https://firej.org/tags/nginx/Recent content in Nginx on firej.orgHugoru-ruFri, 09 Apr 2021 17:29:46 +0000https://firej.org/posts/synccerts/Fri, 09 Apr 2021 17:29:46 +0000https://firej.org/posts/synccerts/<h1 id="как-ходить-по-https-на-локальный-home-assistant">Как ходить по https на локальный Home Assistant</h1> <h2 id="1-mikrotik">1. mikrotik</h2> <p>Для начала нужно настроить в своём роутере DNS-запись для того, чтобы вполне валидное внешнее имя резолвилось внутри сети во внутренний локальный адрес. При этом для доступа из интернета — оно будет резолвиться во внешний адрес.</p> <h2 id="2-действия-на-локальном-инстансе-с-умным-домом">2. Действия на &ldquo;локальном&rdquo; инстансе с умным домом</h2> <p>Добавляем пользователя на локальной машине</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">sudo adduser syncer </span></span></code></pre></div><p>Генерируем ssh-ключи</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">sudo su syncer </span></span><span class="line"><span class="cl">ssh-keygen -t rsa -b <span class="m">4096</span> </span></span><span class="line"><span class="cl">mv .ssh/id_rsa.pub .ssh/authorized_keys </span></span><span class="line"><span class="cl">cat .ssh/authorized_keys </span></span></code></pre></div><p>Добавляем в файл <code>sudo vim /etc/cron.d/synccerts</code> команды синхронизации</p>https://firej.org/posts/nginx-frp/Sun, 24 Jan 2021 17:59:43 +0000https://firej.org/posts/nginx-frp/<p>Захотелось мне вот получить доступ к локальному home assistant с работы. Подсказали использовать для этого frp (<a href="https://github.com/fatedier/frp)">https://github.com/fatedier/frp)</a>. Вот что из этого получилось. Качаем релиз frp, складываем все, например, в <code>/opt/frp</code>. Конфиг клиента <code>frpc.ini</code>:</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-ini" data-lang="ini"><span class="line"><span class="cl"><span class="k">[common]</span> </span></span><span class="line"><span class="cl"><span class="na">server_addr</span> <span class="o">=</span> <span class="s">your.frp.server.org</span> </span></span><span class="line"><span class="cl"><span class="na">server_port</span> <span class="o">=</span> <span class="s">7000</span> </span></span><span class="line"><span class="cl"><span class="na">token</span><span class="o">=</span><span class="s">{{server token}} # например &#39;openssl rand -hex 48&#39;</span> </span></span><span class="line"><span class="cl"><span class="k">[python]</span> </span></span><span class="line"><span class="cl"><span class="na">type</span> <span class="o">=</span> <span class="s">tcp</span> </span></span><span class="line"><span class="cl"><span class="na">local_ip</span> <span class="o">=</span> <span class="s">127.0.0.1</span> </span></span><span class="line"><span class="cl"><span class="na">local_port</span> <span class="o">=</span> <span class="s">8123</span> </span></span><span class="line"><span class="cl"><span class="na">remote_port</span> <span class="o">=</span> <span class="s">10000</span> </span></span><span class="line"><span class="cl"><span class="na">use_encryption</span> <span class="o">=</span> <span class="s">true</span> </span></span><span class="line"><span class="cl"><span class="na">use_compression</span> <span class="o">=</span> <span class="s">true</span> </span></span><span class="line"><span class="cl"><span class="c1"># заодно пробросили и ssh</span> </span></span><span class="line"><span class="cl"><span class="k">[ssh]</span> </span></span><span class="line"><span class="cl"><span class="na">type</span> <span class="o">=</span> <span class="s">tcp</span> </span></span><span class="line"><span class="cl"><span class="na">local_ip</span> <span class="o">=</span> <span class="s">127.0.0.1</span> </span></span><span class="line"><span class="cl"><span class="na">local_port</span> <span class="o">=</span> <span class="s">22</span> </span></span><span class="line"><span class="cl"><span class="na">remote_port</span> <span class="o">=</span> <span class="s">10001</span> </span></span><span class="line"><span class="cl"><span class="na">use_encryption</span> <span class="o">=</span> <span class="s">true</span> </span></span><span class="line"><span class="cl"><span class="na">use_compression</span> <span class="o">=</span> <span class="s">true</span> </span></span></code></pre></div><p>Дальше конфиг сервера, он весьма похож <code>frps.ini</code>:</p>