numericOverflow

Adding tailscale to an EdgeRouter (and surviving system upgrades)

I suggest you run sudo bash on all of these so you're the root user.

Installing

Download tailscale and put the files in /config/. Find the latest stable or unstable version for your EdgeRouter's processor (ex. ER4 is mips and ERX is mipself)

sudo bash    # if you havent already

Encrypted Btrfs storage setup and maintenance guide

Initial setup with LUKS/dm-crypt

This exemplary initial setup uses two devices /dev/sdb and /dev/sdc but can be applied to any amount of devices by following the steps with additional devices.

Create keyfile:

dd bs=64 count=1 if=/dev/urandom of=/etc/cryptkey iflag=fullblock
chmod 600 /etc/cryptkey

	#!/bin/sh

	# Set kernel parameters in /etc/sysctl.conf
	cat << EOF > /etc/sysctl.conf
	# Increase maximum number of open file descriptors
	fs.file-max = 1000000

	# Increase maximum number of inotify instances per user
	fs.inotify.max_user_instances = 8192

	import http.client
	import http.cookies
	import json
	import base64
	import hashlib
	from cryptography.hazmat.primitives import serialization
	from cryptography.hazmat.primitives.asymmetric import x25519
	from cryptography.hazmat.primitives.asymmetric import ec
	from cryptography.hazmat.primitives import hashes

	#!/usr/bin/env bash
	#
	# Fetch secrets for local development from Azure KeyVault
	# and print them to stdout as a bunch of env var exports.
	# These secrets should be added to your local .env file
	# to enable running integration tests locally.
	#
	KEY_VAULT=$1

	function fetch_secret_from_keyvault() {

	#!/usr/bin/env bash
	#
	# Author: Markus (MawKKe) ekkwam@gmail.com
	# Date: 2018-03-19
	#
	#
	# What?
	#
	# Linux dm-crypt + dm-integrity + dm-raid (RAID1)
	#

	#include <FS.h>
	#include <ESP8266WiFi.h>
	#include <WiFiClientSecure.h>
	#include <PubSubClient.h>
	#include <time.h>

	// Insert your FQDN of your MQTT Broker
	#define MQTT_SERVER "mqtt.srvx1.local"
	const char* mqtt_server = MQTT_SERVER;

	#!/bin/bash +x

	# Source: http://www.gabsoftware.com/tips/automatically-reconnect-to-your-vpn-on-linux/

	# Description:
	# Make the script executable "chmod +x /path/to/the/script.sh
	# Put the script in .profile or .bashrc so it can be run on user login:
	# Example: echo "/path/to/the/script.sh start &" >> .bashrc
	# The script can be bound to shortcut keys with these commands:
	# /path/to/the/script.sh start # starts and monitors VPN connection