further configuration. When complete, it'll give you the image ID for	29	further configuration. When complete, it\'ll give you the image ID for
25	you to run.	30	you to run.
26		31
27	#+begin_src sh	32	```sh
28	sudo docker build .	33	sudo docker build .
29	# Successfully built 5f00723cb5be	34	# Successfully built 5f00723cb5be
30	#+end_src	35	```
31		36
32	With the image ID above, you can run the container and pass the	37	With the image ID above, you can run the container and pass the
33	requested port =5314= through or use a custom port, if you wish.	38	requested port `5314` through or use a custom port, if you
		39	wish.
34		40
35	You can also set the =CUSTOM_LEMMY_SERVERS= environment variable if you	41	You can also set the `CUSTOM_LEMMY_SERVERS` environment
36	want to add to the default suggested login servers. This must be set	42	variable if you want to add to the default suggested login servers. This
37	with a comma separated list of suggested servers. The first instance in	43	must be set with a comma separated list of suggested servers. The first
38	the list will be the default view for logged-out users.	44	instance in the list will be the default view for logged-out users.
39		45
40	I will be using a =docker-compose.yml= file to run this container,	46	I will be using a `docker-compose.yml` file to run this
41	instead of a =docker run= command.	47	container, instead of a `docker run` command.
42		48
43	#+begin_src sh	49	```sh
44	nano docker-compose.yml	50	nano docker-compose.yml
45	#+end_src	51	```
46		52
47	#+begin_src conf	53	``` conf
48	version: "2"	54	version: "2"
49	services:	55	services:
50	voyager:	56	voyager:
	@@ -54,29 +60,30 @@ services:
54	- "<custom_port>:5314"	60	- "<custom_port>:5314"
55	environment:	61	environment:
56	- CUSTOM_LEMMY_SERVERS=lemmy.dbzer0.com,lemmy.world,lemmy.ml,beehaw.org	62	- CUSTOM_LEMMY_SERVERS=lemmy.dbzer0.com,lemmy.world,lemmy.ml,beehaw.org
57	#+end_src	63	```
58		64
59	#+begin_src sh	65	```sh
60	sudo docker-compose up -d	66	sudo docker-compose up -d
61	#+end_src	67	```
62		68
63	The web app will now be available at the following address:	69	The web app will now be available at the following address:
64	=<machine_ip>:<custom_port>=. If you are running it on your local	70	`<machine_ip>:<custom_port>`. If you are running it on your
65	device, try =localhost:<custom_port>=.	71	local device, try `localhost:<custom_port>`.
		72
		73	## Reverse Proxy
66		74
67	** Reverse Proxy	75	If you want to visit this app via an external URL or domain name,
68	If you want to visit this app via an external URL or domain name, you'll	76	you\'ll need to set up a reverse proxy. The example below uses Nginx as
69	need to set up a reverse proxy. The example below uses Nginx as a	77	a reverse proxy.
70	reverse proxy.
71		78
72	Simply create the configuration file, paste the contents below, save the	79	Simply create the configuration file, paste the contents below, save the
73	file, symlink the file, and restart Nginx.	80	file, symlink the file, and restart Nginx.
74		81
75	#+begin_src sh	82	```sh
76	sudo nano /etc/nginx/sites-available/voyager	83	sudo nano /etc/nginx/sites-available/voyager
77	#+end_src	84	```
78		85
79	#+begin_src conf	86	``` conf
80	server {	87	server {
81	if ($host ~ ^[^.]+\.example\.com$) {	88	if ($host ~ ^[^.]+\.example\.com$) {
82	return 301 https://$host$request_uri;	89	return 301 https://$host$request_uri;
	@@ -106,14 +113,15 @@ server {
106	include /etc/letsencrypt/options-ssl-nginx.conf;	113	include /etc/letsencrypt/options-ssl-nginx.conf;
107	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;	114	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
108	}	115	}
109	#+end_src	116	```
110		117
111	#+begin_src sh	118	```sh
112	sudo ln sudo ln -s /etc/nginx/sites-available/voyager /etc/nginx/sites-enabled/voyager	119	sudo ln sudo ln -s /etc/nginx/sites-available/voyager /etc/nginx/sites-enabled/voyager
113	sudo systemctl restart nginx.service	120	sudo systemctl restart nginx.service
114	#+end_src	121	```
115		122
116	The site will now be available at the =server_name= you specified above!	123	The site will now be available at the `server_name` you
		124	specified above!
117		125
118	You can visit my instance at	126	You can visit my instance at
119	[[https://voyager.cleberg.net][voyager.cleberg.net]] for an example.	127	[voyager.cleberg.net](https://voyager.cleberg.net) for an example.

content/blog/2023-07-12-wireguard-lan.org → content/blog/2023-07-12-wireguard-lan.md renamed +61 −59

	@@ -1,28 +1,31 @@
1	#+title: Enable LAN Access in Mullvad Wireguard Conf Files	1	+++
2	#+date: 2023-07-12	2	date = 2023-07-12
3	#+description: Learn how to enable LAN access manually in Mullvad configuration files.	3	title = "Enable LAN Access in Mullvad Wireguard Configuration Files"
4	#+filetags: :linux:	4	description = ""
5		5	draft = false
6	* Download Configuration Files from Mullvad	6	+++
7	To begin, you'll need	7
8	[[https://mullvad.net/account/wireguard-config][Wireguard configuration	8	# Download Configuration Files from Mullvad
9	files from Mullvad]]. You can choose any of the options as you download	9
10	them. For example, I enabled the kill switch, selected all countries,	10	To begin, you\'ll need [Wireguard configuration files from
11	and selected a few content filters.	11	Mullvad](https://mullvad.net/account/wireguard-config). You can choose
		12	any of the options as you download them. For example, I enabled the kill
		13	switch, selected all countries, and selected a few content filters.
12		14
13	Once downloaded, unzip the files and move them to the Wireguard folder	15	Once downloaded, unzip the files and move them to the Wireguard folder
14	on your system.	16	on your system.
15		17
16	#+begin_src sh	18	```sh
17	cd ~/Downloads	19	cd ~/Downloads
18	unzip mullvad_wireguard_linux_all_all.zip	20	unzip mullvad_wireguard_linux_all_all.zip
19	doas mv *.conf /etc/wireguard/	21	doas mv *.conf /etc/wireguard/
20	#+end_src	22	```
		23
		24	## Configuration File Layout
21		25
22	** Configuration File Layout
23	The default configuration files will look something like this:	26	The default configuration files will look something like this:
24		27
25	#+begin_src conf	28	``` conf
26	[Interface]	29	[Interface]
27	# Device: <redacted>	30	# Device: <redacted>
28	PrivateKey = <redacted>	31	PrivateKey = <redacted>
	@@ -35,46 +38,45 @@ PreDown = iptables -D OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m ad
35	PublicKey = <redacted>	38	PublicKey = <redacted>
36	AllowedIPs = <redacted>	39	AllowedIPs = <redacted>
37	Endpoint = <redacted>	40	Endpoint = <redacted>
38	#+end_src	41	```
39		42
40	#+begin_quote	43	> Note: If you didn\'t select the kill switch option, you won\'t see the
41	Note: If you didn't select the kill switch option, you won't see the	44	> `PostUp` and `PreDown` lines. In this case,
42	=PostUp= and =PreDown= lines. In this case, you'll need to modify the	45	> you\'ll need to modify the script below to simply append those lines
43	script below to simply append those lines to the =[Interface]= block.	46	> to the `[Interface]` block.
44	#+end_quote
45		47
46	* Editing the Configuration Files	48	# Editing the Configuration Files
47	Once you have the files, you'll need to edit them and replace the
48	=PostUp= and =PreDown= lines to enable LAN access.
49		49
50	I recommend that you do this process as root, since you'll need to be	50	Once you have the files, you\'ll need to edit them and replace the
51	able to access files in =/etc/wireguard=, which are generally owned by	51	`PostUp` and `PreDown` lines to enable LAN access.
52	root. You can also try using =sudo= or =doas=, but I didn't test that
53	scenario so you may need to adjust, as necessary.
54		52
55	#+begin_src sh	53	I recommend that you do this process as root, since you\'ll need to be
		54	able to access files in `/etc/wireguard`, which are generally
		55	owned by root. You can also try using `sudo` or
		56	`doas`, but I didn\'t test that scenario so you may need to
		57	adjust, as necessary.
		58
		59	```sh
56	su	60	su
57	#+end_src	61	```
58		62
59	Create the Python file that we'll be using to update the Wireguard	63	Create the Python file that we\'ll be using to update the Wireguard
60	configuration files.	64	configuration files.
61		65
62	#+begin_src sh	66	```sh
63	nano replace.py	67	nano replace.py
64	#+end_src	68	```
65		69
66	Within the Python file, copy and paste the logic below. This script will	70	Within the Python file, copy and paste the logic below. This script will
67	open a directory, loop through every configuration file within the	71	open a directory, loop through every configuration file within the
68	directory, and replace the =PostUp= and =PreDown= lines with the new	72	directory, and replace the `PostUp` and `PreDown`
69	LAN-enabled iptables commands.	73	lines with the new LAN-enabled iptables commands.
70
71	#+begin_quote
72	Note: If your LAN is on a subnet other than =192.168.1.0/24=, you'll
73	need to update the Python script below appropriately.
74		74
75	#+end_quote	75	> Note: If your LAN is on a subnet other than
		76	> `192.168.1.0/24`, you\'ll need to update the Python script
		77	> below appropriately.
76		78
77	#+begin_src python	79	``` python
78	import os	80	import os
79	import fileinput	81	import fileinput
80		82
	@@ -93,25 +95,25 @@ for file in os.listdir(dir):
93	print(line, end="")	95	print(line, end="")
94		96
95	print("--- done ---")	97	print("--- done ---")
96	#+end_src	98	```
97		99
98	Once you're done, save and close the file. You can now run the Python	100	Once you\'re done, save and close the file. You can now run the Python
99	script and watch as each file is updated.	101	script and watch as each file is updated.
100		102
101	#+begin_src sh	103	```sh
102	python3 replace.py	104	python3 replace.py
103	#+end_src	105	```
104		106
105	To confirm it worked, you can =cat= one of the configuration files to	107	To confirm it worked, you can `cat` one of the configuration
106	inspect the new logic and connect to one to test it out.	108	files to inspect the new logic and connect to one to test it out.
107		109
108	#+begin_src sh	110	```sh
109	cat /etc/wireguard/us-chi-wg-001.conf	111	cat /etc/wireguard/us-chi-wg-001.conf
110	#+end_src	112	```
111		113
112	The configuration files should now look like this:	114	The configuration files should now look like this:
113		115
114	#+begin_src conf	116	``` conf
115	[Interface]	117	[Interface]
116	# Device: <redacted>	118	# Device: <redacted>
117	PrivateKey = <redacted>	119	PrivateKey = <redacted>
	@@ -124,20 +126,20 @@ PreDown = iptables -D OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m ad
124	PublicKey = <redacted>	126	PublicKey = <redacted>
125	AllowedIPs = <redacted>	127	AllowedIPs = <redacted>
126	Endpoint = <redacted>	128	Endpoint = <redacted>
127	#+end_src	129	```
128		130
129	If you connect to a Wireguard interface, such as =us-chi-wg-001=, you	131	If you connect to a Wireguard interface, such as
130	can test your SSH functionality and see that it works even while on the	132	`us-chi-wg-001`, you can test your SSH functionality and see
131	VPN.	133	that it works even while on the VPN.
132		134
133	#+begin_src sh	135	```sh
134	wg-quick up us-chi-wg-001	136	wg-quick up us-chi-wg-001
135	ssh user@lan-host	137	ssh user@lan-host
136	#+end_src	138	```
137		139
138	To confirm your VPN connection, you can curl Mullvad's connection API:	140	To confirm your VPN connection, you can curl Mullvad\'s connection API:
139		141
140	#+begin_src sh	142	```sh
141	curl https://am.i.mullvad.net/connected	143	curl https://am.i.mullvad.net/connected
142	# You are connected to Mullvad (server us-chi-wg-001). Your IP address is <redacted>	144	# You are connected to Mullvad (server us-chi-wg-001). Your IP address is <redacted>
143	#+end_src	145	```

content/blog/2023-07-19-plex-transcoder-errors.org → content/blog/2023-07-19-plex-transcoder-errors.md renamed +35 −28

	@@ -1,57 +1,64 @@
1	#+title: How to Avoid Plex Error: 'Conversion failed. The transcoder failed to start up.'	1	+++
2	#+date: 2023-07-19	2	date = 2023-07-19
3	#+description: Learn how to avoid Plex conversion errors caused by subtitles.	3	title = "How to Avoid Plex Error: 'Conversion failed. The transcoder failed to start up.'"
4	#+filetags: :sysadmin:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Plex Transcoder Error
5		9
6	* Plex Transcoder Error
7	Occasionally, you may see an error in your Plex client that references a	10	Occasionally, you may see an error in your Plex client that references a
8	failure with the transcoder conversion process. The specific error	11	failure with the transcoder conversion process. The specific error
9	wording is:	12	wording is:
10		13
11	#+begin_src txt	14	``` txt
12	Conversion failed. The transcoder failed to start up.	15	Conversion failed. The transcoder failed to start up.
13	#+end_src	16	```
		17
		18	# Debugging the Cause
14		19
15	* Debugging the Cause	20	In order to get a better look at what is causing the error, I\'m going
16	In order to get a better look at what is causing the error, I'm going to	21	to observe the Plex console while the error occurs. To do this, open the
17	observe the Plex console while the error occurs. To do this, open the	22	Plex web client, go to `Settings` \> `Manage` \>
18	Plex web client, go to =Settings= > =Manage= > =Console=. Now, try to	23	`Console`. Now, try to play the title again and watch to see
19	play the title again and watch to see which errors occur.	24	which errors occur.
20		25
21	In my case, you can see the errors below are related to a subtitle file	26	In my case, you can see the errors below are related to a subtitle file
22	(=.srt=) causing the transcoder to crash.	27	(`.srt`) causing the transcoder to crash.
23		28
24	#+begin_src txt	29	``` txt
25	Jul 19, 2023 16:49:34.945 [140184571120440] Error — Couldn't find the file to stream: /movies/Movie Title (2021)/Movie Title (2021).srt	30	Jul 19, 2023 16:49:34.945 [140184571120440] Error — Couldn't find the file to stream: /movies/Movie Title (2021)/Movie Title (2021).srt
26	Jul 19, 2023 16:49:34.947 [140184532732728] Error — [Req#7611/Transcode/42935159-67C1-4192-9336-DDC6F7BC9330] Error configuring transcoder: TPU: Failed to download sub-stream to temporary file	31	Jul 19, 2023 16:49:34.947 [140184532732728] Error — [Req#7611/Transcode/42935159-67C1-4192-9336-DDC6F7BC9330] Error configuring transcoder: TPU: Failed to download sub-stream to temporary file
27	Jul 19, 2023 16:49:35.225 [140184532732728] Warning — [Req#760d/Transcode] Got a request to stop a transcode session without a valid session GUID.	32	Jul 19, 2023 16:49:35.225 [140184532732728] Warning — [Req#760d/Transcode] Got a request to stop a transcode session without a valid session GUID.
28	Jul 19, 2023 16:49:45.561 [140184532732728] Info — [Req#7648] AutoUpdate: no updates available	33	Jul 19, 2023 16:49:45.561 [140184532732728] Info — [Req#7648] AutoUpdate: no updates available
29	Jul 19, 2023 16:51:23.402 [140184510081848] Info — Library section 1 (Movies) will be updated because of a change in "/movies/Movie Title (2021)/Movie Title (2021).srt"	34	Jul 19, 2023 16:51:23.402 [140184510081848] Info — Library section 1 (Movies) will be updated because of a change in "/movies/Movie Title (2021)/Movie Title (2021).srt"
30	#+end_src	35	```
		36
		37	# Solving the Error
31		38
32	* Solving the Error
33	In my case, I simply removed the subtitle file because it was not	39	In my case, I simply removed the subtitle file because it was not
34	critical to keep. You may also avoid this by turning off subtitles if	40	critical to keep. You may also avoid this by turning off subtitles if
35	you don't want to delete the file.	41	you don\'t want to delete the file.
36		42
37	#+begin_src sh	43	```sh
38	rm -rf "/movies/Movie Title (2021)/Movie Title (2021).srt"	44	rm -rf "/movies/Movie Title (2021)/Movie Title (2021).srt"
39	#+end_src	45	```
40		46
41	Once the subtitle is removed from the directory or subtitles are turned	47	Once the subtitle is removed from the directory or subtitles are turned
42	off, try to play the title again. At this point, it should play without	48	off, try to play the title again. At this point, it should play without
43	error. If not, reopen or refresh your Plex client and the Plex server:	49	error. If not, reopen or refresh your Plex client and the Plex server:
44		50
45	#+begin_src sh	51	```sh
46	sudo systemctl restart plexmediaserver.service	52	sudo systemctl restart plexmediaserver.service
47	#+end_src	53	```
48		54
49	* Related Discussion	55	# Related Discussion
50	Looking at	56
51	[[https://forums.plex.tv/t/subtitles-crashing-plex-transcoder-samsung-q80-tv-with-or-without-hardware-transcode/741441/2][a	57	Looking at [a related Plex forum
52	related Plex forum post]], it seems that =.srt= subtitles are the core	58	post](https://forums.plex.tv/t/subtitles-crashing-plex-transcoder-samsung-q80-tv-with-or-without-hardware-transcode/741441/2),
53	issue here. However, Plex does not seem to have a resolution that fixes	59	it seems that `.srt` subtitles are the core issue here.
54	these errors.	60	However, Plex does not seem to have a resolution that fixes these
		61	errors.
55		62
56	Unfortunately, I would suggest converting subtitle formats, burning the	63	Unfortunately, I would suggest converting subtitle formats, burning the
57	subtitles into the title, or simply removing subtitles when they cause	64	subtitles into the title, or simply removing subtitles when they cause

content/blog/2023-08-18-agile-auditing.md added +159

@@ -0,0 +1,159 @@
	1	+++
	2	date = 2023-08-18
	3	title = "Agile Auditing: An Introduction"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# What is Agile Auditing?
	9
	10	[Agile](https://en.wikipedia.org/wiki/Agile_software_development), the
	11	collaborative philosophy behind many software development methods, has
	12	been picking up steam as a beneficial tool to use in the external and
	13	internal auditing world.
	14
	15	This blog post will walk through commonly used terms within Agile,
	16	Scrum, and Kanban in order to translate these terms and roles into
	17	audit-specific terms.
	18
	19	Whether your team is in charge of a financial statement audit, an
	20	attestation (SOC 1, SOC 2, etc.), or a unique internal audit, the terms
	21	used throughout this post should still apply.
	22
	23	# Agile
	24
	25	To start, I\'ll take a look at Agile.
	26
	27	> The Agile methodology is a project management approach that involves
	28	> breaking the project into phases and emphasizes continuous
	29	> collaboration and improvement. Teams follow a cycle of planning,
	30	> executing, and evaluating.
	31
	32	While this approach may seem familiar to what audit teams have
	33	historically done, an audit team must make distinct changes in their
	34	mentality and how they approach and manage a project.
	35
	36	## Agile Values
	37
	38	The Agile Manifesto, written in 2001 at a summit in Utah, contain a set
	39	of four main values that comprise the Agile approach:
	40
	41	1. Individuals and interactions over processes and tools.
	42	2. Working software over comprehensive documentation.
	43	3. Customer collaboration over contract negotiation.
	44	4. Responding to change over following a plan.
	45
	46	Beyond the four values, [twelve
	47	principles](https://agilemanifesto.org/principles.html) were also
	48	written as part of the summit.
	49
	50	In order to relate these values to an audit or attestation engagement,
	51	we need to shift the focus from software development to the main goal of
	52	an engagement: completing sufficient audit testing to address to
	53	relevant risks over the processes and controls at hand.
	54
	55	Audit Examples:
	56
	57	- Engagement teams must value the team members, client contacts, and
	58	their interactions over the historical processes and tools that have
	59	been used.
	60	- Engagement teams must value a final report that contains sufficient
	61	audit documentation over excessive documentation or scope creep.
	62	- Engagement teams must collaborate with the audit clients as much as
	63	feasible to ensure that both sides are constantly updated with
	64	current knowledge of the engagement\'s status and any potential
	65	findings, rather than waiting for pre-set meetings or the end of the
	66	engagement to communicate.
	67	- Engagement teams must be able to respond to change in an
	68	engagement\'s schedule, scope, or environment to ensure that the
	69	project is completed in a timely manner and that all relevant areas
	70	are tested.
	71	- In terms of an audit department\'s portfolio, they must be able
	72	to respond to changes in their company\'s or client\'s
	73	environment and be able to dynamically change their audit plan
	74	accordingly.
	75
	76	# Scrum
	77
	78	The above section discusses the high-level details of the Agile
	79	philosophy and how an audit team can potentially mold that mindset into
	80	the audit world, but how does a team implement these ideas?
	81
	82	There are many methods that use an Agile mindset, but I prefer
	83	[Scrum](https://en.wikipedia.org/wiki/Scrum_(software_development)).
	84	Scrum is a framework based on Agile that enables a team to work through
	85	a project through a series of roles, ceremonies, artifacts, and values.
	86
	87	Let\'s dive into each of these individually.
	88
	89	## Scrum Team
	90
	91	A scrum project is only as good as the team running the project.
	92	Standard scrum teams are separated into three distinct areas:
	93
	94	1. Product Owner (Client Contact): The client contact is the audit
	95	equivalent of the product owner in Scrum. They are responsible for
	96	partnering with the engagement or audit team to ensure progress is
	97	being made, priorities are established, and clear guidance is given
	98	when questions or findings arise within each sprint.
	99	2. Scrum Master (Engagement Lead): The engagement or audit team
	100	lead is responsible for coaching the team and the client contact on
	101	the scrum process, tracking team progress against plan, scheduling
	102	necessary resources, and helping remove obstacles.
	103	3. Scrum Developers (Engagement Members): The engagement or audit
	104	team is the set of team members responsible for getting the work
	105	done. These team members will work on each task, report progress,
	106	resolve obstacles, and collaborate with other team members and the
	107	client contact to ensure goals are being met.
	108
	109	## Scrum Ceremonies
	110
	111	Scrum ceremonies are events that are performed on a regular basis.
	112
	113	1. Sprint Planning: The team works together to plan the upcoming
	114	sprint goal and which user stories (tasks) will be added to the
	115	sprint to achieve that goal.
	116	2. Sprint: The time period, typically at least one week and no more
	117	than one month in length, where the team works on the stories and
	118	anything in the backlog.
	119	3. Daily Scrum: A very short meeting held each day, typically 15
	120	minutes, to quickly emphasize alignment on the sprint goal and plan
	121	the next 24 hours. Each team member may share what they did the day
	122	before, what they\'ll do today, and any obstacles to their work.
	123	4. Sprint Review: At the end of each sprint, the team will gather
	124	and discuss the progress, obstacles, and backlog from the previous
	125	sprint.
	126	5. Sprint Retrospective: More specific than the sprint review, the
	127	retrospective is meant to discuss what worked and what did not work
	128	during the sprint. This may be processes, tools, people, or even
	129	things related to the Scrum ceremonies.
	130
	131	One additional ceremony that may be applicable is organizing the
	132	backlog. This is typically the responsibility of the engagement leader
	133	and is meant to prioritize and clarify what needs to be done to complete
	134	items in the backlog.
	135
	136	## Artifacts
	137
	138	While artifacts are generally not customizable in the audit world (i.e.,
	139	each control test must include some kind of working paper with evidence
	140	supporting the test results), I wanted to include some quick notes on
	141	associating scrum artifact terms with an audit.
	142
	143	1. Product Backlog: This is the overall backlog of unfinished audit
	144	tasks from all prior sprints.
	145	2. Sprint Backlog: This is the backlog of unfinished audit tasks
	146	from one individual sprint.
	147	3. Increment: This is the output of each sprint - generally this is
	148	best thought of as any documentation prepared during the sprint,
	149	such as risk assessments, control working papers, deficiency
	150	analysis, etc.
	151
	152	# Kanban
	153
	154	Last but not least, Kanban is a methodology that relies on boards to
	155	categorize work into distinct, descriptive categories that allow an
	156	agile or scrum team to effectively plan the work of a sprint or project.
	157
	158	See Atlassian\'s [Kanban](https://www.atlassian.com/agile/kanban) page
	159	for more information.

content/blog/2023-08-18-agile-auditing.org deleted −137

	@@ -1,137 +0,0 @@
1	#+title: Agile Auditing: An Introduction
2	#+date: <2023-08-18>
3	#+description: A quick introduction to using the Agile methodology in an audit.
4	#+filetags: :audit:
5
6	* What is Agile Auditing?
7	[[https://en.wikipedia.org/wiki/Agile_software_development][Agile]], the collaborative philosophy behind many software development methods,
8	has been picking up steam as a beneficial tool to use in the external and
9	internal auditing world.
10
11	This blog post will walk through commonly used terms within Agile, Scrum, and
12	Kanban in order to translate these terms and roles into audit-specific terms.
13
14	Whether your team is in charge of a financial statement audit, an attestation
15	(SOC 1, SOC 2, etc.), or a unique internal audit, the terms used throughout this
16	post should still apply.
17
18	* Agile
19	To start, I'll take a look at Agile.
20
21	#+begin_quote
22	The Agile methodology is a project management approach that involves breaking
23	the project into phases and emphasizes continuous collaboration and improvement.
24	Teams follow a cycle of planning, executing, and evaluating.
25	#+end_quote
26
27	While this approach may seem familiar to what audit teams have historically
28	done, an audit team must make distinct changes in their mentality and how they
29	approach and manage a project.
30
31	** Agile Values
32	The Agile Manifesto, written in 2001 at a summit in Utah, contain a set of four
33	main values that comprise the Agile approach:
34
35	1. Individuals and interactions over processes and tools.
36	2. Working software over comprehensive documentation.
37	3. Customer collaboration over contract negotiation.
38	4. Responding to change over following a plan.
39
40	Beyond the four values, [[https://agilemanifesto.org/principles.html][twelve principles]] were also written as part of the
41	summit.
42
43	In order to relate these values to an audit or attestation engagement, we need
44	to shift the focus from software development to the main goal of an engagement:
45	completing sufficient audit testing to address to relevant risks over the
46	processes and controls at hand.
47
48	Audit Examples:
49
50	- Engagement teams must value the team members, client contacts, and their
51	interactions over the historical processes and tools that have been used.
52	- Engagement teams must value a final report that contains sufficient audit
53	documentation over excessive documentation or scope creep.
54	- Engagement teams must collaborate with the audit clients as much as feasible
55	to ensure that both sides are constantly updated with current knowledge of the
56	engagement's status and any potential findings, rather than waiting for
57	pre-set meetings or the end of the engagement to communicate.
58	- Engagement teams must be able to respond to change in an engagement's
59	schedule, scope, or environment to ensure that the project is completed in a
60	timely manner and that all relevant areas are tested.
61	- In terms of an audit department's portfolio, they must be able to respond to
62	changes in their company's or client's environment and be able to
63	dynamically change their audit plan accordingly.
64
65	* Scrum
66	The above section discusses the high-level details of the Agile philosophy and
67	how an audit team can potentially mold that mindset into the audit world, but
68	how does a team implement these ideas?
69
70	There are many methods that use an Agile mindset, but I prefer [[https://en.wikipedia.org/wiki/Scrum_(software_development)][Scrum]]. Scrum is a
71	framework based on Agile that enables a team to work through a project through a
72	series of roles, ceremonies, artifacts, and values.
73
74	Let's dive into each of these individually.
75
76	** Scrum Team
77	A scrum project is only as good as the team running the project. Standard scrum
78	teams are separated into three distinct areas:
79
80	1. Product Owner (Client Contact): The client contact is the audit equivalent
81	of the product owner in Scrum. They are responsible for partnering with the
82	engagement or audit team to ensure progress is being made, priorities are
83	established, and clear guidance is given when questions or findings arise
84	within each sprint.
85	2. Scrum Master (Engagement Lead): The engagement or audit team lead is
86	responsible for coaching the team and the client contact on the scrum
87	process, tracking team progress against plan, scheduling necessary resources,
88	and helping remove obstacles.
89	3. Scrum Developers (Engagement Members): The engagement or audit team is the
90	set of team members responsible for getting the work done. These team members
91	will work on each task, report progress, resolve obstacles, and collaborate
92	with other team members and the client contact to ensure goals are being met.
93
94	** Scrum Ceremonies
95	Scrum ceremonies are events that are performed on a regular basis.
96
97	1. Sprint Planning: The team works together to plan the upcoming sprint goal
98	and which user stories (tasks) will be added to the sprint to achieve that
99	goal.
100	2. Sprint: The time period, typically at least one week and no more than one
101	month in length, where the team works on the stories and anything in the
102	backlog.
103	3. Daily Scrum: A very short meeting held each day, typically 15 minutes, to
104	quickly emphasize alignment on the sprint goal and plan the next 24 hours.
105	Each team member may share what they did the day before, what they'll do
106	today, and any obstacles to their work.
107	4. Sprint Review: At the end of each sprint, the team will gather and discuss
108	the progress, obstacles, and backlog from the previous sprint.
109	5. Sprint Retrospective: More specific than the sprint review, the
110	retrospective is meant to discuss what worked and what did not work during
111	the sprint. This may be processes, tools, people, or even things related to
112	the Scrum ceremonies.
113
114	One additional ceremony that may be applicable is organizing the backlog. This
115	is typically the responsibility of the engagement leader and is meant to
116	prioritize and clarify what needs to be done to complete items in the backlog.
117
118	** Artifacts
119	While artifacts are generally not customizable in the audit world (i.e., each
120	control test must include some kind of working paper with evidence supporting
121	the test results), I wanted to include some quick notes on associating scrum
122	artifact terms with an audit.
123
124	1. Product Backlog: This is the overall backlog of unfinished audit tasks from
125	all prior sprints.
126	2. Sprint Backlog: This is the backlog of unfinished audit tasks from one
127	individual sprint.
128	3. Increment: This is the output of each sprint - generally this is best
129	thought of as any documentation prepared during the sprint, such as risk
130	assessments, control working papers, deficiency analysis, etc.
131
132	* Kanban
133	Last but not least, Kanban is a methodology that relies on boards to categorize
134	work into distinct, descriptive categories that allow an agile or scrum team to
135	effectively plan the work of a sprint or project.
136
137	See Atlassian's [[https://www.atlassian.com/agile/kanban][Kanban]] page for more information.

content/blog/2023-09-15-self-hosting-gitweb.org → content/blog/2023-09-15-self-hosting-gitweb.md renamed +30 −24

	@@ -1,12 +1,16 @@
1	#+title: Self-Hosting GitWeb via Nginx	1	+++
2	#+date: 2023-09-15	2	date = 2023-09-15
3	#+description: A guide to self-hosting GitWeb using the Nginx web server.	3	title = "Self-Hosting Gitweb via Nginx"
4	#+filetags: :selfhosting:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Overview	8	# Overview
7	[[https://git-scm.com/book/en/v2/Git-on-the-Server-GitWeb][GitWeb]] is a	9
		10	[GitWeb](https://git-scm.com/book/en/v2/Git-on-the-Server-GitWeb) is a
8	simple web-based visualizer for git repositories. By default, GitWeb	11	simple web-based visualizer for git repositories. By default, GitWeb
9	will only run with the =lighttpd= or =webrick= web servers.	12	will only run with the `lighttpd` or `webrick` web
		13	servers.
10		14
11	However, this guide will show you how to keep GitWeb running in the	15	However, this guide will show you how to keep GitWeb running in the
12	background and display information for all repositories in a chosen	16	background and display information for all repositories in a chosen
	@@ -14,24 +18,25 @@ directory.
14		18
15	See below for the final result:	19	See below for the final result:
16		20
17	#+caption: Gitweb	21	![Gitweb](https://img.cleberg.net/blog/20230915-gitweb/gitweb.png)
18	[[https://img.cleberg.net/blog/20230915-gitweb/gitweb.png]]	22
		23	# Install Dependencies
19		24
20	* Install Dependencies	25	To start, you\'ll need install the following packages:
21	To start, you'll need install the following packages:
22		26
23	#+begin_src sh	27	```sh
24	sudo apt install git gitweb fcgiwrap nginx	28	sudo apt install git gitweb fcgiwrap nginx
25	#+end_src	29	```
		30
		31	# Configure Nginx
26		32
27	* Configure Nginx
28	Once installed, create an Nginx configuration file.	33	Once installed, create an Nginx configuration file.
29		34
30	#+begin_src sh	35	```sh
31	sudo nano /etc/nginx/sites-available/git.example.com	36	sudo nano /etc/nginx/sites-available/git.example.com
32	#+end_src	37	```
33		38
34	#+begin_src conf	39	``` conf
35	server {	40	server {
36	listen 80;	41	listen 80;
37	server_name example.com;	42	server_name example.com;
	@@ -50,23 +55,24 @@ server {
50	index index.cgi;	55	index index.cgi;
51	}	56	}
52	}	57	}
53	#+end_src	58	```
54		59
55	To make the configuration active, you need to symlink it and then	60	To make the configuration active, you need to symlink it and then
56	restart Nginx.	61	restart Nginx.
57		62
58	#+begin_src sh	63	```sh
59	sudo ln -s /etc/nginx/sites-available/git.example.com /etc/nginx/sites-enabled/git.example.com	64	sudo ln -s /etc/nginx/sites-available/git.example.com /etc/nginx/sites-enabled/git.example.com
60	sudo systemctl restart nginx.service	65	sudo systemctl restart nginx.service
61	#+end_src	66	```
62		67
63	The GitWeb application should now be available via the URL you set in	68	The GitWeb application should now be available via the URL you set in
64	the Nginx configuration above.	69	the Nginx configuration above.
65		70
66	* Customize GitWeb	71	# Customize GitWeb
		72
67	If you need to, you can customize many things about Gitweb by editing	73	If you need to, you can customize many things about Gitweb by editing
68	the [[https://git-scm.com/docs/gitweb.conf][gitweb.conf]] file.	74	the [gitweb.conf](https://git-scm.com/docs/gitweb.conf) file.
69		75
70	#+begin_src sh	76	```sh
71	sudo nano /etc/gitweb.conf	77	sudo nano /etc/gitweb.conf
72	#+end_src	78	```

content/blog/2023-09-19-audit-sql-scripts.org → content/blog/2023-09-19-audit-sql-scripts.md renamed +52 −41

	@@ -1,21 +1,25 @@
1	#+title: Useful SQL Scripts for Auditing Logical Access	1	+++
2	#+date: 2023-09-19	2	date = 2023-09-19
3	#+description: A reference of SQL scripts for auditing logical access for common databases.	3	title = "Useful SQL Scripts for Auditing Logical Access"
4	#+filetags: :audit:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Overview
5		9
6	* Overview
7	When you have to scope a database into your engagement, you may be	10	When you have to scope a database into your engagement, you may be
8	curious how to best extract the information from the database. While	11	curious how to best extract the information from the database. While
9	there are numerous different methods to extract this type of	12	there are numerous different methods to extract this type of
10	information, I'm going to show an example of how to gather all users and	13	information, I\'m going to show an example of how to gather all users
11	privileges from three main database types: Oracle, Microsoft SQL, and	14	and privileges from three main database types: Oracle, Microsoft SQL,
12	MySQL.	15	and MySQL.
		16
		17	# Oracle
13		18
14	* Oracle
15	You can use the following SQL script to see all users and their	19	You can use the following SQL script to see all users and their
16	privileges in an Oracle database:	20	privileges in an Oracle database:
17		21
18	#+begin_src sql	22	``` sql
19	SELECT	23	SELECT
20	grantee AS "User",	24	grantee AS "User",
21	privilege AS "Privilege"	25	privilege AS "Privilege"
	@@ -31,37 +35,40 @@ FROM
31	dba_tab_privs	35	dba_tab_privs
32	WHERE	36	WHERE
33	grantee IN (SELECT DISTINCT grantee FROM dba_tab_privs);	37	grantee IN (SELECT DISTINCT grantee FROM dba_tab_privs);
34	#+end_src	38	```
35		39
36	This script queries the =dba_sys_privs= and =dba_tab_privs= views to	40	This script queries the `dba_sys_privs` and
37	retrieve system and table-level privileges respectively. It then	41	`dba_tab_privs` views to retrieve system and table-level
38	combines the results using =UNION ALL= to show all users and their	42	privileges respectively. It then combines the results using
39	associated privileges. Please note that this method does not extract	43	`UNION ALL` to show all users and their associated
40	information from the =dba_role_privs= table - use the method below for	44	privileges. Please note that this method does not extract information
		45	from the `dba_role_privs` table - use the method below for
41	that data.	46	that data.
42		47
43	Please note that you might need appropriate privileges (e.g., DBA	48	Please note that you might need appropriate privileges (e.g., DBA
44	privileges) to access these views, and you should exercise caution when	49	privileges) to access these views, and you should exercise caution when
45	querying system tables in a production Oracle database.	50	querying system tables in a production Oracle database.
46		51
47	** Alternative Oracle Query	52	## Alternative Oracle Query
48	You can also extract each table's information separately and perform	53
		54	You can also extract each table\'s information separately and perform
49	processing outside the database to explore and determine the information	55	processing outside the database to explore and determine the information
50	necessary for the audit:	56	necessary for the audit:
51		57
52	#+begin_src sql	58	``` sql
53	SELECT ** FROM sys.dba_role_privs;	59	SELECT ** FROM sys.dba_role_privs;
54	SELECT ** FROM sys.dba_sys_privs;	60	SELECT ** FROM sys.dba_sys_privs;
55	SELECT ** FROM sys.dba_tab_privs;	61	SELECT ** FROM sys.dba_tab_privs;
56	SELECT ** FROM sys.dba_users;	62	SELECT ** FROM sys.dba_users;
57	#+end_src	63	```
		64
		65	# Microsoft SQL
58		66
59	* Microsoft SQL
60	You can use the following SQL script to see all users and their	67	You can use the following SQL script to see all users and their
61	privileges in a Microsoft SQL Server database	68	privileges in a Microsoft SQL Server database
62	([[https://stackoverflow.com/a/30040784][source]]):	69	([source](https://stackoverflow.com/a/30040784)):
63		70
64	#+begin_src sql	71	``` sql
65	/*	72	/*
66	Security Audit Report	73	Security Audit Report
67	1) List all access provisioned to a sql user or windows user/group directly	74	1) List all access provisioned to a sql user or windows user/group directly
	@@ -92,7 +99,7 @@ ObjectName : Name of the object that the user/role is assigned permissions
92	definitions.	99	definitions.
93	ColumnName : Name of the column of the object that the user/role is assigned permissions on. This value	100	ColumnName : Name of the column of the object that the user/role is assigned permissions on. This value
94	is only populated if the object is a table, view or a table value function.	101	is only populated if the object is a table, view or a table value function.
95	,*/	102	*/
96		103
97	--List all access provisioned to a sql user or windows user/group directly	104	--List all access provisioned to a sql user or windows user/group directly
98	SELECT	105	SELECT
	@@ -206,41 +213,45 @@ ORDER BY
206	perm.[permission_name],	213	perm.[permission_name],
207	perm.[state_desc],	214	perm.[state_desc],
208	obj.type_desc--perm.[class_desc]	215	obj.type_desc--perm.[class_desc]
209	#+end_src	216	```
		217
		218	# MySQL
210		219
211	* MySQL
212	You can use the following SQL script to see all users and their	220	You can use the following SQL script to see all users and their
213	privileges in a MySQL database:	221	privileges in a MySQL database:
214		222
215	#+begin_src sh	223	```sh
216	mysql -u root -p	224	mysql -u root -p
217	#+end_src	225	```
218		226
219	Find all users and hosts with access to the database:	227	Find all users and hosts with access to the database:
220		228
221	#+begin_src sql	229	``` sql
222	SELECT ** FROM information_schema.user_privileges;	230	SELECT ** FROM information_schema.user_privileges;
223	#+end_src	231	```
224		232
225	This script retrieves user information and their associated	233	This script retrieves user information and their associated
226	database-level privileges from the =information_schema.user_privileges=	234	database-level privileges from the
227	table in MySQL. It lists various privileges such as SELECT, INSERT,	235	`information_schema.user_privileges` table in MySQL. It lists
228	UPDATE, DELETE, CREATE, and more for each user and database combination.	236	various privileges such as SELECT, INSERT, UPDATE, DELETE, CREATE, and
		237	more for each user and database combination.
229		238
230	Please note that you may need appropriate privileges (e.g., =SELECT=	239	Please note that you may need appropriate privileges (e.g.,
231	privileges on =information_schema.user_privileges=) to access this	240	`SELECT` privileges on
		241	`information_schema.user_privileges`) to access this
232	information in a MySQL database. Additionally, some privileges like	242	information in a MySQL database. Additionally, some privileges like
233	GRANT OPTION, EXECUTE, EVENT, and TRIGGER may not be relevant for all	243	GRANT OPTION, EXECUTE, EVENT, and TRIGGER may not be relevant for all
234	users and databases.	244	users and databases.
235		245
236	** Alternative MySQL Query	246	## Alternative MySQL Query
		247
237	You can also grab individual sets of data from MySQL if you prefer to	248	You can also grab individual sets of data from MySQL if you prefer to
238	join them after extraction. I have marked the queries below with	249	join them after extraction. I have marked the queries below with
239	=SELECT ...= and excluded most =WHERE= clauses for brevity. You should	250	`SELECT ...` and excluded most `WHERE` clauses for
240	determine the relevant privileges in-scope and query for those	251	brevity. You should determine the relevant privileges in-scope and query
241	privileges to reduce the length of time to query.	252	for those privileges to reduce the length of time to query.
242		253
243	#+begin_src sql	254	``` sql
244	-- Global Permissions	255	-- Global Permissions
245	SELECT ... FROM mysql.user;	256	SELECT ... FROM mysql.user;
246		257
	@@ -259,4 +270,4 @@ WHERE db = @db_name;
259	-- Password Configuration	270	-- Password Configuration
260	SHOW GLOBAL VARIABLES LIKE 'validate_password%';	271	SHOW GLOBAL VARIABLES LIKE 'validate_password%';
261	SHOW VARIABLES LIKE 'validate_password%';	272	SHOW VARIABLES LIKE 'validate_password%';
262	#+end_src	273	```

content/blog/2023-10-04-digital-minimalism.md added +107

@@ -0,0 +1,107 @@
	1	+++
	2	date = 2023-10-04
	3	title = "Digital Minimalism"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	I\'ve written [a note about minimalism](file:///wiki/#digital-garden)
	9	before, but I wanted to dedicate some time to reflect on digital
	10	minimalism and how I\'ve been able to minimize the impact of digital
	11	devices in my life.
	12
	13	> These changes crept up on us and happened fast, before we had a chance
	14	> to step back and ask what we really wanted out of the rapid advances
	15	> of the past decade. We added new technologies to the periphery of our
	16	> experience for minor reasons, then woke one morning to discover that
	17	> they had colonized the core of our daily life. We didn\'t, in other
	18	> words, sign up for the digital world in which we\'re currently
	19	> entrenched; we seem to have stumbled backward into it.
	20	>
	21	> (Digital Minimalism, 2019)
	22
	23	# The Principles of Digital Minimalism
	24
	25	As noted in Cal Newport\'s book, Digital Minimalism, there are three
	26	main principles to digital minimalism that I tend to agree with:
	27
	28	1. Clutter is costly.
	29	- Digital minimalists recognize that cluttering their time and
	30	attention with too many devices, apps, and services creates an
	31	overall negative cost that can swamp the small benefits that
	32	each individual item provides in isolation.
	33	2. Optimization is important.
	34	- Digital minimalists believe that deciding a particular
	35	technology supports something they value is only the first step.
	36	To truly extract its full potential benefit, it\'s necessary to
	37	think carefully about how they\'ll use the technology.
	38	3. Intentionality is satisfying.
	39	- Digital minimalists derive significant satisfaction from their
	40	general commitment to being more intentional about how they
	41	engage with new technologies. This source of satisfaction is
	42	independent of the specific decisions they make and is one of
	43	the biggest reasons that minimalism tends to be immensely
	44	meaningful to its practitioners.
	45
	46	# Taking Action
	47
	48	In order to put the logic into practice, I\'ve created a few new habits
	49	and continued performing old habits that are working well:
	50
	51	## Using Devices With Intention
	52
	53	- I already rarely use \"social media\", mostly limited to forums such
	54	as Hacker News and Tildes, so I\'ve just tweaked my behavior to stop
	55	looking for content in those places when I\'m bored.
	56	- Use devices with intention. Each time I pick up a digital device,
	57	there should be an intention to use the device to improve my current
	58	situation. No more endless scrolling or searching for something to
	59	interest me.
	60
	61	## Prevent Distractions
	62
	63	- Disable (most) notifications on all devices. I spent 15-30 minutes
	64	going through the notifications on my phone, watch, and computer to
	65	ensure that only a select few apps have the ability to interrupt me:
	66	Calendar, Messages, Phone, Reminders, & Signal.
	67	- Disable badges for any apps except the ones mentioned in the bullet
	68	above.
	69	- Set-up focus profiles across devices so that I can enable different
	70	modes, such as Personal when I only want to see notifications from
	71	people I care about or Do Not Disturb, where absolutely nothing can
	72	interrupt me.
	73	- Clean up my home screens. This one was quite easy as I already
	74	maintain a minimalist set-up, but I went extreme by limiting my
	75	phone to just eight apps on the home screen and four in the dock. If
	76	I need another app, I\'ll have to search or use the app library.
	77	- Remove the work profile from my phone. This was a tough decision as
	78	having my work profile on my device definitely makes my life easier
	79	at times, but it also has quite a negative effect when I\'m \"always
	80	online\" and can see the notifications and team activity 24/7. I
	81	believe creating a distinct barrier between my work and personal
	82	devices will be beneficial in the end.
	83
	84	## Creating Alternative Activities
	85
	86	This is the most difficult piece, as most of my hobbies and interests
	87	lie in the digital world. However, I\'m making a concerted effort to put
	88	devices down unless necessary and force myself to perform other
	89	activities in the physical world instead.
	90
	91	I\'ve started with a few basics that are always readily available to me:
	92
	93	- Do a chore, such as organizing or cleaning.
	94	- Read a book, study a piece of art, etc.
	95	- Exercise or get outdoors.
	96	- Participate in a hobby, such as photography, birding, disc golf,
	97	etc.
	98	- Let yourself be bored and wander into creativity.
	99
	100	# Making Progress
	101
	102	I\'ll be taking notes as I continue down this journey and hope to see
	103	positive trends. I\'ve always been a minimalist in the physical world
	104	and it feels refreshing to filter out the clutter that has come to
	105	dominate my digital life over the years.
	106
	107	I\'m excited to see where this journey leads.

content/blog/2023-10-04-digital-minimalism.org deleted −100

	@@ -1,100 +0,0 @@
1	#+title: Digital Minimalism
2	#+date: 2023-10-04
3	#+description: My personal retrospective on digital minimalism.
4	#+filetags: :personal:
5
6	I've written [[/wiki/#digital-garden][a note about minimalism]] before,
7	but I wanted to dedicate some time to reflect on digital minimalism and
8	how I've been able to minimize the impact of digital devices in my life.
9
10	#+begin_quote
11	These changes crept up on us and happened fast, before we had a chance
12	to step back and ask what we really wanted out of the rapid advances of
13	the past decade. We added new technologies to the periphery of our
14	experience for minor reasons, then woke one morning to discover that
15	they had colonized the core of our daily life. We didn't, in other
16	words, sign up for the digital world in which we're currently
17	entrenched; we seem to have stumbled backward into it.
18
19	/(Digital Minimalism, 2019)/
20
21	#+end_quote
22
23	* The Principles of Digital Minimalism
24	As noted in Cal Newport's book, /Digital Minimalism/, there are three
25	main principles to digital minimalism that I tend to agree with:
26
27	1. Clutter is costly.
28	- Digital minimalists recognize that cluttering their time and
29	attention with too many devices, apps, and services creates an
30	overall negative cost that can swamp the small benefits that each
31	individual item provides in isolation.
32	2. Optimization is important.
33	- Digital minimalists believe that deciding a particular technology
34	supports something they value is only the first step. To truly
35	extract its full potential benefit, it's necessary to think
36	carefully about how they'll use the technology.
37	3. Intentionality is satisfying.
38	- Digital minimalists derive significant satisfaction from their
39	general commitment to being more intentional about how they engage
40	with new technologies. This source of satisfaction is independent
41	of the specific decisions they make and is one of the biggest
42	reasons that minimalism tends to be immensely meaningful to its
43	practitioners.
44
45	* Taking Action
46	In order to put the logic into practice, I've created a few new habits
47	and continued performing old habits that are working well:
48
49	** Using Devices With Intention
50	- I already rarely use "social media", mostly limited to forums such as
51	Hacker News and Tildes, so I've just tweaked my behavior to stop
52	looking for content in those places when I'm bored.
53	- Use devices with intention. Each time I pick up a digital device,
54	there should be an intention to use the device to improve my current
55	situation. No more endless scrolling or searching for something to
56	interest me.
57
58	** Prevent Distractions
59	- Disable (most) notifications on all devices. I spent 15-30 minutes
60	going through the notifications on my phone, watch, and computer to
61	ensure that only a select few apps have the ability to interrupt me:
62	Calendar, Messages, Phone, Reminders, & Signal.
63	- Disable badges for any apps except the ones mentioned in the bullet
64	above.
65	- Set-up focus profiles across devices so that I can enable different
66	modes, such as Personal when I only want to see notifications from
67	people I care about or Do Not Disturb, where absolutely nothing can
68	interrupt me.
69	- Clean up my home screens. This one was quite easy as I already
70	maintain a minimalist set-up, but I went extreme by limiting my phone
71	to just eight apps on the home screen and four in the dock. If I need
72	another app, I'll have to search or use the app library.
73	- Remove the work profile from my phone. This was a tough decision as
74	having my work profile on my device definitely makes my life easier at
75	times, but it also has quite a negative effect when I'm "always
76	online" and can see the notifications and team activity 24/7. I
77	believe creating a distinct barrier between my work and personal
78	devices will be beneficial in the end.
79
80	** Creating Alternative Activities
81	This is the most difficult piece, as most of my hobbies and interests
82	lie in the digital world. However, I'm making a concerted effort to put
83	devices down unless necessary and force myself to perform other
84	activities in the physical world instead.
85
86	I've started with a few basics that are always readily available to me:
87
88	- Do a chore, such as organizing or cleaning.
89	- Read a book, study a piece of art, etc.
90	- Exercise or get outdoors.
91	- Participate in a hobby, such as photography, birding, disc golf, etc.
92	- Let yourself be bored and wander into creativity.
93
94	* Making Progress
95	I'll be taking notes as I continue down this journey and hope to see
96	positive trends. I've always been a minimalist in the physical world and
97	it feels refreshing to filter out the clutter that has come to dominate
98	my digital life over the years.
99
100	I'm excited to see where this journey leads.

content/blog/2023-10-11-self-hosting-authelia.org → content/blog/2023-10-11-self-hosting-authelia.md renamed +103 −88

	@@ -1,10 +1,13 @@
1	#+title: Self-Hosting Authelia	1	+++
2	#+date: 2023-10-11	2	date = 2023-10-11
3	#+description: A guide to self-hosting the Authelia application on your own server.	3	title = "Self-Hosting Authelia"
4	#+filetags: :selfhosting:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* Overview	8	# Overview
7	[[https://www.authelia.com/][Authelia]] is an open-source authentication	9
		10	[Authelia](https://www.authelia.com/) is an open-source authentication
8	service that allows you to place a portal between end users on the	11	service that allows you to place a portal between end users on the
9	internet and self-hosted services on your server.	12	internet and self-hosted services on your server.
10		13
	@@ -13,38 +16,42 @@ authentication for any such user before allowing them to access a
13	specific service on your domain.	16	specific service on your domain.
14		17
15	This guide will walk through a standard installation of Authelia for	18	This guide will walk through a standard installation of Authelia for
16	=example.com=, using =auth.example.com= as Authelia's authentication	19	`example.com`, using `auth.example.com` as
17	domain and =teddit.example.com= as the website we want to protect behind	20	Authelia\'s authentication domain and `teddit.example.com` as
18	the authentication portal.	21	the website we want to protect behind the authentication portal.
		22
		23	# Prerequisites
19		24
20	* Prerequisites
21	This guide assumes you have the following already set-up:	25	This guide assumes you have the following already set-up:
22		26
23	- A registered domain with DNS pointing to your server.	27	- A registered domain with DNS pointing to your server.
24	- A subdomain for Authelia (=auth.example.com=) and a subdomain to	28	- A subdomain for Authelia (`auth.example.com`) and a
25	protect via Authelia (=app.example.com=).	29	subdomain to protect via Authelia (`app.example.com`).
26	- A working Nginx web server.	30	- A working Nginx web server.
27	- Docker and docker-compose installed.	31	- Docker and docker-compose installed.
		32
		33	# Installation
28		34
29	* Installation
30	This guide will walk through each installation step one-by-one, starting	35	This guide will walk through each installation step one-by-one, starting
31	with the container and finishing by cleaning up external access via an	36	with the container and finishing by cleaning up external access via an
32	Nginx reverse proxy.	37	Nginx reverse proxy.
33		38
34	** Docker-Compose	39	## Docker-Compose
		40
35	To start, create a directory for Authelia and create a	41	To start, create a directory for Authelia and create a
36	=docker-compose.yml= file.	42	`docker-compose.yml` file.
37		43
38	#+begin_src sh	44	```sh
39	mkdir ~/authelia	45	mkdir ~/authelia
40	nano ~/authelia/docker-compose.yml	46	nano ~/authelia/docker-compose.yml
41	#+end_src	47	```
42		48
43	Within this file, paste the following content. If you prefer a different	49	Within this file, paste the following content. If you prefer a different
44	local port, modify the port on the left side of the colon on the	50	local port, modify the port on the left side of the colon on the
45	=9091:9091= line. Be sure to modify the =TZ= variable to your timezone.	51	`9091:9091` line. Be sure to modify the `TZ`
		52	variable to your timezone.
46		53
47	#+begin_src yml	54	``` yml
48	version: '3.3'	55	version: '3.3'
49		56
50	services:	57	services:
	@@ -57,52 +64,55 @@ services:
57	- 9091:9091	64	- 9091:9091
58	environment:	65	environment:
59	- TZ=America/Chicago	66	- TZ=America/Chicago
60	#+end_src	67	```
61		68
62	Start the container with docker-compose:	69	Start the container with docker-compose:
63		70
64	#+begin_src sh	71	```sh
65	sudo docker-compose up -d	72	sudo docker-compose up -d
66	#+end_src	73	```
67		74
68	After the first start, the container will automatically exit and require	75	After the first start, the container will automatically exit and require
69	you to modify the app's configuration files before continuing. Read on	76	you to modify the app\'s configuration files before continuing. Read on
70	to learn more.	77	to learn more.
71		78
72	** Authelia Configuration	79	## Authelia Configuration
		80
73	To configure Authelia before we restart the container, we need to open	81	To configure Authelia before we restart the container, we need to open
74	the =config= directory and modify the files. Start by editing the	82	the `config` directory and modify the files. Start by editing
75	=configuration.yml= file, where all of Authelia's settings are stored.	83	the `configuration.yml` file, where all of Authelia\'s
		84	settings are stored.
76		85
77	My personal preference is to copy the original configuration file to a	86	My personal preference is to copy the original configuration file to a
78	backup file and edit a fresh copy.	87	backup file and edit a fresh copy.
79		88
80	#+begin_src sh	89	```sh
81	sudo cp ~/authelia/config/configuration.yml ~/authelia/config/configuration.yml.bk	90	sudo cp ~/authelia/config/configuration.yml ~/authelia/config/configuration.yml.bk
82	sudo nano ~/authelia/config/configuration.yml	91	sudo nano ~/authelia/config/configuration.yml
83	#+end_src	92	```
84		93
85	Within the blank =configuration.yml= file, paste the following	94	Within the blank `configuration.yml` file, paste the
86	information. You will need to make quite a few updates, so be sure to	95	following information. You will need to make quite a few updates, so be
87	read each line carefully and modify as necessary.	96	sure to read each line carefully and modify as necessary.
88		97
89	The major required changes are:	98	The major required changes are:
90		99
91	- Any instances of =example.com= should be replaced by your domain.	100	- Any instances of `example.com` should be replaced by your
92	- =jwt_secret= - Use the =pwgen 40 1= command to generate a secret for	101	domain.
93	yourself.	102	- `jwt_secret` - Use the `pwgen 40 1` command to
94	- =access_control= - Set the Authelia domain to bypass here, as well as	103	generate a secret for yourself.
95	any subdomains you want to protect.	104	- `access_control` - Set the Authelia domain to bypass
96	- =session= > =secret= - Use the =pwgen 40 1= command to generate a	105	here, as well as any subdomains you want to protect.
97	secret for yourself.	106	- `session` \> `secret` - Use the
98	- =regulation= - Set the variables here to restrict login attempts and	107	`pwgen 40 1` command to generate a secret for yourself.
99	bans.	108	- `regulation` - Set the variables here to restrict login
100	- =storage= > =encryption_key= - Use the =pwgen 40 1= command to	109	attempts and bans.
101	generate a secret for yourself.	110	- `storage` \> `encryption_key` - Use the
102	- =smtp= - If you have access to an SMTP service, set up the information	111	`pwgen 40 1` command to generate a secret for yourself.
103	here to active outgoing emails.	112	- `smtp` - If you have access to an SMTP service, set up
104		113	the information here to active outgoing emails.
105	#+begin_src yml	114
		115	``` yml
106	# yamllint disable rule:comments-indentation	116	# yamllint disable rule:comments-indentation
107	---	117	---
108	###############################################################################	118	###############################################################################
	@@ -191,25 +201,26 @@ notifier:
191	skip_verify: false	201	skip_verify: false
192	minimum_version: TLS1.2	202	minimum_version: TLS1.2
193	...	203	...
194	#+end_src	204	```
		205
		206	## Authelia Users
195		207
196	** Authelia Users
197	Next, create the users file for authentication.	208	Next, create the users file for authentication.
198		209
199	#+begin_src sh	210	```sh
200	sudo nano ~/authelia/config/users_database.yml	211	sudo nano ~/authelia/config/users_database.yml
201	#+end_src	212	```
202		213
203	Within the file, you will need to create an entry for each user that	214	Within the file, you will need to create an entry for each user that
204	needs access to Authelia. The =my_username= entry will be the username	215	needs access to Authelia. The `my_username` entry will be the
205	used on the login page.	216	username used on the login page.
206		217
207	To generate the password, go to [[https://argon2.online][Argon2 Hash	218	To generate the password, go to [Argon2 Hash
208	Generator]], generate a random salt, and make sure the rest of the	219	Generator](https://argon2.online), generate a random salt, and make sure
209	settings match the =authentication_backend= section of	220	the rest of the settings match the `authentication_backend`
210	=configuration.yml= file.	221	section of `configuration.yml` file.
211		222
212	#+begin_src yaml	223	``` yaml
213	users:	224	users:
214	my_username:	225	my_username:
215	displayname: "My User"	226	displayname: "My User"
	@@ -220,30 +231,32 @@ users:
220	groups:	231	groups:
221	- admins	232	- admins
222	- dev	233	- dev
223	#+end_src	234	```
224		235
225	Once the app is configured, restart the container from scratch.	236	Once the app is configured, restart the container from scratch.
226		237
227	#+begin_src sh	238	```sh
228	cd ~/authelia	239	cd ~/authelia
229	sudo docker-compose down && sudo docker-compose up -d	240	sudo docker-compose down && sudo docker-compose up -d
230	#+end_src	241	```
		242
		243	## Nginx: Authelia Domain
231		244
232	** Nginx: Authelia Domain
233	Once the container is running and configured, the final step is to	245	Once the container is running and configured, the final step is to
234	configure external access to the server via Nginx reverse proxy.	246	configure external access to the server via Nginx reverse proxy.
235		247
236	Start by creating the Authelia domain.	248	Start by creating the Authelia domain.
237		249
238	#+begin_src sh	250	```sh
239	sudo nano /etc/nginx/sites-available/auth	251	sudo nano /etc/nginx/sites-available/auth
240	#+end_src	252	```
241		253
242	Within this file, paste the following information and be sure to update	254	Within this file, paste the following information and be sure to update
243	=example.com= to your domain. Make sure the =$upstream_authelia=	255	`example.com` to your domain. Make sure the
244	variable matches the location of your Authelia container.	256	`$upstream_authelia` variable matches the location of your
		257	Authelia container.
245		258
246	#+begin_src conf	259	``` conf
247	server {	260	server {
248	if ($host ~ ^[^.]+\.example\.com$) {	261	if ($host ~ ^[^.]+\.example\.com$) {
249	return 301 https://$host$request_uri;	262	return 301 https://$host$request_uri;
	@@ -295,29 +308,30 @@ server {
295	}	308	}
296		309
297	}	310	}
298	#+end_src	311	```
299		312
300	Next, symlink the file and restart Nginx. If there are errors, be sure	313	Next, symlink the file and restart Nginx. If there are errors, be sure
301	to resolve those before moving on.	314	to resolve those before moving on.
302		315
303	#+begin_src sh	316	```sh
304	sudo ln -s /etc/nginx/sites-available/auth /etc/nginx/sites-enabled/auth	317	sudo ln -s /etc/nginx/sites-available/auth /etc/nginx/sites-enabled/auth
305	sudo systemctl restart nginx.service	318	sudo systemctl restart nginx.service
306	#+end_src	319	```
		320
		321	## Nginx: Protected Domain(s)
307		322
308	** Nginx: Protected Domain(s)
309	Now that Authelia is accessible externally, you need to configure the	323	Now that Authelia is accessible externally, you need to configure the
310	domain you intend to protect with Authelia. In this example, I'm	324	domain you intend to protect with Authelia. In this example, I\'m
311	protecting =teddit.example.com=.	325	protecting `teddit.example.com`.
312		326
313	Similar to the process above, paste the content and update the relevant	327	Similar to the process above, paste the content and update the relevant
314	variables.	328	variables.
315		329
316	#+begin_src sh	330	```sh
317	sudo nano /etc/nginx/sites-available/teddit	331	sudo nano /etc/nginx/sites-available/teddit
318	#+end_src	332	```
319		333
320	#+begin_src conf	334	``` conf
321	server {	335	server {
322	if ($host ~ ^[^.]+\.example\.com$) {	336	if ($host ~ ^[^.]+\.example\.com$) {
323	return 301 https://$host$request_uri;	337	return 301 https://$host$request_uri;
	@@ -419,25 +433,26 @@ server {
419	proxy_buffers 64 256k;	433	proxy_buffers 64 256k;
420	}	434	}
421	}	435	}
422	#+end_src	436	```
423		437
424	Same as before, symlink the file and restart Nginx.	438	Same as before, symlink the file and restart Nginx.
425		439
426	#+begin_src sh	440	```sh
427	sudo ln -s /etc/nginx/sites-available/teddit /etc/nginx/sites-enabled/teddit	441	sudo ln -s /etc/nginx/sites-available/teddit /etc/nginx/sites-enabled/teddit
428	sudo systemctl restart nginx.service	442	sudo systemctl restart nginx.service
429	#+end_src	443	```
		444
		445	# Results
430		446
431	* Results
432	When visiting the protected domain, you will now be redirected to your	447	When visiting the protected domain, you will now be redirected to your
433	authentication domain and presented with the Authelia login portal.	448	authentication domain and presented with the Authelia login portal.
434		449
435	#+caption: Authelia Portal	450	![Authelia
436	[[https://img.cleberg.net/blog/20231010-authelia/authelia_portal.png]]	451	Portal](https://img.cleberg.net/blog/20231010-authelia/authelia_portal.png)
437		452
438	Once you've successfully authenticated, you can visit your	453	Once you\'ve successfully authenticated, you can visit your
439	authentication domain directly and see that you're currently	454	authentication domain directly and see that you\'re currently
440	authenticated to any domain protected by Authelia.	455	authenticated to any domain protected by Authelia.
441		456
442	#+caption: Authelia Success	457	![Authelia
443	[[https://img.cleberg.net/blog/20231010-authelia/authelia_success.png]]	458	Success](https://img.cleberg.net/blog/20231010-authelia/authelia_success.png)

content/blog/2023-10-15-alpine-ssh-hardening.org → content/blog/2023-10-15-alpine-ssh-hardening.md renamed +41 −37

	@@ -1,71 +1,75 @@
1	#+title: SSH Hardening for Alpine Linux	1	+++
2	#+date: 2023-10-15	2	date = 2023-10-15
3	#+description: A quick guide to harden SSH configuration on Alpine.	3	title = "SSH Hardening for Alpine Linux"
4	#+filetags: :linux:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Overview
5		9
6	* Overview
7	This guide follows the standard	10	This guide follows the standard
8	[[https://www.ssh-audit.com/hardening_guides.html][ssh-audit]] hardening	11	[ssh-audit](https://www.ssh-audit.com/hardening_guides.html) hardening
9	guide, tweaked for Alpine Linux.	12	guide, tweaked for Alpine Linux.
10		13
11	* Hardening Guide	14	# Hardening Guide
12	These steps must be performed as root. You can try to use =doas= or	15
13	=sudo=, but there may be issues.	16	These steps must be performed as root. You can try to use
		17	`doas` or `sudo`, but there may be issues.
14		18
15	1. Re-generate the RSA and ED25519 keys	19	1. Re-generate the RSA and ED25519 keys
16		20
17	#+begin_src sh	21	```sh
18	rm /etc/ssh/ssh_host_*	22	rm /etc/ssh/ssh_host_*
19	ssh-keygen -t rsa -b 4096 -f /etc/ssh/ssh_host_rsa_key -N ""	23	ssh-keygen -t rsa -b 4096 -f /etc/ssh/ssh_host_rsa_key -N ""
20	ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key -N ""	24	ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key -N ""
21	#+end_src	25	```
22		26
23	2. [@2] Remove small Diffie-Hellman moduli	27	2. Remove small Diffie-Hellman moduli
24		28
25	#+begin_src sh	29	```sh
26	awk '$5 >= 3071' /etc/ssh/moduli > /etc/ssh/moduli.safe	30	awk '$5 >= 3071' /etc/ssh/moduli > /etc/ssh/moduli.safe
27	mv /etc/ssh/moduli.safe /etc/ssh/moduli	31	mv /etc/ssh/moduli.safe /etc/ssh/moduli
28	#+end_src	32	```
29		33
30	3. [@3] Enable the RSA and ED25519 HostKey directives in the	34	3. Enable the RSA and ED25519 HostKey directives in the
31	/etc/ssh/sshd_{config} file	35	/etc/ssh/sshd~config~ file
32		36
33	#+begin_src sh	37	```sh
34	sed -i 's/^\#HostKey \/etc\/ssh\/ssh_host_$rsa\\|ed25519$_key$/HostKey \/etc\/ssh\/ssh_host_\1_key/g' /etc/ssh/sshd_config	38	sed -i 's/^\#HostKey \/etc\/ssh\/ssh_host_$rsa\\|ed25519$_key$/HostKey \/etc\/ssh\/ssh_host_\1_key/g' /etc/ssh/sshd_config
35	#+end_src	39	```
36		40
37	4. [@4] Restrict supported key exchange, cipher, and MAC algorithms	41	4. Restrict supported key exchange, cipher, and MAC algorithms
38		42
39	#+begin_src sh	43	```sh
40	echo -e "\n# Restrict key exchange, cipher, and MAC algorithms, as per sshaudit.com\n# hardening guide.\nKexAlgorithms sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha256\nCiphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr\nMACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128-etm@openssh.com\nHostKeyAlgorithms ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com" > /etc/ssh/sshd_config.d/ssh-audit_hardening.conf	44	echo -e "\n# Restrict key exchange, cipher, and MAC algorithms, as per sshaudit.com\n# hardening guide.\nKexAlgorithms sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha256\nCiphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr\nMACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128-etm@openssh.com\nHostKeyAlgorithms ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com" > /etc/ssh/sshd_config.d/ssh-audit_hardening.conf
41	#+end_src	45	```
42		46
43	5. [@5] Include the /etc/ssh/sshd_{config}.d directory	47	5. Include the /etc/ssh/sshd~config~.d directory
44		48
45	#+begin_src sh	49	```sh
46	echo -e "Include /etc/ssh/sshd_config.d/*.conf" > /etc/ssh/sshd_config	50	echo -e "Include /etc/ssh/sshd_config.d/*.conf" > /etc/ssh/sshd_config
47	#+end_src	51	```
48		52
49	6. [@6] Restart OpenSSH server	53	6. Restart OpenSSH server
50		54
51	#+begin_src sh	55	```sh
52	rc-service sshd restart	56	rc-service sshd restart
53	#+end_src	57	```
		58
		59	# Testing SSH
54		60
55	* Testing SSH	61	You can test the results with the `ssh-audit` python script.
56	You can test the results with the =ssh-audit= python script.
57		62
58	#+begin_src sh	63	```sh
59	pip3 install ssh-audit	64	pip3 install ssh-audit
60	ssh-audit localhost	65	ssh-audit localhost
61	#+end_src	66	```
62		67
63	If everything succeeded, the results will show as all green. If anything	68	If everything succeeded, the results will show as all green. If anything
64	is yellow, orange, or red, you may need to tweak additional settings.	69	is yellow, orange, or red, you may need to tweak additional settings.
65		70
66	#+begin_src txt	71	``` txt
67	,#+caption: ssh audit	72	#+caption: ssh audit
68	#+end_src	73	```
69		74
70	#+caption: ssh-audit	75	![ssh-audit](https://img.cleberg.net/blog/20231015-ssh-hardening/ssh-audit.png)
71	[[https://img.cleberg.net/blog/20231015-ssh-hardening/ssh-audit.png]]

content/blog/2023-10-17-self-hosting-anonymousoverflow.org → content/blog/2023-10-17-self-hosting-anonymousoverflow.md renamed +36 −28

	@@ -1,30 +1,36 @@
1	#+title: Self-Hosting AnonymousOverflow	1	+++
2	#+date: 2023-10-17	2	date = 2023-10-17
3	#+description: A guide to self-hosting the AnonymousOverflow application on your own server.	3	title = "Self-Hosting AnonymousOverflow"
4	#+filetags: :selfhosting:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Overview
5		9
6	* Overview
7	I recently launched an instance of AnonymousOverflow at	10	I recently launched an instance of AnonymousOverflow at
8	[[https://ao.cleberg.net][ao.cleberg.net]] and wanted to write a brief	11	[ao.cleberg.net](https://ao.cleberg.net) and wanted to write a brief
9	post on how easy it is to install with Docker Compose and Nginx.	12	post on how easy it is to install with Docker Compose and Nginx.
10		13
11	This guide uses Ubuntu server, Docker Compose, and Nginx as a reverse	14	This guide uses Ubuntu server, Docker Compose, and Nginx as a reverse
12	proxy.	15	proxy.
13		16
14	* Installation	17	# Installation
15	** Docker Compose	18
		19	## Docker Compose
		20
16	To install AnonymousOverflow, start by creating a directory for the	21	To install AnonymousOverflow, start by creating a directory for the
17	application and create its =docker-compose.yml= file.	22	application and create its `docker-compose.yml` file.
18		23
19	#+begin_src sh	24	```sh
20	mkdir ~/anonymousoverflow && cd ~/anonymousoverflow	25	mkdir ~/anonymousoverflow && cd ~/anonymousoverflow
21	nano docker-compose.yml	26	nano docker-compose.yml
22	#+end_src	27	```
23		28
24	Within this file, paste the following information. Be sure to change the	29	Within this file, paste the following information. Be sure to change the
25	=APP_URL=, =JWT_SIGNING_SECRET=, and =ports= to match your needs.	30	`APP_URL`, `JWT_SIGNING_SECRET`, and
		31	`ports` to match your needs.
26		32
27	#+begin_src yaml	33	``` yaml
28	version: '3'	34	version: '3'
29		35
30	services:	36	services:
	@@ -37,30 +43,32 @@ services:
37	ports:	43	ports:
38	- '9380:8080'	44	- '9380:8080'
39	restart: 'always'	45	restart: 'always'
40	#+end_src	46	```
41		47
42	Save and exit the file when complete. You can now launch the container	48	Save and exit the file when complete. You can now launch the container
43	and access it via your local network.	49	and access it via your local network.
44		50
45	#+begin_src sh	51	```sh
46	sudo docker-compose up -d	52	sudo docker-compose up -d
47	#+end_src	53	```
		54
		55	## Nginx Reverse Proxy
48		56
49	** Nginx Reverse Proxy
50	If you want to access this service outside the local network, I	57	If you want to access this service outside the local network, I
51	recommend using Nginx as a reverse proxy.	58	recommend using Nginx as a reverse proxy.
52		59
53	Let's start by creating a configuration file.	60	Let\'s start by creating a configuration file.
54		61
55	#+begin_src sh	62	```sh
56	sudo nano /etc/nginx/sites-available/ao	63	sudo nano /etc/nginx/sites-available/ao
57	#+end_src	64	```
58		65
59	Within this file, paste the following content and repace	66	Within this file, paste the following content and repace
60	=ao.example.com= with your URL. You may need to update the SSL	67	`ao.example.com` with your URL. You may need to update the
61	certificate statements if your certificates are in a different location.	68	SSL certificate statements if your certificates are in a different
		69	location.
62		70
63	#+begin_src conf	71	``` conf
64	server {	72	server {
65	if ($host ~ ^[^.]+\.cleberg\.net$) {	73	if ($host ~ ^[^.]+\.cleberg\.net$) {
66	return 301 https://$host$request_uri;	74	return 301 https://$host$request_uri;
	@@ -112,16 +120,16 @@ server {
112	proxy_buffers 64 256k;	120	proxy_buffers 64 256k;
113	}	121	}
114	}	122	}
115	#+end_src	123	```
116		124
117	Save and exit the file when complete. On Ubuntu, you will need to	125	Save and exit the file when complete. On Ubuntu, you will need to
118	symlink the configuration file before it will be recognized by Nginx.	126	symlink the configuration file before it will be recognized by Nginx.
119	Once complete, simply restart the web server.	127	Once complete, simply restart the web server.
120		128
121	#+begin_src sh	129	```sh
122	sudo ln -s /etc/nginx/sites-available/ao /etc/nginx/sites-enabled/ao	130	sudo ln -s /etc/nginx/sites-available/ao /etc/nginx/sites-enabled/ao
123	sudo systemctl restart nginx.service	131	sudo systemctl restart nginx.service
124	#+end_src	132	```
125		133
126	The website will now be available publicly. Visit	134	The website will now be available publicly. Visit [my
127	[[https://ao.cleberg.net][my instance]] for an example.	135	instance](https://ao.cleberg.net) for an example.

content/blog/2023-11-08-scli.md added +158

@@ -0,0 +1,158 @@
	1	+++
	2	date = 2023-11-08
	3	title = "Installing scli on Alpine Linux (musl)"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	[scli](https://github.com/isamert/scli) is a command-line tool that
	9	allows you to connect to your Signal messenger account. This program
	10	utilizes a two-pane display that shows you chats on the left and the
	11	focused conversation on the right.
	12
	13	This guide will show you how to install `scli` and its
	14	dependencies on Alpine Linux, which requires some extra work due to
	15	musl.
	16
	17	If you\'re using a non-musl system, you can likely following the
	18	`scli` README and download the packaged binaries for an
	19	easier installation process.
	20
	21	# Dependencies
	22
	23	In order to use `scli`, you need a few dependencies:
	24
	25	- `openjdk17-jre` - Used as a dependency for the
	26	`signal-cli` tool. Version may vary.
	27	- `signal-cli` - Used as the backbone of the
	28	`scli` tool.
	29	- `findutils` - Replaces the standard Busybox version of
	30	`xargs`.
	31	- `urwid` - A console user interface library for Python.
	32	- `urwid-readline` - For GNU emacs-like keybinds on the
	33	input line.
	34	- `qrencode` - Displays a QR code in the terminal to link
	35	the device using your phone. Not necessary if you\'re only linking
	36	on desktop and can copy/paste the connection URL.
	37
	38	Let\'s start by installing the packages available via Alpine\'s
	39	repositories. Be sure to install the latest version of
	40	`openjdk`. If you run into Java-related issues, uninstall
	41	`openjdk` and install an older version.
	42
	43	```sh
	44	doas apk add openjdk17-jre findutils qrencode
	45	```
	46
	47	Next, let\'s install `signal-cli`. Be sure to export the
	48	version of `signal-cli` that you want. I use version
	49	`0.12.4` below, but that may be outdated by the time you\'re
	50	reading this.
	51
	52	```sh
	53	export VERSION="0.12.4"
	54	wget https://github.com/AsamK/signal-cli/releases/download/v"${VERSION}"/signal-cli-"${VERSION}".tar.gz
	55	doas tar xf signal-cli-"${VERSION}".tar.gz -C /opt
	56	doas ln -sf /opt/signal-cli-${VERSION}"/bin/signal/cli /usr/local/bin
	57	```
	58
	59	Finally, install the `urwid` packages using the Python
	60	packaging utility.
	61
	62	```sh
	63	pip3 install urwid urwid-readline
	64	```
	65
	66	# Installation
	67
	68	Now that we have all of the dependencies we need, we can install
	69	`scli`. Start by simply cloning the repository.
	70
	71	```sh
	72	git clone https://github.com/isamert/scli
	73	```
	74
	75	When I cloned this repository on 2023-11-08, I found a bug in the logic
	76	that required a fix. You must edit the `scli` file and
	77	replace the one instance of `RLIMIT_OFILE` with
	78	`RLIMIT_NOFILE`.
	79
	80	```sh
	81	cd scli
	82	nano scli
	83	```
	84
	85	Once complete, you can move this program to anywhere on your
	86	`$PATH`. I chose the following directory.
	87
	88	```sh
	89	doas mv scli /usr/local/bin/scli
	90	```
	91
	92	# Initial Setup
	93
	94	Now that everything is installed, we can login and configure the client.
	95	Start by generating a connection link.
	96
	97	```sh
	98	signal-cli link -n "YOUR-DEVICE-NICKNAME" \| tee >(xargs -L 1 qrencode -t utf8)
	99	```
	100
	101	This will generate a connection link and related QR code for you to use
	102	to link the devices together. Once complete, wait patiently\* for
	103	the connection process to finish.
	104
	105	Once it completes, it will exit and return you to the prompt. From here,
	106	you need to perform an initial `receive` command to start
	107	things off. The `USERNAME` variable should be your phone
	108	number, such as `+15551237890`.
	109
	110	```sh
	111	signal-cli -u USERNAME receive
	112	```
	113
	114	Also be sure to test the daemon to ensure it works properly. If no
	115	errors occur, it\'s working. If you run into errors because you\'re not
	116	running a DBUS session, see my notes below.
	117
	118	```sh
	119	signal-cli -u USERNAME daemon
	120	```
	121
	122	Once the initial reception is complete, you are ready to use
	123	`scli`.
	124
	125	This process will differ depending on your desktop environment (DE). If
	126	you are running a DE, you likely have a DBUS session running already and
	127	can simply launch the program.
	128
	129	However, if you\'re like me and running your computer straight on the
	130	TTY without a DE, you\'ll need to start a DBUS session for this program.
	131
	132	```sh
	133	# If you're not running a DBUS session yet, you need to start one for scli
	134	dbus-run-session -- scli
	135
	136	# OR - If you're already running a DBUS session, simply run scli
	137	scli
	138	```
	139
	140	# Configuration
	141
	142	Lastly, there are a number of configuration options that you can pass
	143	via the command or in the `~/.config/sclirc` file. See the
	144	Github README for more information on configuration options.
	145
	146	```sh
	147	nano ~/.config/sclirc
	148	```
	149
	150	``` conf
	151	# ~/.config/sclirc
	152
	153	wrap-at = 80
	154	enable-notifications = true
	155	```
	156
	157	That\'s it! Following this guide, I have a functional `scli`
	158	program that successfully sends messages to my contacts and myself!

content/blog/2023-11-08-scli.org deleted −145

	@@ -1,145 +0,0 @@
1	#+title: Installing scli on Alpine Linux (musl)
2	#+date: 2023-11-08
3	#+description: Learn how to properly configure scli for musl-based systems.
4	#+filetags: :linux:
5
6	[[https://github.com/isamert/scli][scli]] is a command-line tool that
7	allows you to connect to your Signal messenger account. This program
8	utilizes a two-pane display that shows you chats on the left and the
9	focused conversation on the right.
10
11	This guide will show you how to install =scli= and its dependencies on
12	Alpine Linux, which requires some extra work due to musl.
13
14	If you're using a non-musl system, you can likely following the =scli=
15	README and download the packaged binaries for an easier installation
16	process.
17
18	* Dependencies
19	In order to use =scli=, you need a few dependencies:
20
21	- =openjdk17-jre= - Used as a dependency for the =signal-cli= tool.
22	Version may vary.
23	- =signal-cli= - Used as the backbone of the =scli= tool.
24	- =findutils= - Replaces the standard Busybox version of =xargs=.
25	- =urwid= - A console user interface library for Python.
26	- =urwid-readline= - For GNU emacs-like keybinds on the input line.
27	- =qrencode= - Displays a QR code in the terminal to link the device
28	using your phone. Not necessary if you're only linking on desktop and
29	can copy/paste the connection URL.
30
31	Let's start by installing the packages available via Alpine's
32	repositories. Be sure to install the latest version of =openjdk=. If you
33	run into Java-related issues, uninstall =openjdk= and install an older
34	version.
35
36	#+begin_src sh
37	doas apk add openjdk17-jre findutils qrencode
38	#+end_src
39
40	Next, let's install =signal-cli=. Be sure to export the version of
41	=signal-cli= that you want. I use version =0.12.4= below, but that may
42	be outdated by the time you're reading this.
43
44	#+begin_src sh
45	export VERSION="0.12.4"
46	wget https://github.com/AsamK/signal-cli/releases/download/v"${VERSION}"/signal-cli-"${VERSION}".tar.gz
47	doas tar xf signal-cli-"${VERSION}".tar.gz -C /opt
48	doas ln -sf /opt/signal-cli-${VERSION}"/bin/signal/cli /usr/local/bin
49	#+end_src
50
51	Finally, install the =urwid= packages using the Python packaging
52	utility.
53
54	#+begin_src sh
55	pip3 install urwid urwid-readline
56	#+end_src
57
58	* Installation
59	Now that we have all of the dependencies we need, we can install =scli=.
60	Start by simply cloning the repository.
61
62	#+begin_src sh
63	git clone https://github.com/isamert/scli
64	#+end_src
65
66	When I cloned this repository on 2023-11-08, I found a bug in the logic
67	that required a fix. You must edit the =scli= file and replace the one
68	instance of =RLIMIT_OFILE= with =RLIMIT_NOFILE=.
69
70	#+begin_src sh
71	cd scli
72	nano scli
73	#+end_src
74
75	Once complete, you can move this program to anywhere on your =$PATH=. I
76	chose the following directory.
77
78	#+begin_src sh
79	doas mv scli /usr/local/bin/scli
80	#+end_src
81
82	* Initial Setup
83	Now that everything is installed, we can login and configure the client.
84	Start by generating a connection link.
85
86	#+begin_src sh
87	signal-cli link -n "YOUR-DEVICE-NICKNAME" \| tee >(xargs -L 1 qrencode -t utf8)
88	#+end_src
89
90	This will generate a connection link and related QR code for you to use
91	to link the devices together. Once complete, wait patiently* for the
92	connection process to finish.
93
94	Once it completes, it will exit and return you to the prompt. From here,
95	you need to perform an initial =receive= command to start things off.
96	The =USERNAME= variable should be your phone number, such as
97	=+15551237890=.
98
99	#+begin_src sh
100	signal-cli -u USERNAME receive
101	#+end_src
102
103	Also be sure to test the daemon to ensure it works properly. If no
104	errors occur, it's working. If you run into errors because you're not
105	running a DBUS session, see my notes below.
106
107	#+begin_src sh
108	signal-cli -u USERNAME daemon
109	#+end_src
110
111	Once the initial reception is complete, you are ready to use =scli=.
112
113	This process will differ depending on your desktop environment (DE). If
114	you are running a DE, you likely have a DBUS session running already and
115	can simply launch the program.
116
117	However, if you're like me and running your computer straight on the TTY
118	without a DE, you'll need to start a DBUS session for this program.
119
120	#+begin_src sh
121	# If you're not running a DBUS session yet, you need to start one for scli
122	dbus-run-session -- scli
123
124	# OR - If you're already running a DBUS session, simply run scli
125	scli
126	#+end_src
127
128	* Configuration
129	Lastly, there are a number of configuration options that you can pass
130	via the command or in the =~/.config/sclirc= file. See the Github README
131	for more information on configuration options.
132
133	#+begin_src sh
134	nano ~/.config/sclirc
135	#+end_src
136
137	#+begin_src conf
138	# ~/.config/sclirc
139
140	wrap-at = 80
141	enable-notifications = true
142	#+end_src
143
144	That's it! Following this guide, I have a functional =scli= program that
145	successfully sends messages to my contacts and myself!

content/blog/2023-12-03-unifi-nextdns.org → content/blog/2023-12-03-unifi-nextdns.md renamed +73 −62

	@@ -1,94 +1,105 @@
1	#+title: How to Install NextDNS on the Unifi Dream Machine	1	+++
2	#+date: 2023-12-03	2	date = 2023-12-03
3	#+description: A guide to properly install the NextDNS client on the UDM Pro.	3	title = "How to Install NextDNS on the Unifi Dream Machine"
4	#+filetags: :network:	4	description = ""
		5	draft = false
		6	+++
		7
		8	# Overview
5		9
6	* Overview
7	I recently installed NextDNS on my Unifi Dream Machine router using the	10	I recently installed NextDNS on my Unifi Dream Machine router using the
8	[[https://github.com/nextdns/nextdns/wiki/UnifiOS][UnifiOS]] wiki page	11	[UnifiOS](https://github.com/nextdns/nextdns/wiki/UnifiOS) wiki page on
9	on NextDNS's GitHub repository.	12	NextDNS\'s GitHub repository.
10		13
11	As a result of this, I wanted to write down the process in case the wiki	14	As a result of this, I wanted to write down the process in case the wiki
12	or installer ever gets lost.	15	or installer ever gets lost.
13		16
14	* Wiki	17	# Wiki
		18
15	The following is copied from the wiki page linked above, with one	19	The following is copied from the wiki page linked above, with one
16	difference in the =ssh= command.	20	difference in the `ssh` command.
17		21
18	Install instructions for Unifi Dream Machine (UDM) standard and pro	22	Install instructions for Unifi Dream Machine (UDM) standard and pro
19	routers.	23	routers.
20		24
21	** Install	25	## Install
		26
22	Enable SSH:	27	Enable SSH:
23		28
24	- Go to your unifi admin interface and select your device (not the	29	- Go to your unifi admin interface and select your device (not the
25	controller settings, but the Dream Machine settings)	30	controller settings, but the Dream Machine settings)
26	- Click on "Settings" at the bottom of the page	31	- Click on \"Settings\" at the bottom of the page
27	- Go to the "Advanced" section on the left pan	32	- Go to the \"Advanced\" section on the left pan
28	- Enable SSH	33	- Enable SSH
29	- Set a SSH password	34	- Set a SSH password
30		35
31	Connect to your router using =ssh root@xxx.xxx.xxx.xxx= with the	36	Connect to your router using `ssh root@xxx.xxx.xxx.xxx` with
32	password you configured.	37	the password you configured.
33		38
34	Run the following command and follow the instructions:	39	Run the following command and follow the instructions:
35		40
36	#+begin_src sh	41	```sh
37	sh -c 'sh -c "$(curl -sL https://nextdns.io/install)"'	42	sh -c 'sh -c "$(curl -sL https://nextdns.io/install)"'
38	#+end_src	43	```
39		44
40	Note: Queries from the UDM itself won't be routed to NextDNS nor	45	Note: Queries from the UDM itself won\'t be routed to NextDNS nor
41	encrypted due to current system limitation. All traffic from other	46	encrypted due to current system limitation. All traffic from other
42	devices on then network will.	47	devices on then network will.
43		48
44	** Upgrade	49	## Upgrade
		50
45	To upgrade to the last version, simply re-run the installer above. If a	51	To upgrade to the last version, simply re-run the installer above. If a
46	new version is available, the upgrade action will added to the list of	52	new version is available, the upgrade action will added to the list of
47	possible actions.	53	possible actions.
48		54
49	** Uninstall	55	## Uninstall
50	To uninstall, re-run the installer above and select "Remove" in the	56
		57	To uninstall, re-run the installer above and select \"Remove\" in the
51	menu.	58	menu.
52		59
53	** Troubleshooting	60	## Troubleshooting
		61
54	If the installation fail, please the installer in debug mode and contact	62	If the installation fail, please the installer in debug mode and contact
55	us at team@nextdns.io with the transcript of the installation:	63	us at team@nextdns.io with the transcript of the installation:
56		64
57	#+begin_src sh	65	```sh
58	sh -c 'DEBUG=1 sh -c "$(curl -sL https://nextdns.io/install)"'	66	sh -c 'DEBUG=1 sh -c "$(curl -sL https://nextdns.io/install)"'
59	#+end_src	67	```
		68
		69	### Content Filtering Conflict
60		70
61	*** Content Filtering Conflict
62	NextDNS CLI and the UDM Content Filtering or the Ad Blocking features	71	NextDNS CLI and the UDM Content Filtering or the Ad Blocking features
63	are incompatible. If you want to use NextDNS CLI, please make sure they	72	are incompatible. If you want to use NextDNS CLI, please make sure they
64	are disabled.	73	are disabled.
65		74
66	To disable Content Filtering, go to Settings > Network, then for each	75	To disable Content Filtering, go to Settings \> Network, then for each
67	network, set the Content Filtering feature to None	76	network, set the Content Filtering feature to None
68		77
69	To disable Ad Blocking, go to Settings > Application Firewall. In the	78	To disable Ad Blocking, go to Settings \> Application Firewall. In the
70	General tab, uncheck the Ad Blocking checkbox.	79	General tab, uncheck the Ad Blocking checkbox.
71		80
72	*** APT Error	81	### APT Error
		82
73	If you get an apt error as follow:	83	If you get an apt error as follow:
74		84
75	#+begin_src sh	85	```sh
76	E: Failed to fetch http://security.debian.org/dists/stretch/updates/main/binary-arm64/Packages 404 Not Found [IP: 151.101.70.132 80]	86	E: Failed to fetch http://security.debian.org/dists/stretch/updates/main/binary-arm64/Packages 404 Not Found [IP: 151.101.70.132 80]
77	#+end_src	87	```
78		88
79	You may try to following:	89	You may try to following:
80		90
81	#+begin_src sh	91	```sh
82	sed -i -e 's/deb.debian.org/archive.debian.org/g' \	92	sed -i -e 's/deb.debian.org/archive.debian.org/g' \
83	-e 's\|security.debian.org\|archive.debian.org/\|g' \	93	-e 's\|security.debian.org\|archive.debian.org/\|g' \
84	-e '/stretch-updates/d' /etc/apt/sources.list	94	-e '/stretch-updates/d' /etc/apt/sources.list
85	#+end_src	95	```
		96
		97	## install.sh
86		98
87	** install.sh	99	Here are the contents of the `install.sh` file used above, as
88	Here are the contents of the =install.sh= file used above, as of	100	of 2023-12-03:
89	2023-12-03:
90		101
91	#+begin_src sh	102	```sh
92	#!/bin/sh	103	#!/bin/sh
93		104
94	main() {	105	main() {
	@@ -313,13 +324,13 @@ install_bin() {
313	fi	324	fi
314	log_debug "Installing $INSTALL_RELEASE binary for $GOOS/$GOARCH to $bin_path"	325	log_debug "Installing $INSTALL_RELEASE binary for $GOOS/$GOARCH to $bin_path"
315	case "$INSTALL_RELEASE" in	326	case "$INSTALL_RELEASE" in
316	,/)	327	/)
317	# Snapshot	328	# Snapshot
318	branch=${INSTALL_RELEASE%/*}	329	branch=${INSTALL_RELEASE%/*}
319	hash=${INSTALL_RELEASE#*/}	330	hash=${INSTALL_RELEASE#*/}
320	url="https://snapshot.nextdns.io/${branch}/nextdns-${hash}_${GOOS}_${GOARCH}.tar.gz"	331	url="https://snapshot.nextdns.io/${branch}/nextdns-${hash}_${GOOS}_${GOARCH}.tar.gz"
321	;;	332	;;
322	,*)	333	*)
323	url="https://github.com/nextdns/nextdns/releases/download/v${INSTALL_RELEASE}/nextdns_${INSTALL_RELEASE}_${GOOS}_${GOARCH}.tar.gz"	334	url="https://github.com/nextdns/nextdns/releases/download/v${INSTALL_RELEASE}/nextdns_${INSTALL_RELEASE}_${GOOS}_${GOARCH}.tar.gz"
324	;;	335	;;
325	esac	336	esac
	@@ -621,12 +632,12 @@ install_type() {
621	echo "$FORCE_INSTALL_TYPE"; return 0	632	echo "$FORCE_INSTALL_TYPE"; return 0
622	fi	633	fi
623	case "$INSTALL_RELEASE" in	634	case "$INSTALL_RELEASE" in
624	,/)	635	/)
625	case $OS in	636	case $OS in
626	ubios)	637	ubios)
627	echo "ubios_snapshot"; return 0	638	echo "ubios_snapshot"; return 0
628	;;	639	;;
629	,*)	640	*)
630	# Snapshot mode always use binary install	641	# Snapshot mode always use binary install
631	echo "bin"; return 0	642	echo "bin"; return 0
632	;;	643	;;
	@@ -654,7 +665,7 @@ install_type() {
654	. /etc/os-release	665	. /etc/os-release
655	major=$(echo "$VERSION_ID" \| cut -d. -f1)	666	major=$(echo "$VERSION_ID" \| cut -d. -f1)
656	case $major in	667	case $major in
657	,[!0-9])	668	[!0-9])
658	if [ "$VERSION_ID" = "19.07.0-rc1" ]; then	669	if [ "$VERSION_ID" = "19.07.0-rc1" ]; then
659	# No opkg support before 19.07.0-rc2	670	# No opkg support before 19.07.0-rc2
660	echo "bin"	671	echo "bin"
	@@ -663,7 +674,7 @@ install_type() {
663	echo "openwrt"	674	echo "openwrt"
664	fi	675	fi
665	;;	676	;;
666	,*)	677	*)
667	if [ "$major" -lt 19 ]; then	678	if [ "$major" -lt 19 ]; then
668	# No opkg support before 19.07.0-rc2	679	# No opkg support before 19.07.0-rc2
669	echo "bin"	680	echo "bin"
	@@ -709,7 +720,7 @@ install_type() {
709	# TODO: pkg for xbps	720	# TODO: pkg for xbps
710	echo "bin"	721	echo "bin"
711	;;	722	;;
712	,*)	723	*)
713	log_error "Unsupported installation for $(detect_os)"	724	log_error "Unsupported installation for $(detect_os)"
714	return 1	725	return 1
715	;;	726	;;
	@@ -861,7 +872,7 @@ ask_bool() {
861	false)	872	false)
862	msg="$msg [y\|N]: "	873	msg="$msg [y\|N]: "
863	;;	874	;;
864	,*)	875	*)
865	msg="$msg (y/n): "	876	msg="$msg (y/n): "
866	esac	877	esac
867	while true; do	878	while true; do
	@@ -879,7 +890,7 @@ ask_bool() {
879	echo "false"	890	echo "false"
880	return 0	891	return 0
881	;;	892	;;
882	,*)	893	*)
883	echo "Invalid input, use yes or no"	894	echo "Invalid input, use yes or no"
884	;;	895	;;
885	esac	896	esac
	@@ -891,12 +902,12 @@ detect_endiannes() {
891	# Some firmwares do not contain hexdump, for those, try to detect endianness	902	# Some firmwares do not contain hexdump, for those, try to detect endianness
892	# differently.	903	# differently.
893	case $(cat /proc/cpuinfo) in	904	case $(cat /proc/cpuinfo) in
894	,BCM5300)	905	BCM5300)
895	# RT-AC66U does not support Merlin version over 380.70 which	906	# RT-AC66U does not support Merlin version over 380.70 which
896	# lacks hexdump command.	907	# lacks hexdump command.
897	echo "le"	908	echo "le"
898	;;	909	;;
899	,*)	910	*)
900	log_error "Cannot determine endianness"	911	log_error "Cannot determine endianness"
901	return 1	912	return 1
902	;;	913	;;
	@@ -927,10 +938,10 @@ detect_goarch() {
927	arm)	938	arm)
928	# FreeBSD does not include arm version	939	# FreeBSD does not include arm version
929	case "$(sysctl -b hw.model 2>/dev/null)" in	940	case "$(sysctl -b hw.model 2>/dev/null)" in
930	,A9)	941	A9)
931	echo "armv7"	942	echo "armv7"
932	;;	943	;;
933	,*)	944	*)
934	# Unknown version, fallback to the lowest	945	# Unknown version, fallback to the lowest
935	echo "armv5"	946	echo "armv5"
936	;;	947	;;
	@@ -954,7 +965,7 @@ detect_goarch() {
954	# "out of memory allocating heap arena metadata".	965	# "out of memory allocating heap arena metadata".
955	echo "armv7"	966	echo "armv7"
956	;;	967	;;
957	,*)	968	*)
958	echo "arm64"	969	echo "arm64"
959	;;	970	;;
960	esac	971	esac
	@@ -966,7 +977,7 @@ detect_goarch() {
966	# TODO: detect hardfloat	977	# TODO: detect hardfloat
967	echo "$(uname -m)$(detect_endiannes)_softfloat"	978	echo "$(uname -m)$(detect_endiannes)_softfloat"
968	;;	979	;;
969	,*)	980	*)
970	log_error "Unsupported GOARCH: $(uname -m)"	981	log_error "Unsupported GOARCH: $(uname -m)"
971	return 1	982	return 1
972	;;	983	;;
	@@ -993,7 +1004,7 @@ detect_goos() {
993	OpenBSD)	1004	OpenBSD)
994	echo "openbsd"	1005	echo "openbsd"
995	;;	1006	;;
996	,*)	1007	*)
997	log_error "Unsupported GOOS: $(uname -s)"	1008	log_error "Unsupported GOOS: $(uname -s)"
998	return 1	1009	return 1
999	esac	1010	esac
	@@ -1070,7 +1081,7 @@ detect_os() {
1070	OpenBSD)	1081	OpenBSD)
1071	echo "openbsd"; return 0	1082	echo "openbsd"; return 0
1072	;;	1083	;;
1073	,*)	1084	*)
1074	esac	1085	esac
1075	log_error "Unsupported OS: $(uname -o) $(grep ID "/etc/os-release" 2>/dev/null \| xargs)"	1086	log_error "Unsupported OS: $(uname -o) $(grep ID "/etc/os-release" 2>/dev/null \| xargs)"
1076	return 1	1087	return 1
	@@ -1089,7 +1100,7 @@ guess_host_type() {
1089	darwin\|steamos)	1100	darwin\|steamos)
1090	echo "workstation"	1101	echo "workstation"
1091	;;	1102	;;
1092	,*)	1103	*)
1093	echo "unsure"	1104	echo "unsure"
1094	;;	1105	;;
1095	esac	1106	esac
	@@ -1148,7 +1159,7 @@ bin_location() {
1148	steamos)	1159	steamos)
1149	echo "$HOME/.local/bin/nextdns"	1160	echo "$HOME/.local/bin/nextdns"
1150	;;	1161	;;
1151	,*)	1162	*)
1152	log_error "Unknown bin location for $OS"	1163	log_error "Unknown bin location for $OS"
1153	;;	1164	;;
1154	esac	1165	esac
	@@ -1156,12 +1167,12 @@ bin_location() {
1156		1167
1157	is_version_current() {	1168	is_version_current() {
1158	case "$INSTALL_RELEASE" in	1169	case "$INSTALL_RELEASE" in
1159	,/)	1170	/)
1160	# Snapshot	1171	# Snapshot
1161	hash=${INSTALL_RELEASE#*/}	1172	hash=${INSTALL_RELEASE#*/}
1162	test "0.0.0-$hash" = "$CURRENT_RELEASE"	1173	test "0.0.0-$hash" = "$CURRENT_RELEASE"
1163	;;	1174	;;
1164	,*)	1175	*)
1165	test "$INSTALL_RELEASE" = "$CURRENT_RELEASE"	1176	test "$INSTALL_RELEASE" = "$CURRENT_RELEASE"
1166	;;	1177	;;
1167	esac	1178	esac
	@@ -1186,7 +1197,7 @@ get_release() {
1186	curl) cmd="curl -A curl -s" ;;	1197	curl) cmd="curl -A curl -s" ;;
1187	wget) cmd="wget -qO- -U curl" ;;	1198	wget) cmd="wget -qO- -U curl" ;;
1188	openssl) cmd="openssl_get" ;;	1199	openssl) cmd="openssl_get" ;;
1189	,*)	1200	*)
1190	log_error "Cannot retrieve latest version"	1201	log_error "Cannot retrieve latest version"
1191	return	1202	return
1192	;;	1203	;;
	@@ -1238,4 +1249,4 @@ openssl_get() {
1238		1249
1239	umask 0022	1250	umask 0022
1240	main	1251	main
1241	#+end_src	1252	```

content/blog/2024-01-08-dont-say-hello.md added +29

@@ -0,0 +1,29 @@
	1	+++
	2	date = 2024-01-08
	3	title = "Don't Say Hello"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	I recently came back from a winter break and have started working
	9	again... only to immediately run into the dilemma of people sending me
	10	cliffhanger messages again.
	11
	12	# No Hello
	13
	14	A year or two ago, I discovered [no hello](https://nohello.net/en/) and
	15	have thought about it often since then. I\'ve even sent it to a few
	16	people since then (who wouldn\'t take offense to it).
	17
	18	I work in a fast-paced environment where efficiency is extremely
	19	valuable. Therefore, I have always held a deep displeasure for
	20	conversations where people start with \"Hello\" and then.
	21
	22	I searched back through my work messages and found that I received \~50
	23	messages from \~10 people last year from people that contained \"hi\",
	24	\"hey\", or \"hello\" and did not contain any indication of the purpose
	25	of the conversation. I also noticed that a few of the users were
	26	responsible for the large majority of the cliffhangers.
	27
	28	There\'s no real point to this post, just a desparate request for people
	29	to please stop doing this.

content/blog/2024-01-08-dont-say-hello.org deleted −26

	@@ -1,26 +0,0 @@
1	#+title: Don't Say Hello
2	#+date: 2024-01-08
3	#+description: A short post describing my displeasure with cliffhanger conversations.
4	#+filetags: :personal:
5
6	I recently came back from a winter break and have started working
7	again... only to immediately run into the dilemma of people sending me
8	cliffhanger messages again.
9
10	* No Hello
11	A year or two ago, I discovered [[https://nohello.net/en/][no hello]]
12	and have thought about it often since then. I've even sent it to a few
13	people since then (who wouldn't take offense to it).
14
15	I work in a fast-paced environment where efficiency is extremely
16	valuable. Therefore, I have always held a deep displeasure for
17	conversations where people start with "Hello" and then.
18
19	I searched back through my work messages and found that I received ~50
20	messages from ~10 people last year from people that contained "hi",
21	"hey", or "hello" and did not contain any indication of the purpose of
22	the conversation. I also noticed that a few of the users were
23	responsible for the large majority of the cliffhangers.
24
25	There's no real point to this post, just a desparate request for people
26	to please stop doing this.

content/blog/2024-01-09-macos-customization.md added +181

@@ -0,0 +1,181 @@
	1	+++
	2	date = 2024-01-09
	3	title = "Customizing macOS"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	I have been using macOS more than Linux lately, so I wrote this post to
	9	describe some simple options to customize macOS beyond the normal
	10	built-in settings menu.
	11
	12	While not all-encompassing, the options below should be a good start for
	13	anyone looking to dive down the rabbit hole.
	14
	15	# Basics
	16
	17	## Package Management
	18
	19	To install a lot of software on macOS, you will need
	20	[Homebrew](https://brew.sh/). You can use their installation script to
	21	get started. Simply open the `Terminal` application and paste
	22	the following snippet:
	23
	24	```sh
	25	/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
	26	```
	27
	28	This will allow you to easily install and manage applications and other
	29	software easily through the `brew` command.
	30
	31	## Terminal
	32
	33	If you\'re serious about customizing your macOS system, I highly
	34	recommend installing a terminal emulator that you like and if you\'re
	35	not comfortable on the command line yet, start learning. A lot of
	36	customization options require you to edit hidden files, which is easiest
	37	in a terminal.
	38
	39	There are options like iTerm2, Kitty, Alacritty, Hyper, Warp, or the
	40	built-in Terminal app.
	41
	42	I use [iTerm2](https://iterm2.com/), which can be installed with
	43	Homebrew:
	44
	45	```sh
	46	brew install iterm2
	47	```
	48
	49	![iTerm2](https://img.cleberg.net/blog/20240109-macos-customization/iterm2.png)
	50
	51	To install color schemes, such as the Dracula scheme shown in the
	52	screenshot above, you visit [iTerm
	53	Themes](https://iterm2colorschemes.com/) and follow their installation
	54	instructions to install any of the themes.
	55
	56	# Desktop
	57
	58	## Window Management
	59
	60	[yabai](https://github.com/koekeishiya/yabai) is a tiling window manager
	61	for macOS. While other window managers exist, I found that most of them
	62	struggled to create logical layouts and to allow me to easily move
	63	windows around the screen.
	64
	65	Some advanced settings for yabai are only available if partially disable
	66	System Integrity Protection (SIP). However, I chose not to do this and
	67	it hasn\'t affected my basic usage of yabai at all.
	68
	69	Refer to the [yabai
	70	wiki](https://github.com/koekeishiya/yabai/wiki/Installing-yabai-(latest-release))
	71	for installation instructions. You will need to ensure that yabai is
	72	allowed to access the accessibility and screen recording APIs.
	73
	74	You can see a basic three-pane layout atuomatically configured by yabai
	75	for me as I opened the windows below.
	76
	77	![yabai window
	78	manager](https://img.cleberg.net/blog/20240109-macos-customization/yabai.png)
	79
	80	## Keyboard Shortcuts
	81
	82	[skhd](https://github.com/koekeishiya/skhd) is a simple hotkey daemon
	83	that allows you to define hotkeys in a file for usage on your system.
	84
	85	Installation is simple:
	86
	87	```sh
	88	brew install koekeishiya/formulae/skhd
	89	skhd --start-service
	90	```
	91
	92	After installation, be sure to allow `skhd` access to the
	93	accessibility API in the macOS privacy settings.
	94
	95	You can configure your hotkeys in the `~/.config/skhd/skhdrc`
	96	file:
	97
	98	```sh
	99	nano ~/.config/skhd/skhdrc
	100	```
	101
	102	For example, I have hotkeys to open my browser and terminal:
	103
	104	``` conf
	105	# Terminal
	106	cmd - return : /Applications/iTerm.app/Contents/MacOS/iTerm2
	107
	108	# Browser
	109	cmd + shift - return : /Applications/LibreWolf.app/Contents/MacOS/librewolf
	110	```
	111
	112	## Widgets
	113
	114	[uebersicht](https://github.com/felixhageloh/uebersicht/) is a handy
	115	desktop-based widget tool with a plethora of community-made widgets
	116	available in the [widgets
	117	gallery](https://tracesof.net/uebersicht-widgets/). You can also write
	118	your own widgets with this tool.
	119
	120	To install, simply download the latest release from the [uebersicht
	121	website](https://tracesof.net/uebersicht/) and copy it to the
	122	Applications folder.
	123
	124	See below for an example of the
	125	[Mond](https://tracesof.net/uebersicht-widgets/#Mond) widget in action.
	126
	127	![uebersicht desktop
	128	widgets](https://img.cleberg.net/blog/20240109-macos-customization/uebersicht.png)
	129
	130	## Status Bar
	131
	132	[SketchyBar](https://github.com/FelixKratz/SketchyBar) is a customizable
	133	replacement for the macOS status or menu bar.
	134
	135	You can browse a discussion where various users shared their
	136	[configurations](https://github.com/FelixKratz/SketchyBar/discussions/47?sort=top)
	137	for inspiration or to copy their dotfiles.
	138
	139	See below for a quick (& slightly broken) copy of
	140	[zer0yu\'s](https://github.com/zer0yu/dotfiles) SketchyBar
	141	configuration.
	142
	143	![SketchyBar](https://img.cleberg.net/blog/20240109-macos-customization/sketchybar.png)
	144
	145	## Dock
	146
	147	The easiest way to customize the dock is to install
	148	[uBar](https://ubarapp.com/), which uses a Windows-like menu bar as the
	149	default style.
	150
	151	However, the built-in macOS dock cannot be disabled and can only be set
	152	to \"always hidden\". This can be annoying as it will pop out any time
	153	your mouse cursor passes closely to the dock edge of the screen. Because
	154	of this, I simply use the built-in dock instead of customizing it with
	155	third-party software.
	156
	157	Regardless, see below for the default installation style of uBar.
	158
	159	![uBar](https://img.cleberg.net/blog/20240109-macos-customization/ubar.png)
	160
	161	## Application Icons
	162
	163	You can also customize the icon of any application in macOS, which will
	164	show up in Finder, the Dock, Launchpad, search results, etc. I recommend
	165	using [macOSicons](https://macosicons.com/) to download icons you want,
	166	and then apply them by following this process.
	167
	168	1. Open the Finder application.
	169	2. Navigate to the `Applications` folder.
	170	3. Right-click an application of your choice, and select
	171	`Get Info`.
	172	4. Drag the image you downloaded on top of the application\'s icon at
	173	the top of information window (you will see a green \"plus\" symbol
	174	when you\'re hovering over it).
	175	5. Release the new icon on top of the old icon and it will update!
	176
	177	You can see an example of me dragging a new `signal.icns`
	178	file onto my Signal.app information window to update it below:
	179
	180	![replace macOS
	181	icons](https://img.cleberg.net/blog/20240109-macos-customization/replace_icon.png)

content/blog/2024-01-09-macos-customization.org deleted −170

	@@ -1,170 +0,0 @@
1	#+title: Customizing macOS
2	#+date: 2024-01-09
3	#+description: Learn how to customize macOS beyond the standard, built-in options provided by Apple.
4	#+filetags: :apple:
5
6	I have been using macOS more than Linux lately, so I wrote this post to
7	describe some simple options to customize macOS beyond the normal
8	built-in settings menu.
9
10	While not all-encompassing, the options below should be a good start for
11	anyone looking to dive down the rabbit hole.
12
13	* Basics
14	** Package Management
15	To install a lot of software on macOS, you will need
16	[[https://brew.sh/][Homebrew]]. You can use their installation script to
17	get started. Simply open the =Terminal= application and paste the
18	following snippet:
19
20	#+begin_src sh
21	/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
22	#+end_src
23
24	This will allow you to easily install and manage applications and other
25	software easily through the =brew= command.
26
27	** Terminal
28	If you're serious about customizing your macOS system, I highly
29	recommend installing a terminal emulator that you like and if you're not
30	comfortable on the command line yet, start learning. A lot of
31	customization options require you to edit hidden files, which is easiest
32	in a terminal.
33
34	There are options like iTerm2, Kitty, Alacritty, Hyper, Warp, or the
35	built-in Terminal app.
36
37	I use [[https://iterm2.com/][iTerm2]], which can be installed with
38	Homebrew:
39
40	#+begin_src sh
41	brew install iterm2
42	#+end_src
43
44	#+caption: iTerm2
45	[[https://img.cleberg.net/blog/20240109-macos-customization/iterm2.png]]
46
47	To install color schemes, such as the Dracula scheme shown in the
48	screenshot above, you visit [[https://iterm2colorschemes.com/][iTerm
49	Themes]] and follow their installation instructions to install any of
50	the themes.
51
52	* Desktop
53	** Window Management
54	[[https://github.com/koekeishiya/yabai][yabai]] is a tiling window
55	manager for macOS. While other window managers exist, I found that most
56	of them struggled to create logical layouts and to allow me to easily
57	move windows around the screen.
58
59	Some advanced settings for yabai are only available if partially disable
60	System Integrity Protection (SIP). However, I chose not to do this and
61	it hasn't affected my basic usage of yabai at all.
62
63	Refer to the
64	[[https://github.com/koekeishiya/yabai/wiki/Installing-yabai-(latest-release)][yabai
65	wiki]] for installation instructions. You will need to ensure that yabai
66	is allowed to access the accessibility and screen recording APIs.
67
68	You can see a basic three-pane layout atuomatically configured by yabai
69	for me as I opened the windows below.
70
71	#+caption: yabai window manager
72	[[https://img.cleberg.net/blog/20240109-macos-customization/yabai.png]]
73
74	** Keyboard Shortcuts
75	[[https://github.com/koekeishiya/skhd][skhd]] is a simple hotkey daemon
76	that allows you to define hotkeys in a file for usage on your system.
77
78	Installation is simple:
79
80	#+begin_src sh
81	brew install koekeishiya/formulae/skhd
82	skhd --start-service
83	#+end_src
84
85	After installation, be sure to allow =skhd= access to the accessibility
86	API in the macOS privacy settings.
87
88	You can configure your hotkeys in the =~/.config/skhd/skhdrc= file:
89
90	#+begin_src sh
91	nano ~/.config/skhd/skhdrc
92	#+end_src
93
94	For example, I have hotkeys to open my browser and terminal:
95
96	#+begin_src conf
97	# Terminal
98	cmd - return : /Applications/iTerm.app/Contents/MacOS/iTerm2
99
100	# Browser
101	cmd + shift - return : /Applications/LibreWolf.app/Contents/MacOS/librewolf
102	#+end_src
103
104	** Widgets
105	[[https://github.com/felixhageloh/uebersicht/][uebersicht]] is a handy
106	desktop-based widget tool with a plethora of community-made widgets
107	available in the [[https://tracesof.net/uebersicht-widgets/][widgets
108	gallery]]. You can also write your own widgets with this tool.
109
110	To install, simply download the latest release from the
111	[[https://tracesof.net/uebersicht/][uebersicht website]] and copy it to
112	the Applications folder.
113
114	See below for an example of the
115	[[https://tracesof.net/uebersicht-widgets/#Mond][Mond]] widget in
116	action.
117
118	#+caption: uebersicht desktop widgets
119	[[https://img.cleberg.net/blog/20240109-macos-customization/uebersicht.png]]
120
121	** Status Bar
122	[[https://github.com/FelixKratz/SketchyBar][SketchyBar]] is a
123	customizable replacement for the macOS status or menu bar.
124
125	You can browse a discussion where various users shared their
126	[[https://github.com/FelixKratz/SketchyBar/discussions/47?sort=top][configurations]]
127	for inspiration or to copy their dotfiles.
128
129	See below for a quick (& slightly broken) copy of
130	[[https://github.com/zer0yu/dotfiles][zer0yu's]] SketchyBar
131	configuration.
132
133	#+caption: SketchyBar
134	[[https://img.cleberg.net/blog/20240109-macos-customization/sketchybar.png]]
135
136	** Dock
137	The easiest way to customize the dock is to install
138	[[https://ubarapp.com/][uBar]], which uses a Windows-like menu bar as
139	the default style.
140
141	However, the built-in macOS dock cannot be disabled and can only be set
142	to "always hidden". This can be annoying as it will pop out any time
143	your mouse cursor passes closely to the dock edge of the screen. Because
144	of this, I simply use the built-in dock instead of customizing it with
145	third-party software.
146
147	Regardless, see below for the default installation style of uBar.
148
149	#+caption: uBar
150	[[https://img.cleberg.net/blog/20240109-macos-customization/ubar.png]]
151
152	** Application Icons
153	You can also customize the icon of any application in macOS, which will
154	show up in Finder, the Dock, Launchpad, search results, etc. I recommend
155	using [[https://macosicons.com/][macOSicons]] to download icons you
156	want, and then apply them by following this process.
157
158	1. Open the Finder application.
159	2. Navigate to the =Applications= folder.
160	3. Right-click an application of your choice, and select =Get Info=.
161	4. Drag the image you downloaded on top of the application's icon at the
162	top of information window (you will see a green "plus" symbol when
163	you're hovering over it).
164	5. Release the new icon on top of the old icon and it will update!
165
166	You can see an example of me dragging a new =signal.icns= file onto my
167	Signal.app information window to update it below:
168
169	#+caption: replace macOS icons
170	[[https://img.cleberg.net/blog/20240109-macos-customization/replace_icon.png]]

content/blog/2024-01-13-local-llm.md added +111

@@ -0,0 +1,111 @@
	1	+++
	2	date = 2024-01-13
	3	title = "Running Local LLMs on macOS and iOS"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# Requirements
	9
	10	I\'ve recently started playing with large language models (LLMs), mostly
	11	in the popular chatbot form, as part of my job and have decided to see
	12	if there\'s a consistent and reliable way to interact with these models
	13	on Apple devices without sacrificing privacy or requiring in-depth
	14	technical setup.
	15
	16	My requirements for this test:
	17
	18	- Open source platform
	19	- On-device model files
	20	- Minimal required configuration
	21	- Preferably pre-built, but a simple build process is acceptable
	22
	23	I tested a handful of apps and have summarized my favorite (so far) for
	24	macOS and iOS below.
	25
	26	> TL;DR - Here are the two that met my requirements and I have found the
	27	> easiest to install and use so far:
	28
	29	- macOS: [Ollama](https://ollama.ai/)
	30	- iOS : [LLM Farm](https://llmfarm.site/)
	31
	32	# macOS
	33
	34	[Ollama](https://ollama.ai/) is a simple Go application for macOS and
	35	Linux that can run various LLMs locally.
	36
	37	For macOS, you can download the pplication on the [Ollama download
	38	page](https://ollama.ai/download/mac) and install it by unzipping the
	39	`Ollama.app` file and moving it to the
	40	`Applications` folder.
	41
	42	If you prefer the command line, you can run these commands after the
	43	download finished:
	44
	45	```sh
	46	cd ~/Downloads && \
	47	unzip Ollama-darwin.zip && \
	48	mv ~/Downloads/Ollama.app /Applications/
	49	```
	50
	51	After running the app, the app will ask you to open a terminal and run
	52	the default `llama2` model, which will open an interactive
	53	chat session in the terminal. You can startfully using the application
	54	at this point.
	55
	56	![Ollama](https://img.cleberg.net/blog/20240113-local-llm/ollama.png)
	57
	58	If you don\'t want to use the default `llama2` model, you can
	59	download and run additional models found on the
	60	[Models](https://ollama.ai/library) page.
	61
	62	To see the information for the currently-used model, you can run the
	63	`/show info` command in the chat.
	64
	65	![Model
	66	Info](https://img.cleberg.net/blog/20240113-local-llm/ollama_info.png)
	67
	68	## Community Integrations
	69
	70	I highly recommend browsing the [Community
	71	Integrations](https://github.com/jmorganca/ollama#community-integrations)
	72	section of the project to see how you would prefer to extend Ollama
	73	beyond a simple command-line interface. There are options for APIs,
	74	browser UIs, advanced terminal configurations, and more.
	75
	76	![Ollama
	77	SwiftUI](https://img.cleberg.net/blog/20240113-local-llm/ollama-swiftui.png)
	78
	79	# iOS
	80
	81	While there are a handful of decent macOS options, it was quite
	82	difficult to find an iOS app that offered an open source platform
	83	without an extensive configuration and building process. I found LLM
	84	Farm to be decent enough in quality to sit at the top of my list -
	85	however, it\'s definitely not user friendly enough for me to consider
	86	using it on a daily basis.
	87
	88	[LLM Farm](https://llmfarm.site/) is available on TestFlight, so
	89	there\'s no manual build process required. However, you can view the
	90	[LLMFarm repository](https://github.com/guinmoon/LLMFarm) if you wish.
	91
	92	The caveat is that you will have to manually download the model files
	93	from the links in the
	94	[models.md](https://github.com/guinmoon/LLMFarm/blob/main/models.md)
	95	file to your iPhone to use the app - there\'s currently no option in the
	96	app to reach out and grab the latest version of any supported model.
	97
	98	Once you have a file downloaded, you simply create a new chat and select
	99	the downloaded model file and ensure the inference matches the
	100	requirement in the `models.md` file.
	101
	102	See below for a test of the ORCA Mini v3 model:
	103
	104	Chat List Chat
	105	------------------------------------------------------------------------- -------------------------------------------------------------------
	106	![](https://img.cleberg.net/blog/20240113-local-llm/llm_farm_chats.png) ![](https://img.cleberg.net/blog/20240113-local-llm/llm_farm.png)
	107
	108	[Enchanted](https://github.com/AugustDev/enchanted) is also an iOS for
	109	private AI models, but it requires a public-facing Ollama API, which did
	110	not meet my \"on device requirement.\" Nonetheless, it\'s an interesting
	111	looking app and I will likely set it up to test soon.

content/blog/2024-01-13-local-llm.org deleted −108

	@@ -1,108 +0,0 @@
1	#+title: Running Local LLMs on macOS and iOS
2	#+date: 2024-01-13
3	#+description: Finding some useful applications for running local LLMs on macOS and iOS.
4	#+filetags: :apple:
5
6	* Requirements
7	I've recently started playing with large language models (LLMs), mostly
8	in the popular chatbot form, as part of my job and have decided to see
9	if there's a consistent and reliable way to interact with these models
10	on Apple devices without sacrificing privacy or requiring in-depth
11	technical setup.
12
13	My requirements for this test:
14
15	- Open source platform
16	- On-device model files
17	- Minimal required configuration
18	- Preferably pre-built, but a simple build process is acceptable
19
20	I tested a handful of apps and have summarized my favorite (so far) for
21	macOS and iOS below.
22
23	#+begin_quote
24	TL;DR - Here are the two that met my requirements and I have found the
25	easiest to install and use so far:
26
27	#+end_quote
28
29	- macOS: [[https://ollama.ai/][Ollama]]
30	- iOS : [[https://llmfarm.site/][LLM Farm]]
31
32	* macOS
33	[[https://ollama.ai/][Ollama]] is a simple Go application for macOS and
34	Linux that can run various LLMs locally.
35
36	For macOS, you can download the pplication on the
37	[[https://ollama.ai/download/mac][Ollama download page]] and install it
38	by unzipping the =Ollama.app= file and moving it to the =Applications=
39	folder.
40
41	If you prefer the command line, you can run these commands after the
42	download finished:
43
44	#+begin_src sh
45	cd ~/Downloads && \
46	unzip Ollama-darwin.zip && \
47	mv ~/Downloads/Ollama.app /Applications/
48	#+end_src
49
50	After running the app, the app will ask you to open a terminal and run
51	the default =llama2= model, which will open an interactive chat session
52	in the terminal. You can startfully using the application at this point.
53
54	#+caption: Ollama
55	[[https://img.cleberg.net/blog/20240113-local-llm/ollama.png]]
56
57	If you don't want to use the default =llama2= model, you can download
58	and run additional models found on the
59	[[https://ollama.ai/library][Models]] page.
60
61	To see the information for the currently-used model, you can run the
62	=/show info= command in the chat.
63
64	#+caption: Model Info
65	[[https://img.cleberg.net/blog/20240113-local-llm/ollama_info.png]]
66
67	** Community Integrations
68	I highly recommend browsing the
69	[[https://github.com/jmorganca/ollama#community-integrations][Community
70	Integrations]] section of the project to see how you would prefer to
71	extend Ollama beyond a simple command-line interface. There are options
72	for APIs, browser UIs, advanced terminal configurations, and more.
73
74	#+caption: Ollama SwiftUI
75	[[https://img.cleberg.net/blog/20240113-local-llm/ollama-swiftui.png]]
76
77	* iOS
78	While there are a handful of decent macOS options, it was quite
79	difficult to find an iOS app that offered an open source platform
80	without an extensive configuration and building process. I found LLM
81	Farm to be decent enough in quality to sit at the top of my list -
82	however, it's definitely not user friendly enough for me to consider
83	using it on a daily basis.
84
85	[[https://llmfarm.site/][LLM Farm]] is available on TestFlight, so
86	there's no manual build process required. However, you can view the
87	[[https://github.com/guinmoon/LLMFarm][LLMFarm repository]] if you wish.
88
89	The caveat is that you will have to manually download the model files
90	from the links in the
91	[[https://github.com/guinmoon/LLMFarm/blob/main/models.md][models.md]]
92	file to your iPhone to use the app - there's currently no option in the
93	app to reach out and grab the latest version of any supported model.
94
95	Once you have a file downloaded, you simply create a new chat and select
96	the downloaded model file and ensure the inference matches the
97	requirement in the =models.md= file.
98
99	See below for a test of the ORCA Mini v3 model:
100
101	\| Chat List \| Chat \|
102	\|------------------------------------------------------------------------+------------------------------------------------------------------\|
103	\| [[https://img.cleberg.net/blog/20240113-local-llm/llm_farm_chats.png]] \| [[https://img.cleberg.net/blog/20240113-local-llm/llm_farm.png]] \|
104
105	[[https://github.com/AugustDev/enchanted][Enchanted]] is also an iOS for
106	private AI models, but it requires a public-facing Ollama API, which did
107	not meet my "on device requirement." Nonetheless, it's an interesting
108	looking app and I will likely set it up to test soon.

content/blog/2024-01-26-audit-dashboard.md added +188

@@ -0,0 +1,188 @@
	1	+++
	2	date = 2024-01-26
	3	title = "Building an Audit Status Dashboard"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	Alteryx and Power BI are powerful tools that can help turn your
	9	old-school audit trackers into interactive tools that provide useful
	10	insights and potential action plans.
	11
	12	With these tools, we are going to build the following dashboard:
	13
	14	![](https://img.cleberg.net/blog/20240126-audit-dashboard/dashboard_01.png)
	15	![](https://img.cleberg.net/blog/20240126-audit-dashboard/dashboard_02.png)
	16
	17	# Requirements
	18
	19	This project assumes the following:
	20
	21	- You have access to Alteryx Designer and Power BI Desktop.
	22	- If you only have Power BI Desktop, you may need to perform some
	23	analysis in Power BI instead of Alteryx.
	24	- Your data is in a format that can be imported into Alteryx and/or
	25	Power BI.
	26	- You have a basic understanding of data types and visualization.
	27
	28	# Alteryx: Data Preparation & Analysis
	29
	30	## Import Data
	31
	32	With Alteryx, importing data is easy with the use of the
	33	`Input Data` tool. Simply drag this tool onto the canvas from
	34	the `In/Out` tab in the Ribbon to create it as a node.
	35
	36	You can choose the File Format manually or simply connect to your
	37	file/database and let Alteryx determine the format for you. For this
	38	example, we will be importing an Excel file and changing the
	39	`Start Data Import on Line` variable to `2`.
	40
	41	![Alteryx Excel
	42	Import](https://img.cleberg.net/blog/20240126-audit-dashboard/alteryx_import.png)
	43
	44	## Transform Data
	45
	46	Next, let\'s replace null data and remove whitespace to clean up our
	47	data. We can do this with the `Data Cleansing` tool in the
	48	`Preparation` tab in the Ribbon.
	49
	50	Ensure that the following options are enabled:
	51
	52	- Replace Nulls
	53	- Replace with Blanks (String Fields)
	54	- Replace with 0 (Numeric Fields)
	55	- Remove Unwanted Characters
	56	- Leading and Trailing Whitespace
	57
	58	![Data
	59	Cleansing](https://img.cleberg.net/blog/20240126-audit-dashboard/alteryx_cleansing.png)
	60
	61	For our next step, we will transform the date fields from strings to
	62	datetime format. Add a `Datetime` tool for each field you
	63	want to transform - in the example below, I am using the tool twice for
	64	the \"Started On\" and \"Submitted On\" fields.
	65
	66	![Data
	67	Transformation](https://img.cleberg.net/blog/20240126-audit-dashboard/alteryx_transformation.png)
	68
	69	Now that the dates are in the correct format, let\'s perform a
	70	calculation based on those fields. Start by adding a `Filter`
	71	tool, naming a new Output Column, and pasting the formula below into it
	72	(the two fields used in this formula must match the output of the
	73	`Datetime` tools above):
	74
	75	``` txt
	76	DateTimeDiff([SubmittedOn_Out],[StartedOn_Out], "days")
	77	```
	78
	79	![Data
	80	Analysis](https://img.cleberg.net/blog/20240126-audit-dashboard/alteryx_analysis.png)
	81
	82	## Export Data
	83
	84	Finalize the process by exporting the transformed data set to a new
	85	file, for use in the following visualization step.
	86
	87	![Data
	88	Export](https://img.cleberg.net/blog/20240126-audit-dashboard/alteryx_export.png)
	89
	90	# Power BI: Data Visualization
	91
	92	## Import Data
	93
	94	To start, open the Power BI Desktop application. Upon first use, Power
	95	BI will ask if you want to open an existing dashboard or import new
	96	data.
	97
	98	As we are creating our first dashboard, let\'s import our data. In my
	99	example below, I\'m importing data from the \"Tracker\" sheet of the
	100	Excel file I\'m using for this project.
	101
	102	During this process, I also imported the export from the Alteryx
	103	workflow above. Therefore, we have two different files available for use
	104	in our dashboard.
	105
	106	![Excel
	107	Tracker](https://img.cleberg.net/blog/20240126-audit-dashboard/excel_tracker.png)
	108
	109	![Power BI Excel
	110	Import](https://img.cleberg.net/blog/20240126-audit-dashboard/powerbi_import.png)
	111
	112	## Add Visuals
	113
	114	To create the dashboard below, you will need to follow the list
	115	instructions below and format as needed:
	116
	117	![](https://img.cleberg.net/blog/20240126-audit-dashboard/dashboard_01.png)
	118	![](https://img.cleberg.net/blog/20240126-audit-dashboard/dashboard_02.png)
	119
	120	Instructions to create the visuals above:
	121
	122	- `Text Box`: Explain the name and purpose of the
	123	dashboard. You can also add images and logos at the top of the
	124	dashboard.
	125	- `Donut Chart`: Overall status of the project.
	126	- `Legend`: Status
	127	- `Values`: Count of Status
	128	- `Stacked Column Chart`: Task count by assignee.
	129	- `X-axis`: Preparer
	130	- `Y-axis`: Count of Control ID
	131	- `Legend`: Status
	132	- `Treemap`: Top N client submitters by average days to
	133	submit.
	134	- `Details`: Preparer
	135	- `Values`: Sum of Avg~DaysToSubmit~
	136	- `Line Chart`: Projected vs. actual hours over time.
	137	- `Clustered Bar Chart`: Projected vs. actual hours per
	138	person.
	139	- `Slicer & Table` - Upcoming due dates.
	140	- `Slicer`:
	141	- `Values`: Date Due
	142	- `Table`:
	143	- `Columns`: Count of Control ID, Date Due,
	144	Preparer, Status
	145
	146	## Format the Dashboard
	147
	148	You can choose a theme in the View tab of the Ribbon. You can even
	149	browse for custom JSON files that define themes, such as ones found
	150	online or custom ones created by your organization.
	151
	152	For each visual, you can click the `Format` button in the
	153	`Visualizations` side pane and explore the options. You can
	154	custom options such as:
	155
	156	- Visual
	157	- Legend
	158	- Colors
	159	- Data labels
	160	- Category labels
	161	- General
	162	- Properties
	163	- Title
	164	- Effects
	165	- Header icons
	166	- Tooltips
	167	- Alt text
	168
	169	You can always look online for inspiration when trying to decide how
	170	best to organize and style your dashboard.
	171
	172	# Sharing the Results
	173
	174	Generally, you have a few different options for sharing your dashboards
	175	with others:
	176
	177	1. Export the dashboard as a PDF in the file menu of Power BI. This
	178	will export all tabs and visuals as they are set when the export
	179	button is pressed. You will lose all interactivity with this option.
	180	2. Send the full Power BI file to those you wish to share the
	181	dashboard. This will retain all settings and interactivity. However,
	182	you will also need to send the source files if they need to refresh
	183	the dashboard and you will need to re-send the files if you make
	184	updates.
	185	3. Store the dashboard in a synced location, such as a shared drive or
	186	Microsoft Teams. Depending on how a user configures their local
	187	Windows paths, the data source paths may not be compatible for all
	188	users with such a setup.

content/blog/2024-01-26-audit-dashboard.org deleted −171

	@@ -1,171 +0,0 @@
1	#+title: Building an Audit Status Dashboard
2	#+date: 2024-01-26
3	#+description: Learn how to utilize Alteryx Designer and Power BI Desktop to build a simple status tracking dashboard for an audit or other engagement.
4	#+filetags: :audit:
5
6	Alteryx and Power BI are powerful tools that can help turn your
7	old-school audit trackers into interactive tools that provide useful
8	insights and potential action plans.
9
10	With these tools, we are going to build the following dashboard:
11
12	[[https://img.cleberg.net/blog/20240126-audit-dashboard/dashboard_01.png]]
13	[[https://img.cleberg.net/blog/20240126-audit-dashboard/dashboard_02.png]]
14
15	* Requirements
16	This project assumes the following:
17
18	- You have access to Alteryx Designer and Power BI Desktop.
19	- If you only have Power BI Desktop, you may need to perform some
20	analysis in Power BI instead of Alteryx.
21	- Your data is in a format that can be imported into Alteryx and/or
22	Power BI.
23	- You have a basic understanding of data types and visualization.
24
25	* Alteryx: Data Preparation & Analysis
26	** Import Data
27	With Alteryx, importing data is easy with the use of the =Input Data=
28	tool. Simply drag this tool onto the canvas from the =In/Out= tab in the
29	Ribbon to create it as a node.
30
31	You can choose the File Format manually or simply connect to your
32	file/database and let Alteryx determine the format for you. For this
33	example, we will be importing an Excel file and changing the
34	=Start Data Import on Line= variable to =2=.
35
36	#+caption: Alteryx Excel Import
37	[[https://img.cleberg.net/blog/20240126-audit-dashboard/alteryx_import.png]]
38
39	** Transform Data
40	Next, let's replace null data and remove whitespace to clean up our
41	data. We can do this with the =Data Cleansing= tool in the =Preparation=
42	tab in the Ribbon.
43
44	Ensure that the following options are enabled:
45
46	- Replace Nulls
47	- Replace with Blanks (String Fields)
48	- Replace with 0 (Numeric Fields)
49	- Remove Unwanted Characters
50	- Leading and Trailing Whitespace
51
52	#+caption: Data Cleansing
53	[[https://img.cleberg.net/blog/20240126-audit-dashboard/alteryx_cleansing.png]]
54
55	For our next step, we will transform the date fields from strings to
56	datetime format. Add a =Datetime= tool for each field you want to
57	transform - in the example below, I am using the tool twice for the
58	"Started On" and "Submitted On" fields.
59
60	#+caption: Data Transformation
61	[[https://img.cleberg.net/blog/20240126-audit-dashboard/alteryx_transformation.png]]
62
63	Now that the dates are in the correct format, let's perform a
64	calculation based on those fields. Start by adding a =Filter= tool,
65	naming a new Output Column, and pasting the formula below into it (the
66	two fields used in this formula must match the output of the =Datetime=
67	tools above):
68
69	#+begin_src txt
70	DateTimeDiff([SubmittedOn_Out],[StartedOn_Out], "days")
71	#+end_src
72
73	#+caption: Data Analysis
74	[[https://img.cleberg.net/blog/20240126-audit-dashboard/alteryx_analysis.png]]
75
76	** Export Data
77	Finalize the process by exporting the transformed data set to a new
78	file, for use in the following visualization step.
79
80	#+caption: Data Export
81	[[https://img.cleberg.net/blog/20240126-audit-dashboard/alteryx_export.png]]
82
83	* Power BI: Data Visualization
84	** Import Data
85	To start, open the Power BI Desktop application. Upon first use, Power
86	BI will ask if you want to open an existing dashboard or import new
87	data.
88
89	As we are creating our first dashboard, let's import our data. In my
90	example below, I'm importing data from the "Tracker" sheet of the Excel
91	file I'm using for this project.
92
93	During this process, I also imported the export from the Alteryx
94	workflow above. Therefore, we have two different files available for use
95	in our dashboard.
96
97	#+caption: Excel Tracker
98	[[https://img.cleberg.net/blog/20240126-audit-dashboard/excel_tracker.png]]
99
100	#+caption: Power BI Excel Import
101	[[https://img.cleberg.net/blog/20240126-audit-dashboard/powerbi_import.png]]
102
103	** Add Visuals
104	To create the dashboard below, you will need to follow the list
105	instructions below and format as needed:
106
107	[[https://img.cleberg.net/blog/20240126-audit-dashboard/dashboard_01.png]]
108	[[https://img.cleberg.net/blog/20240126-audit-dashboard/dashboard_02.png]]
109
110	Instructions to create the visuals above:
111
112	- =Text Box=: Explain the name and purpose of the dashboard. You can
113	also add images and logos at the top of the dashboard.
114	- =Donut Chart=: Overall status of the project.
115	- =Legend=: Status
116	- =Values=: Count of Status
117	- =Stacked Column Chart=: Task count by assignee.
118	- =X-axis=: Preparer
119	- =Y-axis=: Count of Control ID
120	- =Legend=: Status
121	- =Treemap=: Top N client submitters by average days to submit.
122	- =Details=: Preparer
123	- =Values=: Sum of Avg_DaysToSubmit
124	- =Line Chart=: Projected vs. actual hours over time.
125	- =Clustered Bar Chart=: Projected vs. actual hours per person.
126	- =Slicer & Table= - Upcoming due dates.
127	- =Slicer=:
128	- =Values=: Date Due
129	- =Table=:
130	- =Columns=: Count of Control ID, Date Due, Preparer, Status
131
132	** Format the Dashboard
133	You can choose a theme in the View tab of the Ribbon. You can even
134	browse for custom JSON files that define themes, such as ones found
135	online or custom ones created by your organization.
136
137	For each visual, you can click the =Format= button in the
138	=Visualizations= side pane and explore the options. You can custom
139	options such as:
140
141	- Visual
142	- Legend
143	- Colors
144	- Data labels
145	- Category labels
146	- General
147	- Properties
148	- Title
149	- Effects
150	- Header icons
151	- Tooltips
152	- Alt text
153
154	You can always look online for inspiration when trying to decide how
155	best to organize and style your dashboard.
156
157	* Sharing the Results
158	Generally, you have a few different options for sharing your dashboards
159	with others:
160
161	1. Export the dashboard as a PDF in the file menu of Power BI. This will
162	export all tabs and visuals as they are set when the export button is
163	pressed. You will lose all interactivity with this option.
164	2. Send the full Power BI file to those you wish to share the dashboard.
165	This will retain all settings and interactivity. However, you will
166	also need to send the source files if they need to refresh the
167	dashboard and you will need to re-send the files if you make updates.
168	3. Store the dashboard in a synced location, such as a shared drive or
169	Microsoft Teams. Depending on how a user configures their local
170	Windows paths, the data source paths may not be compatible for all
171	users with such a setup.

content/blog/2024-01-27-tableau-dashboard.md added +166

@@ -0,0 +1,166 @@
	1	+++
	2	date = 2024-01-27
	3	title = "Data Visualization: Mapping Omaha Crime Data with Tableau"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	In this project, I am going to show you how to use Tableau Public for
	9	free to create simple dashboards.
	10
	11	I will be creating simple visuals from an Omaha crime data set and
	12	combining them to create the dashboard below. You can view this
	13	dashboard interactively online here: [Omaha Crime Data (2015 -
	14	2023)](https://public.tableau.com/app/profile/c.c7042/viz/OmahaCrimeData2015-2023/OmahaCrimeData2015-2023#1).
	15
	16	![Tableau
	17	Dashboard](https://img.cleberg.net/blog/20240127-tableau-dashboard/dashboard.png)
	18
	19	# Gather the Data
	20
	21	You can download incident data from the Omaha Police Department on their
	22	[Incident Data
	23	Download](https://police.cityofomaha.org/crime-information/incident-data-download)
	24	page. They currently have files for the years 2015 through 2023.
	25
	26	Each file will be downloaded as a CSV file, approximately 3 MB - 8 MB.
	27
	28	# Clean and Transform the Data
	29
	30	I have used Python to combine the files into a single CSV file, as well
	31	as adding a custom `datetime` column. You could do this step
	32	in any software you prefer, but I prefer Python as its free, easy to
	33	use, and has a plethora of support resources online.
	34
	35	Start by opening a terminal, navigating to your Downloads directory, and
	36	creating a python script.
	37
	38	```sh
	39	cd ~/Downloads
	40	nano data_processing.py
	41	```
	42
	43	Within the Python script, paste the following:
	44
	45	``` python
	46	# Import modules
	47	import pandas as pd
	48	import glob
	49	import os
	50
	51	# Import the data
	52	path = r"~/Downloads/*.csv"
	53	files = glob.glob(path)
	54
	55	list = []
	56
	57	for file in files:
	58	df_tmp = pd.read_csv(file)
	59	li.append(df_tmp)
	60
	61	df = pd.concat(list, axis=0, ignore_index=True)
	62
	63	# Create a combined datetime column
	64	df["datetime"] = pd.to_datetime(
	65	df["date"] + " " + df["time"],
	66	format="%m/%d/%Y %H:%M:%S"
	67	)
	68	df.head()
	69
	70	# Export the combined data
	71	df.to_csv(r"~/Downloads/combined_incidents.csv")
	72	```
	73
	74	Once pasted, save and close the file. You can execute the file like so:
	75
	76	```sh
	77	python3 data_processing.py
	78	```
	79
	80	After this, you should have a combined data file that contains all
	81	incidents between 2015 and 2023. Mine was approximately 55 MB.
	82
	83	# Tableau Public
	84
	85	[Tableau Public](https://public.tableau.com/) is a free-to-use web
	86	application that allows you to create visualizations by uploading data
	87	sources. Note that there\'s no way to keep the data and visualizations
	88	private, so don\'t upload anything private.
	89
	90	After creating an account, you can click the `Create` \>
	91	`Web Authoring` link to create your first visualization.
	92
	93	![Create
	94	Button](https://img.cleberg.net/blog/20240127-tableau-dashboard/create_button.png)
	95
	96	## Upload the Data
	97
	98	Once you\'ve opened your first project, Tableau will ask you to connect
	99	to your data. For this project, click the
	100	`Upload from computer` button and select the CSV file
	101	previously combined in the step above.
	102
	103	![Connect
	104	Data](https://img.cleberg.net/blog/20240127-tableau-dashboard/connect_data.png)
	105
	106	Once connected, you can refresh the preview of the data with the
	107	`Refresh Data Source` button in the toolbar.
	108
	109	![Data
	110	Preview](https://img.cleberg.net/blog/20240127-tableau-dashboard/data_preview.png)
	111
	112	If you need to edit any of the data types, column names, etc., you can
	113	do so now. Once complete, generate an extract so that you can start
	114	creating visualizations.
	115
	116	## Create Visualizations
	117
	118	To start, create a worksheet in the toolbar at the bottom of the screen.
	119
	120	Within this screen, select a column from the `Data` side bar
	121	on the left and drag it into the `Columns` or
	122	`Rows` area of the canvas.
	123
	124	See below for the map visualization. You can recreate this by adding the
	125	following fields:
	126
	127	- `Columns`: Lon
	128	- `Rows`: Lat
	129	- `Marks`:
	130	- Description
	131	- Datetime
	132	- `Filters`: Datetime
	133
	134	![Worksheet
	135	Editing](https://img.cleberg.net/blog/20240127-tableau-dashboard/worksheet_edit.png)
	136
	137	You can repeat this process for each visualization you want to create.
	138	Explore your options by dragging data fields to different areas and by
	139	opening the field options to explore what operations can be performed on
	140	different data types (e.g., average, count, etc.).
	141
	142	## Create Dashboard
	143
	144	To create a dashboard, click the button on the toolbar at the bottom of
	145	the screen. Within the dashboard, drag each sheet from the left side bar
	146	onto the dashboard canvas.
	147
	148	![Dashboard
	149	Editing](https://img.cleberg.net/blog/20240127-tableau-dashboard/dashboard_edit.png)
	150
	151	## Formatting
	152
	153	You can explore a ton of different formatting options throughout the
	154	worksheets and dashboard. Specifically for maps, you can alter the map
	155	layers, background, and visible features through the `Map`
	156	menu in the top file menu of the editing screen.
	157
	158	In the finished dashboard below, I opted for a dark mode with a map that
	159	showed county lines and city names.
	160
	161	There\'s a ton of other options available to be used in a dashboard like
	162	this, but this project shows a quick preview of what you can do in
	163	Tableau Public.
	164
	165	![Tableau
	166	Dashboard](https://img.cleberg.net/blog/20240127-tableau-dashboard/dashboard.png)

content/blog/2024-01-27-tableau-dashboard.org deleted −156

	@@ -1,156 +0,0 @@
1	#+title: Data Visualization: Mapping Omaha Crime Data with Tableau
2	#+date: 2024-01-27
3	#+description: Learn how to utilize Tableau Public to build a dashboard to map crimes across Omaha.
4	#+filetags: :data:
5
6	In this project, I am going to show you how to use Tableau Public for
7	free to create simple dashboards.
8
9	I will be creating simple visuals from an Omaha crime data set and
10	combining them to create the dashboard below. You can view this
11	dashboard interactively online here:
12	[[https://public.tableau.com/app/profile/c.c7042/viz/OmahaCrimeData2015-2023/OmahaCrimeData2015-2023#1][Omaha
13	Crime Data (2015 - 2023)]].
14
15	#+caption: Tableau Dashboard
16	[[https://img.cleberg.net/blog/20240127-tableau-dashboard/dashboard.png]]
17
18	* Gather the Data
19	You can download incident data from the Omaha Police Department on their
20	[[https://police.cityofomaha.org/crime-information/incident-data-download][Incident
21	Data Download]] page. They currently have files for the years 2015
22	through 2023.
23
24	Each file will be downloaded as a CSV file, approximately 3 MB - 8 MB.
25
26	* Clean and Transform the Data
27	I have used Python to combine the files into a single CSV file, as well
28	as adding a custom =datetime= column. You could do this step in any
29	software you prefer, but I prefer Python as its free, easy to use, and
30	has a plethora of support resources online.
31
32	Start by opening a terminal, navigating to your Downloads directory, and
33	creating a python script.
34
35	#+begin_src sh
36	cd ~/Downloads
37	nano data_processing.py
38	#+end_src
39
40	Within the Python script, paste the following:
41
42	#+begin_src python
43	# Import modules
44	import pandas as pd
45	import glob
46	import os
47
48	# Import the data
49	path = r"~/Downloads/*.csv"
50	files = glob.glob(path)
51
52	list = []
53
54	for file in files:
55	df_tmp = pd.read_csv(file)
56	li.append(df_tmp)
57
58	df = pd.concat(list, axis=0, ignore_index=True)
59
60	# Create a combined datetime column
61	df["datetime"] = pd.to_datetime(
62	df["date"] + " " + df["time"],
63	format="%m/%d/%Y %H:%M:%S"
64	)
65	df.head()
66
67	# Export the combined data
68	df.to_csv(r"~/Downloads/combined_incidents.csv")
69	#+end_src
70
71	Once pasted, save and close the file. You can execute the file like so:
72
73	#+begin_src sh
74	python3 data_processing.py
75	#+end_src
76
77	After this, you should have a combined data file that contains all
78	incidents between 2015 and 2023. Mine was approximately 55 MB.
79
80	* Tableau Public
81	[[https://public.tableau.com/][Tableau Public]] is a free-to-use web
82	application that allows you to create visualizations by uploading data
83	sources. Note that there's no way to keep the data and visualizations
84	private, so don't upload anything private.
85
86	After creating an account, you can click the =Create= > =Web Authoring=
87	link to create your first visualization.
88
89	#+caption: Create Button
90	[[https://img.cleberg.net/blog/20240127-tableau-dashboard/create_button.png]]
91
92	** Upload the Data
93	Once you've opened your first project, Tableau will ask you to connect
94	to your data. For this project, click the =Upload from computer= button
95	and select the CSV file previously combined in the step above.
96
97	#+caption: Connect Data
98	[[https://img.cleberg.net/blog/20240127-tableau-dashboard/connect_data.png]]
99
100	Once connected, you can refresh the preview of the data with the
101	=Refresh Data Source= button in the toolbar.
102
103	#+caption: Data Preview
104	[[https://img.cleberg.net/blog/20240127-tableau-dashboard/data_preview.png]]
105
106	If you need to edit any of the data types, column names, etc., you can
107	do so now. Once complete, generate an extract so that you can start
108	creating visualizations.
109
110	** Create Visualizations
111	To start, create a worksheet in the toolbar at the bottom of the screen.
112
113	Within this screen, select a column from the =Data= side bar on the left
114	and drag it into the =Columns= or =Rows= area of the canvas.
115
116	See below for the map visualization. You can recreate this by adding the
117	following fields:
118
119	- =Columns=: Lon
120	- =Rows=: Lat
121	- =Marks=:
122	- Description
123	- Datetime
124	- =Filters=: Datetime
125
126	#+caption: Worksheet Editing
127	[[https://img.cleberg.net/blog/20240127-tableau-dashboard/worksheet_edit.png]]
128
129	You can repeat this process for each visualization you want to create.
130	Explore your options by dragging data fields to different areas and by
131	opening the field options to explore what operations can be performed on
132	different data types (e.g., average, count, etc.).
133
134	** Create Dashboard
135	To create a dashboard, click the button on the toolbar at the bottom of
136	the screen. Within the dashboard, drag each sheet from the left side bar
137	onto the dashboard canvas.
138
139	#+caption: Dashboard Editing
140	[[https://img.cleberg.net/blog/20240127-tableau-dashboard/dashboard_edit.png]]
141
142	** Formatting
143	You can explore a ton of different formatting options throughout the
144	worksheets and dashboard. Specifically for maps, you can alter the map
145	layers, background, and visible features through the =Map= menu in the
146	top file menu of the editing screen.
147
148	In the finished dashboard below, I opted for a dark mode with a map that
149	showed county lines and city names.
150
151	There's a ton of other options available to be used in a dashboard like
152	this, but this project shows a quick preview of what you can do in
153	Tableau Public.
154
155	#+caption: Tableau Dashboard
156	[[https://img.cleberg.net/blog/20240127-tableau-dashboard/dashboard.png]]

content/blog/2024-02-06-zfs.org → content/blog/2024-02-06-zfs.md renamed +129 −116

	@@ -1,7 +1,9 @@
1	#+title: How to Create a ZFS Pool on Ubuntu Linux	1	+++
2	#+date: 2024-02-06	2	date = 2024-02-06
3	#+description: Learn how to create a simple ZFS pool on Ubuntu Linux.	3	title = "How to Create a ZFS Pool on Ubuntu Linux"
4	#+filetags: :linux:	4	description = ""
		5	draft = false
		6	+++
5		7
6	This post details the process I used to create ZFS pools, datasets, and	8	This post details the process I used to create ZFS pools, datasets, and
7	snapshots on Ubuntu Server.	9	snapshots on Ubuntu Server.
	@@ -9,59 +11,62 @@ snapshots on Ubuntu Server.
9	I found the following pages very helpful while going through this	11	I found the following pages very helpful while going through this
10	process:	12	process:
11		13
12	- [[https://ubuntu.com/tutorials/setup-zfs-storage-pool][Setup a ZFS	14	- [Setup a ZFS storage
13	storage pool]]	15	pool](https://ubuntu.com/tutorials/setup-zfs-storage-pool)
14	- [[https://wiki.ubuntu.com/Kernel/Reference/ZFS][Kernel/Reference/ZFS]]	16	- [Kernel/Reference/ZFS](https://wiki.ubuntu.com/Kernel/Reference/ZFS)
15	- [[https://blog.victormendonca.com/2020/11/03/zfs-for-dummies/][ZFS for	17	- [ZFS for
16	Dummies]]	18	Dummies](https://blog.victormendonca.com/2020/11/03/zfs-for-dummies/)
		19
		20	# Installation
17		21
18	* Installation
19	To start, I installed the ZFS package with the following command:	22	To start, I installed the ZFS package with the following command:
20		23
21	#+begin_src sh	24	```sh
22	sudo apt install zfsutils-linux	25	sudo apt install zfsutils-linux
23	#+end_src	26	```
24		27
25	Once installed, you can check the version to see if it installed	28	Once installed, you can check the version to see if it installed
26	correctly.	29	correctly.
27		30
28	#+begin_src sh	31	```sh
29	> zsf --version	32	> zsf --version
30		33
31	zfs-2.1.5-1ubuntu6~22.04.2	34	zfs-2.1.5-1ubuntu6~22.04.2
32	zfs-kmod-2.1.5-1ubuntu6~22.04.1	35	zfs-kmod-2.1.5-1ubuntu6~22.04.1
33	#+end_src	36	```
		37
		38	# ZFS Configuration
34		39
35	* ZFS Configuration
36	Now that ZFS is installed, we can create and configure the pool.	40	Now that ZFS is installed, we can create and configure the pool.
37		41
38	You have various options for configuring ZFS pools that all come	42	You have various options for configuring ZFS pools that all come
39	different pros and cons. I suggest visiting the links at the top of this	43	different pros and cons. I suggest visiting the links at the top of this
40	post or searching online for the best configuration for your use-case.	44	post or searching online for the best configuration for your use-case.
41		45
42	- Striped VDEVs (Raid0)	46	- Striped VDEVs (Raid0)
43	- Mirrored VDEVs (Raid1)	47	- Mirrored VDEVs (Raid1)
44	- Striped Mirrored VDEVs (Raid10)	48	- Striped Mirrored VDEVs (Raid10)
45	- RAIDz (Raid5)	49	- RAIDz (Raid5)
46	- RAIDz2 (Raidd6)	50	- RAIDz2 (Raidd6)
47	- RAIDz3	51	- RAIDz3
48	- Nested RAIDz (Raid50, Raid60)	52	- Nested RAIDz (Raid50, Raid60)
49		53
50	I will be using Raid10 in this guide. However, the majority of the steps	54	I will be using Raid10 in this guide. However, the majority of the steps
51	are the same regardless of your chosen pool configuration.	55	are the same regardless of your chosen pool configuration.
52		56
53	** Creating the Pool	57	## Creating the Pool
54	To start, let's list the disks available to use. You can use =fdisk=
55	command to see all available disks.
56		58
57	#+begin_src sh	59	To start, let\'s list the disks available to use. You can use
		60	`fdisk` command to see all available disks.
		61
		62	```sh
58	sudo fdisk -l	63	sudo fdisk -l
59	#+end_src	64	```
60		65
61	Or, if you currently have them mounted, you can use the =df= command to	66	Or, if you currently have them mounted, you can use the `df`
62	view your disks.	67	command to view your disks.
63		68
64	#+begin_src sh	69	```sh
65	> sudo df -h	70	> sudo df -h
66		71
67	Filesystem Size Used Avail Use% Mounted on	72	Filesystem Size Used Avail Use% Mounted on
	@@ -72,35 +77,35 @@ Filesystem Size Used Avail Use% Mounted on
72	/dev/sdd1 9.1T 8.7T 435G 96% /mnt/white-01	77	/dev/sdd1 9.1T 8.7T 435G 96% /mnt/white-01
73	/dev/sde1 7.3T 28K 6.9T 1% /mnt/red-03	78	/dev/sde1 7.3T 28K 6.9T 1% /mnt/red-03
74	/dev/sdf1 7.3T 28K 6.9T 1% /mnt/red-04	79	/dev/sdf1 7.3T 28K 6.9T 1% /mnt/red-04
75	#+end_src	80	```
76		81
77	If you're going to use mounted disks, make sure to umount them before	82	If you\'re going to use mounted disks, make sure to umount them before
78	creating the pool.	83	creating the pool.
79		84
80	#+begin_src sh	85	```sh
81	sudo umount /dev/sda1	86	sudo umount /dev/sda1
82	sudo umount /dev/sdb1	87	sudo umount /dev/sdb1
83	#+end_src	88	```
84		89
85	Now that I've identified the disks I want to use and have them	90	Now that I\'ve identified the disks I want to use and have them
86	unmounted, let's create the pool. For this example, I will call it	91	unmounted, let\'s create the pool. For this example, I will call it
87	=tank=.	92	`tank`.
88		93
89	#+begin_src sh	94	```sh
90	sudo zpool create -f -m /mnt/pool tank mirror /dev/sda /dev/sdb	95	sudo zpool create -f -m /mnt/pool tank mirror /dev/sda /dev/sdb
91	#+end_src	96	```
92		97
93	See below for the results of the new ZFS pool named =tank=, with a vdev	98	See below for the results of the new ZFS pool named `tank`,
94	automatically named =mirror-0=.	99	with a vdev automatically named `mirror-0`.
95		100
96	#+begin_src sh	101	```sh
97	> zfs list	102	> zfs list
98		103
99	NAME USED AVAIL REFER MOUNTPOINT	104	NAME USED AVAIL REFER MOUNTPOINT
100	tank 396K 7.14T 96K /tank	105	tank 396K 7.14T 96K /tank
101	#+end_src	106	```
102		107
103	#+begin_src sh	108	```sh
104	> zpool status	109	> zpool status
105		110
106	pool: tank	111	pool: tank
	@@ -114,35 +119,36 @@ config:
114	sdb ONLINE 0 0 0	119	sdb ONLINE 0 0 0
115		120
116	errors: No known data errors	121	errors: No known data errors
117	#+end_src	122	```
118		123
119	We can also look at the mounted filesystem to see where the pool is	124	We can also look at the mounted filesystem to see where the pool is
120	mounted and some quick stats.	125	mounted and some quick stats.
121		126
122	#+begin_src sh	127	```sh
123	> df -h	128	> df -h
124		129
125	Filesystem Size Used Avail Use% Mounted on	130	Filesystem Size Used Avail Use% Mounted on
126	...	131	...
127	tank 7.2T 128K 7.2T 1% /tank	132	tank 7.2T 128K 7.2T 1% /tank
128	#+end_src	133	```
		134
		135	## Expanding the Pool
129		136
130	** Expanding the Pool
131	If you want to expand this pool, you will need to add a new VDEV to the	137	If you want to expand this pool, you will need to add a new VDEV to the
132	pool. Since I am using 2 disks per VDEV, I will need to add a new 2-disk	138	pool. Since I am using 2 disks per VDEV, I will need to add a new 2-disk
133	VDEV to the existing =tank= pool.	139	VDEV to the existing `tank` pool.
134		140
135	#+begin_src sh	141	```sh
136	sudo zpool add tank mirror /dev/sdX /dev/sdY	142	sudo zpool add tank mirror /dev/sdX /dev/sdY
137	#+end_src	143	```
138		144
139	If you're adding disks of different sizes, you'll need to use the =-f=	145	If you\'re adding disks of different sizes, you\'ll need to use the
140	flag. Keep in mind that the max size will be limited to the smallest	146	`-f` flag. Keep in mind that the max size will be limited to
141	disk added.	147	the smallest disk added.
142		148
143	#+begin_src sh	149	```sh
144	sudo zpool add -f tank mirror /dev/sdX /dev/sdY	150	sudo zpool add -f tank mirror /dev/sdX /dev/sdY
145	#+end_src	151	```
146		152
147	I added two 8TB hard drives and this process took around 10 seconds to	153	I added two 8TB hard drives and this process took around 10 seconds to
148	complete.	154	complete.
	@@ -151,39 +157,42 @@ When viewing the pool again, you can see that the pool has now doubled
151	in size. We have 14.3 TB useable space and the same space used for	157	in size. We have 14.3 TB useable space and the same space used for
152	mirroring.	158	mirroring.
153		159
154	#+begin_src sh	160	```sh
155	> zfs list	161	> zfs list
156		162
157	NAME USED AVAIL REFER MOUNTPOINT	163	NAME USED AVAIL REFER MOUNTPOINT
158	tank 145G 14.3T 104K /tank	164	tank 145G 14.3T 104K /tank
159	tank/cloud 145G 14.3T 145G /tank/cloud	165	tank/cloud 145G 14.3T 145G /tank/cloud
160	tank/media 96K 14.3T 96K /tank/media	166	tank/media 96K 14.3T 96K /tank/media
161	#+end_src	167	```
		168
		169	### Converting Disks
162		170
163	*** Converting Disks
164	Some disks, such as NTFS-formatted drives, will need to be partitioned	171	Some disks, such as NTFS-formatted drives, will need to be partitioned
165	and formatted prior to being added to the pool.	172	and formatted prior to being added to the pool.
166		173
167	Start by identifying the disks you want to format and add to the pool.	174	Start by identifying the disks you want to format and add to the pool.
168		175
169	#+begin_src sh	176	```sh
170	sudo fdisk -l \| grep /dev	177	sudo fdisk -l \| grep /dev
171	#+end_src	178	```
172		179
173	I am going to format my =/dev/sdc= and =/dev/sdd= disks with the =fdisk=	180	I am going to format my `/dev/sdc` and `/dev/sdd`
174	command.	181	disks with the `fdisk` command.
175		182
176	See below for instructions on how to use =fdisk=. Here's what I did to	183	See below for instructions on how to use `fdisk`. Here\'s
177	create basic Linux formatted disks:	184	what I did to create basic Linux formatted disks:
178		185
179	- =g= : Create GPT partition table	186	- `g` : Create GPT partition table
180	- =n= : Create a new partition, hit Enter for all default options	187	- `n` : Create a new partition, hit Enter for all default
181	- =t= : Change partition type to =20= for =Linux filesystem=	188	options
182	- =w= : Write the changes to disk and exit	189	- `t` : Change partition type to `20` for
		190	`Linux filesystem`
		191	- `w` : Write the changes to disk and exit
183		192
184	I repeated this process for both disks.	193	I repeated this process for both disks.
185		194
186	#+begin_src sh	195	```sh
187	> sudo fdisk /dev/sdc	196	> sudo fdisk /dev/sdc
188		197
189	Welcome to fdisk (util-linux 2.37.2).	198	Welcome to fdisk (util-linux 2.37.2).
	@@ -229,96 +238,100 @@ Help:
229	G create a new empty SGI (IRIX) partition table	238	G create a new empty SGI (IRIX) partition table
230	o create a new empty DOS partition table	239	o create a new empty DOS partition table
231	s create a new empty Sun partition table	240	s create a new empty Sun partition table
232	#+end_src	241	```
233		242
234	Once the drives are formatted, we can add these disks to the pool.	243	Once the drives are formatted, we can add these disks to the pool.
235		244
236	#+begin_src sh	245	```sh
237	sudo zpool add tank mirror /dev/sdc /dev/sdd	246	sudo zpool add tank mirror /dev/sdc /dev/sdd
238	#+end_src	247	```
239		248
240	When we list the pool again, we can see that our size is now updated to	249	When we list the pool again, we can see that our size is now updated to
241	approximately 22TB. This represents my hard drives totalling 45.6TB when	250	approximately 22TB. This represents my hard drives totalling 45.6TB when
242	shown with =fdisk -l=, with a Raid10 configuration using 22TB for	251	shown with `fdisk -l`, with a Raid10 configuration using 22TB
243	mirroring and 22TB of useable space.	252	for mirroring and 22TB of useable space.
244		253
245	#+begin_src sh	254	```sh
246	> zfs list	255	> zfs list
247		256
248	NAME USED AVAIL REFER MOUNTPOINT	257	NAME USED AVAIL REFER MOUNTPOINT
249	tank 145G 21.7T 104K /tank	258	tank 145G 21.7T 104K /tank
250	tank/cloud 145G 21.7T 145G /tank/cloud	259	tank/cloud 145G 21.7T 145G /tank/cloud
251	tank/media 145GT 21.7T 96K /tank/media	260	tank/media 145GT 21.7T 96K /tank/media
252	#+end_src	261	```
		262
		263	## Creating Datasets
253		264
254	** Creating Datasets	265	According to [ZFS
255	According to	266	Terminology](https://docs.oracle.com/cd/E18752_01/html/819-5461/ftyue.html),
256	[[https://docs.oracle.com/cd/E18752_01/html/819-5461/ftyue.html][ZFS	267	a `dataset` can refer to "clones, file systems, snapshots,
257	Terminology]], a =dataset= can refer to “clones, file systems,	268	and volumes.
258	snapshots, and volumes.
259		269
260	For this guide, I will use the =dataset= term to refer to file systems	270	For this guide, I will use the `dataset` term to refer to
261	created under a pool.	271	file systems created under a pool.
262		272
263	Within my =tank= pool, I am going to create some datasets to help	273	Within my `tank` pool, I am going to create some datasets to
264	organize my files. This will give me location to store data rather than	274	help organize my files. This will give me location to store data rather
265	simply dumping everything at the =/tank/= location.	275	than simply dumping everything at the `/tank/` location.
266		276
267	#+begin_src sh	277	```sh
268	sudo zfs create tank/cloud	278	sudo zfs create tank/cloud
269	sudo zfs create tank/media	279	sudo zfs create tank/media
270	#+end_src	280	```
271		281
272	Once created, you can see these datasets in the output of your pool	282	Once created, you can see these datasets in the output of your pool
273	list:	283	list:
274		284
275	#+begin_src sh	285	```sh
276	> zfs list	286	> zfs list
277	NAME USED AVAIL REFER MOUNTPOINT	287	NAME USED AVAIL REFER MOUNTPOINT
278	tank 752K 7.14T 104K /tank	288	tank 752K 7.14T 104K /tank
279	tank/cloud 96K 7.14T 96K /tank/cloud	289	tank/cloud 96K 7.14T 96K /tank/cloud
280	tank/media 96K 7.14T 96K /tank/media	290	tank/media 96K 7.14T 96K /tank/media
281	#+end_src	291	```
282		292
283	** Creating Snapshots	293	## Creating Snapshots
284	Next, let's create our first snapshot. We can do this by calling the
285	=snapshot= command and give it an output name. I will be throwing the
286	current date and time into my example.
287		294
288	#+begin_src sh	295	Next, let\'s create our first snapshot. We can do this by calling the
		296	`snapshot` command and give it an output name. I will be
		297	throwing the current date and time into my example.
		298
		299	```sh
289	sudo zfs snapshot tank@$(date '+%Y-%m-%d_%H-%M')	300	sudo zfs snapshot tank@$(date '+%Y-%m-%d_%H-%M')
290	#+end_src	301	```
291		302
292	We can list the snapshots in our pool with the following command:	303	We can list the snapshots in our pool with the following command:
293		304
294	#+begin_src sh	305	```sh
295	> zfs list -t snapshot	306	> zfs list -t snapshot
296	NAME USED AVAIL REFER MOUNTPOINT	307	NAME USED AVAIL REFER MOUNTPOINT
297	tank@2024-02-06_19-41 0B - 104K -	308	tank@2024-02-06_19-41 0B - 104K -
298	#+end_src	309	```
		310
		311	## Destroy Snapshots
299		312
300	** Destroy Snapshots
301	You can always destroy snapshots that are no longer needed:	313	You can always destroy snapshots that are no longer needed:
302		314
303	#+begin_src sh	315	```sh
304	sudo zfs destroy tank@2024-02-06_19-41	316	sudo zfs destroy tank@2024-02-06_19-41
305	#+end_src	317	```
306		318
307	Once deleted, they will no longer appear in the list:	319	Once deleted, they will no longer appear in the list:
308		320
309	#+begin_src sh	321	```sh
310	> zfs list -t snapshot	322	> zfs list -t snapshot
311	no datasets available	323	no datasets available
312	#+end_src	324	```
313		325
314	* My Thoughts on ZFS So Far	326	# My Thoughts on ZFS So Far
315	- I sacrificed 25TB to be able to mirror my data, but I feel more	327
316	comfortable with the potential to save my data by quickly replacing a	328	- I sacrificed 25TB to be able to mirror my data, but I feel more
317	disk if I need to.	329	comfortable with the potential to save my data by quickly replacing
318	- The set-up was surprisingly easy and fast.	330	a disk if I need to.
319	- Disk I/O is fast as well. I was worried that the data transfer speeds	331	- The set-up was surprisingly easy and fast.
320	would be slower due to the RAID configuration.	332	- Disk I/O is fast as well. I was worried that the data transfer
321	- Media streaming and transcoding has seen no noticeable drop in	333	speeds would be slower due to the RAID configuration.
322	performance.	334	- Media streaming and transcoding has seen no noticeable drop in
323	- My only limitation really is the number of HDD bays in my server HDD	335	performance.
324	cage.	336	- My only limitation really is the number of HDD bays in my server HDD
		337	cage.

content/blog/2024-02-13-ubuntu-emergency-mode.md added +75

@@ -0,0 +1,75 @@
	1	+++
	2	date = 2024-02-13
	3	title = "Stuck in Ubuntu's Emergency Mode? Try Fixing the Fstab File"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	# The Problem
	9
	10	I recently [migrated my hard drives to a ZFS pool](../zfs/) and found
	11	myself stuck in Ubuntu\'s emergency mode after the first reboot I
	12	performed after creating the ZFS pool.
	13
	14	My server was stuck in the boot process and showed the following error
	15	on the screen:
	16
	17	``` txt
	18	You are in emergency mode.
	19	After logging in, type "journalctl -xb" to view system logs,
	20	"systemctl reboot" to reboot, "systemctl default"
	21	or ^D to try again to boot into default mode".
	22	```
	23
	24	After rebooting the server and watching the logs scroll on a monitor, I
	25	noticed the root cause was related to a very long search for certain
	26	drives. I kept seeing errors like this:
	27
	28	``` txt
	29	[ TIME ] Timed out waiting of device dev-disk-by/[disk-uuid]
	30	```
	31
	32	I realized that I had not removed the `/etc/fstab` references
	33	that asked Ubuntu to mount two disks on boot, but I had recently changed
	34	those disks to be part of my ZFS pool instead. Therefore, Ubuntu was
	35	trying to identify and mount a disk that was not available.
	36
	37	Now that we have an idea of the issue, let\'s move to solution.
	38
	39	# The Solution
	40
	41	In order to fix the issue, I waited until I was allowed to type the root
	42	user\'s password, and then I executed the following command:
	43
	44	```sh
	45	nano /etc/fstab
	46	```
	47
	48	Within the `fstab` file, I needed to comment/remove the
	49	following lines at the bottom of the file. You can comment-out a line by
	50	prepending a `#` symbol at the beginning of the line. You can
	51	also delete the line entirely.
	52
	53	``` conf
	54	# What it looked like when running into the issue:
	55	UUID=B64E53824E5339F7 /mnt/white-01 ntfs-3g uid=1000,gid=1000 0 0
	56	UUID=E69867E59867B32B /mnt/white-02 ntfs-3g uid=1000,gid=1000 0 0
	57
	58	# What I changed it to, in order to fix the issue:
	59	# UUID=B64E53824E5339F7 /mnt/white-01 ntfs-3g uid=1000,gid=1000 0 0
	60	# UUID=E69867E59867B32B /mnt/white-02 ntfs-3g uid=1000,gid=1000 0 0
	61	```
	62
	63	Once removing the lines above from the `/etc/fstab` file,
	64	save and exit the file by hitting the `Ctrl` + `x`
	65	key combo.
	66
	67	You can now hit `Ctrl` + `D` to continue, or
	68	reboot:
	69
	70	```sh
	71	systemctl reboot
	72	```
	73
	74	Once rebooted, I was able to watch the machine boot properly and launch
	75	to the TTY login screen without errors!

content/blog/2024-02-13-ubuntu-emergency-mode.org deleted −69

	@@ -1,69 +0,0 @@
1	#+title: Stuck in Ubuntu's Emergency Mode? Try Fixing the Fstab File
2	#+date: 2024-02-13
3	#+description: Learn how to fix a missing disk issue that can lock you in Ubuntu's emergency mode.
4	#+filetags: :linux:
5
6	* The Problem
7	I recently [[../zfs/][migrated my hard drives to a ZFS pool]] and
8	found myself stuck in Ubuntu's emergency mode after the first reboot I
9	performed after creating the ZFS pool.
10
11	My server was stuck in the boot process and showed the following error
12	on the screen:
13
14	#+begin_src txt
15	You are in emergency mode.
16	After logging in, type "journalctl -xb" to view system logs,
17	"systemctl reboot" to reboot, "systemctl default"
18	or ^D to try again to boot into default mode".
19	#+end_src
20
21	After rebooting the server and watching the logs scroll on a monitor, I
22	noticed the root cause was related to a very long search for certain
23	drives. I kept seeing errors like this:
24
25	#+begin_src txt
26	[ TIME ] Timed out waiting of device dev-disk-by/[disk-uuid]
27	#+end_src
28
29	I realized that I had not removed the =/etc/fstab= references that asked
30	Ubuntu to mount two disks on boot, but I had recently changed those
31	disks to be part of my ZFS pool instead. Therefore, Ubuntu was trying to
32	identify and mount a disk that was not available.
33
34	Now that we have an idea of the issue, let's move to solution.
35
36	* The Solution
37	In order to fix the issue, I waited until I was allowed to type the root
38	user's password, and then I executed the following command:
39
40	#+begin_src sh
41	nano /etc/fstab
42	#+end_src
43
44	Within the =fstab= file, I needed to comment/remove the following lines
45	at the bottom of the file. You can comment-out a line by prepending a
46	=#= symbol at the beginning of the line. You can also delete the line
47	entirely.
48
49	#+begin_src conf
50	# What it looked like when running into the issue:
51	UUID=B64E53824E5339F7 /mnt/white-01 ntfs-3g uid=1000,gid=1000 0 0
52	UUID=E69867E59867B32B /mnt/white-02 ntfs-3g uid=1000,gid=1000 0 0
53
54	# What I changed it to, in order to fix the issue:
55	# UUID=B64E53824E5339F7 /mnt/white-01 ntfs-3g uid=1000,gid=1000 0 0
56	# UUID=E69867E59867B32B /mnt/white-02 ntfs-3g uid=1000,gid=1000 0 0
57	#+end_src
58
59	Once removing the lines above from the =/etc/fstab= file, save and exit
60	the file by hitting the =Ctrl= + =x= key combo.
61
62	You can now hit =Ctrl= + =D= to continue, or reboot:
63
64	#+begin_src sh
65	systemctl reboot
66	#+end_src
67
68	Once rebooted, I was able to watch the machine boot properly and launch
69	to the TTY login screen without errors!

content/blog/2024-02-21-self-hosting-otter-wiki.org → content/blog/2024-02-21-self-hosting-otter-wiki.md renamed +52 −44

	@@ -1,36 +1,41 @@
1	#+title: Self-Hosting An Otter Wiki	1	+++
2	#+date: <2024-02-21>	2	date = 2024-02-21
3	#+description: Learn how to easily self-host An Otter Wiki.	3	title = "Self-Hosting an Otter Wiki"
4	#+filetags: :selfhosting:	4	description = ""
		5	draft = false
		6	+++
5		7
6	* An Otter Wiki	8	# An Otter Wiki
7	[[https://otterwiki.com/][An Otter Wiki]] is an easy to use wiki
8	software that takes almost no effort to set up and maintain.
9		9
10	* Installation	10	[An Otter Wiki](https://otterwiki.com/) is an easy to use wiki software
11	To install An Otter Wiki, I'm going to use Docker Compose to create the	11	that takes almost no effort to set up and maintain.
		12
		13	# Installation
		14
		15	To install An Otter Wiki, I\'m going to use Docker Compose to create the
12	container and then use Nginx as a reverse proxy to allow external access	16	container and then use Nginx as a reverse proxy to allow external access
13	via a subdomain I own.	17	via a subdomain I own.
14		18
15	** Docker Compose	19	## Docker Compose
16	Start by creating a directory for the container's files.	20
		21	Start by creating a directory for the container\'s files.
17		22
18	#+begin_src sh	23	```sh
19	mkdir ~/otterwiki	24	mkdir ~/otterwiki
20	#+end_src	25	```
21		26
22	Next, create the =docker-compose.yml= file to define the container's	27	Next, create the `docker-compose.yml` file to define the
23	parameters.	28	container\'s parameters.
24		29
25	#+begin_src sh	30	```sh
26	nano ~/otterwiki/docker-compose.yml	31	nano ~/otterwiki/docker-compose.yml
27	#+end_src	32	```
28		33
29	Within the file, paste the following content. You can read the project's	34	Within the file, paste the following content. You can read the
30	documentation if you want to further override or customize the	35	project\'s documentation if you want to further override or customize
31	container.	36	the container.
32		37
33	#+begin_src conf	38	``` conf
34	version: '3'	39	version: '3'
35	services:	40	services:
36	otterwiki:	41	otterwiki:
	@@ -42,32 +47,34 @@ services:
42	- 8337:80	47	- 8337:80
43	volumes:	48	volumes:
44	- ./app-data:/app-data	49	- ./app-data:/app-data
45	#+end_src	50	```
46		51
47	Once the file is saved and closed, you can launch the container.	52	Once the file is saved and closed, you can launch the container.
48		53
49	#+begin_src sh	54	```sh
50	cd ~/otterwiki	55	cd ~/otterwiki
51	sudo docker-compose up -d	56	sudo docker-compose up -d
52	#+end_src	57	```
53		58
54	The container is now available at =localhost:8337=. Next, we will use	59	The container is now available at `localhost:8337`. Next, we
55	Nginx to serve this app externally.	60	will use Nginx to serve this app externally.
56		61
57	** Nginx	62	## Nginx
58	To access the app externally, let's set up a reverse proxy. I'll start	63
		64	To access the app externally, let\'s set up a reverse proxy. I\'ll start
59	by creating the Nginx configuration file for my wiki.	65	by creating the Nginx configuration file for my wiki.
60		66
61	#+begin_src sh	67	```sh
62	sudo nano /etc/nginx/sites-available/wiki	68	sudo nano /etc/nginx/sites-available/wiki
63	#+end_src	69	```
64		70
65	Within the file, I have saved the following content. This assumes you	71	Within the file, I have saved the following content. This assumes you
66	already have a TLS/SSL cert to use with this subdomain. If not, simply	72	already have a TLS/SSL cert to use with this subdomain. If not, simply
67	remove the =ssl_*= variables, remove the =80= server block, and change	73	remove the `ssl_*` variables, remove the `80`
68	the =443= server block to =80= to serve the app without SSL.	74	server block, and change the `443` server block to
		75	`80` to serve the app without SSL.
69		76
70	#+begin_src conf	77	``` conf
71	server {	78	server {
72	if ($host ~ ^[^.]+\.example\.com$) {	79	if ($host ~ ^[^.]+\.example\.com$) {
73	return 301 https://$host$request_uri;	80	return 301 https://$host$request_uri;
	@@ -101,35 +108,36 @@ server {
101	proxy_set_header X-Forwarded-Host $http_host;	108	proxy_set_header X-Forwarded-Host $http_host;
102	}	109	}
103	}	110	}
104	#+end_src	111	```
105		112
106	Save and close the configuration file. On Nginx, we need to symlink the	113	Save and close the configuration file. On Nginx, we need to symlink the
107	file to enable it.	114	file to enable it.
108		115
109	#+begin_src sh	116	```sh
110	sudo ln -s /etc/nginx/sites-available/wiki /etc/nginx/sites-enabled/wiki	117	sudo ln -s /etc/nginx/sites-available/wiki /etc/nginx/sites-enabled/wiki
111	#+end_src	118	```
112		119
113	Once enabled, restart the Nginx server to start serving the app	120	Once enabled, restart the Nginx server to start serving the app
114	externally.	121	externally.
115		122
116	#+begin_src sh	123	```sh
117	sudo systemctl restart nginx.service	124	sudo systemctl restart nginx.service
118	#+end_src	125	```
		126
		127	# Screenshots
119		128
120	* Screenshots
121	In the screenshot below, you can see the initial launch screen for An	129	In the screenshot below, you can see the initial launch screen for An
122	Otter Wiki. Start by creating your admin account and configure the app	130	Otter Wiki. Start by creating your admin account and configure the app
123	as necessary.	131	as necessary.
124		132
125	#+caption: An Otter Wiki - Initial Screen	133	![An Otter Wiki - Initial
126	[[https://img.cleberg.net/blog/20240221-otterwiki/otterwiki.png]]	134	Screen](https://img.cleberg.net/blog/20240221-otterwiki/otterwiki.png)
127		135
128	You can also see the default editing screen for creating and editing	136	You can also see the default editing screen for creating and editing
129	pages. It's as easy as typing Markdown and hitting the save button.	137	pages. It\'s as easy as typing Markdown and hitting the save button.
130		138
131	#+caption: An Otter Wiki - Editing Screen	139	![An Otter Wiki - Editing
132	[[https://img.cleberg.net/blog/20240221-otterwiki/otterwiki-edit.png]]	140	Screen](https://img.cleberg.net/blog/20240221-otterwiki/otterwiki-edit.png)
133		141
134	Overall, I like An Otter Wiki and will be looking forward to seeing how	142	Overall, I like An Otter Wiki and will be looking forward to seeing how
135	much use I get out of it going forward.	143	much use I get out of it going forward.

content/blog/2024-03-13-doom-emacs.md added +362

@@ -0,0 +1,362 @@
	1	+++
	2	date = 2024-03-13
	3	title = "Doom Emacs & Org-Mode"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	## Screenshots
	9
	10	These screenshots are showing a project opened with projectile, a
	11	treemacs side pane open with the project contents, multiple buffers
	12	tiled next to each other, and the help pane open at the bottomm.
	13
	14	The themes are `doom-homage-white` and
	15	`doom-homage-black`.
	16
	17	![Doom Emacs Light
	18	Mode](https://img.cleberg.net/blog/20240314-doom-emacs/light.png)
	19
	20	![Doom Emacs Dark
	21	Mode](https://img.cleberg.net/blog/20240314-doom-emacs/dark.png)
	22
	23	## Getting Started
	24
	25	I have been switching back and forth between
	26	[markdown](https://en.wikipedia.org/wiki/Markdown) and
	27	[org-mode](https://en.wikipedia.org/wiki/Org-mode) recently for my
	28	personal note taking, wiki, and even this blog. As a result, I have been
	29	stumbling further into the world of Emacs and found myself at a point
	30	where I now prefer to do most of my basic editing within Emacs.
	31
	32	I\'ll leave the markdown vs. org-mode debate for another post, but I
	33	love org-mode\'s extensibility and interactive nature within Emacs, but
	34	it becomes very unwieldy in any other client implementation of
	35	org-mode - especially on iOS. On the flip side, markdown is limited in
	36	functionality and fractured into different standards, but it\'s simple
	37	and popular enough that there are a plethora of great clients to choose
	38	from that will get the job done.
	39
	40	For now, I want to focus on how I have been using Emacs and some of the
	41	things that would have helped me learn it faster had I known where to
	42	start.
	43
	44	### Installation
	45
	46	This post focuses on [Doom
	47	Emacs](https://github.com/doomemacs/doomemacs), which is an Emacs
	48	framework that provides an alternative experience to the vanilla [GNU
	49	Emacs](https://www.gnu.org/software/emacs/).
	50
	51	The [Getting Start
	52	Guide](https://github.com/doomemacs/doomemacs/blob/master/docs/getting_started.org)
	53	has an extremely detailed walkthrough of installation for all systems,
	54	so please refer to that guide for up-to-date instructions.
	55
	56	I chose to install on macOS, using the Homebrew option with the
	57	`railwaycat/emacsmacport` version of Emacs.
	58
	59	Once the program is installed, you can run the program by typing
	60	`emacs` in a terminal. If you installed a version of Emacs
	61	that supports both a GUI and TUI, you will have to run
	62	`emacs -nw` to get the TUI instead of the default GUI.
	63
	64	### Configuration
	65
	66	Once installed, you can configure Doom by editing the files within the
	67	`~/.doom.d/` directory. This directory holds four files:
	68
	69	1. `config.el` - Personal configuration file
	70	2. `custom.el` - Custom set variables
	71	3. `init.el` - Doom modules and load order, must run
	72	`doom sync` after modifying
	73	4. `packages.el` - Declare packages to install in this file,
	74	then run `doom sync` to install
	75
	76	I only needed a few customizations for my configuration, so I\'ll list
	77	them below.
	78
	79	```lisp
	80	;; ~/.doom.d/config.el
	81	(setq doom-theme 'doom-homage-black)
	82	(setq display-line-numbers-type t)
	83	(setq org-directory "~/Documents/Notes/")
	84
	85	;; lengthy org-publish directives at the bottom of the file
	86	```
	87
	88	```lisp
	89	;; ~/.doom.d/init.el
	90	(doom! :input
	91	:completion
	92	company ; the ultimate code completion backend
	93	vertico ; the search engine of the future
	94
	95	:ui
	96	doom ; what makes DOOM look the way it does
	97	doom-dashboard ; a nifty splash screen for Emacs
	98	(emoji +unicode) ; 🙂
	99	hl-todo ; highlight TODO/FIXME/NOTE/DEPRECATED/HACK/REVIEW
	100	minimap ; show a map of the code on the side
	101	modeline ; snazzy, Atom-inspired modeline, plus API
	102	ophints ; highlight the region an operation acts on
	103	(popup +defaults) ; tame sudden yet inevitable temporary windows
	104	tabs ; a tab bar for Emacs
	105	treemacs ; a project drawer, like neotree but cooler
	106	(vc-gutter +pretty) ; vcs diff in the fringe
	107	vi-tilde-fringe ; fringe tildes to mark beyond EOB
	108	workspaces ; tab emulation, persistence & separate workspaces
	109
	110	:editor
	111	(evil +everywhere); come to the dark side, we have cookies
	112	file-templates ; auto-snippets for empty files
	113	fold ; (nigh) universal code folding
	114	snippets ; my elves. They type so I don't have to
	115
	116	:emacs
	117	dired ; making dired pretty [functional]
	118	electric ; smarter, keyword-based electric-indent
	119	undo ; persistent, smarter undo for your inevitable mistakes
	120	vc ; version-control and Emacs, sitting in a tree
	121
	122	:term
	123	term ; basic terminal emulator for Emacs
	124
	125	:checkers
	126	syntax ; tasing you for every semicolon you forget
	127
	128	:tools
	129	(eval +overlay) ; run code, run (also, repls)
	130	lookup ; navigate your code and its documentation
	131	magit ; a git porcelain for Emacs
	132
	133	:os
	134	(:if (featurep :system 'macos) macos) ; improve compatibility with macOS
	135
	136	:lang
	137	common-lisp ; if you've seen one lisp, you've seen them all
	138	emacs-lisp ; drown in parentheses
	139	markdown ; writing docs for people to ignore
	140	org ; organize your plain life in plain text
	141	python ; beautiful is better than ugly
	142	sh ; she sells {ba,z,fi}sh shells on the C xor
	143
	144	:app
	145	irc ; how neckbeards socialize
	146	(rss +org) ; emacs as an RSS reader
	147
	148	(default +bindings +smartparens))
	149	```
	150
	151	If you\'re editing these files within Doom directly, remember to run
	152	`SPC h r r` to reload the configuration. Also remember to run
	153	`doom sync` for any changes to the `init.el` or
	154	`packages.el` files.
	155
	156	## Basic Functionality
	157
	158	I kept a cheat sheet note open at first with all of the basic functions
	159	typed out, copied as I went through the tutorial. After a little while,
	160	I no longer needed it. I highly recommend writing down the most
	161	applicable shortcuts for your preferred functionality and refer back to
	162	it until you\'ve memorized it.
	163
	164	Memorizing the shortcuts will differ based on the type of Emacs
	165	framework being used. Personally, migrating from vanilla Emacs to Doom
	166	Emacs simplified everything by a large factor and instantly enabled me
	167	to start working on my projects, eliminating most of the hurdles I was
	168	running into. The vanilla emacs hotkeys became obnoxious and I actually
	169	stopped using Emacs entirely for about a month before trying Doom.
	170
	171	For me, the first logical step is to interact with the local filesystem.
	172	To do this, I needed to know how to open directories, open files, save
	173	files, discard changes, close files, and switch between open files. Here
	174	are some example shortcuts I\'ve written down in order to accomplish
	175	file-based actions.
	176
	177	Doom Hotkey Emacs Hotkey Description
	178	---------------------------- --------------------------- ----------------------------------------
	179	`SPC :` `C-x` Run functions
	180	`SPC f f` `C-x f` Open file in buffer
	181	`SPC f d` `C-x d` Open directory with `dired`
	182	`i` `C-x C-q` Edit current buffer (insert mode)
	183	`q` `C-x C-q` Quit out of insert mode
	184	`SPC f s` `C-x s` Save current buffer
	185	`SPC b k` `C-x k` Kill current buffer
	186	`SPC w h/j/k/l` `C-x o`\[^1^\] Move left/down/up/right to next buffer
	187
	188	\[^1^\] Doom\'s evil-window functionality is a bit different from GNU
	189	Emacs, but you can always switch to the \"other\" buffer with
	190	`C-x o` or `C-x b` to get a list of buffers to
	191	select.
	192
	193	In general, when in Doom, you can press `SPC` and wait a
	194	second for the help pane to appear with all available hotkey options.
	195	For example, you can press `SPC`, wait for the help pane, and
	196	then select a key such as `g` to enter the git help pane and
	197	explore further command options.
	198
	199	## Editing
	200
	201	Next in my process is to dive into editing for any languages I\'m
	202	currently using. In this post, I will just cover Markdown and Org-Mode
	203	but I have also been slowly adoping some Python and general web dev
	204	tools as well.
	205
	206	### Markdown
	207
	208	![Markdown
	209	Preview](https://img.cleberg.net/blog/20240314-doom-emacs/markdown.png)
	210
	211	Markdown is fairly simple as the syntax is limited, so just make sure
	212	the `~/.doom.d/init.el` includes the `markdown`
	213	declaration in the `:lang` section.
	214
	215	This package includes the following hotkey menus. The insert and toggle
	216	menu expands further, allowing you to insert various markdown elements
	217	and toggle things like link hiding.
	218
	219	Doom Hotkey Function
	220	----------------------------------------- --------------------------
	221	`SPC m '` markdown-edit-code-block
	222	`SPC m e` markdown-export
	223	`SPC m i` +insert
	224	`SPC m o` markdown-open
	225	`SPC m p` markdown-preview
	226	`SPC m t` +toggle
	227	`SPC : markdown-table-align` markdown-table-align
	228
	229	### Org-Mode
	230
	231	![Org-Mode
	232	Preview](https://img.cleberg.net/blog/20240314-doom-emacs/org.png)
	233
	234	Similar to the markdown section above, ensure that the
	235	`~/.doom.d/init.el` includes the `org` declaration
	236	in the `:lang` section.
	237
	238	There are a few hot keys, but a quick search with `SPC : org`
	239	shows that there are 865 possible org-related functions you can run. I
	240	won\'t possibly be able to list them all, so I will simply cover a few
	241	of the basic commands I use myself.
	242
	243	Doom Hotkey Function
	244	--------------------------- ---------------------------------------
	245	`SPC m t` org-todo
	246	`SPC n t` org-todo-list
	247	`SPC o A` org-agenda
	248	`SPC X` org-capture
	249	`SPC m p p` org-priority
	250	`SPC m d s` org-schedule
	251	`TAB` org-cycle
	252	`SHIFT TAB` Collapse/open all headings in buffer
	253	`M-q` Format/wrap current section
	254	`M-Left/Right` Demote/promote current heading
	255	`M-Down/Up` Shift current heading section down/up
	256
	257	1. Org-Publish
	258
	259	Org includes a [publishing management
	260	system](https://orgmode.org/manual/Publishing.html) by default that
	261	allows you to export org files to Org, iCalendar, HTML, LaTex,
	262	Markdown, ODT, and Plain Text. Most of these can be exported into
	263	another buffer and opened, or simply to an external file.
	264
	265	While inside an org file, simply run `SPC m e` or
	266	`M-x org-export-dispatch` to open the export menu. This
	267	menu will show all options and ask you to select an option. If you
	268	want to export to HTML, simply press `h` and then
	269	`H` (As HTML buffer), `h` (As HTML file), or
	270	`o` (As HTML file and open).
	271
	272	2. Projects
	273
	274	Some publishing options are easier with a defined project in Emacs.
	275	To create a project within Emacs, I use two methods:
	276
	277	1. Add the project via the projectile command `SPC p a`.
	278	Does not always work for me.
	279	2. Add an empty `.projectile` file in the project root.
	280
	281	Once a project has been created, you can create custom publishing
	282	actions within your `~/.doom.d/config.el` file. For
	283	example, here\'s a test project I created to try and convert this
	284	blog to org-mode recently.
	285
	286	```lisp
	287	;; org-publish
	288	(require 'ox-publish)
	289
	290	(defun my/org-sitemap-date-entry-format (entry style project) "Format ENTRY in
	291	org-publish PROJECT Sitemap format ENTRY ENTRY STYLE format that includes
	292	date." (let ((filename (org-publish-find-title entry project))) (if (= (length
	293	filename) 0) (format "%s" entry) (format "{{{timestamp(%s)}}}
	294	[[file:%s][%s]]" (format-time-string "%Y-%m-%d" (org-publish-find-date entry
	295	project)) entry filename))))
	296
	297	(setq org-export-global-macros '(("timestamp" . "@@html:<time datetime='[$1]'
	298	class='timestamp'>[$1]</time>@@")))
	299
	300	(setq org-publish-project-alist
	301	`(("blog"
	302	:base-directory "~/Source/cleberg.net/"
	303	:base-extension "org"
	304	:recursive t
	305	:publishing-directory "~/Source/cleberg.net/public/"
	306	:publishing-function org-html-publish-to-html
	307	;; HTML5
	308	:html-doctype "html5"
	309	:html-html5-fancy t
	310	;; Disable some Org's HTML defaults
	311	:html-head-include-scripts nil
	312	:html-head-include-default-style nil
	313	:section-numbers nil
	314	:with-title nil
	315	;; Sitemap
	316	:auto-sitemap t
	317	:sitemap-title: "Sitemap"
	318	:sitemap-sort-files anti-chronologically
	319	; :sitemap-function my/org-sitemap-date-entry-format
	320	;; Customize HTML output
	321	:html-divs ((preamble "header" "preamble")
	322	(content "main" "content")
	323	(postamble "footer" "postamble"))
	324	:html-head "<meta name='theme-color' content='#111' media='(prefers-color-scheme: dark)'>
	325	<meta name='theme-color' content='#fff' media='(prefers-color-scheme: light)'>
	326	<link rel='stylesheet' href='/syntax-theme-dark.css' media='(prefers-color-scheme: dark)'>
	327	<link rel='stylesheet' href='/syntax-theme-light.css' media='(prefers-color-scheme: light)'>
	328	<link rel='stylesheet' href='/styles.css' type='text/css'>"
	329	:html-preamble "<nav class='site-nav' aria-label='site-nav' role='navigation'>
	330	<ul>
	331	<li><a href='/'>Home</a></li>
	332	<li><a href='/blog/'>Blog</a></li>
	333	<li><a href='/services/'>Services</a></li>
	334	<li><a href='/wiki/'>Wiki</a></li>
	335	</ul></nav>
	336	<h1>%t</h1>
	337	<time datetime='%d'>%d</time>"
	338	:html-postamble "
	339	<p>Last build: %T</p>
	340	<p>Created with %c</p>"
	341	)
	342
	343	("static"
	344	:base-directory "~/Source/cleberg.net/static/"
	345	:base-extension "css\\\|txt\\\|jpg\\\|gif\\\|png"
	346	:recursive t
	347	:publishing-directory "~/Source/cleberg.net/public/"
	348	:publishing-function org-publish-attachment)
	349
	350	("cleberg.net" :components ("blog" "static"))))
	351	```
	352
	353	## General Thoughts
	354
	355	I have enjoyed Doom Emacs (far more than GNU Emacs) and will likely
	356	continue to use it as my main editor for the time being. Org-Mode is
	357	certainly the largest factor here, as I far prefer it over Markdown due
	358	to its inherent features and detailed markup options. However, working
	359	with org-mode on iOS has been a pain and I will have to see if there\'s
	360	an easier way to resolve those issues or if going back to separate
	361	Markdown, Reminders, and Calendar apps is easier to work with than an
	362	all-in-one org solution.

content/blog/2024-03-13-doom-emacs.org deleted −354

	@@ -1,354 +0,0 @@
1	#+title: Doom Emacs & Org-Mode
2	#+date: <2024-03-14 Thu 16:19:23>
3	#+description: A quick look at my setup with Doom Emacs and the Org-Mode syntax.
4
5	** Screenshots
6
7	These screenshots are showing a project opened with projectile, a
8	treemacs side pane open with the project contents, multiple buffers
9	tiled next to each other, and the help pane open at the bottomm.
10
11	The themes are =doom-homage-white= and =doom-homage-black=.
12
13	#+caption: Doom Emacs Light Mode
14	[[https://img.cleberg.net/blog/20240314-doom-emacs/light.png]]
15
16	#+caption: Doom Emacs Dark Mode
17	[[https://img.cleberg.net/blog/20240314-doom-emacs/dark.png]]
18
19	** Getting Started
20
21	I have been switching back and forth between
22	[[https://en.wikipedia.org/wiki/Markdown][markdown]] and
23	[[https://en.wikipedia.org/wiki/Org-mode][org-mode]] recently for my
24	personal note taking, wiki, and even this blog. As a result, I have been
25	stumbling further into the world of Emacs and found myself at a point
26	where I now prefer to do most of my basic editing within Emacs.
27
28	I'll leave the markdown vs. org-mode debate for another post, but I love
29	org-mode's extensibility and interactive nature within Emacs, but it
30	becomes very unwieldy in any other client implementation of org-mode -
31	especially on iOS. On the flip side, markdown is limited in
32	functionality and fractured into different standards, but it's simple
33	and popular enough that there are a plethora of great clients to choose
34	from that will get the job done.
35
36	For now, I want to focus on how I have been using Emacs and some of the
37	things that would have helped me learn it faster had I known where to
38	start.
39
40	*** Installation
41
42	This post focuses on [[https://github.com/doomemacs/doomemacs][Doom
43	Emacs]], which is an Emacs framework that provides an alternative
44	experience to the vanilla [[https://www.gnu.org/software/emacs/][GNU
45	Emacs]].
46
47	The
48	[[https://github.com/doomemacs/doomemacs/blob/master/docs/getting_started.org][Getting
49	Start Guide]] has an extremely detailed walkthrough of installation for
50	all systems, so please refer to that guide for up-to-date instructions.
51
52	I chose to install on macOS, using the Homebrew option with the
53	=railwaycat/emacsmacport= version of Emacs.
54
55	Once the program is installed, you can run the program by typing =emacs=
56	in a terminal. If you installed a version of Emacs that supports both a
57	GUI and TUI, you will have to run =emacs -nw= to get the TUI instead of
58	the default GUI.
59
60	*** Configuration
61
62	Once installed, you can configure Doom by editing the files within the
63	=~/.doom.d/= directory. This directory holds four files:
64
65	1. =config.el= - Personal configuration file
66	2. =custom.el= - Custom set variables
67	3. =init.el= - Doom modules and load order, must run =doom sync= after
68	modifying
69	4. =packages.el= - Declare packages to install in this file, then run
70	=doom sync= to install
71
72	I only needed a few customizations for my configuration, so I'll list
73	them below.
74
75	#+begin_src lisp
76	;; ~/.doom.d/config.el
77	(setq doom-theme 'doom-homage-black)
78	(setq display-line-numbers-type t)
79	(setq org-directory "~/Documents/Notes/")
80
81	;; lengthy org-publish directives at the bottom of the file
82	#+end_src
83
84	#+begin_src lisp
85	;; ~/.doom.d/init.el
86	(doom! :input
87	:completion
88	company ; the ultimate code completion backend
89	vertico ; the search engine of the future
90
91	:ui
92	doom ; what makes DOOM look the way it does
93	doom-dashboard ; a nifty splash screen for Emacs
94	(emoji +unicode) ; 🙂
95	hl-todo ; highlight TODO/FIXME/NOTE/DEPRECATED/HACK/REVIEW
96	minimap ; show a map of the code on the side
97	modeline ; snazzy, Atom-inspired modeline, plus API
98	ophints ; highlight the region an operation acts on
99	(popup +defaults) ; tame sudden yet inevitable temporary windows
100	tabs ; a tab bar for Emacs
101	treemacs ; a project drawer, like neotree but cooler
102	(vc-gutter +pretty) ; vcs diff in the fringe
103	vi-tilde-fringe ; fringe tildes to mark beyond EOB
104	workspaces ; tab emulation, persistence & separate workspaces
105
106	:editor
107	(evil +everywhere); come to the dark side, we have cookies
108	file-templates ; auto-snippets for empty files
109	fold ; (nigh) universal code folding
110	snippets ; my elves. They type so I don't have to
111
112	:emacs
113	dired ; making dired pretty [functional]
114	electric ; smarter, keyword-based electric-indent
115	undo ; persistent, smarter undo for your inevitable mistakes
116	vc ; version-control and Emacs, sitting in a tree
117
118	:term
119	term ; basic terminal emulator for Emacs
120
121	:checkers
122	syntax ; tasing you for every semicolon you forget
123
124	:tools
125	(eval +overlay) ; run code, run (also, repls)
126	lookup ; navigate your code and its documentation
127	magit ; a git porcelain for Emacs
128
129	:os
130	(:if (featurep :system 'macos) macos) ; improve compatibility with macOS
131
132	:lang
133	common-lisp ; if you've seen one lisp, you've seen them all
134	emacs-lisp ; drown in parentheses
135	markdown ; writing docs for people to ignore
136	org ; organize your plain life in plain text
137	python ; beautiful is better than ugly
138	sh ; she sells {ba,z,fi}sh shells on the C xor
139
140	:app
141	irc ; how neckbeards socialize
142	(rss +org) ; emacs as an RSS reader
143
144	(default +bindings +smartparens))
145	#+end_src
146
147	If you're editing these files within Doom directly, remember to run
148	=SPC h r r= to reload the configuration. Also remember to run
149	=doom sync= for any changes to the =init.el= or =packages.el= files.
150
151	** Basic Functionality
152
153	I kept a cheat sheet note open at first with all of the basic functions
154	typed out, copied as I went through the tutorial. After a little while,
155	I no longer needed it. I highly recommend writing down the most
156	applicable shortcuts for your preferred functionality and refer back to
157	it until you've memorized it.
158
159	Memorizing the shortcuts will differ based on the type of Emacs
160	framework being used. Personally, migrating from vanilla Emacs to Doom
161	Emacs simplified everything by a large factor and instantly enabled me
162	to start working on my projects, eliminating most of the hurdles I was
163	running into. The vanilla emacs hotkeys became obnoxious and I actually
164	stopped using Emacs entirely for about a month before trying Doom.
165
166	For me, the first logical step is to interact with the local filesystem.
167	To do this, I needed to know how to open directories, open files, save
168	files, discard changes, close files, and switch between open files. Here
169	are some example shortcuts I've written down in order to accomplish
170	file-based actions.
171
172	\| Doom Hotkey \| Emacs Hotkey \| Description \|
173	\|-----------------+--------------+----------------------------------------\|
174	\| =SPC := \| =C-x= \| Run functions \|
175	\| =SPC f f= \| =C-x f= \| Open file in buffer \|
176	\| =SPC f d= \| =C-x d= \| Open directory with =dired= \|
177	\| =i= \| =C-x C-q= \| Edit current buffer (insert mode) \|
178	\| =q= \| =C-x C-q= \| Quit out of insert mode \|
179	\| =SPC f s= \| =C-x s= \| Save current buffer \|
180	\| =SPC b k= \| =C-x k= \| Kill current buffer \|
181	\| =SPC w h/j/k/l= \| =C-x o=[^1] \| Move left/down/up/right to next buffer \|
182
183	[^1] Doom's evil-window functionality is a bit different from GNU Emacs,
184	but you can always switch to the "other" buffer with =C-x o= or =C-x b=
185	to get a list of buffers to select.
186
187	In general, when in Doom, you can press =SPC= and wait a second for the
188	help pane to appear with all available hotkey options. For example, you
189	can press =SPC=, wait for the help pane, and then select a key such as
190	=g= to enter the git help pane and explore further command options.
191
192	** Editing
193
194	Next in my process is to dive into editing for any languages I'm
195	currently using. In this post, I will just cover Markdown and Org-Mode
196	but I have also been slowly adoping some Python and general web dev
197	tools as well.
198
199	*** Markdown
200
201	#+caption: Markdown Preview
202	[[https://img.cleberg.net/blog/20240314-doom-emacs/markdown.png]]
203
204	Markdown is fairly simple as the syntax is limited, so just make sure
205	the =~/.doom.d/init.el= includes the =markdown= declaration in the
206	=:lang= section.
207
208	This package includes the following hotkey menus. The insert and toggle
209	menu expands further, allowing you to insert various markdown elements
210	and toggle things like link hiding.
211
212	\| Doom Hotkey \| Function \|
213	\|------------------------------+--------------------------\|
214	\| =SPC m '= \| markdown-edit-code-block \|
215	\| =SPC m e= \| markdown-export \|
216	\| =SPC m i= \| +insert \|
217	\| =SPC m o= \| markdown-open \|
218	\| =SPC m p= \| markdown-preview \|
219	\| =SPC m t= \| +toggle \|
220	\| =SPC : markdown-table-align= \| markdown-table-align \|
221
222	*** Org-Mode
223
224	#+caption: Org-Mode Preview
225	[[https://img.cleberg.net/blog/20240314-doom-emacs/org.png]]
226
227	Similar to the markdown section above, ensure that the
228	=~/.doom.d/init.el= includes the =org= declaration in the =:lang=
229	section.
230
231	There are a few hot keys, but a quick search with =SPC : org= shows that
232	there are 865 possible org-related functions you can run. I won't
233	possibly be able to list them all, so I will simply cover a few of the
234	basic commands I use myself.
235
236	\| Doom Hotkey \| Function \|
237	\|----------------+---------------------------------------\|
238	\| =SPC m t= \| org-todo \|
239	\| =SPC n t= \| org-todo-list \|
240	\| =SPC o A= \| org-agenda \|
241	\| =SPC X= \| org-capture \|
242	\| =SPC m p p= \| org-priority \|
243	\| =SPC m d s= \| org-schedule \|
244	\| =TAB= \| org-cycle \|
245	\| =SHIFT TAB= \| Collapse/open all headings in buffer \|
246	\| =M-q= \| Format/wrap current section \|
247	\| =M-Left/Right= \| Demote/promote current heading \|
248	\| =M-Down/Up= \| Shift current heading section down/up \|
249
250	**** Org-Publish
251
252	Org includes a [[https://orgmode.org/manual/Publishing.html][publishing
253	management system]] by default that allows you to export org files to
254	Org, iCalendar, HTML, LaTex, Markdown, ODT, and Plain Text. Most of
255	these can be exported into another buffer and opened, or simply to an
256	external file.
257
258	While inside an org file, simply run =SPC m e= or
259	=M-x org-export-dispatch= to open the export menu. This menu will show
260	all options and ask you to select an option. If you want to export to
261	HTML, simply press =h= and then =H= (As HTML buffer), =h= (As HTML
262	file), or =o= (As HTML file and open).
263
264	**** Projects
265
266	Some publishing options are easier with a defined project in Emacs. To
267	create a project within Emacs, I use two methods:
268
269	1. Add the project via the projectile command =SPC p a=. Does not always
270	work for me.
271	2. Add an empty =.projectile= file in the project root.
272
273	Once a project has been created, you can create custom publishing
274	actions within your =~/.doom.d/config.el= file. For example, here's a
275	test project I created to try and convert this blog to org-mode
276	recently.
277
278	#+begin_src lisp
279	;; org-publish
280	(require 'ox-publish)
281
282	(defun my/org-sitemap-date-entry-format (entry style project) "Format ENTRY in
283	org-publish PROJECT Sitemap format ENTRY ENTRY STYLE format that includes
284	date." (let ((filename (org-publish-find-title entry project))) (if (= (length
285	filename) 0) (format "%s" entry) (format "{{{timestamp(%s)}}}
286	[[file:%s][%s]]" (format-time-string "%Y-%m-%d" (org-publish-find-date entry
287	project)) entry filename))))
288
289	(setq org-export-global-macros '(("timestamp" . "@@html:<time datetime='[$1]'
290	class='timestamp'>[$1]</time>@@")))
291
292	(setq org-publish-project-alist
293	`(("blog"
294	:base-directory "~/Source/cleberg.net/"
295	:base-extension "org"
296	:recursive t
297	:publishing-directory "~/Source/cleberg.net/public/"
298	:publishing-function org-html-publish-to-html
299	;; HTML5
300	:html-doctype "html5"
301	:html-html5-fancy t
302	;; Disable some Org's HTML defaults
303	:html-head-include-scripts nil
304	:html-head-include-default-style nil
305	:section-numbers nil
306	:with-title nil
307	;; Sitemap
308	:auto-sitemap t
309	:sitemap-title: "Sitemap"
310	:sitemap-sort-files anti-chronologically
311	; :sitemap-function my/org-sitemap-date-entry-format
312	;; Customize HTML output
313	:html-divs ((preamble "header" "preamble")
314	(content "main" "content")
315	(postamble "footer" "postamble"))
316	:html-head "<meta name='theme-color' content='#111' media='(prefers-color-scheme: dark)'>
317	<meta name='theme-color' content='#fff' media='(prefers-color-scheme: light)'>
318	<link rel='stylesheet' href='/syntax-theme-dark.css' media='(prefers-color-scheme: dark)'>
319	<link rel='stylesheet' href='/syntax-theme-light.css' media='(prefers-color-scheme: light)'>
320	<link rel='stylesheet' href='/styles.css' type='text/css'>"
321	:html-preamble "<nav class='site-nav' aria-label='site-nav' role='navigation'>
322	<ul>
323	<li><a href='/'>Home</a></li>
324	<li><a href='/blog/'>Blog</a></li>
325	<li><a href='/services/'>Services</a></li>
326	<li><a href='/wiki/'>Wiki</a></li>
327	</ul></nav>
328	<h1>%t</h1>
329	<time datetime='%d'>%d</time>"
330	:html-postamble "
331	<p>Last build: %T</p>
332	<p>Created with %c</p>"
333	)
334
335	("static"
336	:base-directory "~/Source/cleberg.net/static/"
337	:base-extension "css\\\|txt\\\|jpg\\\|gif\\\|png"
338	:recursive t
339	:publishing-directory "~/Source/cleberg.net/public/"
340	:publishing-function org-publish-attachment)
341
342	("cleberg.net" :components ("blog" "static"))))
343	#+end_src
344
345	** General Thoughts
346
347	I have enjoyed Doom Emacs (far more than GNU Emacs) and will likely
348	continue to use it as my main editor for the time being. Org-Mode is
349	certainly the largest factor here, as I far prefer it over Markdown due
350	to its inherent features and detailed markup options. However, working
351	with org-mode on iOS has been a pain and I will have to see if there's
352	an easier way to resolve those issues or if going back to separate
353	Markdown, Reminders, and Calendar apps is easier to work with than an
354	all-in-one org solution.

content/blog/2024-03-15-self-hosting-ddns-updater.org → content/blog/2024-03-15-self-hosting-ddns-updater.md renamed +84 −77

	@@ -1,77 +1,83 @@
1	#+title: Self-Hosting DDNS Updater	1	+++
2	#+date: <2024-03-15 Fri 14:49:59>	2	date = 2024-03-15
3	#+description: A guide to self-hosting the DDNS Updater container.	3	title = "Self-Hosting DDNS Updater"
		4	description = ""
		5	draft = false
		6	+++
4		7
5	#+caption: DDNS Updater Web View	8	![DDNS Updater Web
6	[[https://img.cleberg.net/blog/20240315-ddns-updater/ddns.png]]	9	View](https://img.cleberg.net/blog/20240315-ddns-updater/ddns.png)
7		10
8	[[https://github.com/qdm12/ddns-updater][DDNS Updater]] is a program to	11	[DDNS Updater](https://github.com/qdm12/ddns-updater) is a program to
9	keep DNS A and/or AAAA records updated for multiple DNS providers.	12	keep DNS A and/or AAAA records updated for multiple DNS providers.
10		13
11	If you've read any of my other posts, you'll notice that I have been	14	If you\'ve read any of my other posts, you\'ll notice that I have been
12	searching for and using a few different DDNS updating solutions for	15	searching for and using a few different DDNS updating solutions for
13	years. You'll also notice that I love any projects that offer a Docker	16	years. You\'ll also notice that I love any projects that offer a Docker
14	Compose solution.	17	Compose solution.
15		18
16	Luckily, DDNS Upater fits both of these preferences.	19	Luckily, DDNS Upater fits both of these preferences.
17		20
18	** Installation	21	## Installation
19		22
20	To get started, always make sure to review the project's	23	To get started, always make sure to review the project\'s
21	[[https://github.com/qdm12/ddns-updater/blob/master/README.md][README]].	24	[README](https://github.com/qdm12/ddns-updater/blob/master/README.md).
22	I'll be documenting my steps below, but they may have changed by the	25	I\'ll be documenting my steps below, but they may have changed by the
23	time you read this.	26	time you read this.
24		27
25	The first step is to set up the directories and files required for the	28	The first step is to set up the directories and files required for the
26	project.	29	project.
27		30
28	#+begin_src sh	31	```sh
29	mkdir ~/ddns-updater	32	mkdir ~/ddns-updater
30	mkdir ~/ddns-updater/data	33	mkdir ~/ddns-updater/data
31	touch ~/ddns-updater/data/config.json	34	touch ~/ddns-updater/data/config.json
32	#+end_src	35	```
33		36
34	*** Configuration	37	### Configuration
35		38
36	The main configuration you need to update is the =data/config.json=	39	The main configuration you need to update is the
37	file. There is a large list of supported providers in the README, but	40	`data/config.json` file. There is a large list of supported
38	I'm going to use Cloudflare in this example.	41	providers in the README, but I\'m going to use Cloudflare in this
		42	example.
39		43
40	#+begin_src sh	44	```sh
41	nano ~/ddns-updater/data/config.json	45	nano ~/ddns-updater/data/config.json
42	#+end_src	46	```
43		47
44	When setting up the configuration for Cloudflare, you'll need the	48	When setting up the configuration for Cloudflare, you\'ll need the
45	following:	49	following:
46		50
47	- Required Parameters	51	- Required Parameters
48	- ="zone_identifier"= is the Zone ID of your site from the domain	52	- `"zone_identifier"` is the Zone ID of your site from
49	overview page	53	the domain overview page
50	- ="host"= is your host and can be ="@"=, a subdomain or the wildcard	54	- `"host"` is your host and can be `"@"`, a
51	="*"=. See	55	subdomain or the wildcard `"*"`. See [this issue
52	[[https://github.com/qdm12/ddns-updater/issues/243#issuecomment-928313949][this	56	comment for
53	issue comment for context]].	57	context](https://github.com/qdm12/ddns-updater/issues/243#issuecomment-928313949).
54	- ="ttl"= integer value for record TTL in seconds (specify 1 for	58	- `"ttl"` integer value for record TTL in seconds
55	automatic)	59	(specify 1 for automatic)
56	- One of the following	60	- One of the following ([how to find API
57	([[https://developers.cloudflare.com/fundamentals/api/get-started/][how	61	keys](https://developers.cloudflare.com/fundamentals/api/get-started/)):
58	to find API keys]]):	62	- Email `"email"` and Global API Key
59	- Email ="email"= and Global API Key ="key"=	63	`"key"`
60	- User service key ="user_service_key"=	64	- User service key `"user_service_key"`
61	- API Token ="token"=, configured with DNS edit permissions for your	65	- API Token `"token"`, configured with DNS edit
62	DNS name's zone	66	permissions for your DNS name\'s zone
63	- Optional Parameters	67	- Optional Parameters
64	- ="proxied"= can be set to =true= to use the proxy services of	68	- `"proxied"` can be set to `true` to use
65	Cloudflare	69	the proxy services of Cloudflare
66	- ="ip_version"= can be =ipv4= (A records), or =ipv6= (AAAA records)	70	- `"ip_version"` can be `ipv4` (A records),
67	or =ipv4 or ipv6= (update one of the two, depending on the public	71	or `ipv6` (AAAA records) or
68	ip found). It defaults to =ipv4 or ipv6=.	72	`ipv4 or ipv6` (update one of the two, depending on
69	- ="ipv6_suffix"= is the IPv6 interface identifier suffix to use. It	73	the public ip found). It defaults to `ipv4 or ipv6`.
70	can be for example =0:0:0:0:72ad:8fbb:a54e:bedd/64=. If left empty,	74	- `"ipv6_suffix"` is the IPv6 interface identifier
71	it defaults to no suffix and the raw public IPv6 address obtained is	75	suffix to use. It can be for example
72	used in the record updating.	76	`0:0:0:0:72ad:8fbb:a54e:bedd/64`. If left empty, it
73		77	defaults to no suffix and the raw public IPv6 address obtained
74	#+begin_src conf	78	is used in the record updating.
		79
		80	``` conf
75	{	81	{
76	"settings": [	82	"settings": [
77	{	83	{
	@@ -87,12 +93,12 @@ following:
87	}	93	}
88	]	94	]
89	}	95	}
90	#+end_src	96	```
91		97
92	Once you have configured the provider of your choice, correct the file	98	Once you have configured the provider of your choice, correct the file
93	and directory permissions and ownership.	99	and directory permissions and ownership.
94		100
95	#+begin_src sh	101	```sh
96	cd ~/ddns_updater	102	cd ~/ddns_updater
97	# Owned by user ID of Docker container (1000)	103	# Owned by user ID of Docker container (1000)
98	chown -R 1000 data	104	chown -R 1000 data
	@@ -100,18 +106,18 @@ chown -R 1000 data
100	chmod 700 data	106	chmod 700 data
101	# read access only	107	# read access only
102	chmod 400 data/config.json	108	chmod 400 data/config.json
103	#+end_src	109	```
104		110
105	*** Docker Compose	111	### Docker Compose
106		112
107	After creating the project structure, let's create the	113	After creating the project structure, let\'s create the
108	=docker-compose.yml= file.	114	`docker-compose.yml` file.
109		115
110	#+begin_src sh	116	```sh
111	nano ~/ddns_-pdater/docker-compose.yml	117	nano ~/ddns_-pdater/docker-compose.yml
112	#+end_src	118	```
113		119
114	#+begin_src config	120	``` config
115	version: "3.7"	121	version: "3.7"
116	services:	122	services:
117	ddns-updater:	123	ddns-updater:
	@@ -147,20 +153,20 @@ services:
147	- LOG_CALLER=hidden	153	- LOG_CALLER=hidden
148	- SHOUTRRR_ADDRESSES=	154	- SHOUTRRR_ADDRESSES=
149	restart: always	155	restart: always
150	#+end_src	156	```
151		157
152	After configuring your preferences in the =docker-compose.yml=, launch	158	After configuring your preferences in the
153	the container.	159	`docker-compose.yml`, launch the container.
154		160
155	#+begin_src sh	161	```sh
156	cd ~/ddns-updater	162	cd ~/ddns-updater
157	sudo docker-compose up -d	163	sudo docker-compose up -d
158	#+end_src	164	```
159		165
160	If you've launched this on your local machine, you can launch	166	If you\'ve launched this on your local machine, you can launch
161	=localhost:8097= in your browser to see the results.	167	`localhost:8097` in your browser to see the results.
162		168
163	*** Nginx Reverse Proxy	169	### Nginx Reverse Proxy
164		170
165	If you launched this service on a server, other machine, or just want to	171	If you launched this service on a server, other machine, or just want to
166	access it remotely via a domain name, you can use Nginx as a reverse	172	access it remotely via a domain name, you can use Nginx as a reverse
	@@ -168,13 +174,13 @@ proxy to expose the service publicly.
168		174
169	Start by creating the Nginx configuration file.	175	Start by creating the Nginx configuration file.
170		176
171	#+begin_src sh	177	```sh
172	sudo nano /etc/nginx/sites-available/ddns	178	sudo nano /etc/nginx/sites-available/ddns
173	#+end_src	179	```
174		180
175	Here's a basic example that should work properly.	181	Here\'s a basic example that should work properly.
176		182
177	#+begin_src conf	183	``` conf
178	server {	184	server {
179	# If using 443, remember to include your ssl_certificate	185	# If using 443, remember to include your ssl_certificate
180	# and ssl_certificate_key	186	# and ssl_certificate_key
	@@ -190,12 +196,12 @@ server {
190	# see the full example below if necessary	196	# see the full example below if necessary
191	}	197	}
192	}	198	}
193	#+end_src	199	```
194		200
195	Here's a full example that uses my Authelia authentication service to	201	Here\'s a full example that uses my Authelia authentication service to
196	require authentication before someone can access the web page.	202	require authentication before someone can access the web page.
197		203
198	#+begin_src conf	204	``` conf
199	server {	205	server {
200	if ($host ~ ^[^.]+\.example\.com$) {	206	if ($host ~ ^[^.]+\.example\.com$) {
201	return 301 https://$host$request_uri;	207	return 301 https://$host$request_uri;
	@@ -302,13 +308,14 @@ server {
302	# real_ip_recursive on;	308	# real_ip_recursive on;
303	}	309	}
304	}	310	}
305	#+end_src	311	```
306		312
307	When complete, simply link the file and restart the web server.	313	When complete, simply link the file and restart the web server.
308		314
309	#+begin_src sh	315	```sh
310	sudo ln -s /etc/nginx/sites-available/ddns /etc/nginx/sites-enabled/ddns	316	sudo ln -s /etc/nginx/sites-available/ddns /etc/nginx/sites-enabled/ddns
311	sudo systemctl restart nginx.service	317	sudo systemctl restart nginx.service
312	#+end_src	318	```
313		319
314	Your ddns-updater service will now be available via =ddns.example.com=!	320	Your ddns-updater service will now be available via
		321	`ddns.example.com`!

content/blog/2024-03-29-org-blog.org → content/blog/2024-03-29-org-blog.md renamed +113 −95

	@@ -1,75 +1,87 @@
1	#+title: Blogging in Org-Mode	1	+++
2	#+date: <2024-03-29 Fri 09:00:00>	2	date = 2024-03-29
3	#+description: A guide to blogging with org-mode, no third-party tools required.	3	title = "Blogging in Org-Mode"
4	#+filetags: :dev:	4	description = ""
5	#+slug: org-blog	5	draft = false
6		6	+++
7	First and foremost, apologies to those who subscribe via RSS as I know that my	7
8	feed duplicated itself when I moved this blog over to org-mode last night.	8	First and foremost, apologies to those who subscribe via RSS as I know
9		9	that my feed duplicated itself when I moved this blog over to org-mode
10	This post focuses specifically on the configuration and tools I use to blog from	10	last night.
11	Emacs with Org-Mode and does not focus on Emacs or Org-Mode themselves. Refer to	11
12	the post I wrote about [[/blog/doom-emacs-org-mode.html][Doom Emacs & Org-Mode]] for more information about my base	12	This post focuses specifically on the configuration and tools I use to
13	Emacs configuration.	13	blog from Emacs with Org-Mode and does not focus on Emacs or Org-Mode
14		14	themselves. Refer to the post I wrote about [Doom Emacs &
15	* Weblorg	15	Org-Mode](file:///blog/doom-emacs-org-mode.html) for more information
16		16	about my base Emacs configuration.
17	The first step in blogging with Org-Mode is to choose a method to convert the	17
18	source files to HTML and publish them. The Worg site maintains a nice list of	18	# Weblorg
19	[[https://orgmode.org/worg/org-blog-wiki.html][Blogs and Wikis with Org]], but the tools are inevitably different and	19
20	opinionated, so you'll need to find what works for you.	20	The first step in blogging with Org-Mode is to choose a method to
21		21	convert the source files to HTML and publish them. The Worg site
22	I tried using Jekyll, Hugo, ox-hugo, Nikola, Blorg, org-static-blog, and the	22	maintains a nice list of [Blogs and Wikis with
23	native org-publish functions before finally settling on Weblorg. For one reason	23	Org](https://orgmode.org/worg/org-blog-wiki.html), but the tools are
24	or another, the other solutions were a drastic step down from my previous	24	inevitably different and opinionated, so you\'ll need to find what works
25	workflow that used [[https://www.getzola.org/][Zola]] with Markdown content.	25	for you.
26		26
27	[[https://github.com/emacs-love/weblorg][Weblorg]] is a static site generator for [[https://orgmode.org/][org-mode]], built for use within [[https://www.gnu.org/software/emacs/][Emacs]].	27	I tried using Jekyll, Hugo, ox-hugo, Nikola, Blorg, org-static-blog, and
28	Since it's written in Emacs Lisp, there's no need to install other languages or	28	the native org-publish functions before finally settling on Weblorg. For
29	frameworks to get started. More than that, you can write in any editor you	29	one reason or another, the other solutions were a drastic step down from
30	please and simply invoke the Emacs build process with the =--script= parameter	30	my previous workflow that used [Zola](https://www.getzola.org/) with
31	instead of requiring you to blog inside Emacs.	31	Markdown content.
32		32
33	** Installation	33	[Weblorg](https://github.com/emacs-love/weblorg) is a static site
34		34	generator for [org-mode](https://orgmode.org/), built for use within
35	The [[https://emacs.love/weblorg/doc/index.html][Getting Started]] page details broad installation requirements. I am using	35	[Emacs](https://www.gnu.org/software/emacs/). Since it\'s written in
36	Doom Emacs on macOS, which requires you to add the package to the	36	Emacs Lisp, there\'s no need to install other languages or frameworks to
37	=~/.doom.d/packages.el= file and configure the =publish.el= file slightly	37	get started. More than that, you can write in any editor you please and
38	differently.	38	simply invoke the Emacs build process with the `--script`
39		39	parameter instead of requiring you to blog inside Emacs.
40	To start, add the =htmlize= and =weblorg= packages to Doom, sync the changes,	40
41	and reload.	41	## Installation
42		42
43	#+begin_src sh	43	The [Getting Started](https://emacs.love/weblorg/doc/index.html) page
		44	details broad installation requirements. I am using Doom Emacs on macOS,
		45	which requires you to add the package to the
		46	`~/.doom.d/packages.el` file and configure the
		47	`publish.el` file slightly differently.
		48
		49	To start, add the `htmlize` and `weblorg` packages
		50	to Doom, sync the changes, and reload.
		51
		52	```sh
44	nano ~/.doom.d/packages.el	53	nano ~/.doom.d/packages.el
45	#+end_src	54	```
46		55
47	#+begin_src lisp	56	```lisp
48	(package! htmlize)	57	(package! htmlize)
49	(package! weblorg)	58	(package! weblorg)
50	#+end_src	59	```
51		60
52	#+begin_src sh	61	```sh
53	doom sync	62	doom sync
54	#+end_src	63	```
55		64
56	Either re-open Emacs or hit =SPC h r r= to reload the changes.	65	Either re-open Emacs or hit `SPC h r r` to reload the
		66	changes.
57		67
58	** Configuration	68	## Configuration
59		69
60	Now that I've installed weblorg, I need to configure the project. I'll start by	70	Now that I\'ve installed weblorg, I need to configure the project. I\'ll
61	navigating to my site's source code and creating a =publish.el= file.	71	start by navigating to my site\'s source code and creating a
		72	`publish.el` file.
62		73
63	#+begin_src sh	74	```sh
64	cd ~/Source/cleberg.net && nano publish.el	75	cd ~/Source/cleberg.net && nano publish.el
65	#+end_src	76	```
66		77
67	Since I'm using Doom, Emacs will not automatically load the packages I need	78	Since I\'m using Doom, Emacs will not automatically load the packages I
68	later in the build process. To compensate, my =publish.el= file needs to	79	need later in the build process. To compensate, my
69	explicitly tell Emacs where Doom stores the =htmlize=, =weblorg=, and	80	`publish.el` file needs to explicitly tell Emacs where Doom
70	=templatel= packages.	81	stores the `htmlize`, `weblorg`, and
		82	`templatel` packages.
71		83
72	#+begin_src lisp	84	```lisp
73	;; explicity load packages since I'm using Doom Emacs	85	;; explicity load packages since I'm using Doom Emacs
74	(add-to-list 'load-path "~/.emacs.d/.local/straight/repos/emacs-htmlize")	86	(add-to-list 'load-path "~/.emacs.d/.local/straight/repos/emacs-htmlize")
75	(add-to-list 'load-path "~/.emacs.d/.local/straight/repos/weblorg")	87	(add-to-list 'load-path "~/.emacs.d/.local/straight/repos/weblorg")
	@@ -170,19 +182,21 @@ explicitly tell Emacs where Doom stores the =htmlize=, =weblorg=, and
170		182
171	;; fire the engine and export all the files declared in the routes above	183	;; fire the engine and export all the files declared in the routes above
172	(weblorg-export)	184	(weblorg-export)
173	#+end_src	185	```
174		186
175	* Project	187	# Project
176		188
177	** Structure	189	## Structure
178		190
179	The project structure for weblorg is highly customizable and the main	191	The project structure for weblorg is highly customizable and the main
180	restriction is that the =publish.el= file must point to the correct paths.	192	restriction is that the `publish.el` file must point to the
		193	correct paths.
181		194
182	For my blog, I prefer to keep the blog content out of the top-level directory.	195	For my blog, I prefer to keep the blog content out of the top-level
183	This results in the following structure (shortened for brevity):	196	directory. This results in the following structure (shortened for
		197	brevity):
184		198
185	#+begin_src txt	199	``` txt
186	.build/	200	.build/
187	content/	201	content/
188	blog/	202	blog/
	@@ -206,54 +220,58 @@ theme/
206	wiki.html	220	wiki.html
207	build.sh	221	build.sh
208	publish.el	222	publish.el
209	#+end_src	223	```
210		224
211	This is simply my preferred structure and you can alter it to fit your needs.	225	This is simply my preferred structure and you can alter it to fit your
212	The key here really is that you can customize at will, as long as the	226	needs. The key here really is that you can customize at will, as long as
213	=publish.el= file matches.	227	the `publish.el` file matches.
214		228
215	** Build & Deploy	229	## Build & Deploy
216		230
217	Once you're content with the status of the project, you're ready to build and	231	Once you\'re content with the status of the project, you\'re ready to
218	deploy the blog.	232	build and deploy the blog.
219		233
220	My process utilizes a =build.sh= script that combines the steps I take every	234	My process utilizes a `build.sh` script that combines the
221	time.	235	steps I take every time.
222		236
223	#+begin_src sh	237	```sh
224	touch build.sh && chmod +x build.sh && nano build.sh	238	touch build.sh && chmod +x build.sh && nano build.sh
225	#+end_src	239	```
226		240
227	Within this script, I do the following:	241	Within this script, I do the following:
228		242
229	1. Remove any files within the =.build= directory that I use to store published	243	1. Remove any files within the `.build` directory that I use
230	files.	244	to store published files.
231	2. Set the environment variable to =prod= to ensure the =base_url= matches my	245	2. Set the environment variable to `prod` to ensure the
232	configuration in =publish.el=.	246	`base_url` matches my configuration in
233	3. Build the site with Emacs & =publish.el=.	247	`publish.el`.
234	4. Use =scp= to copy files to my site's public directory on my server.	248	3. Build the site with Emacs & `publish.el`.
		249	4. Use `scp` to copy files to my site\'s public directory on
		250	my server.
235		251
236	#+begin_src sh	252	```sh
237	rm -rf .build/* && \	253	rm -rf .build/* && \
238	ENV=prod emacs --script publish.el && \	254	ENV=prod emacs --script publish.el && \
239	scp -r .build/* ubuntu:/var/www/cleberg.net/	255	scp -r .build/* ubuntu:/var/www/cleberg.net/
240	#+end_src	256	```
241		257
242	*** Time to Build	258	### Time to Build
243		259
244	My only current complaints are:	260	My only current complaints are:
245		261
246	1. Errors messages are not helpful. It takes work to determine what the error is	262	1. Errors messages are not helpful. It takes work to determine what the
247	and where it's coming from. I generally have to sit and watch the build	263	error is and where it\'s coming from. I generally have to sit and
248	process to see the file that weblorg pubslishes right before the error	264	watch the build process to see the file that weblorg pubslishes
249	occurred.	265	right before the error occurred.
250	2. The build process re-builds every single file on each run, which takes a long	266	2. The build process re-builds every single file on each run, which
251	time for a blog of my size. See below for the last time I measured.	267	takes a long time for a blog of my size. See below for the last time
		268	I measured.
252		269
253	#+begin_src sh	270	```sh
254	> time ./build.sh	271	> time ./build.sh
255		272
256	./build.sh 35.46s user 0.59s system 85% cpu 41.965 total	273	./build.sh 35.46s user 0.59s system 85% cpu 41.965 total
257	#+end_src	274	```
258		275
259	Overall, I have thoroughly enjoyed using weblog and will continue to use it going forward until I find something better.	276	Overall, I have thoroughly enjoyed using weblog and will continue to use
		277	it going forward until I find something better.

content/blog/2024-04-06-convert-onenote-to-markdown.md added +115

@@ -0,0 +1,115 @@
	1	+++
	2	date = 2024-04-06
	3	title = "Convert OneNote to Markdown or Org-Mode"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	If you\'re looking to convert your OneNote content to another format,
	9	such as Markdown or Org-Mode, you\'re in luck. I use a solution that
	10	doesn\'t require other programs, such as Evernote or Notion. Personally,
	11	I used this solution on a managed corporate laptop that doesn\'t allow
	12	installation of other programs like these.
	13
	14	This solution uses OneNote and Pandoc on Windows 10.
	15
	16	# Export OneNote Content to Word
	17
	18	To start, export any pages or tabs from OneNote to the Word format
	19	(`.docx`):
	20
	21	1. Open OneNote desktop.
	22	2. Select `File` and then `Export`.
	23	3. Select the scope of content to export, such as `Tab` or
	24	`Page`.
	25	4. Name and save the file in an easy to remember location. I recommend
	26	your Downloads or Desktop folder.
	27
	28	See below for a visual walkthrough of the export process.
	29
	30	![OneNote
	31	Notebook](https://img.cleberg.net/blog/20240406-convert-onenote-to-markdown/onenote.png)
	32
	33	![OneNote Section Export
	34	Options](https://img.cleberg.net/blog/20240406-convert-onenote-to-markdown/export.png)
	35
	36	![Exported Word
	37	Document](https://img.cleberg.net/blog/20240406-convert-onenote-to-markdown/word.png)
	38
	39	# Download Pandoc
	40
	41	Start by downloading Pandoc from their [GitHub
	42	releases](https://github.com/jgm/pandoc/releases) page. I cannot install
	43	`.msi` files on my corporate laptop, so I downloaded the
	44	`pandoc-3.1.12.3-windows-x86_64.zip` file, which contains a
	45	simple `.exe` file that you do not need to install - you will
	46	simply run it from the command line below.
	47
	48	Once downloaded, unzip the archive and move the `pandoc.exe`
	49	file to the same folder where your Word documents were saved above. If
	50	you prefer, you can move this file to an easier location, such as
	51	`C:\Users\youruser\Downloads`.
	52
	53	# Convert Word to Markdown
	54
	55	In this example, I will be converting the Word documents to Markdown,
	56	but Pandoc supports [a ton of different formats for
	57	conversion](https://github.com/jgm/pandoc?tab=readme-ov-file#the-universal-markup-converter).
	58	Choose the format you prefer and then modify the following commands as
	59	needed.
	60
	61	To perform the conversion, open the Command Prompt. If you can\'t find
	62	it, open the start menu and search for it.
	63
	64	Within the command prompt, navigate to the directory where you stored
	65	the `pandoc.exe` file and the Word documents.
	66
	67	```ps1
	68	cd "C:\Users\yourusername\Downloads"
	69	```
	70
	71	You can verify that you\'re in the correct directory with the
	72	`dir` command.
	73
	74	```ps1
	75	dir
	76	```
	77
	78	Once you have verified that you have the command prompt open in the
	79	correct directory with the `pandoc.exe` and the Word
	80	documents, you can run the following loop to convert all Word documents
	81	to Markdown.
	82
	83	```ps1
	84	for %f in (*.docx) do (pandoc.exe --extract-media=. --wrap=preserve "%f" -o "%f.md")
	85	```
	86
	87	This loop will perform the following actions:
	88
	89	1. Find all documents matching the pattern `*.docx`, which
	90	means all Word documents ending with that file extension.
	91	2. Iterate through all files found in step 1.
	92	3. For each file, perform the pandoc command.
	93	4. Within the pandoc command, `--extract-media` saves all
	94	media found in the files to the current folder, with pandoc
	95	automatically creating a `media` subfolder to hold all
	96	images.
	97	5. Within the pandoc command, `--wrap=preserve` will attempt
	98	to prseerve the wrapping from the source document.
	99	6. Within the pandoc command, the final step is to specify the output
	100	path with `-o`. This option adds the `.md`
	101	file extension to recognize the output files as Markdown files.
	102
	103	![Pandoc
	104	Conversion](https://img.cleberg.net/blog/20240406-convert-onenote-to-markdown/command.png)
	105
	106	If you want to export to another format, simply specify the
	107	`-f=`/`--from=` and `-t=`/`--to=` options.
	108
	109	For example, you can convert the Word document to org-mode. You can also
	110	convert to one format and subsequently convert to other formats as
	111	needed.
	112
	113	```ps1
	114	pandoc.exe -f docx -t org file.docx
	115	```

content/blog/2024-04-06-convert-onenote-to-markdown.org deleted −102

	@@ -1,102 +0,0 @@
1	#+title: Convert OneNote to Markdown (or Org-Mode)
2	#+date: <2024-04-06 Sat 10:00:00>
3	#+description: Learn how to convert OneNote pages or tabs to another format, such as Markdown or Org-Mode.
4	#+filetags: :dev:
5	#+slug: convert-onenote-to-markdown
6
7	If you're looking to convert your OneNote content to another format, such as
8	Markdown or Org-Mode, you're in luck. I use a solution that doesn't require
9	other programs, such as Evernote or Notion. Personally, I used this solution on
10	a managed corporate laptop that doesn't allow installation of other programs
11	like these.
12
13	This solution uses OneNote and Pandoc on Windows 10.
14
15	* Export OneNote Content to Word
16
17	To start, export any pages or tabs from OneNote to the Word format (=.docx=):
18
19	1. Open OneNote desktop.
20	2. Select =File= and then =Export=.
21	3. Select the scope of content to export, such as =Tab= or =Page=.
22	4. Name and save the file in an easy to remember location. I recommend your
23	Downloads or Desktop folder.
24
25	See below for a visual walkthrough of the export process.
26
27	#+caption: OneNote Notebook
28	[[https://img.cleberg.net/blog/20240406-convert-onenote-to-markdown/onenote.png]]
29
30	#+caption: OneNote Section Export Options
31	[[https://img.cleberg.net/blog/20240406-convert-onenote-to-markdown/export.png]]
32
33	#+caption: Exported Word Document
34	[[https://img.cleberg.net/blog/20240406-convert-onenote-to-markdown/word.png]]
35
36	* Download Pandoc
37
38	Start by downloading Pandoc from their [[https://github.com/jgm/pandoc/releases][GitHub releases]] page. I cannot install
39	=.msi= files on my corporate laptop, so I downloaded the
40	=pandoc-3.1.12.3-windows-x86_64.zip= file, which contains a simple =.exe= file
41	that you do not need to install - you will simply run it from the command line
42	below.
43
44	Once downloaded, unzip the archive and move the =pandoc.exe= file to the same
45	folder where your Word documents were saved above. If you prefer, you can move
46	this file to an easier location, such as =C:\Users\youruser\Downloads=.
47
48	* Convert Word to Markdown
49
50	In this example, I will be converting the Word documents to Markdown, but Pandoc
51	supports [[https://github.com/jgm/pandoc?tab=readme-ov-file#the-universal-markup-converter][a ton of different formats for conversion]]. Choose the format you prefer
52	and then modify the following commands as needed.
53
54	To perform the conversion, open the Command Prompt. If you can't find it, open
55	the start menu and search for it.
56
57	Within the command prompt, navigate to the directory where you stored the
58	=pandoc.exe= file and the Word documents.
59
60	#+begin_src cli
61	cd "C:\Users\yourusername\Downloads"
62	#+end_src
63
64	You can verify that you're in the correct directory with the =dir= command.
65
66	#+begin_src cli
67	dir
68	#+end_src
69
70	Once you have verified that you have the command prompt open in the correct
71	directory with the =pandoc.exe= and the Word documents, you can run the
72	following loop to convert all Word documents to Markdown.
73
74	#+begin_src cli
75	for %f in (*.docx) do (pandoc.exe --extract-media=. --wrap=preserve "%f" -o "%f.md")
76	#+end_src
77
78	This loop will perform the following actions:
79
80	1. Find all documents matching the pattern =*.docx=, which means all Word
81	documents ending with that file extension.
82	2. Iterate through all files found in step 1.
83	3. For each file, perform the pandoc command.
84	4. Within the pandoc command, =--extract-media= saves all media found in the
85	files to the current folder, with pandoc automatically creating a =media=
86	subfolder to hold all images.
87	5. Within the pandoc command, =--wrap=preserve= will attempt to prseerve the
88	wrapping from the source document.
89	6. Within the pandoc command, the final step is to specify the output path with
90	=-o=. This option adds the =.md= file extension to recognize the output files
91	as Markdown files.
92
93	#+caption: Pandoc Conversion
94	[[https://img.cleberg.net/blog/20240406-convert-onenote-to-markdown/command.png]]
95
96	If you want to export to another format, simply specify the =-f=/=--from= and =-t=/=--to= options.
97
98	For example, you can convert the Word document to org-mode. You can also convert to one format and subsequently convert to other formats as needed.
99
100	#+begin_src cli
101	pandoc.exe -f docx -t org file.docx
102	#+end_src

content/blog/2024-04-08-docker-local-web-server.md added +149

@@ -0,0 +1,149 @@
	1	+++
	2	date = 2024-04-08
	3	title = "Using Docker Desktop to Create a Development Web Server"
	4	description = ""
	5	draft = false
	6	+++
	7
	8	When developing websites locally, I often use a simple Python web server
	9	to observe the changes.
	10
	11	```sh
	12	python3 -m http.server
	13	```
	14
	15	However, this approach has its limitations. For example, this approach
	16	does not enable logging or access controls. You also need to customize
	17	`SimpleHTTPServer` if you have advanced needs from your web
	18	server.
	19
	20	So, I went to find an alternative that is almost as easy and far more
	21	extensible and found Docker Desktop to be a suitable replacement.
	22
	23	# Docker Desktop
	24
	25	## Installation
	26
	27	[Docker Desktop](https://www.docker.com/products/docker-desktop/) is a
	28	desktop GUI for the phenomenal Docker container software. This allows
	29	you to manage containers, images, volumes, environments, and extensions
	30	via an easy-to-use GUI.
	31
	32	To install, open the link above and click the `Download`
	33	button for your platform. I\'m going through this process on an M2
	34	Macbook, so I downloaded the Mac - Apple Chip version.
	35
	36	Open the installer and follow the installation process until the
	37	application finishes the installation process.
	38
	39	![Docker Desktop on
	40	macOS](https://img.cleberg.net/blog/20240408-docker-local-web-server/docker-desktop.png)
	41
	42	## Creating an Nginx Container
	43
	44	I prefer to use the command line to create containers, so the following
	45	commands will be input via the terminal.
	46
	47	The following command will create a container, using the
	48	`nginx` image:
	49
	50	1. `-d`: Run this container as a daemon (detach)
	51	2. `-p`: Allocate a port in the format
	52	`<external>:<internal>`
	53	3. `-i`: Keep STDIN open even if not attached
	54	4. `-t`: Allocate a pseudo-TTY
	55	5. `-p`: Allocate a port in the format
	56	`<external>:<internal>`
	57	6. `--rm`: Remove the container once it\'s done running
	58
	59	```sh
	60	docker run -it --rm -d -p 8000:80 --name web nginx
	61	```
	62
	63	You can navigate to <http://localhost:8000> to see the resulting page.
	64
	65	![Default Nginx
	66	Container](https://img.cleberg.net/blog/20240408-docker-local-web-server/default-container.png)
	67
	68	## Customizing the Nginx Container
	69
	70	Now that I have a container running the Nginx web server, I need to link
	71	some volumes so that I can modify the site configuration and provide the
	72	web files to serve.
	73
	74	Let\'s start with the new command, which adds two volumes:
	75
	76	1. `<your_content>:/usr/share/nginx/html`: This is the
	77	directory where you will provide the web pages for the server to
	78	serve.
	79	2. `<your_config>:/etc/nginx/conf.d/default.conf`: This is
	80	the Nginx configuration file for your site.
	81
	82	To see the updates, you can delete the previous container in the GUI or
	83	run `docker stop web` to stop the container. Once stopped,
	84	you can run the new `docker run` command below.
	85
	86	```sh
	87	docker run -it -d -p 8000:80 --name web -v ~/Source/cleberg.net/.build:/usr/share/nginx/html -v ~/Source/cleberg.net/nginx-config.conf:/etc/nginx/conf.d/default.conf nginx
	88	```
	89
	90	Here\'s an example of my development configuration file.
	91
	92	``` conf
	93	# nginx-config.conf
	94	server {
	95	server_name cleberg.net www.cleberg.net;
	96
	97	root /usr/share/nginx/html;
	98	index index.html;
	99	autoindex on;
	100
	101	access_log /var/log/nginx/cleberg.net.access.log;
	102	error_log /var/log/nginx/cleberg.net.error.log;
	103
	104	location / {
	105	try_files $uri $uri/ =404;
	106	}
	107
	108	listen [::]:80;
	109	listen 80;
	110	}
	111	```
	112
	113	![](https://img.cleberg.net/blog/20240408-docker-local-web-server/custom-container.png)
	114
	115	# Customizing Deployment Actions
	116
	117	I am currently blogging with [weblorg](https://emacs.love/weblorg/),
	118	which uses a custom `publish.el` file to build the static
	119	site. Within this file, I have configured my deployment process to check
	120	for the `ENV` variable in thesh and if it\'s set to
	121	`prod`, the script will set the base URLs to
	122	`https://cleberg.net`. If not, it sets the base URLs to
	123	`localhost:8000` (which matches the port used in the
	124	container above).
	125
	126	Therefore, I have modified my `build.sh` script to build with
	127	`localhost` URLs if `ENV` is not set to
	128	`prod`. It also prevents the build process from sending the
	129	built files to the production web server.
	130
	131	```sh
	132	#!/bin/bash
	133
	134	if [ "$ENV" == "prod" ]; then
	135	echo "Environment = Production" && \
	136	rm -rf .build/* && \
	137	emacs --script publish.el && \
	138	scp -r .build/* ubuntu:/var/www/cleberg.net/
	139	else
	140	echo "Environment = Development" && \
	141	rm -rf .build/* && \
	142	emacs --script publish.el
	143	fi
	144	```
	145
	146	You can modify the container in numerous ways and this approach allows
	147	you to create complex scenarios for your web development purposes. I
	148	highly recommend switching over to a container-based approach for
	149	simple, local web development.

content/blog/2024-04-08-docker-local-web-server.org deleted −137

	@@ -1,137 +0,0 @@
1	#+title: Using Docker Desktop to Create a Development Web Server
2	#+date: <2024-04-08 Mon 10:05:45>
3	#+description: Learn how to launch local web servers with Docker Desktop.
4	#+filetags: dev, nginx
5	#+slug: docker-local-web-server
6
7	When developing websites locally, I often use a simple Python web server to
8	observe the changes.
9
10	#+begin_src shell
11	python3 -m http.server
12	#+end_src
13
14	However, this approach has its limitations. For example, this approach does not
15	enable logging or access controls. You also need to customize =SimpleHTTPServer=
16	if you have advanced needs from your web server.
17
18	So, I went to find an alternative that is almost as easy and far more extensible
19	and found Docker Desktop to be a suitable replacement.
20
21	* Docker Desktop
22
23	** Installation
24
25	[[https://www.docker.com/products/docker-desktop/][Docker Desktop]] is a desktop GUI for the phenomenal Docker container software.
26	This allows you to manage containers, images, volumes, environments, and
27	extensions via an easy-to-use GUI.
28
29	To install, open the link above and click the =Download= button for your
30	platform. I'm going through this process on an M2 Macbook, so I downloaded the
31	Mac - Apple Chip version.
32
33	Open the installer and follow the installation process until the application
34	finishes the installation process.
35
36	#+caption: Docker Desktop on macOS
37	[[https://img.cleberg.net/blog/20240408-docker-local-web-server/docker-desktop.png]]
38
39	** Creating an Nginx Container
40
41	I prefer to use the command line to create containers, so the following commands
42	will be input via the terminal.
43
44	The following command will create a container, using the =nginx= image:
45
46	1. =-d=: Run this container as a daemon (detach)
47	2. =-p=: Allocate a port in the format =<external>:<internal>=
48	3. =-i=: Keep STDIN open even if not attached
49	4. =-t=: Allocate a pseudo-TTY
50	5. =-p=: Allocate a port in the format =<external>:<internal>=
51	6. =--rm=: Remove the container once it's done running
52
53	#+begin_src shell
54	docker run -it --rm -d -p 8000:80 --name web nginx
55	#+end_src
56
57	You can navigate to [[http://localhost:8000]] to see the resulting page.
58
59	#+caption: Default Nginx Container
60	[[https://img.cleberg.net/blog/20240408-docker-local-web-server/default-container.png]]
61
62	** Customizing the Nginx Container
63
64	Now that I have a container running the Nginx web server, I need to link some
65	volumes so that I can modify the site configuration and provide the web files to
66	serve.
67
68	Let's start with the new command, which adds two volumes:
69
70	1. =<your_content>:/usr/share/nginx/html=: This is the directory where you will
71	provide the web pages for the server to serve.
72	2. =<your_config>:/etc/nginx/conf.d/default.conf=: This is the Nginx
73	configuration file for your site.
74
75	To see the updates, you can delete the previous container in the GUI or run
76	=docker stop web= to stop the container. Once stopped, you can run the new
77	=docker run= command below.
78
79	#+begin_src shell
80	docker run -it -d -p 8000:80 --name web -v ~/Source/cleberg.net/.build:/usr/share/nginx/html -v ~/Source/cleberg.net/nginx-config.conf:/etc/nginx/conf.d/default.conf nginx
81	#+end_src
82
83	Here's an example of my development configuration file.
84
85	#+begin_src conf
86	# nginx-config.conf
87	server {
88	server_name cleberg.net www.cleberg.net;
89
90	root /usr/share/nginx/html;
91	index index.html;
92	autoindex on;
93
94	access_log /var/log/nginx/cleberg.net.access.log;
95	error_log /var/log/nginx/cleberg.net.error.log;
96
97	location / {
98	try_files $uri $uri/ =404;
99	}
100
101	listen [::]:80;
102	listen 80;
103	}
104	#+end_src
105
106	[[https://img.cleberg.net/blog/20240408-docker-local-web-server/custom-container.png]]
107
108	* Customizing Deployment Actions
109
110	I am currently blogging with [[https://emacs.love/weblorg/][weblorg]], which uses a custom =publish.el= file to
111	build the static site. Within this file, I have configured my deployment process
112	to check for the =ENV= variable in the shell and if it's set to =prod=, the
113	script will set the base URLs to =https://cleberg.net=. If not, it sets the base
114	URLs to =localhost:8000= (which matches the port used in the container above).
115
116	Therefore, I have modified my =build.sh= script to build with =localhost= URLs
117	if =ENV= is not set to =prod=. It also prevents the build process from sending
118	the built files to the production web server.
119
120	#+begin_src shell
121	#!/bin/bash
122
123	if [ "$ENV" == "prod" ]; then
124	echo "Environment = Production" && \
125	rm -rf .build/* && \
126	emacs --script publish.el && \
127	scp -r .build/* ubuntu:/var/www/cleberg.net/
128	else
129	echo "Environment = Development" && \
130	rm -rf .build/* && \
131	emacs --script publish.el
132	fi
133	#+end_src
134
135	You can modify the container in numerous ways and this approach allows you to
136	create complex scenarios for your web development purposes. I highly recommend
137	switching over to a container-based approach for simple, local web development.

content/blog/2024-04-18-mu4e.org → content/blog/2024-04-18-mu4e.md renamed +127 −104

	@@ -1,77 +1,86 @@
1	#+title: Email in Doom Emacs with Mu4e on macOS	1	+++
2	#+date: <2024-04-18 Thu 10:49:00>	2	date = 2024-04-18
3	#+description: A short tutorial on configuring the Mu4e email client for Doom Emacs.	3	title = "Email in Doom Emacs with Mu4e on macOS"
4	#+filetags: emacs, org-mode, productivity	4	description = ""
5	#+slug: mu4e	5	draft = false
6		6	+++
7	This post was heavily inspired by [[https://macowners.club/posts/email-emacs-mu4e-macos/][Email setup in Emacs with Mu4e on macOS]], but	7
8	with my own tweaks for a single-account configuration and some Doom-specific	8	This post was heavily inspired by [Email setup in Emacs with Mu4e on
		9	macOS](https://macowners.club/posts/email-emacs-mu4e-macos/), but with
		10	my own tweaks for a single-account configuration and some Doom-specific
9	configurations.	11	configurations.
10		12
11	* Overview	13	# Overview
12		14
13	[[https://github.com/emacsmirror/mu4e][Mu4e]] is an Emacs-based email client based on [[https://www.djcbsoftware.nl/code/mu/][mu]], an indexer that stores email in	15	[Mu4e](https://github.com/emacsmirror/mu4e) is an Emacs-based email
14	the Maildir format.	16	client based on [mu](https://www.djcbsoftware.nl/code/mu/), an indexer
		17	that stores email in the Maildir format.
15		18
16	This blog post covers the installation of Mu4e in Doom Emacs on macOS. This	19	This blog post covers the installation of Mu4e in Doom Emacs on macOS.
17	guide should be very similar to GNU Emacs and Linux-based systems, with a few	20	This guide should be very similar to GNU Emacs and Linux-based systems,
18	tweaks required in the various configuration files.	21	with a few tweaks required in the various configuration files.
		22
		23	# Installation
		24
		25	## Prerequisites
		26
		27	### Create the Folder Structure
19		28
20	* Installation
21	** Prerequisites
22	*** Create the Folder Structure
23	Start by creating the base folder structure:	29	Start by creating the base folder structure:
24		30
25	#+begin_src sh	31	```sh
26	mkdir ~/.maildir	32	mkdir ~/.maildir
27	mkdir ~/.maildir/example # use whatever name you want to call your email account	33	mkdir ~/.maildir/example # use whatever name you want to call your email account
28	mkdir ~/.maildir/certificates # used to store system root certificates	34	mkdir ~/.maildir/certificates # used to store system root certificates
29	#+end_src	35	```
30		36
31	*** Store Email Account Passwords in macOS Keychain	37	### Store Email Account Passwords in macOS Keychain
32	Next, I will be using the macOS Keychain to store my email account passwords
33	using the command below.
34		38
35	#+begin_src sh	39	Next, I will be using the macOS Keychain to store my email account
		40	passwords using the command below.
		41
		42	```sh
36	security add-generic-password -s mu4e-example -a you@example.com -w	43	security add-generic-password -s mu4e-example -a you@example.com -w
37	#+end_src	44	```
38		45
39	This will prompt you to input your password twice to confirm. Keep the	46	This will prompt you to input your password twice to confirm. Keep the
40	=mu4e-example= name in mind, as you will need to reference it later in the IMAP	47	`mu4e-example` name in mind, as you will need to reference it
41	and SMTP configuration files.	48	later in the IMAP and SMTP configuration files.
42		49
43	*** Store Root Certificates	50	### Store Root Certificates
44		51
45	In order to use IMAP and SMTP, we need to provide certificates to the local	52	In order to use IMAP and SMTP, we need to provide certificates to the
46	services. We will use the macOS defaults for this.	53	local services. We will use the macOS defaults for this.
47		54
48	1. Open =Keychain Access.app=.	55	1. Open `Keychain Access.app`.
49	2. Select =System Roots= in the sidebar.	56	2. Select `System Roots` in the sidebar.
50	3. Select all items with =CMD + a=.	57	3. Select all items with `CMD + a`.
51	4. Export selected items with =SHIFT + CMD + a= to the file	58	4. Export selected items with `SHIFT + CMD + a` to the file
52	=~/.maildir/certificates/root-certificates.pem=.	59	`~/.maildir/certificates/root-certificates.pem`.
53		60
54	*** Install Dependencies	61	### Install Dependencies
55		62
56	Install =mbsync= (via =isync=) to fetch emails via IMAP, =mu= to index emails,	63	Install `mbsync` (via `isync`) to fetch emails via
57	and =msmtp= to send emails via SMTP.	64	IMAP, `mu` to index emails, and `msmtp` to send
		65	emails via SMTP.
58		66
59	#+begin_src sh	67	```sh
60	brew install mu isync msmtp	68	brew install mu isync msmtp
61	#+end_src	69	```
62		70
63	** Installing Mu4e	71	## Installing Mu4e
64		72
65	Within Doom Emacs, we can install Mu4e by enabling the package.	73	Within Doom Emacs, we can install Mu4e by enabling the package.
66		74
67	#+begin_src sh	75	```sh
68	nano ~/.doom.d/init.el	76	nano ~/.doom.d/init.el
69	#+end_src	77	```
70		78
71	In this file, uncomment the =mu4e= line within the =:email= section. You can	79	In this file, uncomment the `mu4e` line within the
72	also enable the =+org= and =+gmail= options if you prefer.	80	`:email` section. You can also enable the `+org`
		81	and `+gmail` options if you prefer.
73		82
74	#+begin_src elisp	83	```lisp
75	(doom! :input	84	(doom! :input
76	...	85	...
77	:email	86	:email
	@@ -79,32 +88,35 @@ also enable the =+org= and =+gmail= options if you prefer.
79	;;(mu4e +org +gmail)	88	;;(mu4e +org +gmail)
80	...	89	...
81	(default +bindings +smartparens))	90	(default +bindings +smartparens))
82	#+end_src	91	```
		92
		93	# Configuration
83		94
84	* Configuration	95	As an overall suggestion, I create the following configuration files in
85	As an overall suggestion, I create the following configuration files in the	96	the `~/.maildir` directory and using symlinks to their proper
86	=~/.maildir= directory and using symlinks to their proper locations so that I	97	locations so that I can backup and restore these files easily.
87	can backup and restore these files easily.
88		98
89	#+begin_src sh	99	```sh
90	touch ~/.maildir/.mbsyncrc && \	100	touch ~/.maildir/.mbsyncrc && \
91	touch ~/.maildir/.msmtprc && \	101	touch ~/.maildir/.msmtprc && \
92	ln -s /Users/username/.maildir/.mbsyncrc /Users/username/.mbsyncrc && \	102	ln -s /Users/username/.maildir/.mbsyncrc /Users/username/.mbsyncrc && \
93	ln -s /Users/username/.maildir/.msmtprc /Users/username/.msmtprc	103	ln -s /Users/username/.maildir/.msmtprc /Users/username/.msmtprc
94	#+end_src	104	```
		105
		106	You can also create these files in your home directory and skip the
		107	symlinking process above.
95		108
96	You can also create these files in your home directory and skip the symlinking	109	## IMAP
97	process above.
98		110
99	** IMAP	111	Next, let\'s configure `mbsync` in the file created above.
100	Next, let's configure =mbsync= in the file created above. Paste the following	112	Paste the following information and customize it to match your mail
101	information and customize it to match your mail provider's information.	113	provider\'s information.
102		114
103	#+begin_src sh	115	```sh
104	nano ~/.maildir/.mbsyncrc	116	nano ~/.maildir/.mbsyncrc
105	#+end_src	117	```
106		118
107	#+begin_src conf	119	``` conf
108	IMAPAccount example	120	IMAPAccount example
109	Host imap.example.com	121	Host imap.example.com
110	User dummy@example.com	122	User dummy@example.com
	@@ -130,44 +142,52 @@ Create Near
130	Sync All	142	Sync All
131	Expunge Both	143	Expunge Both
132	SyncState *	144	SyncState *
133	#+end_src	145	```
134		146
135	** SMTP	147	## SMTP
136	Next, let's configured =msmtprc= in the file created above. Paste the following
137	information and customize it to match your mail provider's information.
138		148
139	#+begin_src sh	149	Next, let\'s configured `msmtprc` in the file created above.
		150	Paste the following information and customize it to match your mail
		151	provider\'s information.
		152
		153	```sh
140	nano ~/.maildir/.msmtprc	154	nano ~/.maildir/.msmtprc
141	#+end_src	155	```
142		156
143	,#+begin_src conf	157	```conf
		158	# Set default values for all the accounts.
144	defaults	159	defaults
145	logfile ~/.maildir/msmtp.log	160	logfile ~/.maildir/msmtp.log
146	tls_trust_file ~/.maildir/certificates/root-certificates.pem	161	tls_trust_file ~/.maildir/certificates/root-certificates.pem
147		162
148	account example	163	# ======================================================================
		164
		165	account startmail
149	auth on	166	auth on
150	host smtp.example.com	167	host smtp.startmail.com
151	port 465	168	port 465
152	protocol smtp	169	protocol smtp
153	from you@example.com	170	from hello@cleberg.net
154	user you@example.com	171	user hello@cleberg.net
155	passwordeval security find-generic-password -s mu4e-example -a you@example.com -w	172	passwordeval security find-generic-password -s startmail -a hello@cleberg.net -w
156	tls on	173	tls on
157	tls_starttls off	174	tls_starttls off
158		175
159	account default : example	176	# ======================================================================
160	#+end_src	177
		178	account default : startmail
		179	```
161		180
162	** Doom Emacs	181	## Doom Emacs
163	Finally, we need to configure Doom Emacs to use the proper packages and set some
164	variables and functions.
165		182
166	#+begin_src sh	183	Finally, we need to configure Doom Emacs to use the proper packages and
		184	set some variables and functions.
		185
		186	```sh
167	nano ~/.doom.d/config.el	187	nano ~/.doom.d/config.el
168	#+end_src	188	```
169		189
170	#+begin_src elisp	190	```lisp
171	;; load packages and programs	191	;; load packages and programs
172	(use-package mu4e	192	(use-package mu4e
173	:load-path "/Users/username/.emacs.d/modules/email/mu4e/")	193	:load-path "/Users/username/.emacs.d/modules/email/mu4e/")
	@@ -251,50 +271,53 @@ nano ~/.doom.d/config.el
251		271
252	;; mu4e address completion	272	;; mu4e address completion
253	(add-hook 'mu4e-compose-mode-hook 'company-mode)	273	(add-hook 'mu4e-compose-mode-hook 'company-mode)
254	#+end_src	274	```
255		275
256	Be sure to sync Doom to update the current configurations.	276	Be sure to sync Doom to update the current configurations.
257		277
258	#+begin_src sh	278	```sh
259	doom sync	279	doom sync
260	#+end_src	280	```
		281
		282	If you have Doom open, execute `SPC h r r` to reload the new
		283	configurations.
261		284
262	If you have Doom open, execute =SPC h r r= to reload the new configurations.	285	# Initial Sync
263		286
264	* Initial Sync	287	Once you have configured all of the relevant files, you can perform an
265	Once you have configured all of the relevant files, you can perform an initial	288	initial sync. Note that you can perform syncing within Mu4e itself afer
266	sync. Note that you can perform syncing within Mu4e itself afer this.	289	this.
267		290
268	#+begin_src sh	291	```sh
269	mbsync -aV	292	mbsync -aV
270	#+end_src	293	```
271		294
272	Once you sync the data, you can index the emails.	295	Once you sync the data, you can index the emails.
273		296
274	#+begin_src sh	297	```sh
275	mu init -m ~/.maildir --my-address you@example.com && \	298	mu init -m ~/.maildir --my-address you@example.com && \
276	mu index	299	mu index
277	#+end_src	300	```
278		301
279	The emails will now to be ready to use!	302	The emails will now to be ready to use!
280		303
281	* Screenshots	304	# Screenshots
282		305
283	You can now launch Doom and open Mu4e with =SPC o m=. You can also explore the	306	You can now launch Doom and open Mu4e with `SPC o m`. You can
284	Mu4e options with =SPC : mu4e=.	307	also explore the Mu4e options with `SPC : mu4e`.
285		308
286	The home page shows various options and metdata about the account you've opened.	309	The home page shows various options and metdata about the account
		310	you\'ve opened.
287		311
288	#+caption: Mu4e Home Page	312	![Mu4e Home Page](https://img.cleberg.net/blog/20240418-mu4e/mu4e.png)
289	[[https://img.cleberg.net/blog/20240418-mu4e/mu4e.png]]
290		313
291	When composing an email, you can see the metadata fields at the top and compose	314	When composing an email, you can see the metadata fields at the top and
292	the message below the indicator line.	315	compose the message below the indicator line.
293		316
294	#+caption: Composition Screen	317	![Composition
295	[[https://img.cleberg.net/blog/20240418-mu4e/draft.png]]	318	Screen](https://img.cleberg.net/blog/20240418-mu4e/draft.png)
296		319
297	When in a folder, you can view emails in a pane and perform actions as needed.	320	When in a folder, you can view emails in a pane and perform actions as
		321	needed.
298		322
299	#+caption: Inbox	323	![Inbox](https://img.cleberg.net/blog/20240418-mu4e/inbox.png)
300	[[https://img.cleberg.net/blog/20240418-mu4e/inbox.png]]

content/blog/_index.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Blog"
	3	sort_by = "date"
	4	template = "blog.html"
	5	+++\ No newline at end of file

content/index.org deleted −2

	@@ -1,2 +0,0 @@
1	#+title: cleberg.net
2	#+description: Just a blip of ones and zeroes.

content/salary.md added +35

@@ -0,0 +1,35 @@
	1	+++
	2	title = "Salary"
	3	draft = false
	4	+++
	5
	6	# Salary Transparency
	7
	8	The data below details the base salary information for each job I've held. This information is posted publicly to ensure others in my position have a solid reference point when determining if their current or proposed salary is appropriate.
	9
	10	While sites like Glassdoor are locking salary data behind a paywall, LinkedIn is discontinuing LinkedIn Salary, and helpful websites like Big 4 Transparency are extremely rare, I wanted to provide my personal data publicly and freely to those who need it.
	11
	12	I have seen what can happen when great employees don't know the market values for their skills and I happily help those in my teams, so I'm happy to extend this information to the online community.
	13
	14	As a final note, there are numerous reasons that people in the same role are paid differently (expertise, years of experience, certifications, education, etc.) and that the data in this table should only be used as a single point of reference, not the whole story.
	15
	16	# Salary Data
	17
	18	Note: When in a role that gives periodic raises, I will create a new record with the new base salary in the table below. See the KPMG records for an example of a raise while in the same role.
	19
	20	\| Title \| Company \| Location \| Start \| End \| Salary \|
	21	\|------------------------------------------------\|------------------------\|----------------\|---------\|---------\|----------\|
	22	\| Senior Associate, Technology Assurance - Audit \| KPMG \| Omaha, NE \| 2023-10 \| Current \| $116,700 \|
	23	\| Senior Associate, Technology Assurance - Audit \| KPMG \| Omaha, NE \| 2022-06 \| 2023-10 \| $110,000 \|
	24	\| Senior Technology Risk Consultant \| Ernst & Young \| Des Moines, IA \| 2021-09 \| 2022-06 \| $89,500 \|
	25	\| Senior IT Auditor \| Ameritas \| Lincoln, NE \| 2021-05 \| 2021-09 \| $72,000 \|
	26	\| IT Auditor \| Ameritas \| Lincoln, NE \| 2020-04 \| 2021-05 \| $65,000 \|
	27	\| IS Auditor II \| Nelnet \| Lincoln, NE \| 2019-12 \| 2020-04 \| $58,000 \|
	28	\| IS Auditor I \| Nelnet \| Lincoln, NE \| 2019-06 \| 2019-12 \| $20/hour \|
	29	\| Internal Audit Intern \| Ameritas \| Lincoln, NE \| 2018-02 \| 2019-06 \| $16/hour \|
	30	\| Teaching Assistant \| University of Nebraska \| Lincoln, NE \| 2017-08 \| 2018-05 \| $7/hour \|
	31	\| Community Management Intern \| Walgreens \| Lincoln, NE \| 2017-06 \| 2018-02 \| $14/hour \|
	32
	33	This page was inspired by [Xe](https://xeiaso.net/salary-transparency/), and I'm quoting the following wording from them as I want to reiterate this piece:
	34
	35	> Please consider publishing your salary data like this as well. By open, voluntary transparency we can help to end stigmas around discussing pay and help ensure that the next generations of people in tech are treated fairly. Stigmas thrive in darkness but die in the light of day. You can help end the stigma by playing your cards out in the open like this.

content/salary/index.org deleted −54

	@@ -1,54 +0,0 @@
1	#+title: Salary
2	#+description: A historical log of my jobs and salaries.
3	#+slug: index
4
5	* Salary Transparency
6
7	The data below details the base salary information for each job I've held. This
8	information is posted publicly to ensure others in my position have a solid
9	reference point when determining if their current or proposed salary is
10	appropriate.
11
12	While sites like Glassdoor are locking salary data behind a paywall, LinkedIn is
13	discontinuing LinkedIn Salary, and helpful websites like Big 4 Transparency are
14	extremely rare, I wanted to provide my personal data publicly and freely to
15	those who need it.
16
17	I have seen what can happen when great employees don't know the market values
18	for their skills and I happily help those in my teams, so I'm happy to extend
19	this information to the online community.
20
21	As a final note, there are numerous reasons that people in the same role are
22	paid differently (expertise, years of experience, certifications, education,
23	etc.) and that the data in this table should only be used as a single point of
24	reference, not the whole story.
25
26	* Salary Data
27
28	Note: When in a role that gives periodic raises, I will create a new record with
29	the new base salary in the table below. See the KPMG records for an example of a
30	raise while in the same role.
31
32	\| Title \| Company \| Location \| Start \| End \| Salary \|
33	\|------------------------------------------------+------------------------+----------------+---------+---------+----------\|
34	\| Senior Associate, Technology Assurance - Audit \| KPMG \| Omaha, NE \| 2023-10 \| Current \| $116,700 \|
35	\| Senior Associate, Technology Assurance - Audit \| KPMG \| Omaha, NE \| 2022-06 \| 2023-10 \| $110,000 \|
36	\| Senior Technology Risk Consultant \| Ernst & Young \| Des Moines, IA \| 2021-09 \| 2022-06 \| $89,500 \|
37	\| Senior IT Auditor \| Ameritas \| Lincoln, NE \| 2021-05 \| 2021-09 \| $72,000 \|
38	\| IT Auditor \| Ameritas \| Lincoln, NE \| 2020-04 \| 2021-05 \| $65,000 \|
39	\| IS Auditor II \| Nelnet \| Lincoln, NE \| 2019-12 \| 2020-04 \| $58,000 \|
40	\| IS Auditor I \| Nelnet \| Lincoln, NE \| 2019-06 \| 2019-12 \| $20/hour \|
41	\| Internal Audit Intern \| Ameritas \| Lincoln, NE \| 2018-02 \| 2019-06 \| $16/hour \|
42	\| Teaching Assistant \| University of Nebraska \| Lincoln, NE \| 2017-08 \| 2018-05 \| $7/hour \|
43	\| Community Management Intern \| Walgreens \| Lincoln, NE \| 2017-06 \| 2018-02 \| $14/hour \|
44
45	This page was inspired by [[https://xeiaso.net/salary-transparency/][Xe]], and I'm quoting the following wording from them as
46	I want to reiterate this piece:
47
48	#+begin_quote
49	Please consider publishing your salary data like this as well. By open,
50	voluntary transparency we can help to end stigmas around discussing pay and help
51	ensure that the next generations of people in tech are treated fairly. Stigmas
52	thrive in darkness but die in the light of day. You can help end the stigma by
53	playing your cards out in the open like this.
54	#+end_quote

content/services.md added +17

@@ -0,0 +1,17 @@
	1	+++
	2	title = "Services"
	3	draft = false
	4	+++
	5
	6	- [AnonymousOverflow](https://ao.cleberg.net/) - A StackOverflow proxy
	7	- [CyberChef](https://cyberchef.cleberg.net/) - The Cyber Swiss Army Knife
	8	- [FileArchive](https://files.cleberg.net/) - An interesting file archive
	9	- [FlashPaper](https://paste.cleberg.net/) - One-time encrypted password/secret sharing
	10	- [GotHub](https://gh.cleberg.net/) - An alternative front-end for GitHub
	11	- [ifconfig.php](https://ip.cleberg.net/) - A \"whatsmyip\" tool
	12	- [Invidious](https://invidious.cleberg.net/) - A YouTube proxy
	13	- [Office](https://office.cleberg.net/) - The world\'s smallest office suite
	14	- [Org-Live](https://org.cleberg.net/) - A basic org-mode editor for the web I built
	15	- [SearXNG](https://search.cleberg.net/) - A privacy-respecting, open metasearch engine
	16
	17	See the [git log](https://git.cleberg.net/?p=cleberg.net.git;a=history;f=content/services/index.org;h=b9ecca2567a02711a33bb633d45f790610ed9214;hb=HEAD) if you want to see changes that have been made.

content/services/index.org deleted −16

	@@ -1,16 +0,0 @@
1	#+title: Services
2	#+description: Publicly-available services hosted on cleberg.net.
3	#+slug: index
4
5	- [[https://ao.cleberg.net/][AnonymousOverflow]] - A StackOverflow proxy
6	- [[https://cyberchef.cleberg.net/][CyberChef]] - The Cyber Swiss Army Knife
7	- [[https://files.cleberg.net/][FileArchive]] - An interesting file archive
8	- [[https://paste.cleberg.net/][FlashPaper]] - One-time encrypted password/secret sharing
9	- [[https://gh.cleberg.net/][GotHub]] - An alternative front-end for GitHub
10	- [[https://ip.cleberg.net/][ifconfig.php]] - A "whatsmyip" tool
11	- [[https://invidious.cleberg.net/][Invidious]] - A YouTube proxy
12	- [[https://office.cleberg.net/][Office]] - The world's smallest office suite
13	- [[https://org.cleberg.net/][Org-Live]] - A basic org-mode editor for the web I built
14	- [[https://search.cleberg.net/][SearXNG]] - A privacy-respecting, open metasearch engine
15
16	See the [[https://git.cleberg.net/?p=cleberg.net.git;a=history;f=content/services/index.org;h=b9ecca2567a02711a33bb633d45f790610ed9214;hb=HEAD][git log]] if you want to see changes that have been made.

content/wiki/_index.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Wiki"
	3	sort_by = "title"
	4	template = "wiki.html"
	5	+++\ No newline at end of file

content/wiki/ai.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "AI"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/ai.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: AI
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/audit.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Audit"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/audit.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: Audit
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/automation.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Automation"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/automation.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: Automation
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/blogroll.md added +35

@@ -0,0 +1,35 @@
	1	+++
	2	title = "Blogroll"
	3	updated = 2024-04-12
	4	draft = false
	5	+++
	6
	7	## Aggregators
	8
	9	- [1MB Club](https://1mb.club/)
	10	- [250KB Club](https://250kb.club/)
	11	- [512KB Club](https://512kb.club/)
	12	- [Darktheme Club](https://darktheme.club/)
	13	- [No CSS Club](https://nocss.club/)
	14	- [No-JS Club](https://no-js.club/)
	15	- [Ye Olde Blogroll](https://blogroll.org/)
	16
	17	## Plain Text
	18
	19	A list of various plaintext websites and lists.
	20
	21	- [A List Of Text-Only & Minimalist News Sites](https://greycoder.com/a-list-of-text-only-new-sites/)
	22	- [Harvard Law Review](https://harvardlawreview.org/)
	23	- [Hyperlinked Text](https://sjmulder.nl/en/textonly.html)
	24	- [Plain-text web design](https://medium.com/@letsworkshop/plain-text-web-design-a78ccaf9dbc0)
	25	- [Plaintext World](https://plaintextworld.com/)
	26	- [Words](https://justinjackson.ca/words.html)
	27
	28	## Webrings
	29
	30	Instead of listing my personal favorites, I\'m just going to drop a link to [brisay's webring list](https://brisray.com/web/webring-list.htm), which contains 237 webrings for a total of 7078 websites, as of 2024-03-15.
	31
	32	## Everything Else
	33
	34	- [Dead Simple Sites](https://deadsimplesites.com/)
	35	- [Planet Emacslife](https://planet.emacslife.com/)

content/wiki/blogroll.org deleted −34

	@@ -1,34 +0,0 @@
1	#+title: Blogroll
2	#+date: <2024-04-12 Fri 22:43:30>
3
4	* Aggregators
5
6	- [[https://1mb.club/][1MB Club]]
7	- [[https://250kb.club/][250KB Club]]
8	- [[https://512kb.club/][512KB Club]]
9	- [[https://darktheme.club/][Darktheme Club]]
10	- [[https://nocss.club/][No CSS Club]]
11	- [[https://no-js.club/][No-JS Club]]
12	- [[https://blogroll.org/][Ye Olde Blogroll]]
13
14	* Plain Text
15
16	A list of various plaintext websites and lists.
17
18	- [[https://greycoder.com/a-list-of-text-only-new-sites/][A List Of Text-Only & Minimalist News Sites]]
19	- [[https://harvardlawreview.org/][Harvard Law Review]]
20	- [[https://sjmulder.nl/en/textonly.html][Hyperlinked Text]]
21	- [[https://medium.com/@letsworkshop/plain-text-web-design-a78ccaf9dbc0][Plain-text web design]]
22	- [[https://plaintextworld.com/][Plaintext World]]
23	- [[https://justinjackson.ca/words.html][Words]]
24
25	* Webrings
26
27	Instead of listing my personal favorites, I'm just going to drop a link to
28	[[https://brisray.com/web/webring-list.htm][brisay's webring list]], which contains 237 webrings for a total of 7078 websites,
29	as of 2024-03-15.
30
31	* Everything Else
32
33	- [[https://deadsimplesites.com/][Dead Simple Sites]]
34	- [[https://planet.emacslife.com/][Planet Emacslife]]

content/wiki/cli.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "CLI"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/cli.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: CLI
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/data.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Data"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/data.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: Data
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/editors.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Editors"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/editors.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: Editors
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/foss.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "FOSS"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/foss.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: FOSS
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/git.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Git"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/git.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: Git
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/hardware.md added +95

@@ -0,0 +1,95 @@
	1	+++
	2	title = "Hardware"
	3	updated = 2024-03-16
	4	draft = false
	5	+++
	6
	7	## Desktop
	8
	9	### macOS
	10
	11	Probably should have added more RAM but Macbooks are stupid expensive.
	12
	13	\| Category \| Details \|
	14	\|----------\|-------------------------------------------------------\|
	15	\| Model \| [Macbook Pro 16"](https://www.apple.com/macbook-pro/) \|
	16	\| CPU \| Apple M2 Pro \|
	17	\| RAM \| 16GB \|
	18	\| Storage \| 512GB SSD \|
	19
	20	### Linux
	21
	22	A beauty.
	23
	24	\| Category \| Details \|
	25	\|----------\|--------------------------------------------------------------------------------------------------------------------------------------------------------\|
	26	\| Model \| [Lenovo ThinkPad E15 Gen 4, model 21ED0048US](https://www.lenovo.com/us/en/p/laptops/thinkpad/thinkpade/thinkpad--e15-gen-4-(15-inch-amd)/len101t0023) \|
	27	\| CPU \| AMD Ryzen 5 5625U with Radeon Graphics \|
	28	\| RAM \| 16 GB \|
	29	\| Storage \| 256 GB SSD \|
	30
	31	## Mobile
	32
	33	Previously used a Pixel 6 & Pixel 7 with GrapheneOS.
	34
	35	\| Category \| Details \|
	36	\|----------\|-----------------------------------------------------------\|
	37	\| Model \| [iPhone 15 Pro Max](https://www.apple.com/iphone-15-pro/) \|
	38	\| CPU \| A17 Pro \|
	39	\| RAM \| 8GB \|
	40	\| Storage \| 256GB \|
	41
	42	## Homelab
	43
	44	I run a small homelab with a mix of consumer (compute/storage) and
	45	enterprise (network) hardware. I try to keep the lab energy efficient
	46	and quiet as my top priorities.
	47
	48	### IoT
	49
	50	A collection of mainly smart lights, sensors, and smart appliances. My first preference is to disable all networking for new smart devices or simply not connect internet in the first place (e.g. I never enable internet on my smart TVs). If the smart device requires LAN access, I will connect the device to my guest-restricted IoT network. As a last resort, I will set-up the internet but monitor the DNS lookups via NextDNS and forcibly block any domains I do not want the device to be using. If the device is egregious or shady, I\'ll just sell it and either replace it or live without it.
	51
	52	- Other Appliances (washer, dryer, humidifier, fans, etc.)
	53	- [Roomba i7+](https://about.irobot.com/sitecore/content/north-america/irobot-us/home/roomba/i7-series)
	54	- [Philips Hue A19 Bulbs](https://www.philips-hue.com/en-us/p/hue-white-and-color-ambiance-a19---e26-smart-bulb---60-w--3-pack-/046677562786) x 15
	55	- [Philips Hue Play Light Bars](https://www.philips-hue.com/en-us/p/hue-bundle-play-blk-ext/33001)
	56	- [Philips Hue Smart Bridge](https://www.philips-hue.com/en-us/p/hue-bridge/046677458478) + play light bars and a ton of bulbs
	57	- [UP Chime](https://store.ui.com/us/en/collections/unifi-camera-security-special-chime)
	58	- [UP-Sense](https://store.ui.com/us/en/collections/unifi-camera-security-special-sensor) x 2
	59	- [USP-Plug](https://store.ui.com/us/en/products/unifi-smart-power)
	60	- [UVC G4 Instant](https://store.ui.com/us/en/collections/unifi-camera-security-compact-wifi-connected) x 3
	61	- [UVC G4 Doorbell Pro](https://store.ui.com/us/en/collections/unifi-camera-security-special-wifi-doorbell)
	62
	63	### Network
	64
	65	A rack-mounted Dream Machine Pro, connected downstream to an access point, mesh extender, and a couple ethernet switches.
	66
	67	- [UDM-Pro](https://store.ui.com/us/en/collections/unifi-dream-machine/products/udm-pro)
	68	- [USW-24-PoE](https://store.ui.com/us/en/collections/unifi-switching-standard-power-over-ethernet/products/usw-24-poe)
	69	- [USW-Lite-8-PoE](https://store.ui.com/us/en/collections/unifi-switching-utility-poe/products/usw-lite-8-poe)
	70	- [U6-Pro](https://store.ui.com/us/en/collections/unifi-wifi-flagship-high-capacity/products/u6-pro)
	71	- [U6-Extender](https://store.ui.com/us/en/collections/unifi-wifi-inwall-outlet-mesh)
	72	- [USW 24-Port Patch Panel](https://store.ui.com/us/en/collections/unifi-accessory-tech-installations-rackmount/products/uacc-rack-panel-patch-blank-24)
	73
	74	### Servers
	75
	76	1. Rack-Mount Server
	77
	78	I wasn't happy with using low-powered PCs as servers and I knew I did not want the ear-shattering enterprise rack-mounted servers, so I built my own.
	79
	80	\| Category \| Details \|
	81	\|--------------------\|----------------------------------------\|
	82	\| Case \| Rosewill RSV-R4100U 4U \|
	83	\| Motherboard \| NZXT B550 \|
	84	\| CPU \| AMD Ryzen 7 5700G with Radeon Graphics \|
	85	\| RAM \| 64GB RAM (2x32GB) \|
	86	\| Storage (On-board) \| Western Digital 500GB M.2 NVME SSD \|
	87	\| Storage (HDD Bay) \| 48TB HDD \|
	88	\| PSU \| Corsair RM850 PSU \|
	89
	90	2. Other
	91
	92	These ran as my main servers before I built the rack-mounted server above. I have shut these down indefinitely for now as I have no use for them.
	93
	94	- Dell OptiPlex
	95	- Raspberry Pi 4

content/wiki/hardware.org deleted −114

	@@ -1,114 +0,0 @@
1	#+title: Hardware
2	#+date: <2024-03-16 Sat 15:42:58>
3
4	** Desktop
5
6	*** macOS
7
8	Probably should have added more RAM but Macbooks are stupid expensive.
9
10	\| Category \| Details \|
11	\|----------+---------------------------------------------------------\|
12	\| Model \| [[https://www.apple.com/macbook-pro/][Macbook Pro 16”]] \|
13	\| CPU \| Apple M2 Pro \|
14	\| RAM \| 16GB \|
15	\| Storage \| 512GB SSD \|
16
17	*** Linux
18
19	A beauty.
20
21	\| Category \| Details \|
22	\|----------+----------------------------------------------------------------------------------------------------------------------------------------------------------\|
23	\| Model \| [[https://www.lenovo.com/us/en/p/laptops/thinkpad/thinkpade/thinkpad--e15-gen-4-(15-inch-amd)/len101t0023][Lenovo ThinkPad E15 Gen 4, model 21ED0048US]] \|
24	\| CPU \| AMD Ryzen 5 5625U with Radeon Graphics \|
25	\| RAM \| 16 GB \|
26	\| Storage \| 256 GB SSD \|
27
28	** Mobile
29
30	Previously used a Pixel 6 & Pixel 7 with GrapheneOS.
31
32	\| Category \| Details \|
33	\|----------+-------------------------------------------------------------\|
34	\| Model \| [[https://www.apple.com/iphone-15-pro/][iPhone 15 Pro Max]] \|
35	\| CPU \| A17 Pro \|
36	\| RAM \| 8GB \|
37	\| Storage \| 256GB \|
38
39	** Homelab
40
41	I run a small homelab with a mix of consumer (compute/storage) and
42	enterprise (network) hardware. I try to keep the lab energy efficient
43	and quiet as my top priorities.
44
45	*** IoT
46
47	A collection of mainly smart lights, sensors, and smart appliances. My
48	first preference is to disable all networking for new smart devices or
49	simply not connect internet in the first place (e.g. I never enable
50	internet on my smart TVs). If the smart device requires LAN access, I
51	will connect the device to my guest-restricted IoT network. As a last
52	resort, I will set-up the internet but monitor the DNS lookups via
53	NextDNS and forcibly block any domains I do not want the device to be
54	using. If the device is egregious or shady, I'll just sell it and either
55	replace it or live without it.
56
57	- Other Appliances (washer, dryer, humidifier, fans, etc.)
58	- [[https://about.irobot.com/sitecore/content/north-america/irobot-us/home/roomba/i7-series][Roomba
59	i7+]]
60	- [[https://www.philips-hue.com/en-us/p/hue-white-and-color-ambiance-a19---e26-smart-bulb---60-w--3-pack-/046677562786][Philips
61	Hue A19 Bulbs]] x 15
62	- [[https://www.philips-hue.com/en-us/p/hue-bundle-play-blk-ext/33001][Philips
63	Hue Play Light Bars]]
64	- [[https://www.philips-hue.com/en-us/p/hue-bridge/046677458478][Philips
65	Hue Smart Bridge]] + play light bars and a ton of bulbs
66	- [[https://store.ui.com/us/en/collections/unifi-camera-security-special-chime][UP
67	Chime]]
68	- [[https://store.ui.com/us/en/collections/unifi-camera-security-special-sensor][UP-Sense]]
69	x 2
70	- [[https://store.ui.com/us/en/products/unifi-smart-power][USP-Plug]]
71	- [[https://store.ui.com/us/en/collections/unifi-camera-security-compact-wifi-connected][UVC
72	G4 Instant]] x 3
73	- [[https://store.ui.com/us/en/collections/unifi-camera-security-special-wifi-doorbell][UVC
74	G4 Doorbell Pro]]
75
76	*** Network
77
78	A rack-mounted Dream Machine Pro, connected downstream to an access
79	point, mesh extender, and a couple ethernet switches.
80
81	- [[https://store.ui.com/us/en/collections/unifi-dream-machine/products/udm-pro][UDM-Pro]]
82	- [[https://store.ui.com/us/en/collections/unifi-switching-standard-power-over-ethernet/products/usw-24-poe][USW-24-PoE]]
83	- [[https://store.ui.com/us/en/collections/unifi-switching-utility-poe/products/usw-lite-8-poe][USW-Lite-8-PoE]]
84	- [[https://store.ui.com/us/en/collections/unifi-wifi-flagship-high-capacity/products/u6-pro][U6-Pro]]
85	- [[https://store.ui.com/us/en/collections/unifi-wifi-inwall-outlet-mesh][U6-Extender]]
86	- [[https://store.ui.com/us/en/collections/unifi-accessory-tech-installations-rackmount/products/uacc-rack-panel-patch-blank-24][USW
87	24-Port Patch Panel]]
88
89	*** Servers
90
91	**** Rack-Mount Server
92
93	I wasn't happy with using low-powered PCs as servers and I knew I did
94	not want the ear-shattering enterprise rack-mounted servers, so I built
95	my own.
96
97	\| Category \| Details \|
98	\|--------------------+----------------------------------------\|
99	\| Case \| Rosewill RSV-R4100U 4U \|
100	\| Motherboard \| NZXT B550 \|
101	\| CPU \| AMD Ryzen 7 5700G with Radeon Graphics \|
102	\| RAM \| 64GB RAM (2x32GB) \|
103	\| Storage (On-board) \| Western Digital 500GB M.2 NVME SSD \|
104	\| Storage (HDD Bay) \| 48TB HDD \|
105	\| PSU \| Corsair RM850 PSU \|
106
107	**** Other
108
109	These ran as my main servers before I built the rack-mounted server
110	above. I have shut these down indefinitely for now as I have no use for
111	them.
112
113	- Dell OptiPlex
114	- Raspberry Pi 4

content/wiki/ios.md added +151

@@ -0,0 +1,151 @@
	1	+++
	2	title = "iOS"
	3	updated = 2024-03-13
	4	draft = false
	5	+++
	6
	7	Related:
	8
	9	- [Hardware](/wiki/hardware.html)
	10
	11	My primary mobile OS. Currently running iOS 17. This wiki page contains most of the apps I have used at one point or another across my different iPhones.
	12
	13	(`*`) = My favorites
	14
	15	## Configuration
	16
	17	### Display
	18
	19	- Light Mode
	20	- 10:00 to 16:00
	21	- Dark Mode
	22	- 16:00 to 10:00
	23
	24	### Focus Modes
	25
	26	- Personal Focus
	27	- 06:00 to 21:00
	28	- Allow Notifications From:
	29	- Alarms
	30	- Calendar
	31	- Contacts (1 person)
	32	- Messages
	33	- Phone
	34	- Reminders
	35	- Signal
	36	- UniFi Protect
	37	- Sleep Focus
	38	- 21:00 to 06:00
	39	- Allow Notifications From:
	40	- Alarms
	41	- Contacts (1 person)
	42	- Reminders
	43	- Signal
	44
	45	### Privacy & Security
	46
	47	I generally follow the [principle of least privilege](https://en.wikipedia.org/wiki/Principle_of_least_privilege) by only permitting the bare minimum privileges and revoking as soon as they are no longer required.
	48
	49	Here's the baseline I start with:
	50
	51	- Disable:
	52	- Analytics & Improvements
	53	- Apple Advertising
	54	- Apple ID \> Sign-In & Security \> Two-Factor Authentication
	55	- Location Services \> System Services \> Product Improvement
	56	- Tracking \> Allow Apps to Request to Track
	57	- Safari \> Advanced \> Privacy Preserving Ad Measurement
	58	- Enable:
	59	- Apple ID \> iCloud \> Advanced Data Protection
	60	- Apple ID \> Personal Information \> Communication Preferences
	61	- App Privacy Report
	62	- Location Services only for Camera, Find My, UDisc, & WiFiman
	63	(`While Using`)
	64	- Safari \> Prevent Cross-Site Tracking
	65	- Safari \> Hide IP Address
	66	- Safari \> Advanced \> Advanced Tracking and Fingerprinting
	67	Protection
	68
	69	## Native Apps
	70
	71	### Business
	72
	73	- [Element](https://apps.apple.com/us/app/element-messenger/id1083446067) - A cross-platform messenger, based on Matrix
	74	- [LinkedIn](https://apps.apple.com/us/app/linkedin-network-job-finder/id288429040) - One of the only social media apps I use
	75
	76	### Developer Tools
	77
	78	- [Harbour](https://testflight.apple.com/join/F2vK7xo4) - Easily manage your Portainer service
	79	- [iSH](https://apps.apple.com/us/app/ish-shell/id1436902243) - A local shell with SSH functionality
	80
	81	### Entertainment
	82
	83	- [Plex](https://apps.apple.com/us/app/plex-watch-live-tv-and-movies/id383457673) - A client for the Plex Media Server
	84	- [Steam](https://apps.apple.com/us/app/steam-mobile/id495369748) - The top gaming marketplace for computers
	85
	86	### Lifestyle
	87
	88	- [Home](https://apps.apple.com/us/app/home/id1110145103) (`*`) - Apple homekit powered smart home manager
	89	- [Hue](https://apps.apple.com/us/app/philips-hue/id1055281310) - Philips Hue smart home manager
	90	- [iRobot](https://apps.apple.com/us/app/irobot-home/id1012014442) - Manage iRobot Roomba devices
	91	- [UniFi Protect](https://apps.apple.com/us/app/unifi-protect/id1392492235) - View and manage most UniFi Protect cameras and settings
	92
	93	### Music
	94
	95	- [Apple Music](https://apps.apple.com/us/app/apple-music/id1108187390) (`*`) - Apple\'s native music streaming app
	96	- [Plexamp](https://apps.apple.com/us/app/plexamp/id1500797510) (`*`) - Top-notch music app for your Plex Media Server, with a neural network that provides excellent radio/shuffle suggestions
	97
	98	### News
	99
	100	- [NetNewsWire](https://apps.apple.com/us/app/netnewswire-rss-reader/id1480640210) - A free and open source RSS reader for Mac, iPhone, and iPad
	101
	102	### Photo & Video
	103
	104	- [Aislingeach](https://testflight.apple.com/join/Q6WyyEpS) - A quick way to generate and rate images from the Stable Horde
	105	- [Unsplash](https://apps.apple.com/us/app/unsplash/id1290631746) - Premium images, mostly free
	106
	107	### Productivity
	108
	109	- [beorg](https://apps.apple.com/us/app/beorg-to-do-list-agenda/id1238649962) - An org-mode editor, outline, and scheduler with paid extensions
	110	- [Bitwarden](https://apps.apple.com/us/app/bitwarden-password-manager/id1137397744) (`*`) - An open source password manager
	111	- [Cryptomator](https://apps.apple.com/us/app/cryptomator/id1560822163) - A cross-platform encryption program
	112	- [Obsidian](https://apps.apple.com/us/app/obsidian-connected-notes/id1557175442) (`*`) - A nice Markdown-based editor based on a \"vault\" structure. Offers a paid sync solution and community extensions
	113	- [Strongbox](https://apps.apple.com/us/app/strongbox-password-manager/id897283731) - Keepass password manager for iOS & macOS
	114	- [UniFi Network](https://apps.apple.com/us/app/unifi/id1057750338) - View and manage most UniFi Network settings
	115
	116	### Safari Extensions
	117
	118	- [AdGuard](https://apps.apple.com/us/app/adguard-adblock-privacy/id1047223162) -
	119	Ad blocker
	120	- [Dark Reader](https://apps.apple.com/us/app/dark-reader-for-safari/id1438243180) - Dark mode for all the sites
	121	- [PiPifier](https://apps.apple.com/us/app/pipifier/id1234771095) - Force videos to support PiP
	122	- [Privacy Redirect](https://apps.apple.com/us/app/privacy-redirect/id1578144015) - Redirect select websites to others, usually to privacy-focused alternatives
	123
	124	### Social Networking
	125
	126	- [MultiTab T](https://apps.apple.com/us/app/multitab-for-tumblr/id1071533778) (`*`) - A gallery-based Tumblr client with some unique features, such as tab history and sync
	127	- [Signal](https://apps.apple.com/us/app/signal-private-messenger/id874139669) (`*`) - A simple, powerful, and secure messenger
	128	- [Three Cheers](https://testflight.apple.com/join/mpVk1qIy) - A client for Tildes.net with a design focus that matches the intent of Tildes
	129	- [Voyager](https://apps.apple.com/us/app/voyager-for-lemmy/id6451429762) - A Lemmy client
	130
	131	### Sports
	132
	133	- [Apple Sports](https://apps.apple.com/us/app/apple-sports/id6446788829) - Apple\'s new sports app - lacks notifications and live events
	134	- [UDisc](https://apps.apple.com/us/app/udisc-disc-golf/id1072228953) - Disc golf course maps, score cards, and more
	135
	136	### Utilities
	137
	138	- [Backblaze](https://apps.apple.com/us/app/backblaze/id628638330) - Quickly view and manage Backblaze b2 cloud storage
	139	- [Mullvad VPN](https://apps.apple.com/us/app/mullvad-vpn/id1488466513) (`*`) - A private VPN service
	140	- [OTP Auth](https://apps.apple.com/us/app/otp-auth/id659877384) (`*`) - A minimalistic OTP app with support for biometrics, custom icons, import/export, and iCloud sync
	141	- [Plex Dash](https://apps.apple.com/us/app/plex-dash/id1500797677) - Stats about your Plex Media Server
	142	- [Safari](https://apps.apple.com/us/app/safari/id1146562112) - iOS default browser
	143	- [Unifi WiFiman](https://apps.apple.com/us/app/ubiquiti-wifiman/id1385561119) - Create visual layouts of WiFi strength and save heat maps to your phone
	144
	145	## Web Apps & Shortcuts
	146
	147	- [Brutalist Report](https://brutalist.report/) - Minimal news aggregator
	148	- [_Cyber.Report](https://cyber.report/) - Cybersecurity news aggregator
	149	- [Hacker News](https://news.ycombinator.com/) - Mostly technical news
	150	- [NextDNS](https://nextdns.io/) - NextDNS statistics dashboard
	151	- [Readspike](https://readspike.com/) - Minimal news aggregator

content/wiki/ios.org deleted −156

	@@ -1,156 +0,0 @@
1	#+title: iOS
2	#+date: <2024-03-13 Wed 08:00:00>
3
4	Related:
5
6	- [[/wiki/hardware.html][Hardware]]
7
8	My primary mobile OS. Currently running iOS 17. This wiki page contains most of
9	the apps I have used at one point or another across my different iPhones.
10
11	(=*=) = My favorites
12
13	** Configuration
14
15	*** Display
16
17	- Light Mode
18	- 10:00 to 16:00
19	- Dark Mode
20	- 16:00 to 10:00
21
22	*** Focus Modes
23
24	- Personal Focus
25	- 06:00 to 21:00
26	- Allow Notifications From:
27	- Alarms
28	- Calendar
29	- Contacts (1 person)
30	- Messages
31	- Phone
32	- Reminders
33	- Signal
34	- UniFi Protect
35	- Sleep Focus
36	- 21:00 to 06:00
37	- Allow Notifications From:
38	- Alarms
39	- Contacts (1 person)
40	- Reminders
41	- Signal
42
43	*** Privacy & Security
44
45	I generally follow the [[https://en.wikipedia.org/wiki/Principle_of_least_privilege][principle of least privilege]] by only permitting the bare
46	minimum privileges and revoking as soon as they are no longer required.
47
48	Here's the baseline I start with:
49
50	- Disable:
51	- Analytics & Improvements
52	- Apple Advertising
53	- Apple ID > Sign-In & Security > Two-Factor Authentication
54	- Location Services > System Services > Product Improvement
55	- Tracking > Allow Apps to Request to Track
56	- Safari > Advanced > Privacy Preserving Ad Measurement
57	- Enable:
58	- Apple ID > iCloud > Advanced Data Protection
59	- Apple ID > Personal Information > Communication Preferences
60	- App Privacy Report
61	- Location Services only for Camera, Find My, UDisc, & WiFiman
62	(=While Using=)
63	- Safari > Prevent Cross-Site Tracking
64	- Safari > Hide IP Address
65	- Safari > Advanced > Advanced Tracking and Fingerprinting Protection
66
67	** Native Apps
68
69	*** Business
70
71	- [[https://apps.apple.com/us/app/element-messenger/id1083446067][Element]] - A cross-platform messenger, based on Matrix
72	- [[https://apps.apple.com/us/app/linkedin-network-job-finder/id288429040][LinkedIn]] - One of the only social media apps I use
73
74
75	*** Developer Tools
76
77	- [[https://testflight.apple.com/join/F2vK7xo4][Harbour]] - Easily manage your Portainer service
78	- [[https://apps.apple.com/us/app/ish-shell/id1436902243][iSH]] - A local shell with SSH functionality
79
80	*** Entertainment
81
82	- [[https://apps.apple.com/us/app/plex-watch-live-tv-and-movies/id383457673][Plex]] - A client for the Plex Media Server
83	- [[https://apps.apple.com/us/app/steam-mobile/id495369748][Steam]] - The top gaming marketplace for computers
84
85	*** Lifestyle
86
87	- [[https://apps.apple.com/us/app/home/id1110145103][Home]] (=*=) - Apple homekit powered smart home manager
88	- [[https://apps.apple.com/us/app/philips-hue/id1055281310][Hue]] - Philips Hue smart home manager
89	- [[https://apps.apple.com/us/app/irobot-home/id1012014442][iRobot]] - Manage iRobot Roomba devices
90	- [[https://apps.apple.com/us/app/unifi-protect/id1392492235][UniFi Protect]] - View and manage most UniFi Protect cameras and settings
91
92	*** Music
93
94	- [[https://apps.apple.com/us/app/apple-music/id1108187390][Apple Music]] (=*=) - Apple's native music streaming app
95	- [[https://apps.apple.com/us/app/plexamp/id1500797510][Plexamp]] (=*=) - Top-notch music app for your Plex Media Server, with a neural
96	network that provides excellent radio/shuffle suggestions
97
98	*** News
99
100	- [[https://apps.apple.com/us/app/netnewswire-rss-reader/id1480640210][NetNewsWire]] - A free and open source RSS reader for Mac, iPhone, and iPad
101
102	*** Photo & Video
103
104	- [[https://testflight.apple.com/join/Q6WyyEpS][Aislingeach]] - A quick way to generate and rate images from the Stable Horde
105	- [[https://apps.apple.com/us/app/unsplash/id1290631746][Unsplash]] - Premium images, mostly free
106
107	*** Productivity
108
109	- [[https://apps.apple.com/us/app/beorg-to-do-list-agenda/id1238649962][beorg]] (=*=) - An org-mode editor, outline, and scheduler with paid extensions
110	- [[https://apps.apple.com/us/app/bitwarden-password-manager/id1137397744][Bitwarden]] (=*=) - An open source password manager
111	- [[https://apps.apple.com/us/app/cryptomator/id1560822163][Cryptomator]] - A cross-platform encryption program
112	- [[https://apps.apple.com/us/app/obsidian-connected-notes/id1557175442][Obsidian]] - A nice Markdown-based editor based on a "vault" structure.
113	Offers a paid sync solution and community extensions
114	- [[https://apps.apple.com/us/app/strongbox-password-manager/id897283731][Strongbox]] - Keepass password manager for iOS & macOS
115	- [[https://apps.apple.com/us/app/unifi/id1057750338][UniFi Network]] - View and manage most UniFi Network settings
116
117	*** Safari Extensions
118
119	- [[https://apps.apple.com/us/app/adguard-adblock-privacy/id1047223162][AdGuard]] - Ad blocker
120	- [[https://apps.apple.com/us/app/dark-reader-for-safari/id1438243180][Dark Reader]] - Dark mode for all the sites
121	- [[https://apps.apple.com/us/app/pipifier/id1234771095][PiPifier]] - Force videos to support PiP
122	- [[https://apps.apple.com/us/app/privacy-redirect/id1578144015][Privacy Redirect]] - Redirect select websites to others, usually to
123	privacy-focused alternatives
124
125	*** Social Networking
126
127	- [[https://apps.apple.com/us/app/multitab-for-tumblr/id1071533778][MultiTab T]] (=*=) - A gallery-based Tumblr client with some unique features,
128	such as tab history and sync
129	- [[https://apps.apple.com/us/app/signal-private-messenger/id874139669][Signal]] (=*=) - A simple, powerful, and secure messenger
130	- [[https://testflight.apple.com/join/mpVk1qIy][Three Cheers]] - A client for Tildes.net with a design focus that matches the
131	intent of Tildes
132	- [[https://apps.apple.com/us/app/voyager-for-lemmy/id6451429762][Voyager]] - A Lemmy client
133
134	*** Sports
135
136	- [[https://apps.apple.com/us/app/apple-sports/id6446788829][Apple Sports]] - Apple's new sports app - lacks notifications and live events
137	- [[https://apps.apple.com/us/app/udisc-disc-golf/id1072228953][UDisc]] - Disc golf course maps, score cards, and more
138
139	*** Utilities
140
141	- [[https://apps.apple.com/us/app/backblaze/id628638330][Backblaze]] - Quickly view and manage Backblaze b2 cloud storage
142	- [[https://apps.apple.com/us/app/mullvad-vpn/id1488466513][Mullvad VPN]] (=*=) - A private VPN service
143	- [[https://apps.apple.com/us/app/otp-auth/id659877384][OTP Auth]] (=*=) - A minimalistic OTP app with support for biometrics, custom
144	icons, import/export, and iCloud sync
145	- [[https://apps.apple.com/us/app/plex-dash/id1500797677][Plex Dash]] - Stats about your Plex Media Server
146	- [[https://apps.apple.com/us/app/safari/id1146562112][Safari]] - iOS default browser
147	- [[https://apps.apple.com/us/app/ubiquiti-wifiman/id1385561119][Unifi WiFiman]] - Create visual layouts of WiFi strength and save heat maps to
148	your phone
149
150	** Web Apps & Shortcuts
151
152	- [[https://brutalist.report/][Brutalist Report]] - Minimal news aggregator
153	- [[https://cyber.report/][_Cyber.Report]] - Cybersecurity news aggregator
154	- [[https://news.ycombinator.com/][Hacker News]] - Mostly technical news
155	- [[https://nextdns.io/][NextDNS]] - NextDNS statistics dashboard
156	- [[https://readspike.com/][Readspike]] - Minimal news aggregator

content/wiki/linux.org → content/wiki/linux.md renamed +10 −12

	@@ -1,21 +1,19 @@
1	#+title: Linux	1	+++
2	#+date: <2024-04-01 Mon 08:00:00>	2	title = "Linux"
3	#+draft: t	3	updated = 2024-03-07
		4	draft = true
		5	+++
4		6
5	Related:	7	Related:
6		8
7	- [[/wiki/hardware.html][Hardware]]	9	- [Hardware](/wiki/hardware/)
		10
		11	## Alpine Linux
8		12
9	** Alpine Linux
10	:PROPERTIES:
11	:CUSTOM_ID: alpine-linux
12	:END:
13	My secondary laptop OS.	13	My secondary laptop OS.
14		14
15	** Ubuntu Server	15	## Ubuntu Server
16	:PROPERTIES:	16
17	:CUSTOM_ID: ubuntu-server
18	:END:
19	My primary server OS.	17	My primary server OS.
20		18
21	- Applications	19	- Applications

content/wiki/macos.md added +148

@@ -0,0 +1,148 @@
	1	+++
	2	title = "macOS"
	3	updated = 2024-04-10
	4	draft = false
	5	+++
	6
	7	Related:
	8
	9	- [Hardware](/wiki/hardware/)
	10
	11	My primary OS. Currently running macOS Sonoma 14. This wiki page contains most of the apps I have used at one point or another across my different Macbooks.
	12
	13	(`*`) = My favorites
	14
	15	## Configuration
	16
	17	### Disable System Services
	18
	19	- [Disabling and Enabling System Integrity
	20	Protection](https://developer.apple.com/documentation/security/disabling_and_enabling_system_integrity_protection)
	21	- Disable Gatekeeper: `sudo spctl --master-disable`
	22
	23	### Dotfiles
	24
	25	These are probably out of date, but they give a general idea of how I configure my machine.
	26
	27	```conf
	28	# ~/.zshrc
	29	export PATH="/opt/homebrew/bin:$PATH"
	30	export PATH="$HOME/.emacs.d/bin:$PATH"
	31	export EDITOR="/opt/homebrew/bin/emacs -nw"
	32	ZSH_THEME="bureau"
	33	plugins=(git zsh-autosuggestions)
	34	source $ZSH/oh-my-zsh.sh
	35	```
	36
	37	```conf
	38	# ~/.zprofile
	39	eval "$(/opt/homebrew/bin/brew shellenv)"
	40	```
	41
	42	```conf
	43	# ~/.config/skhd/skhdrc
	44	cmd - return : /Applications/iTerm.app/Contents/MacOS/iTerm2
	45	cmd + shift - return : /Applications/LibreWolf.app/Contents/MacOS/librewolf
	46	```
	47
	48	```conf
	49	# ~/.config/yabai/yabairc
	50	yabai -m config \
	51	mouse_follows_focus off \
	52	focus_follows_mouse off \
	53	window_origin_display default \
	54	window_placement second_child \
	55	window_zoom_persist on \
	56	window_shadow on \
	57	window_animation_duration 0.0 \
	58	window_animation_frame_rate 120 \
	59	window_opacity_duration 0.0 \
	60	active_window_opacity 1.0 \
	61	normal_window_opacity 0.90 \
	62	window_opacity off \
	63	insert_feedback_color 0xffd75f5f \
	64	split_ratio 0.50 \
	65	split_type auto \
	66	auto_balance off \
	67	top_padding 15 \
	68	bottom_padding 15 \
	69	left_padding 15 \
	70	right_padding 15 \
	71	window_gap 10 \
	72	layout bsp \
	73	mouse_modifier fn \
	74	mouse_action1 move \
	75	mouse_action2 resize \
	76	mouse_drop_action swap
	77	echo "yabai configuration loaded.."
	78	```
	79
	80	## Software
	81
	82	### Browsers
	83
	84	- [Librewolf](https://librewolf.net/) (`*`) - Custom version of Firefox, focused on privacy and security
	85	- [Bitwarden](https://bitwarden.com/) - An open source password manager
	86	- [Dark Reader](https://darkreader.org/) - Dark mode for all the websites
	87	- [Libredirect](https://libredirect.github.io/) - Automatic web redirections
	88	- [Strongbox](https://strongboxsafe.com/) - Keepass password manager for iOS & macOS
	89	- [uBlock Origin](https://ublockorigin.com/) - Free, open-source ad content blocker
	90	- [Ungoogled Chromium](https://github.com/ungoogled-software/ungoogled-chromium) - Google Chromium, sans integration with Google
	91	- [eww](https://www.gnu.org/software/emacs/manual/html_mono/eww.html) - Emacs Web Wowser, for TUI browsing
	92
	93	### Communications
	94
	95	- [Element](https://element.io/) (`*`) - Matrix\'s default GUI client
	96	- [gomuks](https://github.com/tulir/gomuks) - A terminal based Matrix client
	97	- [Thunderbird](https://www.thunderbird.net/) (`*`) - An open source email client by Mozilla
	98	- [Signal](https://signal.org/) (`*`) - A simple, powerful, and secure messenger
	99
	100	### Development
	101
	102	- [Docker Desktop](https://www.docker.com/products/docker-desktop/) - Docker containers for your desktop
	103	- [open-webui](https://github.com/open-webui/open-webui) - User-friendly WebUI for LLMs
	104	- [iTerm2](https://iterm2.com/) (`*`) - The best terminal for macOS, hands down
	105	- [Podman Desktop](https://podman-desktop.io/) (`*`) - Open source tool for containers and Kubernetes
	106	- [Xcode](https://developer.apple.com/xcode/) - Apple\'s IDE
	107	- [zsh](https://en.wikipedia.org/wiki/Z_shell) (`*`) - My shell preference due to its plugin and theme community
	108	- [zsh-autosuggestions](https://github.com/zsh-users/zsh-autosuggestions) - Fish-like autosuggestions for zsh
	109	- [zsh-syntax-highlighting](https://github.com/zsh-users/zsh-syntax-highlighting) - Fish shell like syntax highlighting for Zsh
	110
	111	### Editors
	112
	113	- [Doom Emacs](https://github.com/doomemacs/doomemacs) (`*`) - An Emacs framework, great for working in org-mode
	114	- [Obsidian](https://obsidian.md/) - A nice Markdown-based editor based on a "vault" structure. Offers a paid sync solution and community extensions
	115	- [Standard Notes](https://standardnotes.com/) - A simple text editor focused on privacy and security. Offers a paid sync solution and community extensions
	116	- [VSCodium](https://vscodium.com/) - VS Code without proprietary blobs
	117
	118	### Media
	119
	120	- [Luminar](https://skylum.com/luminar) - Luminar offers top-notch photo editing features
	121	- [Minecraft](https://www.minecraft.net/) - Block mining simulator
	122	- [NetNewsWire](https://netnewswire.com/) - A free and open source RSS reader for Mac, iPhone, and iPad
	123	- [Plex](https://www.plex.tv/) (`*`) - Desktop client for the Plex Media Server
	124	- [Steam](https://store.steampowered.com/) - The top gaming marketplace for computers
	125	- [Transmission](https://transmissionbt.com/) (`*`) - A Fast, Easy and Free Bittorrent Client
	126	- [VLC](https://www.videolan.org/vlc/) - A free and open source cross-platform multimedia player
	127
	128	### Package Management
	129
	130	- [Homebrew](https://brew.sh/) (`*`) - The Missing Package Manager for macOS (or Linux)
	131	- [MacPorts](https://www.macports.org/) - A system to compile, install, and manage open source software
	132
	133	### Utilities
	134
	135	- [Bartender 5](https://www.macbartender.com/Bartender5/) (`*`) - Easy control and customization over the native macOS menu bar
	136	- [BetterDisplay](https://betterdisplay.pro/) - Allows you to tweak a ton of features of built-in and external screens, such as scaling, configuration overrides, and color/brightness upscaling
	137	- [Bitwarden](https://bitwarden.com/) - An open source password manager
	138	- [Ollama](https://ollama.com/) - Run Llama 2, Code Llama, and other models locally on your machine
	139	- [Ollama Swift](https://github.com/kghandour/Ollama-SwiftUI) - User Interface made for Ollama.ai using Swift
	140	- [LittleSnitch](https://obdev.at/products/littlesnitch/index.html) - Shows all network connections on your Macbook, including system and privileged services
	141	- [MicroSnitch](https://obdev.at/products/microsnitch/index.html) - Camera & microphone monitoring and alterting service
	142	- [Mullvad](https://mullvad.net/) (`*`) - A private VPN service
	143	- [skhd](https://github.com/koekeishiya/skhd) (`*`) - Simple hotkey daemon for macOS
	144	- [Strongbox](https://strongboxsafe.com/) - Keepass password manager for iOS & macOS
	145	- [Syncthing](https://syncthing.net/) (`*`) - Continuous file synchronization
	146	- [TinkerTool](https://www.bresink.com/osx/TinkerTool.html) - Unlock hidden configuration options for macOS
	147	- [yabai](https://github.com/koekeishiya/yabai) (`*`) - Automatic window tiling
	148	- [yt-dlp](https://github.com/yt-dlp/yt-dlp) - A youtube-dl fork with additional features and fixes

content/wiki/macos.org deleted −152

	@@ -1,152 +0,0 @@
1	#+title: macOS
2	#+date: <2024-04-10 Wed 08:36:50>
3
4	Related:
5
6	- [[/wiki/hardware.html][Hardware]]
7
8	My primary OS. Currently running macOS Sonoma 14. This wiki page contains most
9	of the apps I have used at one point or another across my different Macbooks.
10
11	(=*=) = My favorites
12
13	** Configuration
14
15	*** Disable System Services
16
17	- [[https://developer.apple.com/documentation/security/disabling_and_enabling_system_integrity_protection][Disabling and Enabling System Integrity Protection]]
18	- Disable Gatekeeper: =sudo spctl --master-disable=
19
20	*** Dotfiles
21
22	These are probably out of date, but they give a general idea of how I configure
23	my machine.
24
25	#+begin_src config
26	# ~/.zshrc
27	export PATH="/opt/homebrew/bin:$PATH"
28	export PATH="$HOME/.emacs.d/bin:$PATH"
29	export EDITOR="/opt/homebrew/bin/emacs -nw"
30	ZSH_THEME="bureau"
31	plugins=(git zsh-autosuggestions)
32	source $ZSH/oh-my-zsh.sh
33	#+end_src
34
35	#+begin_src config
36	# ~/.zprofile
37	eval "$(/opt/homebrew/bin/brew shellenv)"
38	#+end_src
39
40	#+begin_src config
41	# ~/.config/skhd/skhdrc
42	cmd - return : /Applications/iTerm.app/Contents/MacOS/iTerm2
43	cmd + shift - return : /Applications/LibreWolf.app/Contents/MacOS/librewolf
44	#+end_src
45
46	#+begin_src config
47	# ~/.config/yabai/yabairc
48	yabai -m config \
49	mouse_follows_focus off \
50	focus_follows_mouse off \
51	window_origin_display default \
52	window_placement second_child \
53	window_zoom_persist on \
54	window_shadow on \
55	window_animation_duration 0.0 \
56	window_animation_frame_rate 120 \
57	window_opacity_duration 0.0 \
58	active_window_opacity 1.0 \
59	normal_window_opacity 0.90 \
60	window_opacity off \
61	insert_feedback_color 0xffd75f5f \
62	split_ratio 0.50 \
63	split_type auto \
64	auto_balance off \
65	top_padding 15 \
66	bottom_padding 15 \
67	left_padding 15 \
68	right_padding 15 \
69	window_gap 10 \
70	layout bsp \
71	mouse_modifier fn \
72	mouse_action1 move \
73	mouse_action2 resize \
74	mouse_drop_action swap
75	echo "yabai configuration loaded.."
76	#+end_src
77
78	** Software
79
80	*** Browsers
81
82	- [[https://librewolf.net/][Librewolf]] (=*=) - Custom version of Firefox, focused on privacy and security
83	- [[https://bitwarden.com/][Bitwarden]] - An open source password manager
84	- [[https://darkreader.org/][Dark Reader]] - Dark mode for all the websites
85	- [[https://libredirect.github.io/][Libredirect]] - Automatic web redirections
86	- [[https://strongboxsafe.com/][Strongbox]] - Keepass password manager for iOS & macOS
87	- [[https://ublockorigin.com/][uBlock Origin]] - Free, open-source ad content blocker
88	- [[https://github.com/ungoogled-software/ungoogled-chromium][Ungoogled Chromium]] - Google Chromium, sans integration with Google
89	- [[https://www.gnu.org/software/emacs/manual/html_mono/eww.html][eww]] - Emacs Web Wowser, for TUI browsing
90
91	*** Communications
92
93	- [[https://element.io/][Element]] (=*=) - Matrix's default GUI client
94	- [[https://github.com/tulir/gomuks][gomuks]] - A terminal based Matrix client
95	- [[https://www.thunderbird.net/][Thunderbird]] (=*=) - An open source email client by Mozilla
96	- [[https://signal.org/][Signal]] (=*=) - A simple, powerful, and secure messenger
97
98	*** Development
99
100	- [[https://www.docker.com/products/docker-desktop/][Docker Desktop]] - Docker containers for your desktop
101	- [[https://github.com/open-webui/open-webui][open-webui]] - User-friendly WebUI for LLMs
102	- [[https://iterm2.com/][iTerm2]] (=*=) - The best terminal for macOS, hands down
103	- [[https://podman-desktop.io/][Podman Desktop]] (=*=) - Open source tool for containers and Kubernetes
104	- [[https://developer.apple.com/xcode/][Xcode]] - Apple's IDE
105	- [[https://en.wikipedia.org/wiki/Z_shell][zsh]] (=*=) - My shell preference due to its plugin and theme community
106	- [[https://github.com/zsh-users/zsh-autosuggestions][zsh-autosuggestions]] - Fish-like autosuggestions for zsh
107	- [[https://github.com/zsh-users/zsh-syntax-highlighting][zsh-syntax-highlighting]] - Fish shell like syntax highlighting for Zsh
108
109	*** Editors
110
111	- [[https://github.com/doomemacs/doomemacs][Doom Emacs]] (=*=) - An Emacs framework, great for working in org-mode
112	- [[https://obsidian.md/][Obsidian]] - A nice Markdown-based editor based on a "vault" structure.
113	Offers a paid sync solution and community extensions
114	- [[https://standardnotes.com/][Standard Notes]] - A simple text editor focused on privacy and security. Offers
115	a paid sync solution and community extensions
116	- [[https://vscodium.com/][VSCodium]] - VS Code without proprietary blobs
117
118	*** Media
119
120	- [[https://skylum.com/luminar][Luminar]] - Luminar offers top-notch photo editing features
121	- [[https://www.minecraft.net/][Minecraft]] - Block mining simulator
122	- [[https://netnewswire.com/][NetNewsWire]] - A free and open source RSS reader for Mac, iPhone, and iPad
123	- [[https://www.plex.tv/][Plex]] (=*=) - Desktop client for the Plex Media Server
124	- [[https://store.steampowered.com/][Steam]] - The top gaming marketplace for computers
125	- [[https://transmissionbt.com/][Transmission]] (=*=) - A Fast, Easy and Free Bittorrent Client
126	- [[https://www.videolan.org/vlc/][VLC]] - A free and open source cross-platform multimedia player
127
128	** Package Management
129
130	- [[https://brew.sh/][Homebrew]] (=*=) - The Missing Package Manager for macOS (or Linux)
131	- [[https://www.macports.org/][MacPorts]] - A system to compile, install, and manage open source software
132
133	*** Utilities
134
135	- [[https://www.macbartender.com/Bartender5/][Bartender 5]] (=*=) - Easy control and customization over the native macOS menu
136	bar
137	- [[https://betterdisplay.pro/][BetterDisplay]] - Allows you to tweak a ton of features of built-in and external
138	screens, such as scaling, configuration overrides, and color/brightness
139	upscaling
140	- [[https://bitwarden.com/][Bitwarden]] - An open source password manager
141	- [[https://ollama.com/][Ollama]] - Run Llama 2, Code Llama, and other models locally on your machine
142	- [[https://github.com/kghandour/Ollama-SwiftUI][Ollama Swift]] - User Interface made for Ollama.ai using Swift
143	- [[https://obdev.at/products/littlesnitch/index.html][LittleSnitch]] - Shows all network connections on your Macbook, including system
144	and privileged services
145	- [[https://obdev.at/products/microsnitch/index.html][MicroSnitch]] - Camera & microphone monitoring and alterting service
146	- [[https://mullvad.net/][Mullvad]] (=*=) - A private VPN service
147	- [[https://github.com/koekeishiya/skhd][skhd]] (=*=) - Simple hotkey daemon for macOS
148	- [[https://strongboxsafe.com/][Strongbox]] - Keepass password manager for iOS & macOS
149	- [[https://syncthing.net/][Syncthing]] (=*=) - Continuous file synchronization
150	- [[https://www.bresink.com/osx/TinkerTool.html][TinkerTool]] - Unlock hidden configuration options for macOS
151	- [[https://github.com/koekeishiya/yabai][yabai]] (=*=) - Automatic window tiling
152	- [[https://github.com/yt-dlp/yt-dlp][yt-dlp]] - A youtube-dl fork with additional features and fixes

content/wiki/management.md added +11

@@ -0,0 +1,11 @@
	1	+++
	2	title = "Management"
	3	updated = 2024-03-07
	4	draft = true
	5	+++
	6
	7	## Time Management
	8
	9	## People Management
	10
	11	## Project Management

content/wiki/management.org deleted −16

	@@ -1,16 +0,0 @@
1	#+title: Management
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t
4
5	** Time Management
6	:PROPERTIES:
7	:CUSTOM_ID: time-management
8	:END:
9	** People Management
10	:PROPERTIES:
11	:CUSTOM_ID: people-management
12	:END:
13	** Project Management
14	:PROPERTIES:
15	:CUSTOM_ID: project-management
16	:END:

content/wiki/minimalism.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Minimalism"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/minimalism.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: Minimalism
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/networking.md added +27

@@ -0,0 +1,27 @@
	1	+++
	2	title = "Networking"
	3	updated = 2024-03-07
	4	draft = true
	5	+++
	6
	7	## Bluetooth
	8
	9	## DNS
	10
	11	## Gemini
	12
	13	## Gopher
	14
	15	## HTTP
	16
	17	## IoT
	18
	19	## Nginx
	20
	21	## SSH
	22
	23	## SSL
	24
	25	## VPN
	26
	27	## Wi-Fi

content/wiki/networking.org deleted −48

	@@ -1,48 +0,0 @@
1	#+title: Networking
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t
4
5	** Bluetooth
6	:PROPERTIES:
7	:CUSTOM_ID: bluetooth
8	:END:
9	** DNS
10	:PROPERTIES:
11	:CUSTOM_ID: dns
12	:END:
13	** Gemini
14	:PROPERTIES:
15	:CUSTOM_ID: gemini
16	:END:
17	** Gopher
18	:PROPERTIES:
19	:CUSTOM_ID: gopher
20	:END:
21	** HTTP
22	:PROPERTIES:
23	:CUSTOM_ID: http
24	:END:
25	** IoT
26	:PROPERTIES:
27	:CUSTOM_ID: iot
28	:END:
29	** Nginx
30	:PROPERTIES:
31	:CUSTOM_ID: nginx
32	:END:
33	** SSH
34	:PROPERTIES:
35	:CUSTOM_ID: ssh
36	:END:
37	** SSL
38	:PROPERTIES:
39	:CUSTOM_ID: ssl
40	:END:
41	** VPN
42	:PROPERTIES:
43	:CUSTOM_ID: vpn
44	:END:
45	** Wi-Fi
46	:PROPERTIES:
47	:CUSTOM_ID: wi-fi
48	:END:

content/wiki/plaintext.md added +11

@@ -0,0 +1,11 @@
	1	+++
	2	title = "Plaintext"
	3	updated = 2024-03-07
	4	draft = true
	5	+++
	6
	7	## Markdown
	8
	9	## Org-Mode
	10
	11	## AsciiDoc

content/wiki/plaintext.org deleted −16

	@@ -1,16 +0,0 @@
1	#+title: Plaintext
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t
4
5	** Markdown
6	:PROPERTIES:
7	:CUSTOM_ID: markdown
8	:END:
9	** Org-Mode
10	:PROPERTIES:
11	:CUSTOM_ID: org-mode
12	:END:
13	** AsciiDoc
14	:PROPERTIES:
15	:CUSTOM_ID: asciidoc
16	:END:

content/wiki/privacy.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Privacy"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/privacy.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: Privacy
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/python.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Python"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/python.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: Python
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/security.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Security"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/security.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: Security
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/selfhosted.md added +5

@@ -0,0 +1,5 @@
	1	+++
	2	title = "Self-Hosted"
	3	updated = 2024-03-07
	4	draft = true
	5	+++\ No newline at end of file

content/wiki/selfhosted.org deleted −3

	@@ -1,3 +0,0 @@
1	#+title: Self-Hosting
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t

content/wiki/windows.md added +18

@@ -0,0 +1,18 @@
	1	+++
	2	title = "Windows"
	3	updated = 2024-03-07
	4	draft = true
	5	+++
	6
	7	## Windows (Work)
	8
	9	I am required to use a Windows 10 laptop for work, but I have some
	10	limited customization options.
	11
	12	- Alteryx
	13	- Notepad++
	14	- Obsidian
	15	- Power BI
	16	- Task Scheduler
	17	- Auto Dark Mode
	18	- Auto Light Mode

content/wiki/windows.org deleted −18

	@@ -1,18 +0,0 @@
1	#+title: Windows
2	#+date: <2024-04-01 Mon 08:00:00>
3	#+draft: t
4
5	** Windows (Work)
6	:PROPERTIES:
7	:CUSTOM_ID: windows-work
8	:END:
9	I am required to use a Windows 10 laptop for work, but I have some
10	limited customization options.
11
12	- Alteryx
13	- Notepad++
14	- Obsidian
15	- Power BI
16	- Task Scheduler
17	- Auto Dark Mode
18	- Auto Light Mode

nginx-dev.conf deleted −17

	@@ -1,17 +0,0 @@
1	server {
2	server_name cleberg.net www.cleberg.net;
3
4	root /usr/share/nginx/html;
5	index index.html;
6	autoindex on;
7
8	access_log /var/log/nginx/cleberg.net.access.log;
9	error_log /var/log/nginx/cleberg.net.error.log;
10
11	location / {
12	try_files $uri $uri/ =404;
13	}
14
15	listen [::]:80;
16	listen 80;
17	}

publish.el deleted −98

	@@ -1,98 +0,0 @@
1	;; explicity load packages since I'm using Doom Emacs
2	(add-to-list 'load-path "~/.emacs.d/.local/straight/repos/emacs-htmlize")
3	(add-to-list 'load-path "~/.emacs.d/.local/straight/repos/weblorg")
4	(add-to-list 'load-path "~/.emacs.d/.local/straight/repos/templatel")
5	(require 'htmlize)
6	(require 'weblorg)
7
8	;; defaults to http://localhost:8000
9	;; ENV=prod emacs --script publish.el
10	(if (string= (getenv "ENV") "prod")
11	(setq weblorg-default-url "https://cleberg.net"))
12
13	(weblorg-site
14	:theme nil
15	:template-vars '(("site_name" . "cleberg.net")
16	("site_owner" . "Christian Cleberg <hello@cleberg.net>")
17	("site_description" . "Just a blip of ones and zeroes.")))
18
19	;; route for rendering the index page of the website
20	(weblorg-route
21	:name "index"
22	:input-pattern "content/index.org"
23	:template "index.html"
24	:output ".build/index.html"
25	:url "/")
26
27	;; route for rendering each post
28	(weblorg-route
29	:name "blog"
30	:input-pattern "content/blog/*.org"
31	:template "post.html"
32	:output ".build/blog/{{ slug }}.html"
33	:url "/blog/{{ slug }}.html")
34
35	;; route for rendering the index page of the blog
36	(weblorg-route
37	:name "blog-index"
38	:input-pattern "content/blog/*.org"
39	:input-aggregate #'weblorg-input-aggregate-all-desc
40	:template "blog.html"
41	:output ".build/blog/index.html"
42	:url "/blog/")
43
44	;; route for rendering each wiki post
45	(weblorg-route
46	:name "wiki"
47	:input-pattern "content/wiki/*.org"
48	:template "post.html"
49	:output ".build/wiki/{{ slug }}.html"
50	:url "/wiki/{{ slug }}.html")
51
52	;; route for rendering the index page of the wiki
53	(weblorg-route
54	:name "wiki-index"
55	:input-pattern "content/wiki/*.org"
56	:input-aggregate #'weblorg-input-aggregate-all
57	:template "wiki.html"
58	:output ".build/wiki/index.html"
59	:url "/wiki/")
60
61	;; route for rendering each page
62	(weblorg-route
63	:name "pages"
64	:input-pattern "content/*.org"
65	:template "page.html"
66	:output ".build/{{ slug }}.html"
67	:url "/{{ slug }}.html")
68
69	(weblorg-route
70	:name "salary"
71	:input-pattern "content/salary/*.org"
72	:template "page.html"
73	:output ".build/salary/{{ slug }}.html"
74	:url "/salary/{{ slug }}.html")
75
76	(weblorg-route
77	:name "services"
78	:input-pattern "content/services/*.org"
79	:template "page.html"
80	:output ".build/services/{{ slug }}.html"
81	:url "/services/{{ slug }}.html")
82
83	;; RSS Feed
84	(weblorg-route
85	:name "rss"
86	:input-pattern "content/blog/*.org"
87	:input-aggregate #'weblorg-input-aggregate-all-desc
88	:template "feed.xml"
89	:output ".build/feed.xml"
90	:url "/feed.xml")
91
92	;; route for static assets that also copies files to .build directory
93	(weblorg-copy-static
94	:output ".build/{{ file }}"
95	:url "/{{ file }}")
96
97	;; fire the engine and export all the files declared in the routes above
98	(weblorg-export)

theme/static/.well-known/security.txt → static/.well-known/security.txt renamed

theme/static/gpg.txt → static/gpg.txt renamed

theme/static/robots.txt → static/robots.txt renamed

static/styles.css added +562

@@ -0,0 +1,562 @@
	1	/! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /
	2
	3	/* Document
	4	========================================================================== */
	5
	6	/**
	7	* 1. Correct the line height in all browsers.
	8	* 2. Prevent adjustments of font size after orientation changes in iOS.
	9	*/
	10
	11	html {
	12	line-height: 1.15; /* 1 */
	13	-webkit-text-size-adjust: 100%; /* 2 */
	14	}
	15
	16	/* Sections
	17	========================================================================== */
	18
	19	/**
	20	* Remove the margin in all browsers.
	21	*/
	22
	23	body {
	24	margin: 0;
	25	}
	26
	27	/**
	28	* Render the `main` element consistently in IE.
	29	*/
	30
	31	main {
	32	display: block;
	33	}
	34
	35	/**
	36	* Correct the font size and margin on `h1` elements within `section` and
	37	* `article` contexts in Chrome, Firefox, and Safari.
	38	*/
	39
	40	h1 {
	41	font-size: 2em;
	42	margin: 0.67em 0;
	43	}
	44
	45	/* Grouping content
	46	========================================================================== */
	47
	48	/**
	49	* 1. Add the correct box sizing in Firefox.
	50	* 2. Show the overflow in Edge and IE.
	51	*/
	52
	53	hr {
	54	box-sizing: content-box; /* 1 */
	55	height: 0; /* 1 */
	56	overflow: visible; /* 2 */
	57	}
	58
	59	/**
	60	* 1. Correct the inheritance and scaling of font size in all browsers.
	61	* 2. Correct the odd `em` font sizing in all browsers.
	62	*/
	63
	64	pre {
	65	font-family: monospace, monospace; /* 1 */
	66	font-size: 1em; /* 2 */
	67	}
	68
	69	/* Text-level semantics
	70	========================================================================== */
	71
	72	/**
	73	* Remove the gray background on active links in IE 10.
	74	*/
	75
	76	a {
	77	background-color: transparent;
	78	}
	79
	80	/**
	81	* 1. Remove the bottom border in Chrome 57-
	82	* 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari.
	83	*/
	84
	85	abbr[title] {
	86	border-bottom: none; /* 1 */
	87	text-decoration: underline; /* 2 */
	88	text-decoration: underline dotted; /* 2 */
	89	}
	90
	91	/**
	92	* Add the correct font weight in Chrome, Edge, and Safari.
	93	*/
	94
	95	b,
	96	strong {
	97	font-weight: bolder;
	98	}
	99
	100	/**
	101	* 1. Correct the inheritance and scaling of font size in all browsers.
	102	* 2. Correct the odd `em` font sizing in all browsers.
	103	*/
	104
	105	code,
	106	kbd,
	107	samp {
	108	font-family: monospace, monospace; /* 1 */
	109	font-size: 1em; /* 2 */
	110	}
	111
	112	/**
	113	* Add the correct font size in all browsers.
	114	*/
	115
	116	small {
	117	font-size: 80%;
	118	}
	119
	120	/**
	121	* Prevent `sub` and `sup` elements from affecting the line height in
	122	* all browsers.
	123	*/
	124
	125	sub,
	126	sup {
	127	font-size: 75%;
	128	line-height: 0;
	129	position: relative;
	130	vertical-align: baseline;
	131	}
	132
	133	sub {
	134	bottom: -0.25em;
	135	}
	136
	137	sup {
	138	top: -0.5em;
	139	}
	140
	141	/* Embedded content
	142	========================================================================== */
	143
	144	/**
	145	* Remove the border on images inside links in IE 10.
	146	*/
	147
	148	img {
	149	border-style: none;
	150	}
	151
	152	/* Forms
	153	========================================================================== */
	154
	155	/**
	156	* 1. Change the font styles in all browsers.
	157	* 2. Remove the margin in Firefox and Safari.
	158	*/
	159
	160	button,
	161	input,
	162	optgroup,
	163	select,
	164	textarea {
	165	font-family: inherit; /* 1 */
	166	font-size: 100%; /* 1 */
	167	line-height: 1.15; /* 1 */
	168	margin: 0; /* 2 */
	169	}
	170
	171	/**
	172	* Show the overflow in IE.
	173	* 1. Show the overflow in Edge.
	174	*/
	175
	176	button,
	177	input {
	178	/* 1 */
	179	overflow: visible;
	180	}
	181
	182	/**
	183	* Remove the inheritance of text transform in Edge, Firefox, and IE.
	184	* 1. Remove the inheritance of text transform in Firefox.
	185	*/
	186
	187	button,
	188	select {
	189	/* 1 */
	190	text-transform: none;
	191	}
	192
	193	/**
	194	* Correct the inability to style clickable types in iOS and Safari.
	195	*/
	196
	197	button,
	198	[type="button"],
	199	[type="reset"],
	200	[type="submit"] {
	201	-webkit-appearance: button;
	202	}
	203
	204	/**
	205	* Remove the inner border and padding in Firefox.
	206	*/
	207
	208	button::-moz-focus-inner,
	209	[type="button"]::-moz-focus-inner,
	210	[type="reset"]::-moz-focus-inner,
	211	[type="submit"]::-moz-focus-inner {
	212	border-style: none;
	213	padding: 0;
	214	}
	215
	216	/**
	217	* Restore the focus styles unset by the previous rule.
	218	*/
	219
	220	button:-moz-focusring,
	221	[type="button"]:-moz-focusring,
	222	[type="reset"]:-moz-focusring,
	223	[type="submit"]:-moz-focusring {
	224	outline: 1px dotted ButtonText;
	225	}
	226
	227	/**
	228	* Correct the padding in Firefox.
	229	*/
	230
	231	fieldset {
	232	padding: 0.35em 0.75em 0.625em;
	233	}
	234
	235	/**
	236	* 1. Correct the text wrapping in Edge and IE.
	237	* 2. Correct the color inheritance from `fieldset` elements in IE.
	238	* 3. Remove the padding so developers are not caught out when they zero out
	239	* `fieldset` elements in all browsers.
	240	*/
	241
	242	legend {
	243	box-sizing: border-box; /* 1 */
	244	color: inherit; /* 2 */
	245	display: table; /* 1 */
	246	max-width: 100%; /* 1 */
	247	padding: 0; /* 3 */
	248	white-space: normal; /* 1 */
	249	}
	250
	251	/**
	252	* Add the correct vertical alignment in Chrome, Firefox, and Opera.
	253	*/
	254
	255	progress {
	256	vertical-align: baseline;
	257	}
	258
	259	/**
	260	* Remove the default vertical scrollbar in IE 10+.
	261	*/
	262
	263	textarea {
	264	overflow: auto;
	265	}
	266
	267	/**
	268	* 1. Add the correct box sizing in IE 10.
	269	* 2. Remove the padding in IE 10.
	270	*/
	271
	272	[type="checkbox"],
	273	[type="radio"] {
	274	box-sizing: border-box; /* 1 */
	275	padding: 0; /* 2 */
	276	}
	277
	278	/**
	279	* Correct the cursor style of increment and decrement buttons in Chrome.
	280	*/
	281
	282	[type="number"]::-webkit-inner-spin-button,
	283	[type="number"]::-webkit-outer-spin-button {
	284	height: auto;
	285	}
	286
	287	/**
	288	* 1. Correct the odd appearance in Chrome and Safari.
	289	* 2. Correct the outline style in Safari.
	290	*/
	291
	292	[type="search"] {
	293	-webkit-appearance: textfield; /* 1 */
	294	outline-offset: -2px; /* 2 */
	295	}
	296
	297	/**
	298	* Remove the inner padding in Chrome and Safari on macOS.
	299	*/
	300
	301	[type="search"]::-webkit-search-decoration {
	302	-webkit-appearance: none;
	303	}
	304
	305	/**
	306	* 1. Correct the inability to style clickable types in iOS and Safari.
	307	* 2. Change font properties to `inherit` in Safari.
	308	*/
	309
	310	::-webkit-file-upload-button {
	311	-webkit-appearance: button; /* 1 */
	312	font: inherit; /* 2 */
	313	}
	314
	315	/* Interactive
	316	========================================================================== */
	317
	318	/*
	319	* Add the correct display in Edge, IE 10+, and Firefox.
	320	*/
	321
	322	details {
	323	display: block;
	324	}
	325
	326	/*
	327	* Add the correct display in all browsers.
	328	*/
	329
	330	summary {
	331	display: list-item;
	332	}
	333
	334	/* Misc
	335	========================================================================== */
	336
	337	/**
	338	* Add the correct display in IE 10+.
	339	*/
	340
	341	template {
	342	display: none;
	343	}
	344
	345	/**
	346	* Add the correct display in IE 10.
	347	*/
	348
	349	[hidden] {
	350	display: none;
	351	}
	352
	353	/* CUSTOM CSS */
	354	:root {
	355	--bg: #fff;
	356	--bg-bright: #eee;
	357	--fg: #111;
	358	--link: #00f;
	359	--code: #f00;
	360	--border: #ccc;
	361	}
	362
	363	@media (prefers-reduced-motion: no-preference) {
	364	:root {
	365	scroll-behavior: smooth;
	366	}
	367	}
	368
	369	body {
	370	background-color: var(--bg);
	371	color: var(--fg);
	372	font-family: Menlo, Consolas, Monaco, Liberation Mono, Lucida Console,
	373	monospace;
	374	font-size: 0.9rem;
	375	line-height: 1.5;
	376	max-width: 50em;
	377	margin: 0 auto;
	378	padding: 0 1rem;
	379	}
	380
	381	.site-nav,
	382	footer {
	383	border-color: var(--fg);
	384	}
	385
	386	footer {
	387	border-top: 1px dotted;
	388	padding-top: 1rem;
	389	margin: 1rem 0;
	390	}
	391
	392	footer p {
	393	margin: 0;
	394	}
	395
	396	.site-nav {
	397	border-bottom: 1px dotted;
	398	}
	399
	400	.site-nav ul {
	401	list-style-type: none;
	402	display: flex;
	403	align-items: center;
	404	padding: 0;
	405	}
	406
	407	.site-nav ul li {
	408	margin-right: 0.5rem;
	409	}
	410
	411	h1,
	412	h2,
	413	h3,
	414	h4 {
	415	color: var(--fg);
	416	}
	417
	418	a,
	419	a:visited {
	420	color: var(--link);
	421	text-decoration: none;
	422	}
	423
	424	a:hover {
	425	text-decoration: underline;
	426	}
	427
	428	img {
	429	width: 100%;
	430	}
	431
	432	table {
	433	border-collapse: collapse;
	434	color: var(--fg);
	435	border-color: var(--bg-bright);
	436	font-family: Menlo, Consolas, Monaco, Liberation Mono, Lucida Console,
	437	monospace;
	438	font-size: 0.9rem;
	439	}
	440
	441	thead,
	442	th,
	443	tr,
	444	td {
	445	border: 1px solid var(--border);
	446	padding: 0.25rem;
	447	}
	448
	449	pre > code,
	450	time,
	451	code {
	452	font-family: Menlo, Consolas, Monaco, Liberation Mono, Lucida Console,
	453	monospace;
	454	font-size: inherit;
	455	}
	456
	457	pre {
	458	background-color: var(--bg-bright) !important;
	459	margin: 0.5rem 0;
	460	padding: 0.5rem;
	461	overflow-x: auto;
	462	}
	463
	464	:not(pre) > code {
	465	color: var(--code);
	466	font-family: inherit;
	467	}
	468
	469	aside {
	470	background-color: var(--bg-bright);
	471	padding: 1rem;
	472	}
	473
	474	blockquote {
	475	background-color: var(--bg-bright);
	476	border-left: 5px solid var(--link);
	477	margin: 1rem 0;
	478	padding: 0.5rem 1rem;
	479	}
	480
	481	blockquote p {
	482	margin: 0;
	483	}
	484
	485	.post,
	486	.wiki-post {
	487	display: flex;
	488	}
	489
	490	.post time {
	491	flex-shrink: 0;
	492	margin-right: 0.5rem;
	493	}
	494
	495	.wiki-post {
	496	justify-content: space-between;
	497	}
	498
	499	.wiki-post:first-of-type {
	500	border-bottom: 1px dotted var(--fg);
	501	margin-bottom: 1rem;
	502	}
	503
	504	.wiki-post p {
	505	margin: 0;
	506	}
	507
	508	.post-metadata {
	509	border: 1px dotted var(--fg);
	510	border-top: none;
	511	padding: 1rem;
	512	}
	513
	514	.post-metadata h1 {
	515	margin: 0;
	516	}
	517
	518	.post-metadata p {
	519	margin: 0;
	520	}
	521
	522	details {
	523	margin-top: 1rem;
	524	}
	525
	526	summary {
	527	font-weight: bold;
	528	}
	529
	530	.footnote-definition {
	531	display: flex;
	532	justify-content: flex-start;
	533	align-items: top;
	534	margin: 1rem 0;
	535	}
	536
	537	.footnote-definition sup {
	538	font-size: inherit;
	539	top: 0;
	540	line-height: inherit;
	541	padding-right: 0.5rem;
	542	}
	543
	544	.footnote-definition sup::after {
	545	content: ".";
	546	}
	547
	548	.footnote-definition p {
	549	display: inline-block;
	550	margin: 0;
	551	}
	552
	553	@media (prefers-color-scheme: dark) {
	554	:root {
	555	--bg: #141617;
	556	--bg-bright: #191c1d;
	557	--fg: #b2aea9;
	558	--link: #ff79c6;
	559	--code: #ffb454;
	560	--border: #333;
	561	}
	562	}

static/styles.min.css added +1

	@@ -0,0 +1 @@
		1	/!normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css/html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:initial}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}button,[type=button],[type=reset],[type=submit]{-webkit-appearance:button}button::-moz-focus-inner,[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner{border-style:none;padding:0}button:-moz-focusring,[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}progress{vertical-align:baseline}textarea{overflow:auto}[type=checkbox],[type=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}details{display:block}summary{display:list-item}template{display:none}[hidden]{display:none}:root{--bg:#fff;--bg-bright:#eee;--fg:#111;--link:#00f;--code:#f00;--border:#ccc}@media(prefers-reduced-motion:no-preference){:root{scroll-behavior:smooth}}body{background-color:var(--bg);color:var(--fg);font-family:Menlo,Consolas,Monaco,Liberation Mono,Lucida Console,monospace;font-size:.9rem;line-height:1.5;max-width:50em;margin:0 auto;padding:0 1rem}.site-nav,footer{border-color:var(--fg)}footer{border-top:1px dotted;padding-top:1rem;margin:1rem 0}footer p{margin:0}.site-nav{border-bottom:1px dotted}.site-nav ul{list-style-type:none;display:flex;align-items:center;padding:0}.site-nav ul li{margin-right:.5rem}h1,h2,h3,h4{color:var(--fg)}a,a:visited{color:var(--link);text-decoration:none}a:hover{text-decoration:underline}img{width:100%}table{border-collapse:collapse;color:var(--fg);border-color:var(--bg-bright);font-family:Menlo,Consolas,Monaco,Liberation Mono,Lucida Console,monospace;font-size:.9rem}thead,th,tr,td{border:1px solid var(--border);padding:.25rem}pre>code,time,code{font-family:Menlo,Consolas,Monaco,Liberation Mono,Lucida Console,monospace;font-size:inherit}pre{background-color:var(--bg-bright)!important;margin:.5rem 0;padding:.5rem;overflow-x:auto}:not(pre)>code{color:var(--code);font-family:inherit}aside{background-color:var(--bg-bright);padding:1rem}blockquote{background-color:var(--bg-bright);border-left:5px solid var(--link);margin:1rem 0;padding:.5rem 1rem}blockquote p{margin:0}.post,.wiki-post{display:flex}.post time{flex-shrink:0;margin-right:.5rem}.wiki-post{justify-content:space-between}.wiki-post:first-of-type{border-bottom:1px dotted var(--fg);margin-bottom:1rem}.wiki-post p{margin:0}.post-metadata{border:1px dotted var(--fg);border-top:none;padding:1rem}.post-metadata h1{margin:0}.post-metadata p{margin:0}details{margin-top:1rem}summary{font-weight:700}.footnote-definition{display:flex;justify-content:flex-start;align-items:top;margin:1rem 0}.footnote-definition sup{font-size:inherit;top:0;line-height:inherit;padding-right:.5rem}.footnote-definition sup::after{content:"."}.footnote-definition p{display:inline-block;margin:0}@media(prefers-color-scheme:dark){:root{--bg:#141617;--bg-bright:#191c1d;--fg:#b2aea9;--link:#ff79c6;--code:#ffb454;--border:#333}}\ No newline at end of file

static/syntax-theme-dark.css added +280

@@ -0,0 +1,280 @@
	1	/*
	2	* theme "ayu" generated by syntect
	3	*/
	4
	5	.z-code {
	6	color: #bfbab0;
	7	background-color: #0f1419;
	8	}
	9
	10	.z-comment, .z-punctuation.z-definition.z-comment {
	11	color: #5c6773;
	12	font-style: italic;
	13	}
	14	.z-variable {
	15	color: #bfbab0;
	16	}
	17	.z-string, .z-constant.z-other.z-symbol {
	18	color: #c2d94c;
	19	}
	20	.z-constant.z-numeric {
	21	color: #f29718;
	22	}
	23	.z-string.z-regexp, .z-constant.z-character.z-escape {
	24	color: #95e6cb;
	25	}
	26	.z-constant.z-language {
	27	color: #f29718;
	28	}
	29	.z-constant.z-character, .z-constant.z-other {
	30	color: #f29718;
	31	}
	32	.z-variable.z-member {
	33	color: #ec5f67;
	34	}
	35	.z-keyword, .z-keyword.z-operator.z-word {
	36	color: #ff7733;
	37	}
	38	.z-keyword.z-operator {
	39	color: #f29668;
	40	}
	41	.z-punctuation.z-separator, .z-punctuation.z-terminator {
	42	color: #bfbab0;
	43	}
	44	.z-punctuation.z-section {
	45	color: #bfbab0;
	46	}
	47	.z-punctuation.z-accessor {
	48	color: #f29668;
	49	}
	50	.z-punctuation.z-definition.z-annotation {
	51	color: #bfbab0;
	52	}
	53	.z-variable.z-other.z-dollar.z-only.z-js, .z-variable.z-other.z-object.z-dollar.z-only.z-js, .z-variable.z-type.z-dollar.z-only.z-js, .z-support.z-class.z-dollar.z-only.z-js {
	54	color: #e6b673;
	55	}
	56	.z-storage {
	57	color: #ff7733;
	58	}
	59	.z-storage.z-type {
	60	color: #ff7733;
	61	}
	62	.z-entity.z-name.z-function {
	63	color: #ffb454;
	64	}
	65	.z-entity.z-name, .z-entity.z-name.z-tag, .z-entity.z-name.z-label) {
	66	color: #59c2ff;
	67	}
	68	.z-entity.z-other.z-inherited-class {
	69	color: #59c2ff;
	70	text-decoration: underline;
	71	}
	72	.z-variable.z-parameter {
	73	color: #f29718;
	74	}
	75	.z-variable.z-language {
	76	color: #39bae6;
	77	font-style: italic;
	78	}
	79	.z-entity.z-name.z-tag, .z-meta.z-tag.z-sgml {
	80	color: #39bae6;
	81	}
	82	.z-punctuation.z-definition.z-tag.z-end, .z-punctuation.z-definition.z-tag.z-begin, .z-punctuation.z-definition.z-tag {
	83	color: #39bae6;
	84	}
	85	.z-entity.z-other.z-attribute-name {
	86	color: #ffb454;
	87	}
	88	.z-variable.z-function, .z-variable.z-annotation {
	89	color: #ffb454;
	90	}
	91	.z-support.z-function, .z-support.z-macro {
	92	color: #f07178;
	93	}
	94	.z-support.z-constant {
	95	color: #f29668;
	96	font-style: italic;
	97	}
	98	.z-support.z-type, .z-support.z-class {
	99	color: #39bae6;
	100	font-style: italic;
	101	}
	102	.z-invalid {
	103	color: #ff3333;
	104	}
	105	.z-invalid.z-deprecated {
	106	color: #ffffff;
	107	background-color: #ff7733;
	108	}
	109	.z-meta.z-diff, .z-meta.z-diff.z-header {
	110	color: #c594c5;
	111	}
	112	.z-source.z-ruby .z-variable.z-other.z-readwrite {
	113	color: #ffb454;
	114	}
	115	.z-source.z-css .z-entity.z-name.z-tag, .z-source.z-sass .z-entity.z-name.z-tag, .z-source.z-scss .z-entity.z-name.z-tag, .z-source.z-less .z-entity.z-name.z-tag, .z-source.z-stylus .z-entity.z-name.z-tag {
	116	color: #59c2ff;
	117	}
	118	.z-source.z-css .z-support.z-type, .z-source.z-sass .z-support.z-type, .z-source.z-scss .z-support.z-type, .z-source.z-less .z-support.z-type, .z-source.z-stylus .z-support.z-type {
	119	color: #5c6773;
	120	}
	121	.z-support.z-type.z-property-name {
	122	color: #39bae6;
	123	}
	124	.z-constant.z-numeric.z-line-number.z-find-in-files {
	125	color: #5c6773;
	126	}
	127	.z-constant.z-numeric.z-line-number.z-match {
	128	color: #ff7733;
	129	}
	130	.z-entity.z-name.z-filename.z-find-in-files {
	131	color: #c2d94c;
	132	}
	133	.z-message.z-error {
	134	color: #ff3333;
	135	}
	136	.z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json, .z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-punctuation.z-definition.z-string {
	137	color: #39bae6;
	138	}
	139	.z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json, .z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-punctuation.z-definition.z-string {
	140	color: #39bae6;
	141	}
	142	.z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json, .z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-punctuation.z-definition.z-string {
	143	color: #39bae6;
	144	}
	145	.z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json, .z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-punctuation.z-definition.z-string {
	146	color: #39bae6;
	147	}
	148	.z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json, .z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-punctuation.z-definition.z-string {
	149	color: #39bae6;
	150	}
	151	.z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json, .z-source.z-json .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-punctuation.z-definition.z-string {
	152	color: #39bae6;
	153	}
	154	.z-source.z-json .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json, .z-source.z-json .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-punctuation.z-definition.z-string {
	155	color: #39bae6;
	156	}
	157	.z-source.z-json .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json, .z-source.z-json .z-meta .z-meta.z-structure.z-dictionary.z-json .z-punctuation.z-definition.z-string {
	158	color: #39bae6;
	159	}
	160	.z-source.z-json .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json, .z-source.z-json .z-meta.z-structure.z-dictionary.z-json .z-punctuation.z-definition.z-string {
	161	color: #39bae6;
	162	}
	163	.z-markup.z-heading {
	164	color: #ff7733;
	165	font-weight: bold;
	166	}
	167	.z-string.z-other.z-link, .z-markup.z-underline.z-link {
	168	color: #95e6cb;
	169	text-decoration: underline;
	170	font-style: italic;
	171	}
	172	.z-punctuation.z-definition.z-image {
	173	color: #ffb454;
	174	}
	175	.z-markup.z-italic {
	176	color: #f07178;
	177	font-style: italic;
	178	}
	179	.z-markup.z-bold {
	180	color: #f07178;
	181	font-weight: bold;
	182	}
	183	.z-markup.z-italic .z-markup.z-bold, .z-markup.z-bold .z-markup.z-italic {
	184	font-weight: bold;
	185	font-style: italic;
	186	}
	187	.z-markup.z-raw {
	188	background-color: #bfbab0;
	189	}
	190	.z-markup.z-raw.z-inline {
	191	background-color: #bfbab0;
	192	}
	193	.z-meta.z-separator {
	194	color: #5c6773;
	195	background-color: #bfbab0;
	196	font-weight: bold;
	197	}
	198	.z-markup.z-quote {
	199	color: #f29718;
	200	font-style: italic;
	201	}
	202	.z-markup.z-list.z-numbered.z-bullet, .z-markup.z-list .z-punctuation.z-definition.z-list_item {
	203	color: #95e6cb;
	204	}
	205	.z-markup.z-inserted {
	206	color: #c2d94c;
	207	}
	208	.z-markup.z-changed {
	209	color: #39bae6;
	210	}
	211	.z-markup.z-deleted {
	212	color: #f07178;
	213	}
	214	.z-markup.z-strike {
	215	color: #e6b673;
	216	}
	217	.z-markup.z-table {
	218	color: #39bae6;
	219	background-color: #bfbab0;
	220	}
	221	.z-text.z-html.z-markdown .z-markup.z-raw.z-inline {
	222	color: #f29668;
	223	}
	224	.z-text.z-html.z-markdown .z-meta.z-dummy.z-line-break {
	225	color: #5c6773;
	226	}
	227	.z-markup.z-raw.z-block.z-fenced.z-markdown {
	228	color: #bfbab0;
	229	background-color: #bfbab0;
	230	}
	231	.z-punctuation.z-definition.z-fenced.z-markdown, .z-variable.z-language.z-fenced.z-markdown {
	232	color: #5c6773;
	233	background-color: #bfbab0;
	234	}
	235	.z-variable.z-language.z-fenced.z-markdown {
	236	color: #5c6773;
	237	}
	238	.z-markup.z-inserted.z-git_gutter {
	239	color: #c2d94c;
	240	}
	241	.z-markup.z-changed.z-git_gutter {
	242	color: #39bae6;
	243	}
	244	.z-markup.z-deleted.z-git_gutter {
	245	color: #ff3333;
	246	}
	247	.z-markup.z-ignored.z-git_gutter {
	248	color: #20272c;
	249	}
	250	.z-markup.z-untracked.z-git_gutter {
	251	color: #20272c;
	252	}
	253	.z-gutter_color {
	254	color: #ffffff;
	255	}
	256	.z-acejump.z-label.z-blue {
	257	color: #ffffff;
	258	background-color: #39bae6;
	259	}
	260	.z-acejump.z-label.z-green {
	261	color: #ffffff;
	262	background-color: #c2d94c;
	263	}
	264	.z-acejump.z-label.z-orange {
	265	color: #ffffff;
	266	background-color: #ff7733;
	267	}
	268	.z-acejump.z-label.z-purple {
	269	color: #ffffff;
	270	background-color: #f07178;
	271	}
	272	.z-sublimelinter.z-mark.z-warning {
	273	color: #39bae6;
	274	}
	275	.z-sublimelinter.z-gutter-mark {
	276	color: #ffffff;
	277	}
	278	.z-sublimelinter.z-mark.z-error {
	279	color: #ff3333;
	280	}

static/syntax-theme-light.css added +407

@@ -0,0 +1,407 @@
	1	/*
	2	* theme "GitHub" generated by syntect
	3	*/
	4
	5	.z-code {
	6	color: #323232;
	7	background-color: #ffffff;
	8	}
	9
	10	.z-comment {
	11	color: #969896;
	12	font-style: italic;
	13	}
	14	.z-string {
	15	color: #183691;
	16	}
	17	.z-regexp-operator {
	18	color: #a71d5d;
	19	}
	20	.z-string.z-regexp.z-characterclass .z-punctuation.z-definition.z-string.z-begin, .z-string.z-regexp.z-characterclass .z-punctuation.z-definition.z-string.z-end {
	21	color: #a71d5d;
	22	}
	23	.z-constant.z-numeric {
	24	color: #0086b3;
	25	}
	26	.z-constant.z-language {
	27	color: #0086b3;
	28	}
	29	.z-constant.z-character, .z-constant.z-other, .z-variable.z-other.z-constant {
	30	color: #0086b3;
	31	}
	32	.z-variable {
	33	color: #323232;
	34	}
	35	.z-keyword {
	36	color: #a71d5d;
	37	font-weight: bold;
	38	}
	39	.z-bitwise-operator {
	40	color: #a71d5d;
	41	font-weight: bold;
	42	}
	43	.z-storage {
	44	color: #a71d5d;
	45	font-weight: bold;
	46	}
	47	.z-storage.z-type {
	48	color: #a71d5d;
	49	font-weight: bold;
	50	}
	51	.z-entity.z-name.z-class {
	52	color: #0086b3;
	53	}
	54	.z-entity.z-other.z-inherited-class {
	55	color: #0086b3;
	56	}
	57	.z-entity.z-name.z-function {
	58	color: #795da3;
	59	font-weight: bold;
	60	}
	61	.z-variable.z-parameter {
	62	color: #323232;
	63	}
	64	.z-entity.z-name.z-tag {
	65	color: #63a35c;
	66	}
	67	.z-entity.z-other.z-attribute-name {
	68	color: #795da3;
	69	}
	70	.z-support.z-function {
	71	color: #62a35c;
	72	}
	73	.z-support.z-constant {
	74	color: #0086b3;
	75	}
	76	.z-support.z-type, .z-support.z-class {
	77	color: #0086b3;
	78	}
	79	.z-support.z-other.z-variable {
	80	color: #323232;
	81	}
	82	.z-invalid, .z-invalid.z-illegal, .z-invalid.z-deprecated {
	83	color: #b52a1d;
	84	background-color: #f5f5f5;
	85	font-weight: bold;
	86	}
	87	.z-entity.z-name.z-filename.z-find-in-files {
	88	color: #323232;
	89	font-weight: bold;
	90	}
	91	.z-constant.z-numeric.z-line-number.z-find-in-files, .z-constant.z-numeric.z-line-number.z-match.z-find-in-files {
	92	color: #b3b3b3;
	93	}
	94	.z-meta.z-diff.z-header {
	95	color: #969896;
	96	background-color: #ffffff;
	97	font-style: italic;
	98	}
	99	.z-meta.z-diff.z-header .z-punctuation.z-definition.z-from-file.z-diff {
	100	color: #bd2c00;
	101	background-color: #ffecec;
	102	font-weight: bold;
	103	font-style: italic;
	104	}
	105	.z-meta.z-diff.z-header .z-punctuation.z-definition.z-to-file.z-diff {
	106	color: #55a532;
	107	background-color: #eaffea;
	108	font-weight: bold;
	109	font-style: italic;
	110	}
	111	.z-meta.z-diff.z-range {
	112	color: #969896;
	113	font-weight: bold;
	114	font-style: italic;
	115	}
	116	.z-markup.z-deleted {
	117	background-color: #ffecec;
	118	}
	119	.z-markup.z-deleted .z-punctuation.z-definition.z-inserted {
	120	color: #bd2c00;
	121	font-weight: bold;
	122	}
	123	.z-markup.z-inserted {
	124	background-color: #eaffea;
	125	}
	126	.z-markup.z-inserted .z-punctuation.z-definition.z-inserted {
	127	color: #55a532;
	128	font-weight: bold;
	129	}
	130	.z-markup.z-deleted.z-git_gutter {
	131	color: #bd2c00;
	132	}
	133	.z-markup.z-inserted.z-git_gutter {
	134	color: #55a532;
	135	}
	136	.z-markup.z-changed.z-git_gutter {
	137	color: #0086b3;
	138	}
	139	.z-markup.z-ignored.z-git_gutter {
	140	color: #b3b3b3;
	141	}
	142	.z-markup.z-untracked.z-git_gutter {
	143	color: #b3b3b3;
	144	}
	145	.z-source.z-css .z-punctuation.z-definition.z-entity {
	146	color: #323232;
	147	}
	148	.z-source.z-css .z-entity.z-other.z-attribute-name.z-pseudo-class, .z-source.z-css .z-entity.z-other.z-attribute-name.z-pseudo-element {
	149	color: #a71d5d;
	150	}
	151	.z-source.z-css .z-meta.z-value, .z-source.z-css .z-support.z-constant, .z-source.z-css .z-support.z-function {
	152	color: #323232;
	153	}
	154	.z-source.z-css .z-constant.z-other.z-color {
	155	color: #ed6a43;
	156	}
	157	.z-source.z-scss .z-punctuation.z-definition.z-entity {
	158	color: #323232;
	159	}
	160	.z-source.z-scss .z-entity.z-other.z-attribute-name.z-pseudo-class, .z-source.z-scss .z-entity.z-other.z-attribute-name.z-pseudo-element {
	161	color: #a71d5d;
	162	}
	163	.z-source.z-scss .z-support.z-constant.z-property-value, .z-source.z-scss .z-support.z-function {
	164	color: #323232;
	165	}
	166	.z-source.z-scss .z-variable {
	167	color: #a71d5d;
	168	}
	169	.z-variable.z-language.z-this.z-js {
	170	color: #ed6a43;
	171	}
	172	.z-source.z-js .z-entity.z-name.z-function {
	173	color: #323232;
	174	}
	175	.z-source.z-js .z-meta.z-function .z-entity.z-name.z-function, .z-source.z-js .z-entity.z-name.z-function .z-meta.z-function {
	176	color: #795da3;
	177	font-weight: bold;
	178	}
	179	.z-entity.z-name.z-type.z-new.z-js {
	180	color: #795da3;
	181	}
	182	.z-variable.z-language.z-prototype.z-js {
	183	color: #0086b3;
	184	}
	185	.z-source.z-js .z-support.z-function {
	186	color: #0086b3;
	187	}
	188	.z-support.z-type.z-object.z-console.z-js {
	189	color: #795da3;
	190	}
	191	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	192	color: #183691;
	193	font-weight: bold;
	194	}
	195	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	196	color: #323232;
	197	}
	198	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	199	color: #183691;
	200	font-weight: bold;
	201	}
	202	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	203	color: #323232;
	204	}
	205	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	206	color: #183691;
	207	font-weight: bold;
	208	}
	209	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	210	color: #323232;
	211	}
	212	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	213	color: #183691;
	214	font-weight: bold;
	215	}
	216	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	217	color: #323232;
	218	}
	219	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	220	color: #183691;
	221	font-weight: bold;
	222	}
	223	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	224	color: #323232;
	225	}
	226	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	227	color: #183691;
	228	font-weight: bold;
	229	}
	230	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	231	color: #323232;
	232	}
	233	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	234	color: #183691;
	235	font-weight: bold;
	236	}
	237	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	238	color: #323232;
	239	}
	240	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	241	color: #183691;
	242	font-weight: bold;
	243	}
	244	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	245	color: #323232;
	246	}
	247	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	248	color: #183691;
	249	font-weight: bold;
	250	}
	251	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	252	color: #323232;
	253	}
	254	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	255	color: #183691;
	256	font-weight: bold;
	257	}
	258	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	259	color: #323232;
	260	}
	261	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	262	color: #183691;
	263	font-weight: bold;
	264	}
	265	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	266	color: #323232;
	267	}
	268	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	269	color: #183691;
	270	font-weight: bold;
	271	}
	272	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	273	color: #323232;
	274	}
	275	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	276	color: #183691;
	277	font-weight: bold;
	278	}
	279	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	280	color: #323232;
	281	}
	282	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	283	color: #183691;
	284	font-weight: bold;
	285	}
	286	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	287	color: #323232;
	288	}
	289	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	290	color: #183691;
	291	font-weight: bold;
	292	}
	293	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	294	color: #323232;
	295	}
	296	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	297	color: #183691;
	298	font-weight: bold;
	299	}
	300	.z-meta .z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	301	color: #323232;
	302	}
	303	.z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	304	color: #183691;
	305	font-weight: bold;
	306	}
	307	.z-meta .z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	308	color: #323232;
	309	}
	310	.z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	311	color: #183691;
	312	font-weight: bold;
	313	}
	314	.z-meta .z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	315	color: #323232;
	316	}
	317	.z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	318	color: #183691;
	319	font-weight: bold;
	320	}
	321	.z-meta .z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	322	color: #323232;
	323	}
	324	.z-meta .z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	325	color: #183691;
	326	font-weight: bold;
	327	}
	328	.z-meta .z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	329	color: #323232;
	330	}
	331	.z-meta.z-structure.z-dictionary.z-json .z-string.z-quoted.z-double.z-json {
	332	color: #183691;
	333	font-weight: bold;
	334	}
	335	.z-meta.z-structure.z-dictionary.z-json .z-meta.z-structure.z-dictionary.z-value.z-json .z-string.z-quoted.z-double.z-json {
	336	color: #323232;
	337	}
	338	.z-source.z-python .z-keyword {
	339	font-weight: bold;
	340	}
	341	.z-source.z-python .z-storage {
	342	font-weight: bold;
	343	}
	344	.z-source.z-python .z-storage.z-type {
	345	font-weight: bold;
	346	}
	347	.z-source.z-python .z-entity.z-name.z-function {
	348	color: #323232;
	349	font-weight: bold;
	350	}
	351	.z-source.z-php .z-entity.z-name.z-type.z-class {
	352	color: #323232;
	353	font-weight: bold;
	354	}
	355	.z-variable.z-language.z-ruby {
	356	color: #ed6a43;
	357	}
	358	.z-entity.z-name.z-type.z-module.z-ruby {
	359	color: #795da3;
	360	font-weight: bold;
	361	}
	362	.z-entity.z-name.z-type.z-class.z-ruby {
	363	color: #795da3;
	364	font-weight: bold;
	365	}
	366	.z-entity.z-other.z-inherited-class.z-ruby {
	367	color: #795da3;
	368	font-weight: bold;
	369	}
	370	.z-punctuation.z-definition.z-heading.z-markdown, .z-punctuation.z-definition.z-italic.z-markdown, .z-punctuation.z-definition.z-bold.z-markdown, .z-punctuation.z-definition.z-string.z-begin.z-markdown, .z-punctuation.z-definition.z-string.z-end.z-markdown, .z-punctuation.z-definition.z-metadata.z-markdown, .z-punctuation.z-definition.z-link.z-markdown, .z-punctuation.z-definition.z-blockquote.z-markdown, .z-punctuation.z-definition.z-raw.z-markdown {
	371	color: #a71d5d;
	372	}
	373	.z-text.z-html.z-markdown .z-meta.z-separator {
	374	color: #b3b3b3;
	375	}
	376	.z-text.z-html.z-markdown .z-markup.z-heading {
	377	font-weight: bold;
	378	}
	379	.z-text.z-html.z-markdown .z-markup.z-raw.z-block {
	380	color: #323232;
	381	}
	382	.z-text.z-html.z-markdown .z-markup.z-raw.z-inline {
	383	color: #323232;
	384	}
	385	.z-text.z-html.z-markdown .z-meta.z-link, .z-text.z-html.z-markdown .z-meta.z-image {
	386	color: #4183c4;
	387	}
	388	.z-text.z-html.z-markdown .z-markup.z-underline.z-link, .z-text.z-html.z-markdown .z-constant.z-other.z-reference {
	389	font-style: italic;
	390	}
	391	.z-text.z-html.z-markdown .z-markup.z-list {
	392	color: #ed6a43;
	393	}
	394	.z-text.z-html.z-markdown .z-markup.z-bold {
	395	font-weight: bold;
	396	}
	397	.z-text.z-html.z-markdown .z-markup.z-italic {
	398	font-style: italic;
	399	}
	400	.z-text.z-html.z-markdown .z-markup.z-bold .z-markup.z-italic {
	401	font-weight: bold;
	402	font-style: italic;
	403	}
	404	.z-text.z-html.z-markdown .z-markup.z-italic .z-markup.z-bold {
	405	font-weight: bold;
	406	font-style: italic;
	407	}

templates/base.html added +48

@@ -0,0 +1,48 @@
	1	<!doctype html>
	2	<html lang="en">
	3	<head>
	4	{% block title %}
	5	<title>cleberg.net</title>
	6	{% endblock %}
	7	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	8	<meta name="theme-color" content="#111" media="(prefers-color-scheme: dark)">
	9	<meta name="theme-color" content="#fff" media="(prefers-color-scheme: light)">
	10	{% if page %}
	11	{% if page.description %}
	12	<meta name="description" content="{{ page.description }}">
	13	{% elif config.description %}
	14	<meta name="description" content="{{ config.description }}">
	15	{% endif %}
	16	{% elif config.description %}
	17	<meta name="description" content="{{ config.description }}" />
	18	{% endif %}
	19
	20	{% block rss %}
	21	<link rel="alternate" type="application/atom+xml" title="RSS" href="{{ get_url(path="atom.xml", trailing_slash=false) }}">
	22	{% endblock %}
	23
	24	{% block css %}
	25	<link rel="stylesheet" href="/styles.min.css">
	26	{% endblock css %}
	27
	28	{% block extra_head %}{% endblock extra_head %}
	29	</head>
	30	<body>
	31	<nav class="site-nav" aria-label="site-nav" role="navigation">
	32	<ul>
	33	<li><a href="/">Home</a></li>
	34	<li><a href="/blog/">Blog</a></li>
	35	<li><a href="/services/">Services</a></li>
	36	<li><a href="/wiki/">Wiki</a></li>
	37	</ul>
	38	</nav>
	39
	40	<main>{% block content %}{% endblock content %}</main>
	41
	42	<footer>
	43	<p>Last build: {{ now() \| date(format="%Y-%m-%d %H:%M:%S") }}</p>
	44	<p><a href="https://git.cleberg.net/?p=cleberg.net.git;a=summary" target="_blank" rel="noopener">Source Code</a></p>
	45	<p><a href="/atom.xml">Atom RSS Feed</a></p>
	46	</footer>
	47	</body>
	48	</html>

templates/blog.html added +18

@@ -0,0 +1,18 @@
	1	{% extends "base.html" %}
	2
	3	{% block content %}
	4	<h1>{{ section.title }}</h1>
	5	<p>Use <code>Ctrl + F</code> to search blog post titles for keywords.</p>
	6	<p>You can also add the <a href="/atom.xml">Atom RSS Feed</a> to your feed reader.</p>
	7	{% set post_date = "1970-01-01" \| date(format="%Y") %}
	8	{% for page in section.pages %}
	9	{% if post_date != page.date \| date(format="%Y") %}
	10	{% set_global post_date = page.date \| date(format="%Y") %}
	11	<h2>{{ post_date }}</h2>
	12	{% endif %}
	13	<div class="post">
	14	<time datetime="{{ page.date \| date(format='%Y-%m-%d %H:%M:%S') }}">{{ page.date \| date(format='%Y-%m-%d') }}</time>
	15	<a href="/blog/{{ page.slug }}/">{{ page.title }}</a>
	16	</div>
	17	{% endfor %}
	18	{% endblock content %}

templates/index.html added +42

@@ -0,0 +1,42 @@
	1	{% extends "base.html" %}
	2
	3	{% block content %}
	4	<section>
	5	<h1>cleberg.net</h1>
	6	<pre>pub rsa4096 2022-11-16 [SC]
	7	<a href="/gpg.txt">3917 973F B159 BBB8 6194 5385 6945 1A51 7AC0 CB37</a>
	8	uid [ultimate] Christian Cleberg <hello@cleberg.net></pre>
	9	</section>
	10	<section>
	11	<h2>Recent Blog Posts</h2>
	12	{% set section = get_section(path="blog/_index.md") %}
	13	{% set i = 0 %}
	14	{% for page in section.pages %}
	15	{% if i < 3%}
	16	{% set_global i = i + 1%}
	17	<div class="post">
	18	<time datetime="{{ page.date \| date(format='%Y-%m-%d %H:%M:%S') }}">{{ page.date \| date(format='%Y-%m-%d') }}</time>
	19	<a href="/blog/{{ page.slug }}/">{{ page.title }}</a>
	20	</div>
	21	{% endif %}
	22	{% endfor %}
	23	<br>
	24	<a href="/blog/">All Posts →</a>
	25	</section>
	26	<section>
	27	<h2>Everything Else</h2>
	28	<ul>
	29	<li><a href="/salary/">Salary</a></li>
	30	<li><a href="/services/">Services</a></li>
	31	<li><a href="/wiki/">Wiki</a></li>
	32	</ul>
	33	</section>
	34	<section>
	35	<h2>Contact</h2>
	36	<ul>
	37	<li>hello [at] cleberg.net (<a href="/gpg.txt">GPG</a>)</li>
	38	<li><a href="https://matrix.to/#/@cyborg:matrix.tchncs.de" target="_blank" rel="noopener">@cyborg:@matrix.tchncs.de</a></li>
	39	<li><a href="https://git.cleberg.net/" target="_blank" rel="noopener">Git</a></li>
	40	</ul>
	41	</section>
	42	{% endblock content %}

templates/page.html added +51

@@ -0,0 +1,51 @@
	1	{% extends "base.html" %}
	2
	3	{% block title %}
	4	<title>{{ page.title }} \| cleberg.net</title>
	5	{% endblock %}
	6
	7	{% block css %}
	8	<link rel="stylesheet" href="/syntax-theme-dark.css" media="(prefers-color-scheme: dark)">
	9	<link rel="stylesheet" href="/syntax-theme-light.css" media="(prefers-color-scheme: light)">
	10	<link rel="stylesheet" href="/styles.css">
	11	{% endblock css %}
	12
	13	{% block content %}
	14	<section class="post-metadata">
	15	<h1>{{ page.title }}</h1>
	16	{% if page.date %}
	17	<p><time datetime="{{ page.date \| date(format='%Y-%m-%d %H:%M:%S') }}">{{ page.date }}</time></p>
	18	{% endif %}
	19	{% if page.updated %}
	20	<p>Last Updated: <time datetime="{{ page.updated \| date(format='%Y-%m-%d %H:%M:%S') }}">{{ page.updated }}</time></p>
	21	{% endif %}
	22	<p>{{ page.word_count }} words; {{ page.reading_time }} minute(s)</p>
	23	{% if page.toc %}
	24	<details open>
	25	<summary>Table of Contents</summary>
	26	<nav class="page-nav" aria-label="page-nav" role="navigation">
	27	<ul>
	28	{% for h1 in page.toc %}
	29	<li>
	30	<a href="{{ h1.permalink \| safe }}">{{ h1.title }}</a>
	31	{% if h1.children %}
	32	<ul>
	33	{% for h2 in h1.children %}
	34	<li>
	35	<a href="{{ h2.permalink \| safe }}">{{ h2.title }}</a>
	36	</li>
	37	{% endfor %}
	38	</ul>
	39	{% endif %}
	40	</li>
	41	{% endfor %}
	42	</ul>
	43	</nav>
	44	</details>
	45	{% endif %}
	46	</section>
	47
	48	<article role="article">
	49	{{ page.content \| safe }}
	50	</article>
	51	{% endblock content %}

templates/wiki.html added +16

@@ -0,0 +1,16 @@
	1	{% extends "base.html" %}
	2
	3	{% block content %}
	4	<h1>{{ section.title }}</h1>
	5	<p>Use <code>Ctrl + F</code> to search wiki pages for keywords.</p>
	6	<div class="wiki-post">
	7	<p>Wiki Page</p>
	8	<p>Last Updated</p>
	9	</div>
	10	{% for page in section.pages %}
	11	<div class="wiki-post">
	12	<p><a href="/wiki/{{ page.slug }}/">{{ page.title }}</a></p>
	13	<time datetime="{{ page.updated \| date(format='%Y-%m-%d %H:%M:%S') }}">{{ page.updated \| date(format='%Y-%m-%d')}}</p>
	14	</div>
	15	{% endfor %}
	16	{% endblock content %}

theme/static/styles.css deleted −39

	@@ -1,39 +0,0 @@
1	body {
2	font-family:
3	Menlo,
4	Consolas,
5	Monaco,
6	Liberation Mono,
7	Lucida Console,
8	monospace;
9	font-size: 0.9rem;
10	margin: 0 auto;
11	max-width: 50em;
12	padding: 1rem;
13	}
14
15	img {
16	height: auto;
17	max-width: 100%;
18	width: 100%;
19	}
20
21	pre {
22	border: 1px solid #000;
23	overflow: scroll;
24	padding: 0.5rem;
25	}
26
27	:not(pre) code {
28	color: #f00;
29	}
30
31	nav ul {
32	padding: 0;
33	}
34
35	nav li {
36	display: inline;
37	list-style: none;
38	padding-right: 0.25rem;
39	}

theme/static/styles.min.css deleted −1

	@@ -1 +0,0 @@
1	body{font-family:Menlo,Consolas,Monaco,Liberation Mono,Lucida Console,monospace;font-size:.9rem;margin:0 auto;max-width:50em;padding:1rem}img{height:auto;max-width:100%;width:100%}pre{border:1px solid #000;overflow:scroll;padding:.5rem}:not(pre) code{color:red}nav ul{padding:0}nav li{display:inline;list-style:none;padding-right:.25rem}\ No newline at end of file

theme/templates/base.html deleted −22

	@@ -1,22 +0,0 @@
1
2	<!doctype html>
3	<html lang="en-us">
4	<head>
5	{% block head %}
6	<meta charset="utf-8">
7	<title>
8	{% block subtitle %}{% endblock %}
9	{% block title %}{{ site_name \| default("weblorg website") }}{% endblock %}
10	</title>
11	<meta name="viewport" content="width=device-width, initial-scale=1">
12	{% if site_owner is defined %}<meta name="author" content="{{ site_owner }}" >{% endif %}
13	{% if site_description is defined %}<meta name="description" content="{{ site_description }}" >{% endif %}
14	{% if site_keywords is defined %}<meta name="keywords" content="{{ site_keywords }}" >{% endif %}
15	<link rel="stylesheet" href="{{ url_for("static", file="styles.min.css") }}" type="text/css">
16	{% block meta %}{% endblock %}
17	{% endblock %}
18	</head>
19	<body>
20	<main>{% block main %}{% endblock %}</main>
21	</body>
22	</html>

theme/templates/blog.html deleted −15

	@@ -1,15 +0,0 @@
1	{% extends "base.html" %}
2
3	{% block subtitle %}Blog \| {% endblock %}
4	{% block main %}
5	<p><a href="/">← home</a></p>
6	<h1>Blog</h1>
7	<p>Use <code>Ctrl + F</code> to search blog post titles for keywords.</p>
8	<p>You can also add the <a href="/feed.xml">RSS Feed</a> to your feed reader.</p>
9	{% for post in posts %}
10	<div class="post">
11	<time datetime='{{ post.date \| strftime("%Y-%m-%d") }}'>{{ post.date\|strftime("%Y-%m-%d") }}</time>
12	<a href='{{ url_for("blog", slug=post.slug) }}'>{{ post.title }}</a>
13	</div>
14	{% endfor %}
15	{% endblock %}

theme/templates/feed.xml deleted −37

	@@ -1,37 +0,0 @@
1	<?xml version="1.0" encoding="UTF-8" ?>
2	<rss version="2.0"
3	xmlns:content="http://purl.org/rss/1.0/modules/content/"
4	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
5	xmlns:dc="http://purl.org/dc/elements/1.1/"
6	xmlns:atom="http://www.w3.org/2005/Atom"
7	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
8	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
9	xmlns:georss="http://www.georss.org/georss"
10	xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#"
11	xmlns:media="http://search.yahoo.com/mrss/">
12	<channel>
13	<title>{{ site_name \| default("Simple Blog") }}</title>
14	<atom:link
15	href="{{ url_for("rss") }}"
16	rel="self" type="application/rss+xml" />
17	<link>{{ url_for("index") }}</link>
18	<description><![CDATA[]]></description>
19	<language>en</language>
20	<pubDate>{{ posts \| first \| getattr("date") \| strftime("%a, %d %b %Y %H:%M:%S %z") }}</pubDate>
21	<lastBuildDate>{{ now() \| strftime("%a, %d %b %Y %H:%M:%S %z") }}</lastBuildDate>
22	<generator>{{ meta.generator }}</generator>
23	<webMaster>{{ site_owner \| default("hello@cleberg.net") }}</webMaster>
24
25	{% for post in posts %}
26	<item>
27	<title>{{ post.title }}</title>
28	<link>{{ url_for("blog", slug=post.slug) }}</link>
29	<author>{{ post.author\|default("hello@cleberg.net") }}</author>
30	<guid isPermaLink="false">{{ url_for("blog", slug=post.slug) }}</guid>
31	<pubDate>{{ post.date\|strftime("%a, %d %b %Y %H:%M:%S %z") }}</pubDate>
32	<description><![CDATA[{{ post.html\|safe }}]]></description>
33	</item>
34	{% endfor %}
35
36	</channel>
37	</rss>

theme/templates/index.html deleted −55

	@@ -1,55 +0,0 @@
1	{% extends "base.html" %} {% block main %}
2	<section>
3	<h1>cleberg.net</h1>
4	<pre>pub rsa4096 2022-11-16 [SC]
5	<a href="/gpg.txt">3917 973F B159 BBB8 6194 5385 6945 1A51 7AC0 CB37</a>
6	uid [ultimate] Christian Cleberg <hello@cleberg.net></pre>
7	</section>
8	<section>
9	<table>
10	<thead>
11	<tr>
12	<th>link</th>
13	<th>desc</th>
14	</tr>
15	</thead>
16	<tbody>
17	<tr>
18	<td><a href="/blog/">blog</a></td>
19	<td>my personal blog</td>
20	</tr>
21	<tr>
22	<td><a href="https://git.cleberg.net">git</a></td>
23	<td>personal git hosting</td>
24	</tr>
25	<tr>
26	<td><a href="https://matrix.to/#/@cyborg:matrix.tchncs.de">matrix</a></td>
27	<td>encrypted chat</td>
28	</tr>
29	<tr>
30	<td><a href="/feed.xml">rss</a></td>
31	<td>feed for my personal blog</td>
32	</tr>
33	<tr>
34	<td><a href="/salary/">salary</a></td>
35	<td>my salary log</td>
36	</tr>
37	<tr>
38	<td><a href="/services/">services</a></td>
39	<td>my public services</td>
40	</tr>
41	<tr>
42	<td><a href="/wiki/">wiki</a></td>
43	<td>my personal wiki</td>
44	</tr>
45	</tbody>
46	</table>
47	</section>
48	<footer>
49	<p>
50	Last Build: <<time datetime='{{ now() \| strftime("%Y-%m-%d %H:%M:%S") }}'
51	>{{ now() \| strftime("%Y-%m-%d %a %H:%M:%S") }}</time
52	>>
53	</p>
54	</footer>
55	{% endblock %}

theme/templates/page.html deleted −12

	@@ -1,12 +0,0 @@
1	{% extends "base.html" %}
2
3	{% block subtitle %}
4	{{ post.title }} \|
5	{% endblock %}
6	{% block main %}
7	<p><a href="/">← home</a></p>
8	<article role="article">
9	<h1>{{ post.title }}</h1>
10	<section>{{ post.html \| safe }}</section>
11	</article>
12	{% endblock %}

theme/templates/post.html deleted −22

	@@ -1,22 +0,0 @@
1	{% extends "base.html" %} {% block subtitle %} {{ post.title }} \| {% endblock %}
2	{% block meta %}
3	<meta property="og:title" content="{{ post.title }}" />
4	<meta property="og:url" content="{{ post.url }}" />
5	{% if post.description is defined %}
6	<meta property="og:description" content="{{ post.description }}" />
7	{% elif project_description is defined %}
8	<meta property="og:description" content="{{ project_description }}" />
9	{% endif %} {% endblock %} {% block main %}
10	<p><a href="/">← home</a></p>
11	<article role="article">
12	<section class="post-metadata">
13	<h1 class="post__title">{{ post.title }}</h1>
14	{% if post.date is defined %}
15	<time datetime='{{ post.date\|strftime("%Y-%m-%d") }}'
16	><{{ post.date\|strftime("%Y-%m-%d %a %H:%M:%S") }}></time
17	>
18	{% endif %}
19	</section>
20	<section>{{ post.html \| safe }}</section>
21	</article>
22	{% endblock %}

theme/templates/wiki.html deleted −14

	@@ -1,14 +0,0 @@
1	{% extends "base.html" %}
2
3	{% block subtitle %}Wiki \| {% endblock %}
4	{% block main %}
5	<p><a href="/">← home</a></p>
6	<h1>Wiki</h1>
7	<p>Use <code>Ctrl + F</code> to search wiki pages for keywords.</p>
8	{% for post in posts %}
9	<div class="post">
10	<time datetime='{{ post.date \| strftime("%Y-%m-%d") }}'>{{ post.date\|strftime("%Y-%m-%d") }}</time>
11	<a href='{{ url_for("wiki", slug=post.slug) }}'>{{ post.title }}</a>
12	</div>
13	{% endfor %}
14	{% endblock %}

Commit 63a5afda03

Commit `63a5afda03`