• 1 Post
  • 10 Comments
Joined 6 months ago
cake
Cake day: February 8th, 2025

help-circle






  • Debian - I’ve put Debian with KDE on the mini PC server.

    Save your resources on the mini pc by getting rid of KDE, desktops can take quite a lot of resources to run!

    If you aren’t familiar with the BASH shell it’s essentially the heart of every Linux/GNU based operating systems, no need for a clunky GUi on a server.

    Key commands:

    • cd == Change Directory

    • sudo == Root privileges

    • mkdir == Make directory

    • rm -f == Remove file/directory with force

    • touch == Make a new file

    • nano == Text/File editor

    • cat == Read file contents and print to shell

    Commands don’t need to be complicated! For example nano /home/SomeUser/Downloads/SomeRandom.txt will open the text editor to SomeRandom.txt in the /Downloads directory of SomeUser



  • (It’s an Asus RT-AX86U Pro - so fairly chunky in terms of spec)

    I have your exact router make and model! I self host my own server with a domain on my home network and make use of the built in DDNS feature.

    My domain registrar is Cloudflare so I have to use a custom script for DDNS, if you’re in the same boat I can provide the script.

    I would suggest looking into Asus WRT Merlin Firmware, the custom firmware enables more functionality to your router.

    Docker containers for

    1. Ghost
    2. Nginx Proxy Manager

    When hosting a reverse proxy like Nginx, Traefik, SWAG, Pangolin, etc keep in mind you 80:80 and 443:443 ports need to be exposed to the host machine then you will forward those ports on your router. This will allow your reverse proxy to communicate with Lets Encrypt generating and verifying your SSL certificates.


  • First have a look at the report header Content-Security-Policy-Report-Only add things you know about, as that will allow you to log what you need to have setup. Then once you have a list of things you know you need, add them and what the logs again. adding in things as you see and verify them.

    Thank you for this! I feel as if I got the idea however, failed on the execution. I added this to my routers.yml -

            contentSecurityPolicyReportOnly: "child-src; connect-src; default-src; font-src; frame-src; img-src; manifest-src; media-src; object-src; script-src; script-src-elem; script-src-attr; style-src; style-src-elem; style-src-attr; worker-src; report-to csp-report"
    
    

    To my understanding the report-to directive at the end adds a endpoint called /csp-report yet in my testing it doesn’t appear to exist and just leads to 403, I’m likely doing something totally wrong but I appreciate you pointing me in the right direction!

    Also dont just add things in without checking that its in your code, you dont want to add hack-me.com by mistake.

    That’s fair, I’m certainly no wiz at programming and this is just self-hosted docker applications that I’ve jerry-rigged to work with one another.