theMatrixDev

Building budget OpenWRT router and upgrading to 2.5gbps network

PREFACE Recently I am upgrading my home network to 2.5gbps. The service provider (ISP) provides a optical modem for free (to be precise, "without extra charge"). There are not many choices in the market at the time of writing. A 2.5gbps router with one 2.5gbps WAN port

Linking up two networks on two physicallly neighbour routers

* Subnet on router A: 192.168.50.0/24 * Subnet on router B: 192.168.55.0/24 * On both routers, eth0 (WAN port) are connected to modem (ISP). eth1 (LAN 1) are connecting to each another. * Clients on each router are accessing to their own WAN (ISP). * Router A

Install Docker on a remote server with Ansible on Ubuntu

sudo apt-get install software-properties-common sudo apt-add-repository ppa:ansible/ansible sudo apt-get install -y ansible mkdir ./ansible touch ./ansible/inventory touch ./ansible/main.yaml touch ./ansible/vars.yaml [beta] beta.thematrix.dev [production] www.thematrix.dev user: ubuntu requried_packages: - ca-certificates - curl - gnupg - lsb-release docker_engines: -

openwrt

WireGuard VPN Policy Routing on OpenWRT

Tested on GL-AX1800 with OpenWRT 21.02 Install vpn-policy-routing plugin * Go to OpenWRT -> System -> Software * Update lists * Install vpn-policy-routing and luci-app-vpn-policy-routing * Refresh the page. There will be a new VPN tab on header Add Firewall zone * Go to Network -> Firewall * Under Zones section, click the Add button

cloudflare

Install Cloudflared on OpenWRT

1. Go to https://github.com/cloudflare/cloudflared/releases and copy the correct file URL 2. SSH into OpenWRT 3. cd to a location where file persists after reboot 4. wget the Cloudflared file 5. chmod +x the Cloudflared file 6. ./cloudflared service install TOKEN 7. Confirm in OpenWRT ->

toy

Atmoph Window 2

Before the plague, I had been travelling to Japan a lot, once every 2 to 3 months. I could not imagine I would stay without boarding to a plane for such a long time. I had been living with my family without my own room. Every weekend and holiday I

cloudflare

Expose local service with Cloudflare (Argo) Tunnel

Setup Cloudflare repository https://pkg.cloudflare.com/ Below is for Ubuntu 20.04 echo 'deb [signed-by=/usr/share/keyrings/cloudflare-main.gpg] https://pkg.cloudflare.com/ focal main' | sudo tee /etc/apt/sources.list.d/cloudflare-main.list sudo curl https://pkg.cloudflare.com/cloudflare-main.gpg -o /usr/share/keyrings/cloudflare-main.gpg

Compile and install BlueZ on Ubuntu 21.10

Install essential packages sudo apt install build-essential libglib2.0-dev libdbus-1-dev libudev-dev libical-dev libreadline-dev python3-docutils Download, compile and install latest BlueZ BlueZ » Download wget http://www.kernel.org/pub/linux/bluetooth/bluez-5.63.tar.xz tar xvf bluez-5.63.tar.xz cd bluez-5.63 ./configure make sudo make install Enable BlueZ

Install Dropbear on Ubuntu to decrypt LVM during boot

sudo apt install dropbear Enable Dropbear on boot: sudo nano /etc/initramfs-tools/initramfs.conf Set BUSYBOX=y and add DROPBEAR=y Generate host key. Change to root account for ease of handling. cd /etc/dropbear-initramfs/ sudo su /usr/lib/dropbear/dropbearconvert dropbear openssh dropbear_rsa_host_key id_rsa dropbearkey

Install AdGuard with Docker on Ubuntu

Install Docker and Docker-Compose Install Docker and Docker-Compose on Ubuntu 20.04DockerInstall necessary tools: sudo apt install apt-transport-https ca-certificates curl software-properties-common -y Add Docker key: curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add - Add Docker repo (choose the correct repository): 32bit / 64bit OS sudo add-apt-re…

Using Yubikey on Ubuntu 20.10

sudo add-apt-repository ppa:yubico/stable sudo apt-get update YubiKey Manager (GUI) cd ~/Downloads/ wget https://developers.yubico.com/yubikey-manager-qt/Releases/yubikey-manager-qt-latest-linux.AppImage chmod +x ~/Downloads/yubikey-manager-qt-1.1.5-linux.AppImage Yubico Authenticator sudo apt-get install yubioath-desktop YubiKey Personalization Tool sudo apt-get install yubikey-personalization-gui Confirm libu2f-udev is already installed: sudo apt install

Change Ubuntu LVM encryption passphrase

Find out the UUID of the encrypted partition cat /etc/crypttab It will show something like this: nvme0n1p3_crypt UUID=49c18a64-fc5d-4d90-b770-bfeda8531f7f none luks,discard Find the ID of the drive sudo blkid | grep 49c18a64 It will show something like this: /dev/nvme0n1p3: UUID="49c18a64-fc5d-4d90-b770-bfeda8531f7f" TYPE="crypto_LUKS" PARTUUID="f47c4836-ba21-498c-a571-daea2ab0a52f" Add

security

Setup Wireguard VPN server with Docker

Get and setup a server Both Vultr and DigitalOcean offers as inexpensive as $5 per month servers. So please choose by datacenter location. Largest Cloud Server Network AvailableVultr offers the largest worldwide network, enabling you to spin up and easily scale a low latency infrastructure solution no matter where you

security

Use OpenVPN over Shadowsocks

Before we start * Setup OpenVPN server https://www.digitalocean.com/community/tutorials/how-to-set-up-and-configure-an-openvpn-server-on-ubuntu-20-04 * Setup Shadowsocks server https://thematrix.dev/setup-go-shadowsocks-on-ubuntu/ Configure client side Open the client .ovpn file. Add this line to use SOCKS5 proxy on localhost port 1080. socks-proxy 127.0.0.1 1080 Add this line to skip

security

Setup Go-Shadowsocks on Ubuntu 20.04

Before we start * Get a server https://thematrix.dev/get-a-domain-name-a-server-and-protect-them-with-cloudflare/ * Install Docker https://thematrix.dev/install-docker-and-docker-compose-on-ubuntu-20-04/ Go-Shadowsocks-2 We are goinbg to setup Go-Shadowsocks-2. It is 2nd version Shadowsocks written in Go-Lang. shadowsocks/go-shadowsocks2Modern Shadowsocks in Go. Contribute to shadowsocks/go-shadowsocks2 development by creating an account on GitHub.GitHubshadowsocks Setup server

security

Setup Cloudflare CDN protected Trojan-Go with Docker on Ubuntu 20.04

Before we start * Get a server https://thematrix.dev/get-a-domain-name-a-server-and-protect-them-with-cloudflare/ * Install Docker https://thematrix.dev/install-docker-and-docker-compose-on-ubuntu-20-04/ * Get your Cloudflare account and domain-name https://thematrix.dev/get-a-domain-name-a-server-and-protect-them-with-cloudflare/ Setup Trojan-Go server Create Docker-Compose configuration file Create docker-compose.yml which contains the official Trojan-Go image, and a NGINX we

cloudflare

Get a domain name, a server, and protect them with Cloudflare.

Get a domain name In this tutorial, NameCheap will be used for demonstration. I have been their customer since 2004. Like their name, they sell domain-name cheap. With every domain-name they sell, it comes with WHOIS-Guard. So the general public cannot find out your personal information with use of WHOIS

Use LDAC on Ubuntu 20.04

sudo add-apt-repository ppa:berglh/pulseaudio-a2dp sudo apt install libldac pulseaudio-modules-bt libavcodec-extra58 libfdk-aac1 bluez pulseaudio blueman pulseaudio -k pulseaudio --start

Creating server on Vultr

Create an account if you do not have one yet. Click on the + button and select Depoly new server to create a new server instance. Select server type. For general use, choose "cloud compute". Select server location. Choose the one nearest to you or your customer. Select operation system. Ubuntu

docker

Install Docker and Docker-Compose on Ubuntu 20.04

Docker Install necessary tools: sudo apt install apt-transport-https ca-certificates curl software-properties-common -y Add Docker key: curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add - Add Docker repo (choose the correct repository): 32bit / 64bit OS sudo add-apt-repository \ "deb [arch=amd64] https://download.docker.com/linux/ubuntu \ $(lsb_

vpn

Setting up Wireguard with Stubby on Ubuntu 20.04

Setup Wireguard Install Wireguard and necessary tools. Since Linux version 5, Wireguard is built in. So Wireguard is available in Ubuntu 20.04 repo. sudo apt update && sudo apt upgrade -y && sudo apt install net-tools wireguard qrencode -y Generate Wireguard "server" configuration file. You may change ListenPort to whatever you

Telegram MTProto Proxies by thematrix.dev

vpn

Setup VPN on Ubuntu on DigitalOcean / Vultr

* OpenVPN vs WireGuard: https://restoreprivacy.com/wireguard/ * Choose a service provider which suits you most. Choose a nearest location to get fastest speed. Choose a location where the country is liberal. Choose a location which provides best price. * Tutorial on setting up server on DO / Vultr https://10to7.xyz/server-setup-on-digitalocean/

Connecting to remote host via SSH using Putty on Windows

* Download and install Putty https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html Direct link 64-bit 32-bit * Run Putty * Enter the IP address of the remote host in "Host Name (or IP address)" field. Default port is 22, if you have not changed it during SSH server setup. * You

Generating SSH key on Windows

* Download and install Putty https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html Direct link 64-bit 32-bit * Run Putty key generator * The larger "Number of bits in a generated key", the more different to be cracked. Please use at least 2048. 4096 is recommended. * Click "Generate", move the mouse