Parcourir la source

Ajout documents

lauhub il y a 3 mois
Parent
commit
2ed835bf90
64 fichiers modifiés avec 8212 ajouts et 32 suppressions
  1. 17 0
      applications/anaconda.md
  2. 40 0
      applications/certbot-letsencrypt.md
  3. 38 0
      applications/docling.md
  4. 44 0
      applications/glpi.md
  5. BIN
      applications/images/vscodium-explorer-tri-des-fichiers-dossiers.png
  6. 4 0
      applications/vscodium-visualstudio-code.md
  7. 351 0
      documentation/how-to-delete-a-route-on-a-specific-interface.md
  8. 580 0
      documentation/how-to-direct-ip-route-through-specific-interface-in-os-x.md
  9. 194 0
      documentation/macos-staticroutes.md
  10. 49 0
      gnu-linux/debian.md
  11. 348 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow.html
  12. BIN
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/PayPal-Donate.gif
  13. 78 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/TechOverflow.svg
  14. 7 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/algolia.js
  15. 5 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/cdn.min.js
  16. 32 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/darkmode.js
  17. 2 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/docsearch.css
  18. 3 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/docsearch.js
  19. 61 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/donate.css
  20. 39 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/kicad.css
  21. 22 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/kicad.js
  22. 1 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/style.min.9a429de0074bb03b54a5dae5ec7013170c72f4d11103257e4b.css
  23. 5 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/techoverflow.css
  24. 79 0
      gnu-linux/recherche-de-pannes/disques-durs-supports-de-stockage.md
  25. 32 0
      gnu-linux/rustdesk.md
  26. BIN
      gnu-linux/serveurs/image.png
  27. 6 0
      gnu-linux/serveurs/installation/00-sommaire-installation.md
  28. 121 0
      gnu-linux/serveurs/installation/dns-ovh.md
  29. 104 5
      gnu-linux/serveurs/installation/ecaz-serveur-proxmox.md
  30. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-1.png
  31. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-3.png
  32. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-4.png
  33. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-5.png
  34. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-6.png
  35. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-7.png
  36. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-9.png
  37. 3 3
      gnu-linux/serveurs/installation/installation-proxmox.md
  38. 67 0
      gnu-linux/serveurs/installation/lvm-extension.md
  39. 326 0
      gnu-linux/serveurs/installation/serveur-deux-disques.md
  40. 16 0
      gnu-linux/serveurs/installation/yunohost-mise-a-jour.md
  41. 36 22
      gnu-linux/serveurs/installation/yunohost.md
  42. 144 0
      gnu-linux/serveurs/nas-rockpi-penta.md
  43. 29 0
      gnu-linux/serveurs/nextcloud.md
  44. 128 0
      gnu-linux/serveurs/nginx.md
  45. 5 0
      gnu-linux/serveurs/proxmox/activation-avx-proxmox.md
  46. 42 0
      gnu-linux/serveurs/proxmox/configuration-ovh.md
  47. 7 0
      gnu-linux/serveurs/proxmox/edition-disques-template.md
  48. 8 0
      gnu-linux/serveurs/proxmox/gestion-reseau-proxmox.md
  49. 120 0
      gnu-linux/serveurs/proxmox/how-to-share-host-folder-with-guest-vm-in-proxmox-using-virtiofs.md
  50. BIN
      gnu-linux/serveurs/proxmox/images/add-virtiofs-vm.webp
  51. BIN
      gnu-linux/serveurs/proxmox/images/pve-directory-mapping-1024x394.webp
  52. BIN
      gnu-linux/serveurs/proxmox/images/select-virtiofs-vm.webp
  53. 29 1
      gnu-linux/serveurs/proxmox/infrastructure-ovh.md
  54. 3 0
      gnu-linux/serveurs/proxmox/partage-dossier-vm.md
  55. 235 0
      gnu-linux/serveurs/samba-serveur-fichier.md
  56. 39 0
      gnu-linux/serveurs/securisation/bastion.md
  57. 24 0
      installation/firefox/extensions-firefox.md
  58. 3659 0
      installation/firefox/extensions-installées.html
  59. 25 0
      installation/venv-python.md
  60. 30 0
      javascript/selecteur-javascript-extraction-depots-github-depuis-organisation.md
  61. 813 0
      materiel/routeur-cisco-rv340w.html
  62. 160 0
      materiel/routeur-cisco-rv340w.md
  63. 1 0
      pandoc.css
  64. 1 1
      ssh/bash-completion-ssh.md

+ 17 - 0
applications/anaconda.md

@@ -0,0 +1,17 @@
+% Anaconda
+
+
+Do you wish to update your shell profile to automatically initialize conda?
+This will activate conda on startup and change the command prompt when activated.
+If you'd prefer that conda's base environment not be activated on startup,
+   run the following command when conda is activated:
+
+```bash
+conda config --set auto_activate_base false
+```
+
+You can undo this by running 
+
+```bash
+conda init --reverse $SHELL
+```

+ 40 - 0
applications/certbot-letsencrypt.md

@@ -0,0 +1,40 @@
+% Certbot Letsencrypt
+
+
+# Ajout d'un certificat
+
+```bash
+export maindomain=nu.aezi.fr
+export newsub=13ft.aezi.fr
+sudo certbot certificates -d $maindomain 2>/dev/null | awk -v newsub=$newsub '$1 == "Domains:"{$1=""; print $0","newsub}' | xargs | tr ' ' ',' | sudo xargs certbot --expand -d
+```
+
+# Renouvellement automatique
+
+## crontab
+
+Recommandation: lancer [`certbot` deux fois par jour](https://community.letsencrypt.org/t/cron-job-to-run-every-90-days-vs-3-months/51618/3)
+
+```
+SHELL=/bin/sh
+PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+0 */12 * * * /usr/bin/certbot renew --nginx -n >> /var/log/certbot.log 2>&1
+```
+
+## Logrotate
+
+Contenu de `/etc/logrotate.d/certbot`:
+
+```
+/var/log/certbot.log {
+  rotate 4
+  monthly
+  compress
+  missingok
+  notifempty
+}
+```
+
+
+

+ 38 - 0
applications/docling.md

@@ -0,0 +1,38 @@
+% Docling
+
+COnversion de documents
+
+
+# Prérequis
+
+## Préparation
+
+[python - mkvirtualenv: command not found - Stack Overflow](https://stackoverflow.com/questions/25774829/mkvirtualenv-command-not-found)
+
+[python - Cannot install pip module because there is 'no space' left on device - Ask Ubuntu](https://askubuntu.com/questions/1326304/cannot-install-pip-module-because-there-is-no-space-left-on-device)
+
+
+### .bashrc
+
+Édition
+
+```
+export WORKON_HOME=~/virtualenvs
+
+export VIRTUALENVWRAPPER_PYTHON=/usr/bin/python3
+
+source /usr/local/bin/virtualenvwrapper.sh
+```
+
+
+```bash
+. .bashrc
+```
+
+```bash
+mkvirtualenv docling_env
+workon docling_env
+export TMPDIR=/home/lauhub/tmp
+pip3 install docling
+```
+

+ 44 - 0
applications/glpi.md

@@ -0,0 +1,44 @@
+% GLPI
+
+# Bugs possibles
+
+## Problème d'affichage et de droits d'accès avec l'utilisateur GLPI
+
+### Description du problème
+
+En étant connecté avec l'utilisateur `glpi`, il peut y avoir différents dysfonctionnements/bugs d'affichage:
+
+- Dans Administration > Entités: seule l'entité racine est visible
+- Après avoir installé le plugin Tag (*Gestion des tags*) une erreur concernant les permissions est affichée et il est impossible d'ajouter des tags
+
+En se connectant avec un autre utilisateur ayant les droits super-admin, les sous-entités sont affichées et le plugin Tag est accessible.
+
+### Comment reproduire le problème
+
+Installer une nouvelle instance de GLPI sans aucune autre configuration
+
+### Résolution du problème
+
+Deux manipulations distinctes:
+
+#### Pour permettre à glpi d'ajouter des tags
+
+1. affecter l'habilitation *super-admin* à un autre utilisateur (pour l'entité racine) (par exemple `user1`)
+2. se connecter avec cet utilisateur
+3. vérifier que l'utilisateur `user1` a bien les droits super-admin
+4. supprimer l'habilitation super-admin de l'utilisateur `glpi`
+5. se connecter avec `glpi` et vérifier la suppression des droits
+6. se connecter avec l'utilisateur `user1` et ré-affecter les droits super-admin à l'utilisateur `glpi`
+
+Vérifier alors que l'utilisateur `glpi` peut ajouter des tags.
+
+
+#### Pour permettre à glpi de voir les sous-entités
+
+1. Aller dans Entités > Entité Racine > Règles
+2. Cliquer sur la règle `Root` (règle normalement créée automatiquement à l'installation de GLPI)
+3. Aller sur *Critère* et cliquer sur `Ajouter un nouveau critère`
+4. Sélectionner comme critère "Type d'authentification"
+5. Sélection `Est`
+6. Choisir "Authentification sur la base de données GLPI"
+7. Cliquer sur `+ Ajouter`

BIN
applications/images/vscodium-explorer-tri-des-fichiers-dossiers.png


+ 4 - 0
applications/vscodium-visualstudio-code.md

@@ -8,3 +8,7 @@
 2. Chercher `Copy Line Down` (resp. `Copy Line Up`) et remplacer le raccourci actuel avec le raccourci `alt`+`cmd`+`Arrow Down` (resp. `alt`+`cmd`+`Arrow Up`)
 3. Chercher `editor.action.insertCursor` et placer les raccourcis `Shift`+`Alt`+`Arrow Up` et `Shift`+`Alt`+`Arrow Down` pour `insertCursorAbove` et `insertCursorBelow`
 
+## Trier les fichiers dans l'explorateur
+
+![Tri des fichiers](images/vscodium-explorer-tri-des-fichiers-dossiers.png)
+

+ 351 - 0
documentation/how-to-delete-a-route-on-a-specific-interface.md

@@ -0,0 +1,351 @@
+#### Stack Exchange Network
+
+Stack Exchange network consists of 183 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
+
+Loading…
+
+    - Tour
+                                
+                                    Start here for a quick overview of the site
+    - Help Center
+                            
+                                Detailed answers to any questions you might have
+    - Meta
+                                        
+                                            Discuss the workings and policies of this site
+    - About Us
+                                    
+                                        Learn more about Stack Overflow the company, and our products
+2. current community your communities Sign up or log in to customize your list. more stack exchange communities company blog
+
+### current community
+
+- Server Fault
+        
+
+
+
+help
+chat
+- Meta Server Fault
+
+### your communities
+
+or  to customize your list.
+
+### more stack exchange communities
+
+Log in
+
+Sign up
+
+<!-- image -->
+
+    1. Home
+    2. Questions
+    3. Unanswered
+    4. Tags
+    5. Chat
+    6. Users
+    7. Companies
+2. Teams
+
+
+
+            Ask questions, find answers and collaborate at work with Stack Overflow for Teams.
+        
+Try Teams for free
+Explore Teams
+3. Teams
+4. Ask questions, find answers and collaborate at work with Stack Overflow for Teams.
+            Explore Teams
+
+Teams
+
+Q&amp;A for work
+
+Connect and share knowledge within a single location that is structured and easy to search.
+
+# How to delete a route on a specific interface? [closed]
+
+86k times
+
+22
+
+This question is . It is not currently accepting answers.
+
+Questions should demonstrate reasonable business information technology management practices. Questions that relate to unsupported hardware or software platforms or unmaintained environments may not be suitable for Server Fault - see the help center.
+
+Closed 10 years ago.
+
+When I start a VPN connection, a new default route is added on the utun0 interface:
+
+```
+Destination        Gateway            Flags        Refs      Use   Netif Expire
+default            utun0              UCS            21        0   utun0
+default            192.168.43.1       UGScI          14        0     en1
+```
+
+I'd like to get rid of the default/utun0 route. When using route with the -ifscope modifier, I get the following error:
+
+```
+$ sudo route delete -ifscope utun0 -net 0.0.0.0
+route: writing to routing socket: not in table
+delete net 0.0.0.0: not in table
+```
+
+What am I doing wrong? What's the correct syntax of the route command in order to delete the default route?
+
+- mac-osx
+- route
+
+asked
+
+<!-- image -->
+
+- 1
+
+
+
+
+Before doing this. Keep in mind that it is a dangerous command if you are accessing your server online ! ;)
+
+– eVoxmusic
+
+
+Commented
+May 16, 2012 at 11:40
+- 1
+
+
+
+
+Telling the VPN clinet not to create the route sounds a lot cleaner to me.  The native pptp client can be configured like this. Are you using a different client?
+
+– Nitz
+
+
+Commented
+Aug 13, 2014 at 8:04
+- In macOS Monterey the following is working: sudo route delete -ifscope  utun0 default.
+
+– Jaime Hablutzel
+
+
+Commented
+Jan 18, 2022 at 3:23
+
+## 5 Answers
+                                    5
+
+9
+
+I know it's late, but I'd like to know what kind of VPN you're using.
+
+I've had this problem with Cisco Anyconnect VPN.
+
+Not seeing the same error as you, but the command would appear to execute, but the routing table would still look the same.
+
+I believe Cisco AnyConnect locks the routing table in some way so that it cannot be modified.
+
+If this isn't Cisco AnyConnect, it may do something similar. I haven't found any documentation on it, but that's the conclusion I've come to from my testing.
+
+I've found this also appears to apply on Windows.
+
+Cheers,
+Aaron
+
+answered
+
+<!-- image -->
+
+- It's Cisco. Our network topology changed, so I cannot verify the answers.
+
+– mgryszko
+
+
+Commented
+Nov 12, 2014 at 7:12
+
+8
+
+```
+$ sudo route delete -net 0.0.0.0 -ifp ppp0
+delete net 0.0.0.0
+```
+
+This is documented in route(8)
+
+answered
+
+<!-- image -->
+
+3
+
+You can try this:
+
+```
+sudo route delete -net default utun0
+```
+
+answered
+
+<!-- image -->
+
+1
+
+Not in front of a Mac right now, off the top of my head try;
+
+```
+sudo route del default dev utun0
+```
+
+answered
+
+<!-- image -->
+
+- Sorry, but it's not working. I tried also with sudo route delete default -ifscope utun0, but still without success
+
+– mgryszko
+
+
+Commented
+May 16, 2012 at 12:06
+
+1
+
+Try route del default wlp2s0. Where wlp2s0 is the interface name. This command deletes the first default gateway on the specific interface you provide to the command.
+
+answered
+
+<!-- image -->
+
+- Yes. Downvotes again for no reason, no explanation, just a downvote !!
+
+– 3bdalla
+
+
+Commented
+Jan 29, 2015 at 21:09
+- Try adding an explanation of exactly what your answer does and why you believe it will solve the problem.
+
+– fukawi2
+
+
+Commented
+Jan 30, 2015 at 5:52
+- You have a good point, although does not promote to be a downvote. I updated my answer.
+
+– 3bdalla
+
+
+Commented
+Jan 30, 2015 at 11:29
+
+Start asking to get answers
+
+Find the answer to your question by asking.
+
+Explore related questions
+
+- mac-osx
+- route
+
+See similar questions with these tags.
+
+- The Overflow Blog
+- How self-supervised language revolutionized natural language processing and...
+- “We’re not replacing you; we’re with you”: Where AI meets infrastructure
+- Featured on Meta
+- Updates to advertising guidelines
+- Evolving comments: An experiment to encourage engagement and follow-up questions
+
+#### Related
+
+4
+
+1
+
+0
+
+1
+
+4
+
+0
+
+0
+
+#### Hot Network Questions
+
+- I would like to know the standards for minimizing PCB clearance as much as possible
+- How to handle teammates pressuring me (even publicly) to redo my work after I already explained my reasoning?
+- How can heat pumps be more efficient than electric/resistive heating?
+- My work is being read but not used — what can I improve?
+- Has our understanding of genetics damaged existentialism?
+- Does OPTIMIZE FOR UNKNOWN do anything for table-valued variables/parameters?
+- Geometry Nodes used to generate wall layouts
+- Chern classes in Čech cohomology
+- How has the rotation of Earth been accounted for in the theory of gravitational time dilation?
+- What is stopping trader taking arbitarge in HKD-USD
+- Slow SQL query with nested subquery
+- Are there two "Saviors," or just one "Savior" manifest in two divine personages, in Titus 1?
+- In light cone, why is it a cone and not a sphere, given that light travels in all directions in space-time? Is it a projection of slice of 4D sphere?
+- How to achieve the Steel Division 2 frontline? (Dividing area smoothly with curves using a few points)
+- Combining vs. Separating Predictors: What’s Better for Prediction
+- Rude referee: ask to change or wait
+- Children and aliens grow up together
+- Geometry bevel profile appears four times, just want once
+- Can a darkmantle willingly detach?
+- Is it a problem if the antagonist appears later in the novel?
+- I worry that my advice to female academics will sound like platitudes
+- How to read a line from a file and output the line to a file
+- What is the fastest playable race?
+- Can we realize any triple linking number of 3-surfaces in 5-manifolds?
+
+<!-- image -->
+
+##### Server Fault
+
+- Tour
+- Help
+- Chat
+- Contact
+- Feedback
+
+##### Company
+
+- Stack Overflow
+- Teams
+- Advertising
+- Talent
+- About
+- Press
+- Legal
+- Privacy Policy
+- Terms of Service
+- Cookie Settings
+- Cookie Policy
+
+##### Stack Exchange Network
+
+- Technology
+- Culture &amp; recreation
+- Life &amp; arts
+- Science
+- Professional
+- Business
+- API
+- Data
+
+- Blog
+- Facebook
+- Twitter
+- LinkedIn
+- Instagram
+
+Site design / logo © 2025 Stack Exchange Inc; 
+user contributions licensed under 
+CC BY-SA
+. 
+rev 2025.4.29.25832

Fichier diff supprimé car celui-ci est trop grand
+ 580 - 0
documentation/how-to-direct-ip-route-through-specific-interface-in-os-x.md


+ 194 - 0
documentation/macos-staticroutes.md

@@ -0,0 +1,194 @@
+% AnalysisMan, Friday, November 6, 2020
+
+### How to add and delete Static Routes on macOS (persistently)
+
+#### Problem
+
+I have several networks at home, including 192.168.1.0/24 and 192.168.2.0/24. A problem occurred when I connected to a VPN site because it gives a route with 192.168.2.0/23. So my traffic on 192.168.2.0/24 routed through the VPN tunnel instead of my internal home network.
+
+Therefore, I need to add a static route on my MacBook Pro.
+
+#### Solution
+
+Here is how to add or delete a static route on macOS.
+
+As you see below, I received the 192.168.2.0/23 route from the VPN, and it routes through the tunnel interface, utun3. First, disconnect the VPN and add a static route as described below.
+
+### To view the routing table:
+
+You can use the following command "
+
+" and use '
+
+' to filter with a specific network on the Terminal.
+
+#### ▶ Method 1. Add a static route temporarily
+
+### To add a static route:
+
+### To verify the route you added:
+
+Now, 192.168.2.0/24 routes through my Ethernet interface, en10.
+
+### To delete a static route:
+
+#### ▶ Method 2. Add a static route persistently
+
+The above route will be gone if you reboot your Mac. You need to add a static route permanently if you want to keep this route persistently.
+
+### To verify the route your interface:
+
+### To list devices (network adapters):
+
+Or
+
+### To list devices with the interface number:
+
+I prefer this command because it also shows the ethernet number (e.g. en10).
+
+### To add a static route permanently:
+
+### To verify the route you added:
+
+### To delete this permanent route:
+
+Use
+
+without the address, netmask, and gateway.
+
+### To see all commands:
+
+Or
+
+<!-- image -->
+
+#### 10 comments:
+
+<!-- image -->
+
+Thanks!
+
+<!-- image -->
+
+<!-- image -->
+
+Hi AnalysisMan
+
+Would you be able to help me with where/which file stores the route information that is displayed when we execute netstat -ln
+
+Regards
+Vinay Chandran
+
+<!-- image -->
+
+<!-- image -->
+
+In Macbook that is
+
+<!-- image -->
+
+<!-- image -->
+
+I refer to this page every so often, I appreciate you keeping this up. Very helpful!
+
+<!-- image -->
+
+<!-- image -->
+
+Thanks for this post. It was very useful. Just my additional 2 cents - 
+
+We can also get the configured permanent static routes using: networksetup -getadditionalroutes "USB 10/100/1000 LAN" .
+
+Also, if we want to add multiple routes permanently then we can add additional tuples     on the same command. Eg., sudo networksetup -setadditionalroutes "Wi-Fi" 192.168.230.0 255.255.255.0 192.168.20.82 192.168.68.0 255.255.255.0 192.168.20.82
+
+<!-- image -->
+
+<!-- image -->
+
+Life saver hack! Thanks a lot!
+
+<!-- image -->
+
+<!-- image -->
+
+<!-- image -->
+
+<!-- image -->
+
+I'm doing something wrong. I work from home and connect to my company's VPN. I need an SMB connection to our file server, which has the IP 192.168.2.108. VPN My network at home has the IP 192.168.68.1. Tunnel Interface is utun3. 
+
+When I run the command
+sudo networksetup -setadditionalroutes "VPN Work" 192.168.2.108 255.255.255.0 192.168.68.1
+my browser traffic goes through the VPN instead of my home network.
+What am I doing wrong?
+
+<!-- image -->
+
+<!-- image -->
+
+<!-- image -->
+
+<!-- image -->
+
+I run a bittorent server for openSource Linux distros. Over time I have manually blocked literally thousands of leachers and downloaders who I do not want to have access my system, as well as blocking 10s of 1,000s of botnets by firewalls. I have migrated my firewall settings to static routes blocked and the performance is much better. 
+
+I'm just having trouble consistently adding ip6 addresses to be blocked. 
+
+Beforehand, I enter the thousands of addresses I have collected to be blocked into JSON array lookup tables, to be accessed by a python script that reads them and inserts them into an iterating command line by nested for-loops.
+
+I always debug by entering the command first on a command line before automating the process.
+
+Example:
+
+I have been trying to set a permanent static route on my Mac using:
+networksetup -setadditionalroutes "Ethernet" 2408:8266:: ffff:ffff:fffc:0000:0000:0000:0000:0000 ::1
+   which returns:
+Route destination 2408:8266:: is not a valid IP address. ** Error: The parameters were not valid. ≈≈≈ That is not true as it is the top address of the CHINA UNICOM China169 Backbone server, from which I get scores of leachers and people who try to get past my firewall.
+
+   as well as trying:
+ifconfig en0 inet6 2408:8266:: prefixlen 32 alias
+  which blocks everything in 2408:8266::/32 except 2408:8266:: itself.
+
+My question is a) can networksetup -setadditionalroutes accept ip6 addresses and how?
+b) if not, can ifconfig block the root address of 2408:8266::/32?
+
+I would prefer a network setup solution because they much easier to clear than ifconfig ones.  Removing ifconfig entries can take hours, one and a time whereas networksetup just clears the service by name (Ethernet, WiFi, VPN) in moments
+
+On a parallel theme, is there away to wipe all the static route entries from my Mac, especially those put in by ifconfig in one fell swoop so I can re-enter them cleanly?
+
+Help is much appreciated.
+
+<!-- image -->
+
+Post a Comment
+
+## About Network + Security
+
+<!-- image -->
+
+## Search This Blog
+
+## Featured Post
+
+### Palo Alto firewall - Troubleshooting High DP CPU
+
+## Popular Posts
+
+- How to add and delete Static Routes on macOS (persistently)
+- Free Visio Stencils Download for Network Diagram
+- Extreme Switch - Reset to factory default when the password is unknown
+- Palo Alto firewall - Reset to Factory Default (3 cases)
+- Palo Alto firewall - How to clean up disk space
+- Palo Alto firewall - How to configure the Management IP via CLI
+- Extreme Switch - Reset to factory default
+
+## Tags
+
+## Links
+
+- LinkedIn Posts
+- AnalysisMan's Second Brain
+
+## Blog Archive
+
+- Home

+ 49 - 0
gnu-linux/debian.md

@@ -31,3 +31,52 @@ wget https://github.com/rustdesk/rustdesk/releases/download/1.3.7/rustdesk-1.3.7
 ```bash
 sudo dpkg -i rustdesk-1.3.7-x86_64-ubuntu.deb
 ```
+
+
+# Mises à jour
+
+## Automatisation des mises à jour
+
+Référence: [UnattendedUpgrades - Debian Wiki](https://wiki.debian.org/UnattendedUpgrades)
+
+### Installation
+
+```bash
+sudo apt update && sudo apt-get install unattended-upgrades apt-listchanges
+
+echo 'Unattended-Upgrade::Mail "root";' | sudo tee /etc/apt/apt.conf.d/52unattended-upgrades-local
+
+
+cat | sudo tee /etc/apt/apt.conf.d/20auto-upgrades <<EOF
+APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Unattended-Upgrade "1";
+EOF
+```
+
+### Vérification
+
+```bash
+sudo unattended-upgrade -d
+```
+
+
+# Problème trusted.gpg
+
+## Symptôme
+
+
+Sur un `apt update`:
+
+
+```
+W: http://security.debian.org/debian-security/dists/bookworm-security/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.
+```
+
+## Solution
+
+```bash
+apt-key --keyring /etc/apt/trusted.gpg list 2>/dev/null | grep -A 1 "pub " |grep -v "pub " | grep -v '\-\-' | awk -v OFS="" '{$1=$1}1' | xargs -i sudo bash -c 'apt-key --keyring /etc/apt/trusted.gpg export {} | gpg --dearmor -o /etc/apt/trusted.gpg.d/{}.gpg ;'
+```
+
+
+

Fichier diff supprimé car celui-ci est trop grand
+ 348 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow.html


BIN
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/PayPal-Donate.gif


Fichier diff supprimé car celui-ci est trop grand
+ 78 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/TechOverflow.svg


+ 7 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/algolia.js

@@ -0,0 +1,7 @@
+docsearch({
+    appId: "OM3Y6EI3ZO",
+    apiKey: "9d24756205acf92477519ef13cb375c4",
+    indexName: "techoverflow",
+    container: "#search",
+    debug: false  
+});

Fichier diff supprimé car celui-ci est trop grand
+ 5 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/cdn.min.js


+ 32 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/darkmode.js

@@ -0,0 +1,32 @@
+(() => {
+  // <stdin>
+  var themeToggleDarkIcon = document.getElementById("theme-toggle-dark-icon");
+  var themeToggleLightIcon = document.getElementById("theme-toggle-light-icon");
+  if (localStorage.getItem("color-theme") === "dark" || !("color-theme" in localStorage) && window.matchMedia("(prefers-color-scheme: dark)").matches) {
+    themeToggleLightIcon.classList.remove("hidden");
+  } else {
+    themeToggleDarkIcon.classList.remove("hidden");
+  }
+  var themeToggleBtn = document.getElementById("theme-toggle");
+  themeToggleBtn.addEventListener("click", function() {
+    themeToggleDarkIcon.classList.toggle("hidden");
+    themeToggleLightIcon.classList.toggle("hidden");
+    if (localStorage.getItem("color-theme")) {
+      if (localStorage.getItem("color-theme") === "light") {
+        document.documentElement.classList.add("dark");
+        localStorage.setItem("color-theme", "dark");
+      } else {
+        document.documentElement.classList.remove("dark");
+        localStorage.setItem("color-theme", "light");
+      }
+    } else {
+      if (document.documentElement.classList.contains("dark")) {
+        document.documentElement.classList.remove("dark");
+        localStorage.setItem("color-theme", "light");
+      } else {
+        document.documentElement.classList.add("dark");
+        localStorage.setItem("color-theme", "dark");
+      }
+    }
+  });
+})();

Fichier diff supprimé car celui-ci est trop grand
+ 2 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/docsearch.css


Fichier diff supprimé car celui-ci est trop grand
+ 3 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/docsearch.js


+ 61 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/donate.css

@@ -0,0 +1,61 @@
+@font-face {
+    font-family: 'Cookie';
+    font-style: normal;
+    font-weight: 400;
+    font-display: swap;
+    src: url('/fonts/Cookie.ttf') format('truetype');
+}
+
+/* Buy me a coffee button */
+.bmc-btn {
+    min-width: 210px;
+    color: #000000;
+    background-color: #FFDD00 !important;
+    height: 60px;
+    border-radius: 12px;
+    font-size: 28px;
+    font-weight: Normal;
+    border: none;
+    padding: 0px 24px;
+    line-height: 27px;
+    text-decoration: none !important;
+    display: inline-flex !important;
+    align-items: center;
+    font-family: 'Cookie', cursive !important;
+    box-sizing: border-box !important;
+}
+
+.bmc-btn svg {
+    height: 32px !important;
+    margin-bottom: 0px !important;
+    box-shadow: none !important;
+    border: none !important;
+    vertical-align: middle !important;
+    transform: scale(0.9);
+    flex-shrink: 0;
+}
+
+.bmc-btn-text {
+    margin-left: 8px;
+    display: inline-block;
+    line-height: 0;
+    width: 100%;
+    flex-shrink: 0;
+}
+
+.logo-outline {
+    fill: #000;
+}
+
+.logo-coffee {
+    fill: white;
+}
+
+hr.after-content {
+    margin-top: 1em;
+    margin-bottom: 1em;
+}
+
+.donate-text {
+    margin-bottom:
+}

+ 39 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/kicad.css

@@ -0,0 +1,39 @@
+
+.kicad-schematic {
+    border: 1px solid #3034ec;
+    border-radius: 1em;
+    width: 100%;
+    max-width: 600px;
+}
+
+    .kicad-schematic .toolbar {
+        margin-top: -0.15em; /* Fix rounded corners not lining up */
+        text-align: center;
+        margin-bottom: 1em;
+        width: 100%;
+    }
+
+    .kicad-schematic .toolbar button {
+            background-color: #3034ec;
+            color: white;
+            cursor: pointer;
+            width: 100%;
+            border: 1px solid #3034ec;
+            border-radius: 1em 1em 0em 0em;
+            padding: 0.2em 0.4em;
+        }
+
+    .kicad-schematic .toolbar button:hover {
+            background-color: darkblue;
+        }
+
+    .kicad-schematic .image-container {
+        text-align: center;
+        width: 100%;
+    }
+
+    .kicad-schematic .image-container img {
+            display: block;
+            margin-left: auto;
+            margin-right: auto;
+        }

+ 22 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/kicad.js

@@ -0,0 +1,22 @@
+document.addEventListener('DOMContentLoaded', function() {
+    document.querySelectorAll('.kicad-copy-button').forEach(function(button) {
+        // Copy to clipboard button for kicad schematic
+        button.addEventListener('click', function() {
+            var dataId = this.getAttribute('data-id');
+            /* Get the <script> tag with id=dataId */
+            var script = document.getElementById(dataId);
+            var text = script.innerText;
+            /* Copy to clipboard */
+            navigator.clipboard.writeText(text).then(function() {
+                /* Change button text */
+                const originalInnerHTML = button.innerHTML;
+                button.innerHTML = '✔️ Copied to clipboard';
+                setTimeout(() => {
+                    button.innerHTML = originalInnerHTML;
+                }, 2000);
+            }, function() {
+                console.error('Failed to copy to clipboard');
+            });
+        });
+    });
+});

Fichier diff supprimé car celui-ci est trop grand
+ 1 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/style.min.9a429de0074bb03b54a5dae5ec7013170c72f4d11103257e4b.css


+ 5 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/techoverflow.css

@@ -0,0 +1,5 @@
+/* Do not display tickmacks before short `code` */
+.prose :where(code):not(:where([class~=not-prose] *))::before,
+.prose :where(code):not(:where([class~="not-prose"] *))::after {
+    content: none !important;
+}

+ 79 - 0
gnu-linux/recherche-de-pannes/disques-durs-supports-de-stockage.md

@@ -0,0 +1,79 @@
+% Disques durs supports de stockage
+
+# Interpréter la sortie de smartctl
+
+## Instructions données par ChatGPT
+
+L’attribut Raw_Read_Error_Rate est souvent source de confusion, car il est interprété différemment selon le constructeur du disque. Voyons ça en détail :
+
+⸻
+
+1. Structure de la ligne
+
+ID# ATTRIBUTE_NAME          FLAG     VALUE WORST THRESH TYPE      UPDATED  WHEN_FAILED RAW_VALUE
+  1 Raw_Read_Error_Rate     0x000f   082   064   044    Pre-fail  Always       -       169987968
+
+	•	ID# 1 → C’est l’attribut S.M.A.R.T. standardisé pour les erreurs de lecture.
+	•	VALUE (82) → Valeur “normalisée” entre 1 et 100/200, fournie par le fabricant. Plus haut = meilleur.
+	•	WORST (64) → La plus mauvaise valeur atteinte dans l’historique.
+	•	THRESH (44) → Seuil en dessous duquel le disque est considéré en panne imminente.
+	•	TYPE Pre-fail → Signifie que si l’attribut franchit le seuil, le disque est considéré comme risqué pour la fiabilité.
+	•	RAW_VALUE (169987968) → Compteur brut. Son interprétation dépend du constructeur (Seagate, WD, Toshiba, etc.).
+
+⸻
+
+2. Interprétation
+	•	Ici, la valeur actuelle est 82, le pire atteint est 64, et le seuil critique est 44.
+👉 Comme 82 > 44, le disque n’a pas franchi la limite de sécurité fixée par le fabricant.
+	•	Le RAW_VALUE (169987968) n’est pas un nombre “d’erreurs brutes” simples :
+	•	Chez Seagate, ce nombre est souvent un compteur interne de tentatives et de corrections, pas directement une erreur fatale. Même un disque neuf peut avoir des valeurs RAW très élevées.
+	•	Chez Western Digital, cet attribut est parfois inutilisé ou toujours fixé à zéro.
+
+En résumé, il ne faut pas interpréter le RAW_VALUE comme “170 millions d’erreurs”, mais comme une donnée interne dont l’échelle est spécifique au firmware.
+
+⸻
+
+3. Comment savoir si c’est inquiétant ?
+	•	Ce qui compte réellement, c’est que la VALUE (82) reste au-dessus du THRESH (44).
+	•	Si vous voyez la valeur baisser régulièrement au fil des semaines/mois, le disque peut être en dégradation.
+	•	À court terme, avec 82 vs 44, le disque est encore jugé sain.
+
+⸻
+
+4. Vérifications complémentaires utiles
+	•	Regarder aussi les attributs :
+	•	5 Reallocated_Sector_Ct (secteurs réalloués)
+	•	197 Current_Pending_Sector (secteurs instables en attente)
+	•	198 Offline_Uncorrectable (secteurs non corrigibles)
+
+👉 Ce sont eux qui sont les indicateurs les plus fiables d’un disque en train de faillir.
+
+⸻
+
+✅ Interprétation pour votre cas :
+Votre disque est considéré sain du point de vue du constructeur : Raw_Read_Error_Rate est dans une plage normale, et la valeur est au-dessus du seuil critique. Le chiffre brut impressionnant est normal, surtout sur des disques Seagate.
+
+⸻
+
+Voulez-vous que je vous donne un petit script (en Bash ou Python) qui surveille automatiquement les attributs critiques S.M.A.R.T. (5, 197, 198) et vous alerte si ça se dégrade ?
+
+
+
+## Interprétation des erreurs SMARTCTL
+
+Voir cette page: [fichier local](How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow.html)
+
+Source: [https://techoverflow.net/2016/07/25/how-to-interpret-smartctl-messages-like-error-unc-at-lba/](https://techoverflow.net/2016/07/25/how-to-interpret-smartctl-messages-like-error-unc-at-lba/)
+
+
+# RAID5
+
+## enlever un disque défectueux en diminuant l'espace du filesystem
+
+[How to remove 1 disk from a raid-5 mdadm array? - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/391168/how-to-remove-1-disk-from-a-raid-5-mdadm-array)
+
+# Récupérer les données avec ddrescue
+
+À suivre partiellement (jusqu'avant le montage de l'image) : [Using ddrescue Command to Recover Data from Failing Disks](https://linuxhandbook.com/ddrescue-data-recovery/)
+
+Montage de l'image: [https://askubuntu.com/a/195310/138954](https://askubuntu.com/a/195310/138954)

+ 32 - 0
gnu-linux/rustdesk.md

@@ -0,0 +1,32 @@
+% Rustdesk
+
+# Connexion sans moniteur
+
+
+
+La base, mettre en place ceci: [Create or add extra fake virtual monitors in Linux to be used with Deskreen, AnyDesk, TeamViewer etc. · GitHub](https://gist.github.com/chitholian/9cac41d22b76364360429cc2a5ffa681)
+
+Ajouter ceci (voir [display - How to duplicate desktop in Linux with xrandr? - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/371793/how-to-duplicate-desktop-in-linux-with-xrandr)) à la fin de `fakemonitor` :
+
+
+```
+xrandr --output VIRTUAL$D --same-as HDMI2
+```
+
+Voir [display - How to duplicate desktop in Linux with xrandr? - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/371793/how-to-duplicate-desktop-in-linux-with-xrandr)
+
+:::warning
+
+Comment détecter le nom du moniteur affiché ?
+
+:::
+
+
+
+
+
+## Exécution automatique
+
+Au moment du démarrage de la session X
+
+[gdm - How to execute command before user login on linux - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/450835/how-to-execute-command-before-user-login-on-linux)

BIN
gnu-linux/serveurs/image.png


+ 6 - 0
gnu-linux/serveurs/installation/00-sommaire-installation.md

@@ -12,3 +12,9 @@
 Puis:
 
 [Infrastructure du réseau sur serveur Kimsufi OVH](../proxmox/infrastructure-ovh.html)
+
+
+Élément supplémentaire:
+
+[Proxmox 8 — Linux Server Wiki](https://wiki.csnu.org/index.php?title=Proxmox_8#Ajout_d'un_r%C3%A9seau_interne_vmbr1)
+

+ 121 - 0
gnu-linux/serveurs/installation/dns-ovh.md

@@ -0,0 +1,121 @@
+% Gestion du DNS OVH
+
+# Gestion du DNS OVH
+
+Pour que yunohost fonctionne sans *warning*.
+
+## Pour le sous-domaine principal
+
+### Création d'un premier champ `A`
+
+Créer un champ `A` qui pointe vers l'IP du serveur:
+
+```
+Type: A
+Name: nu
+Value: 188.165.235.71
+```
+
+
+### Création d'un second champ `A`
+
+Créer un champ `A` qui pointe vers l'IP du serveur:
+
+```
+Type: A
+Name: *.nu
+Value: 188.165.235.71
+```
+
+### Création d'un champ `CAA`
+
+```
+Type: CAA
+Name: nu
+Indicateur: 0
+Étiquette: issue
+Cible: letsencrypt.org
+```
+
+Ce qui donne :
+
+- Value: `0 issue "letsencrypt.org"`
+
+### Création d'un champ `MX`
+
+```
+Type: MX
+Name: nu
+Priorité: 10
+Cible: nu.aezi.fr.
+Value: 10 nu.aezi.fr.
+```
+
+### Création d'un champ `TXT`
+
+```
+Type: TXT
+Name: nu
+Value: "v=spf1 a mx -all"
+```
+
+### Autres champs
+
+Voir les *warnings* de
+
+```
+sudo yunohost diagnosis run ; sudo yunohost diagnosis show --issues --human-readable
+```
+
+
+
+
+## Pour chaque sous-domaine
+
+Exemple ici: `notes`
+
+### Création d'un premier champ `A`
+
+Créer un champ `A` qui pointe vers l'IP du serveur:
+
+```
+Type: A
+Name: notes
+Value: 188.165.235.71
+```
+
+
+### Création d'un second champ `A`
+
+Créer un champ `A` qui pointe vers l'IP du serveur:
+
+```
+Type: A
+Name: *.notes
+Value: 188.165.235.71
+```
+
+### Création d'un champ `MX`
+
+```
+Type: MX
+Name: notes
+Priorité: 10
+Value: 10 notes.aezi.fr.
+```
+
+### Création d'un champ `TXT`
+
+```
+Type: TXT
+Name: notes
+Value: "v=spf1 a mx -all"
+```
+
+### Création d'un champ `CAA`
+
+```
+Type: CAA
+Name: notes
+Value: 0 issue "letsencrypt.org"
+```

+ 104 - 5
gnu-linux/serveurs/installation/ecaz-serveur-proxmox.md

@@ -33,29 +33,120 @@ Intel Xeon E3-1245v2
 3x 2TB HDD Soft RAID Enterprise Class
 300Mbps unmetered public bandwidth
 
+# Préparation du serveur
+
+## Passage en mode rescue
+
+Dans l'interface dédiée au serveur à installer, cliquer sur le bouton situé à droite de la section `Boot`
+
+![Interface principale](images/rescue-ovh-1.png)
+
+Puis cliquer sur `Modifier`
+
+![](images/rescue-ovh-3.png)
+
+Sur l'écran suivant, cliquer sur `Booter en mode rescue`
+
+![](images/rescue-ovh-4.png)
+
+
+Des champs supplémentaires apparaissent.
+
+Choisir:
+
+- Rescue Disponible: la dernière version de Debian disponible (ici `rescue12-customer - Debian-12-based`)
+- Authentification par clef SSH: sélectionner une des clefs que vous avez enregistrez précédemment
+
+![](images/rescue-ovh-6.png)
+
+Ensuite cliquer sur `Suivant`
+
+La zone de résumé apparaît:
+
+![](images/rescue-ovh-7.png)
+
+Cliquer sur `Valider`
+
+Le message `Le netboot a correctement été mis à jour. Vous devez redémarrer le serveur.` apparaît.
+
+## Redémarrer le serveur
+
+Dans la zone `État des services`, cliquer sur le bouton `...` puis `Redémarrer`
+
+![](images/rescue-ovh-9.png)
+
+
+Attendre quelques minutes puis se connecter via SSH au serveur, en tant que `root`.
+
+```
+ssh root@ip-serveur
+```
+
+Accepter l'authenticité de l'hôte (répondre `yes` en toutes lettres):
+
+```
+The authenticity of host 'ip-serveur (ip-serveur)' can't be established.
+ED25519 key fingerprint is SHA256:lmIOJfyoWR49yIDinH+F33Vyl28BPIqMSxue4Zm9HLx8.
+This key is not known by any other names.
+Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
+```
+
+Une invite de commande s'ouvre:
+
+```bash
+root@rescue12-customer-eu (nom-du-serveur) ~ #
+```
+
+:::information
+
+On peut maintenant passer à la suite de la configuration
+
+:::
+
 # Configuration
 
 ## Disques durs
 
+Cette configuration est basée sur trois disques durs de 2To chacun.
+
+
 ### Schéma de partitionnement
 
+Ce paragraphe décrit le schéma de partionnement qui sera appliqué au paragraphe suivant.
+
 #### Boot
 
 512Mo en RAID1
 
+:::information
+
+On met une partition identique sur les 3 disques pour permettre le boot.
+
+:::
+
 #### Swap
 
 - 3 x 11.5Go de RAM
 
+:::information
+
+Notre serveur possède 32Go de RAM. On affecte une taille équivalente de swap, ce qui représente environ 11,5Go par disque.
+
+:::
+
+
 #### Données en RAID
 
-Le reste de chaque disque dur
+Le reste de chaque disque dur sera dédié au données.
 
 ### Partitionnement
 
+On utilise `fdisk` pour lister l'ensemble des tables de partitions. De base.
+
+La commande `for identifier in {a..c} ; do fdisk -l /dev/sd${identifier} ; done`, devrait répondre quelque chose de similaire à ceci (à la taille des disques près):
 
 ```bash
-# for identifier in {a..c} ; do fdisk -l /dev/sd${identifier} ; done
+root@rescue12 ~ # for identifier in {a..c} ; do fdisk -l /dev/sd${identifier} ; done
 Disk /dev/sda: 1.8 TiB, 2000398934016 bytes, 3907029168 sectors
 Disk model: HGST HUS724020AL
 Units: sectors of 1 * 512 = 512 bytes
@@ -178,9 +269,16 @@ Partition number (1-3, default 3):
 Partition type (type L to list all types): 29
 
 Changed type of partition 'Linux filesystem' to 'Linux RAID'.
+```
 
+On termine par la commande `w` pour sauvegarder les changements de la nouvelle table des partitions:
 
 ```
+Command (m for help): w
+The partition table has been altered.
+Calling ioctl() to re-read partition table.
+Syncing disks.
+```
 
 ##### Duplication sur les autres disques
 
@@ -391,17 +489,18 @@ mkfs.ext4 /dev/vg_raid/lv_data
 
 # Debootstrap
 
-Aller sur la page [Debian -- Details of package debootstrap in bookworm](https://packages.debian.org/bookworm/debootstrap)[Debian -- Details of package debootstrap in bookworm](https://packages.debian.org/bookworm/debootstrap)
+Aller sur la page [Debian -- Details of package debootstrap in bookworm](https://packages.debian.org/bookworm/debootstrap)
+
 
 Récupérer l'adresse dans la section Télécharger et en cliquant sur `all`
 
-COpier un des liens et l'utiliser pour télécharger sur le serveur:
+Copier un des liens et l'utiliser pour télécharger sur le serveur:
 
 ```bash
 wget http://ftp.fr.debian.org/debian/pool/main/d/debootstrap/debootstrap_1.0.128+nmu2+deb12u2_all.deb
 ```
 
-On l'exécute:
+On l'installe:
 
 ```bash
 dpkg -i debootstrap*.deb && rm -f debootstrap*.deb

BIN
gnu-linux/serveurs/installation/images/rescue-ovh-1.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-3.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-4.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-5.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-6.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-7.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-9.png


+ 3 - 3
gnu-linux/serveurs/installation/installation-proxmox.md

@@ -253,7 +253,7 @@ sudo systemctl restart ssh
 La commande la plus simple pour créer un tunnel redirigeant le port local 8006 vers le port distant du serveur *proxmox* n°8006 est:
 
 ```bash
-ssh -L 8006:localhost:8006 ecaz
+ssh -L 8206:localhost:8006 ecaz
 ```
 
 Cependant, ceci ouvre une session Shell.
@@ -261,7 +261,7 @@ Cependant, ceci ouvre une session Shell.
 Pour ouvrir le tunnel sans ouvrir une session dans le terminal on va plutôt utiliser:
 
 ```bash
-ssh -f -N -T -L 8006:localhost:8006 ecaz
+ssh -f -N -T -L 8206:localhost:8006 ecaz
 ```
 
 
@@ -269,7 +269,7 @@ ssh -f -N -T -L 8006:localhost:8006 ecaz
 
 ## Connexion à l'interface
 
-Après avoir ouver le tunnel, se connecter avec son navigateur à l'adresse suivante: [https://localhost:8006](https://localhost:8006)
+Après avoir ouver le tunnel, se connecter avec son navigateur à l'adresse suivante: [https://localhost:8206](https://localhost:8206)
 
 Accepter les risques de sécurité (tout passe par le tunnel SSH, donc les communications sont chiffrées entre votre poste de travail et le serveur)
 

+ 67 - 0
gnu-linux/serveurs/installation/lvm-extension.md

@@ -8,8 +8,75 @@ Ajout de disque virtuel dans une machine
 ```
 # pvcreate /dev/sdb
   Physical volume "/dev/sdb" successfully created.
+  
 # vgextend debian-template-vg /dev/sdb
   Volume group "debian-template-vg" successfully extended
+
+# lvextend -L +10G /dev/debian-template-vg/root
+  Size of logical volume debian-template-vg/root changed from <6.81 GiB (1743 extents) to <16.81 GiB (4303 extents).
+  Logical volume debian-template-vg/root successfully resized.
+
+# resize2fs /dev/debian-template-vg/root
+resize2fs 1.47.0 (5-Feb-2023)
+Filesystem at /dev/debian-template-vg/root is mounted on /; on-line resizing required
+old_desc_blocks = 1, new_desc_blocks = 3
+The filesystem on /dev/debian-template-vg/root is now 4406272 (4k) blocks long.
+```
+
+# Sur nu
+
+## Augmentation de la taille de home
+
+```bash
+$ sudo pvdisplay
+...
+  --- Physical volume ---
+  PV Name               /dev/sdb
+  VG Name               debian-template-vg
+  PV Size               2.00 TiB / not usable 4.00 MiB
+  Allocatable           yes 
+  PE Size               4.00 MiB
+  Total PE              524287
+  Free PE               519167
+  Allocated PE          5120
+  PV UUID               tweAEt-2Bs5-s2aL-mhsI-b2Mc-aDBW-HdMkBf
+   
+ladmyn@nu:~$ sudo lvdisplay
+...   
+  --- Logical volume ---
+  LV Path                /dev/debian-template-vg/home
+  LV Name                home
+  VG Name                debian-template-vg
+  LV UUID                hsjGv1-aTf8-Fffq-x372-qXCu-m7yY-aiz8vz
+  LV Write Access        read/write
+  LV Creation host, time debian-template, 2025-01-29 12:49:26 +0100
+  LV Status              available
+  # open                 1
+  LV Size                <11.76 GiB
+  Current LE             3010
+  Segments               1
+  Allocation             inherit
+  Read ahead sectors     auto
+  - currently set to     256
+  Block device           254:2
 ```
 
+### Ajout d'espace à partir du VG dans le LV
 
+À partir des informations ci-dessus, on ajoute 500Go d'espace issus du VG `debian-template-vg` vers le LV `home` dont le chemin est `/dev/debian-template-vg/home`
+
+```
+ladmyn@nu:~$ sudo lvextend -L +500G /dev/debian-template-vg/home
+  Size of logical volume debian-template-vg/home changed from <11.76 GiB (3010 extents) to <511.76 GiB (131010 extents).
+  Logical volume debian-template-vg/home successfully resized.
+```
+
+Mise à jour de la taille de la partition:
+
+```bash
+ladmyn@nu:~$ sudo resize2fs /dev/debian-template-vg/home
+resize2fs 1.47.0 (5-Feb-2023)
+Filesystem at /dev/debian-template-vg/home is mounted on /home; on-line resizing required
+old_desc_blocks = 2, new_desc_blocks = 64
+The filesystem on /dev/debian-template-vg/home is now 134154240 (4k) blocks long.
+```

+ 326 - 0
gnu-linux/serveurs/installation/serveur-deux-disques.md

@@ -0,0 +1,326 @@
+% Configuration de deux disques avec LVM
+
+:::information
+
+Sur ce schéma de partitionnement, on ne privilégie pas la fiabilité ou la redondance mais l'espace disque.
+
+Ici, ce serveur (de secours) est configuré pour être en *backup* d'un autre serveur (principal): si le serveur principal plante, le serveur de secours prend le relais.
+
+La sauvegarde des données n'est donc pas ici assurée: elle doit l'être par un autre moyen, en mettant une politique de sauvegarde réfléchie.
+
+:::
+
+# Schéma de partitionnement
+
+:::warning
+
+Tuto à refaire: on va partir en RAID0 car plus simple pour un déchiffrement en une fois du système.
+
+:::
+
+
+## Partition de boot
+
+On crée une partition de boot uniquement sur le premier disque: 512 Mo
+
+## *Swap*
+
+On crée deux partitions (une sur chaque disque) de 11,6 Go.
+
+## Données
+
+Le reste des disques sera affecté aux données.
+
+# Partitionnement
+
+## Vérification de la présence d'UEFI
+
+:::warning
+
+Bien vérifier si vous avez un système UEFI:
+
+```bash
+ls /sys/firmware/efi
+```
+
+
+**Si ce fichier n'existe pas, il faut utiliser une table MBR**
+
+Source: [Check if Computer Uses UEFI or Legacy BIOS [Linux & Windows]](https://itsfoss.com/check-uefi-or-bios/)
+
+:::
+
+Dans le cas contraire: il faut utiliser une table de partition MBR.
+
+## Partitionnement du premier disque
+
+```bash
+fdisk /dev/sda
+```
+
+### Création de la partition de boot
+
+Utilisation de la commande `n`
+
+```
+Command (m for help): n
+```
+
+Ensuite, on crée la partition numéro `1`
+
+```
+Partition number (1-128, default 1): 1
+```
+
+On laisse la valeur par défaut pour le premier secteur en appuyant sur `Entrée`
+
+```
+First sector (2048-3907029134, default 2048): 
+```
+
+Puis on indique la taille `+512M`:
+
+```
+Last sector, +/-sectors or +/-size{K,M,G,T,P} (2048-3907029134, default 3907028991): +512M
+```
+
+Le message suivant indique que la première partition est bien créée:
+
+```
+Created a new partition 1 of type 'Linux filesystem' and of size 512 MiB.
+```
+
+
+
+### Création de la partition de Swap
+
+À nouveau, on utilise la commande `n`, mais cette fois on choisit une taille en secteurs (qui correspond ici à 11,5Go):
+
+```
+Command (m for help): n [ENTREE]
+Partition number (2-128, default 2): [ENTREE]
+First sector (1050624-3907029134, default 1050624): [ENTREE]
+Last sector, +/-sectors or +/-size{K,M,G,T,P} (1050624-3907029134, default 3907028991): +24117248 [ENTREE]
+```
+
+Le message de confirmation permet de vérifier la taille:
+
+```
+Created a new partition 2 of type 'Linux filesystem' and of size 11.5 GiB.
+```
+
+On modifie ensuite le type de partition pour la `2` avec la commande `t`:
+
+
+```
+Command (m for help): t
+Partition number (1,2, default 2): 2
+Partition type or alias (type L to list all): 19
+```
+
+
+### Création de la partition principale
+
+Ici, on appuie sur `Entrée` pour laisser les valeurs par défaut:
+
+```
+Command (m for help): n
+Partition number (3-128, default 3): 
+First sector (25167873-3907029134, default 25169920): 
+Last sector, +/-sectors or +/-size{K,M,G,T,P} (25169920-3907029134, default 3907028991): 
+
+Created a new partition 3 of type 'Linux filesystem' and of size 1.8 TiB.
+```
+
+Et on modifie le type de la partition pour la passer en `Linux LVM`:
+
+```
+Command (m for help): t
+Partition number (1-3, default 3): 
+Partition type or alias (type L to list all): 43
+
+Changed type of partition 'Linux LVM' to 'Linux LVM'.
+```
+
+On termine par la commande `w` pour sauvegarder les changements de la nouvelle table des partitions:
+
+```
+Command (m for help): w
+The partition table has been altered.
+Calling ioctl() to re-read partition table.
+Syncing disks.
+```
+
+
+## Partitionnement du second disque
+
+Cette fois, on ne crée que deux partitions:
+
+- une Swap de `+24117248` secteurs
+- une principale sur le reste du disque
+
+```bash
+fdisk /dev/sdb
+```
+
+```
+Command (m for help): g
+Created a new GPT disklabel (GUID: EB07A51E-0F98-0949-8126-E55071DD5879).
+
+Command (m for help): n
+Partition number (1-128, default 1): 
+First sector (2048-3907029134, default 2048): 
+Last sector, +/-sectors or +/-size{K,M,G,T,P} (2048-3907029134, default 3907028991): +24117248
+
+Created a new partition 1 of type 'Linux filesystem' and of size 11.5 GiB.
+
+Command (m for help): t
+Selected partition 1
+Partition type or alias (type L to list all): 19
+Changed type of partition 'Linux filesystem' to 'Linux swap'.
+
+Command (m for help): n
+Partition number (2-128, default 2): 
+First sector (24119297-3907029134, default 24121344): 
+Last sector, +/-sectors or +/-size{K,M,G,T,P} (24121344-3907029134, default 3907028991): 
+
+Created a new partition 2 of type 'Linux filesystem' and of size 1.8 TiB.
+
+Command (m for help): t
+Partition number (1,2, default 2): 
+Partition type or alias (type L to list all): 43
+
+Changed type of partition 'Linux filesystem' to 'Linux LVM'.
+
+Command (m for help): w
+```
+
+
+# Configuration de LVM
+
+## Installation de LVM
+
+```bash
+apt update && apt install -y cryptsetup lvm2 debian-keyring
+```
+
+## Création des deux Physical Volumes
+
+Création sur la partition 3 du premier disque:
+
+```
+pvcreate /dev/sda3
+```
+
+Création sur la partition 2 du second disque:
+
+```
+pvcreate /dev/sdb2
+```
+
+
+## Ajout des PV à un nouveau Volume Group
+
+Création du VG
+
+```bash
+vgcreate debian-zeta-vg /dev/sda3
+```
+
+Extension du VG
+
+```bash
+vgextend debian-zeta-vg /dev/sdb2
+```
+
+Vérification (ici le VG doit faire 3,6To):
+
+```
+# vgdisplay debian-zeta-vg 
+  --- Volume group ---
+  VG Name               debian-zeta-vg
+  System ID             
+  Format                lvm2
+  Metadata Areas        2
+  Metadata Sequence No  2
+  VG Access             read/write
+  VG Status             resizable
+  MAX LV                0
+  Cur LV                0
+  Open LV               0
+  Max PV                0
+  Cur PV                2
+  Act PV                2
+  VG Size               <3.62 TiB
+  PE Size               4.00 MiB
+  Total PE              947846
+  Alloc PE / Size       0 / 0   
+  Free  PE / Size       947846 / <3.62 TiB
+  VG UUID               i58CcT-sZgA-mjZc-8Kb1-qhLW-LOZP-rlI0if
+```
+
+## Création des volumes logiques
+
+Pour ce serveur Proxmox, on aura deux partitions LVM:
+
+- une partition de démarrage
+- une partition de données
+
+```bash
+lvcreate -L 100G -n lv_root debian-zeta-vg
+lvcreate -l 100%FREE -n lv_data debian-zeta-vg
+```
+
+## Formater et monter les volumes
+
+Formater en ext4 :
+
+```bash
+mkfs.ext4 /dev/vg_raid/lv_root
+mkfs.ext4 /dev/vg_raid/lv_data
+mkfs.ext4 /dev/sda1
+```
+
+
+
+# Installation du système Debian
+
+## Debootstrap
+
+Aller sur la page [Debian -- Details of package debootstrap in bookworm](https://packages.debian.org/bookworm/debootstrap)
+
+
+Récupérer l'adresse dans la section *Télécharger* et en cliquant sur `all`
+
+Copier un des liens et l'utiliser pour télécharger sur le serveur:
+
+```bash
+wget http://ftp.fr.debian.org/debian/pool/main/d/debootstrap/debootstrap_1.0.128+nmu2+deb12u2_all.deb
+```
+
+On l'installe:
+
+```bash
+dpkg -i debootstrap*.deb && rm -f debootstrap*.deb
+```
+
+## Montage des volumes pour l'installation
+
+Rappel:
+
+- /dev/sda1 > /boot
+- mount /dev/debian-zeta-vg/lv_root > /
+- mount /dev/debian-zeta-vg/lv_data > /data
+  
+Le tout étant dans un premier temps monté sur le point de montage `/mnt`
+
+```bash
+mount /dev/debian-zeta-vg/lv_root
+mkdir /mnt/data
+mount /dev/debian-zeta-vg/lv_data /mnt/data/
+mkdir /mnt/boot
+mount /dev/sda1 /mnt/boot
+```
+
+## Chiffrement des volumes
+

+ 16 - 0
gnu-linux/serveurs/installation/yunohost-mise-a-jour.md

@@ -0,0 +1,16 @@
+Warning: This permission is currently granted to all users in addition to other groups. You probably want to either remove the 'all_users' permission or remove the other groups it is currently granted to.
+Warning: This permission is currently granted to all users in addition to other groups. You probably want to either remove the 'all_users' permission or remove the other groups it is currently granted to.
+Info: Updating apt...
+Info: Updating database...
+Info: [+++.................] > Ensuring downward compatibility...
+Info: [###+++..............] > Upgrading nextcloud...
+Info: Upgrading to Nextcloud 30.0.8
+Info: [######++++..........] > Reconfiguring nextcloud...
+Warning: File /var/www/nextcloud/config/config.php has been manually modified since the installation or last upgrade. So it has been duplicated in /var/cache/yunohost/appconfbackup//var/www/nextcloud/config/config.php.backup.20250401.124808
+Info: [##########+++.......] > Reapplying file permissions...
+Info: [#############+++....] > Regenerating system configurations for nextcloud...
+Info: The service nginx has correctly executed the action reload-or-restart.
+Info: The service fail2ban has correctly executed the action reload-or-restart.
+Info: [####################] > Upgrade of nextcloud completed
+Success! nextcloud upgraded
+

+ 36 - 22
gnu-linux/serveurs/installation/yunohost.md

@@ -1,6 +1,37 @@
 % Installation de YunoHost
 
 
+# Installation initiale
+
+## Espace disque minimal
+
+Le système de fichier doit comporter au moins 30 Go d'espace. Pour ajouter cet espace, voir la procédure ci-dessous
+
+### Ajout d'espace sur un disque via LVM
+
+Nécessité d'augmenter l'espace disque : [How to add an extra second hard drive on Linux LVM and increase the size of storage](https://www.cyberciti.biz/faq/howto-add-disk-to-lvm-volume-on-linux-to-increase-size-of-pool/)
+
+
+```bash
+# pvcreate /dev/sdb
+  Physical volume "/dev/sdb" successfully created.
+# vgextend debian-template-vg /dev/sdb
+  Volume group "debian-template-vg" successfully extended
+# lvextend -L +20G /dev/debian-template-vg/root
+  Size of logical volume debian-template-vg/root changed from <6.81 GiB (1743 extents) to <26.81 GiB (6863 extents).
+  Logical volume debian-template-vg/root successfully resized.
+# man resize2fs
+# man ^C
+# resize2fs -p /dev/mapper/debian--template--vg-root 
+resize2fs 1.47.0 (5-Feb-2023)
+Filesystem at /dev/mapper/debian--template--vg-root is mounted on /; on-line resizing required
+old_desc_blocks = 1, new_desc_blocks = 4
+The filesystem on /dev/mapper/debian--template--vg-root is now 7027712 (4k) blocks long.
+```
+
+
+## Procédure
+
 ```bash
 # wget -O - https://install.yunohost.org | bash
 --2025-02-22 00:53:35--  https://install.yunohost.org/
@@ -79,30 +110,8 @@ Saving to: ‘STDOUT’
   │                                                                           │
   │ It is available at the following URL : ➡️  https://yunohost.org/admindoc   │
   ╰───────────────────────────────────────────────────────────────────────────╯
-
-
 ```
 
-Nécessité d'augmenter l'espace disque : [How to add an extra second hard drive on Linux LVM and increase the size of storage](https://www.cyberciti.biz/faq/howto-add-disk-to-lvm-volume-on-linux-to-increase-size-of-pool/)
-
-
-```bash
-# pvcreate /dev/sdb
-  Physical volume "/dev/sdb" successfully created.
-# vgextend debian-template-vg /dev/sdb
-  Volume group "debian-template-vg" successfully extended
-# lvextend -L +20G /dev/debian-template-vg/root
-  Size of logical volume debian-template-vg/root changed from <6.81 GiB (1743 extents) to <26.81 GiB (6863 extents).
-  Logical volume debian-template-vg/root successfully resized.
-# man resize2fs
-# man ^C
-# resize2fs -p /dev/mapper/debian--template--vg-root 
-resize2fs 1.47.0 (5-Feb-2023)
-Filesystem at /dev/mapper/debian--template--vg-root is mounted on /; on-line resizing required
-old_desc_blocks = 1, new_desc_blocks = 4
-The filesystem on /dev/mapper/debian--template--vg-root is now 7027712 (4k) blocks long.
-
-```
 
 
 
@@ -318,6 +327,8 @@ On va rajouter les certificats en suivant les informations données sur la page
 
 # Authentification pour certaines app
 
+## Pour une application dans son propre sous-domaine
+
 En cas d'erreur 401, il peut être nécessaire de désactiver certaines lignes de la configuration NGINX sur la VM YunoHost.
 
 Voir [Install web app on main domain while keeping Synapse it&#39;s server name - Tutorials - YunoHost Forum](https://forum.yunohost.org/t/install-web-app-on-main-domain-while-keeping-synapse-its-server-name/21893)
@@ -343,3 +354,6 @@ Redémarrer `nginx`
 ```bash
 sudo systemctl restart nginx
 ```
+
+
+

+ 144 - 0
gnu-linux/serveurs/nas-rockpi-penta.md

@@ -0,0 +1,144 @@
+% Configuration NAS Penta Rock Pi
+
+# Installation sur eMMC
+
+On grave sur une carte SD une image correspondant à `Rock Pi 4B plus`
+
+On boote dessus
+
+On flash l'eMMC en utilisant [ce tutoriel](https://wiki.radxa.com/Rockpi4/install/eMMC):
+
+:::information
+
+If you have no eMMC to μSD card converter board or you have ROCK 4A Plus or 4B Plus,
+
+    Install Debian Linux (or another Linux variant) first to microSD card following the microSD card installation page.
+    Insert both your microSD
+    Insert the (empty) eMMC module into the ROCK 4A, 4B, 4C, 4 SE, 4C Plus, for 4A Plus, 4B Plus, you have eMMC on the board already
+    Reboot it. It will boot from microSD
+
+You can now use that Linux on ROCK 4 to download your desired OS from Rockpi4/downloads and install it onto the eMMC module. Example:
+
+Verify that the system has booted from μSD, which should be /dev/mmcblk0p5 and that the eMMC module is found as /dev/mmcblk1:
+
+```bash
+$ dmesg | grep mmcblk
+...
+[...] EXT4-fs (mmcblk0p5): mounted filesystem with ordered data mode.
+
+$ ls -l /dev/mmcblk1
+brw-rw---- 1 root disk 179, 0 Jan  6 13:25 /dev/mmcblk1
+```
+
+Then write your downloaded OS image to eMMC:
+
+```bash
+$ sudo dd if=rockpi4_debian_stretch_lxde_armhf_20181105_2120-gpt.img of=/dev/mmcblk1 bs=1M
+```
+
+If you image downloaded is img.xz format, it's compressed, use
+
+```bash
+$ xzcat rockpi-4cplus-ubuntu-focal-server-arm64-20220520-1242-gpt.img.xz | sudo dd of=/dev/mmcblk1 bs=1M
+```
+
+A CLI tool to write an image with write diagnostics is pv:
+
+
+```bash
+$ sudo apt install pv
+$ sudo pv -ptera < rockpi4_debian_stretch_lxde_armhf_20181105_2120-gpt.img | dd of=/dev/mmcblk1 bs=1M
+```
+
+Power off your ROCK 4, remove the μSD and power on again. The system will now boot from the on board eMMC or eMMC module. 
+
+:::
+
+# Configuration du réseau
+
+D'après [How to Configure Network Connection Using 'nmcli' Tool](https://www.tecmint.com/nmcli-configure-network-connection/)
+
+## État des lieux
+
+```bash
+sudo nmcli c
+```
+
+Donne:
+
+```
+NAME                UUID                                  TYPE      DEVICE 
+Wired connection 1  249328cb-11d9-364d-9e2d-0ef7ae271bd3  ethernet  end0   
+lo                  d86532c4-4ba9-4144-bb9b-7c1945180e2f  loopback  lo    
+```
+
+```bash
+ip a
+```
+
+```
+1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
+    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
+    inet 127.0.0.1/8 scope host lo
+       valid_lft forever preferred_lft forever
+    inet6 ::1/128 scope host noprefixroute 
+       valid_lft forever preferred_lft forever
+2: end0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
+    link/ether 76:80:df:60:56:74 brd ff:ff:ff:ff:ff:ff
+    inet 192.168.0.202/24 brd 192.168.0.255 scope global dynamic noprefixroute end0
+       valid_lft 7026sec preferred_lft 7026sec
+    inet6 fe80::c968:5ddf:6b30:821f/64 scope link noprefixroute 
+       valid_lft forever preferred_lft forever
+3: wlan0: <NO-CARRIER,BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state DORMANT group default qlen 1000
+    link/ether d4:9c:dd:a1:14:6a brd ff:ff:ff:ff:ff:ff
+```
+
+
+
+```bash
+$ sudo nmcli dev status
+DEVICE         TYPE      STATE                   CONNECTION         
+end0           ethernet  connected               Wired connection 1 
+lo             loopback  connected (externally)  lo                 
+wlan0          wifi      disconnected            --                 
+p2p-dev-wlan0  wifi-p2p  disconnected            --
+```
+
+## Configuration
+
+
+```bash
+sudo nmcli connection add con-name connexion_filaire ifname end0 type ethernet
+```
+
+```bash
+sudo nmcli con mod connexion_filaire ipv4.addresses 192.168.0.15/24
+sudo nmcli con mod connexion_filaire ipv4.gateway 192.168.0.1
+sudo nmcli con mod connexion_filaire ipv4.dns "192.168.0.1"
+sudo nmcli con mod connexion_filaire ipv4.method manual
+```
+
+Mise en route:
+
+
+:::warning
+
+Attention: cela va déconnecter votre session SSH
+
+:::
+
+```bash
+sudo nmcli con up connexion_filaire
+```
+
+
+## Switch OTG
+
+
+C'est le petit switch placé juste sous les ports USB3
+
+![alt text](image.png)
+
+On le positionne vers la gauche pour activer le mode hôte et permettre la connection de périphériques supplémentaires.
+
+https://wiki.radxa.com/Rockpi4/dev/usb-host-and-otg-switch-on-rock-pi-4

+ 29 - 0
gnu-linux/serveurs/nextcloud.md

@@ -0,0 +1,29 @@
+% NextCloud
+
+
+Sur le client Webdav
+
+https://cloud.aezi.fr/remote.php/dav/files/USER
+
+Correspond sur le serveur à 
+
+/home/yunohost.app/nextcloud/data/USER/files/Joplin/test.txt
+
+
+## Configuration pour Joplin (WebDav)
+
+
+[Nginx: 413 - Request Entity Too Large Error and Solution - nixCraft](https://www.cyberciti.biz/faq/linux-unix-bsd-nginx-413-request-entity-too-large/)
+
+### Erreur 413 nginx
+
+Sur le reverse Proxy
+
+Créer un fichier nommé  `/etc/nginx/conf.d/nextcloud-client-size-body.conf`
+
+Y placer le texte suivant:
+
+```
+client_max_body_size 10G;
+```
+

+ 128 - 0
gnu-linux/serveurs/nginx.md

@@ -0,0 +1,128 @@
+% NGINX
+
+
+# Mode Maintenance
+
+
+## Fichier d'accueil
+
+```html
+<!-- index.html -->
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Site en Maintenance</title>
+</head>
+<body>
+    <h1>Site en Maintenance</h1>
+    <p>Merci de revenir plus tard !</p>
+</body>
+</html>
+```
+
+
+## Configuration
+
+
+Ajouter ce bloc:
+
+
+```
+	###### MAINTENANCE ######
+	#Changer la valeur de  maintenance a on ou off (decommenter/commenter la seconde ligne)
+	#set $maintenance off;
+	set $maintenance on;
+
+	if ($remote_addr ~ (83.193.14.206)) {
+		set $maintenance off;
+	}
+	if ($maintenance = on) {
+		return 503;
+	}
+
+	location /maintenance {
+	}
+
+	error_page 503 @maintenance;
+	location @maintenance {
+		root /var/www/maintenance ;
+		#rewrite  ^(/images/logo.png)$ /images/logo.png break;
+		rewrite  ^(.*)$ /index.html break;
+	}
+	###### FIN MAINTENANCE ######
+```
+
+
+
+Par exemple:
+
+
+```
+server{
+        listen 443 ssl;
+
+	# AJOUT DES CERTIFICATS
+    ssl_certificate /etc/letsencrypt/live/garagepourtous.fr/fullchain.pem ;
+	#/etc/letsencrypt/live/garagepourtous.fr/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/garagepourtous.fr/privkey.pem ;
+	# /etc/letsencrypt/live/garagepourtous.fr/privkey.pem; # managed by Certbot
+ 
+        server_name www.garagepourtous.fr garagepourtous.fr;
+        root    /var/www/www.garagepourtous.fr;
+        index     index.php index.html index.htm;
+ 
+        access_log /var/log/nginx/fr.garagepourtous.access_log;
+        error_log /var/log/nginx/fr.garagepourtous.error_log;
+ 
+        # Security
+        include global/security.conf;
+ 
+	###### MAINTENANCE ######
+
+    #ICI
+
+	###### FIN MAINTENANCE ######
+
+        location / {
+                # This is cool because no php is touched for static content.
+                # include the "?$args" part so non-default permalinks doesn't break when using query string
+                try_files $uri $uri/ /index.php?$args;
+        }
+ 
+    # PHP-FPM
+    include global/php-fpm-redis.conf;
+ 
+    # STATICS FILES
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
+                expires max;
+                log_not_found off;
+        }
+
+
+}
+
+```
+
+
+# Gestion des mots de passe et accès dans nginx
+
+```
+sudo sh -c "echo -n 'thomas.richard3:'
+sudo sh -c "openssl passwd -apr1"
+```
+
+Éditer le fichier (par exemple `/etc/nginx/.auth.allow`)
+
+
+# Webographie
+
+## Yunohost
+
+* [YunoHost behind a reverse proxy - Discuss / Advanced use case - YunoHost Forum](https://forum.yunohost.org/t/yunohost-behind-a-reverse-proxy/6378)
+* [Nginx reverse proxy + URL rewrite - Server Fault](https://serverfault.com/questions/379675/nginx-reverse-proxy-url-rewrite)
+* [Reverse proxy avec Nginx - Support - YunoHost Forum](https://forum.yunohost.org/t/reverse-proxy-avec-nginx/207)
+* [Nginx de Yunohost en reverse proxy - Le blog de Genma](https://blog.genma.fr/?Nginx-de-Yunohost-en-reverse-proxy)
+* [Reverse proxy and Reverse DNS for YunoHost installation - Support - YunoHost Forum](https://forum.yunohost.org/t/reverse-proxy-and-reverse-dns-for-yunohost-installation/25672)
+* [ACME Client Implementations - Let's Encrypt](https://letsencrypt.org/docs/client-options/)

+ 5 - 0
gnu-linux/serveurs/proxmox/activation-avx-proxmox.md

@@ -0,0 +1,5 @@
+% Activation AVX
+
+* [Enable AVX | Proxmox Support Forum](https://forum.proxmox.com/threads/enable-avx.129019/)
+* [Feature Suggestion: AVX/AVX2 CPU flags | Proxmox Support Forum](https://forum.proxmox.com/threads/feature-suggestion-avx-avx2-cpu-flags.114688/)
+* [CPU with AVX support, | Proxmox Support Forum](https://forum.proxmox.com/threads/cpu-with-avx-support.146138/)

+ 42 - 0
gnu-linux/serveurs/proxmox/configuration-ovh.md

@@ -83,6 +83,12 @@ iface vmbr0 inet static
 #Réseau Interne
 ```
 
+:::important
+
+Voir la section "Problème de redémarrage du serveur / problème réseau" en cas de problème de redémarrage par OVH / blocage de la carte réseau / absence de ping
+
+:::
+
 :::warning
 
 **VOIR REMARQUE CI-DESSOUS**
@@ -136,3 +142,39 @@ Voir:
 ## Désactiver le firewall
 
 Datacenter > Firewall > Options > Firewall : No
+
+
+# Problème de redémarrage du serveur / problème réseau
+
+Si ce genre d'erreur arrive suite à un blocage réseau:
+
+
+```
+Jul 06 04:22:09 ecaz kernel: e1000e 0000:00:19.0 eth0: Detected Hardware Unit Hang:
+                               TDH                  <76>
+                               TDT                  <82>
+                               next_to_use          <82>
+                               next_to_clean        <76>
+                             buffer_info[next_to_clean]:
+                               time_stamp           <120b19abb>
+                               next_to_watch        <77>
+                               jiffies              <120b1d6c0>
+                               next_to_watch.status <0>
+                             MAC Status             <40080083>
+                             PHY Status             <796d>
+                             PHY 1000BASE-T Status  <3800>
+                             PHY Extended Status    <3000>
+                             PCI Status             <10>
+```
+
+
+
+
+
+* [(2) [SOLVED] - Intel NIC e1000e hardware unit hang | Proxmox Support Forum](https://forum.proxmox.com/threads/intel-nic-e1000e-hardware-unit-hang.106001/)
+* [(2) Trap error on e1000 network adapter | Proxmox Support Forum](https://forum.proxmox.com/threads/trap-error-on-e1000-network-adapter.105758/)
+* [linux - How to fix “eth0: Detected Hardware Unit Hang” in Debian 9? - Super User](https://superuser.com/questions/1270723/how-to-fix-eth0-detected-hardware-unit-hang-in-debian-9)
+* [networking - e1000e Reset adapter unexpectedly / Detected Hardware Unit Hang - Server Fault](https://serverfault.com/questions/616485/e1000e-reset-adapter-unexpectedly-detected-hardware-unit-hang)
+* [ubuntu - Linux e1000e (Intel networking driver) problems galore, where do I start? - Server Fault](https://serverfault.com/questions/193114/linux-e1000e-intel-networking-driver-problems-galore-where-do-i-start)
+* [Intel Ethernet Drivers and Utilities / Bugs / #378 82579LM e1000e driver hardware hang](https://web.archive.org/web/20160205153351/http://ehc.ac/p/e1000/bugs/378/)
+* [networking - e1000e Reset adapter unexpectedly / Detected Hardware Unit Hang - Server Fault](https://serverfault.com/questions/616485/e1000e-reset-adapter-unexpectedly-detected-hardware-unit-hang)

+ 7 - 0
gnu-linux/serveurs/proxmox/edition-disques-template.md

@@ -0,0 +1,7 @@
+% Édition de disques des VMs ou des templates
+
+# Prérequis
+
+```bash
+sudo apt-get install libguestfs-tools
+```

+ 8 - 0
gnu-linux/serveurs/proxmox/gestion-reseau-proxmox.md

@@ -14,3 +14,11 @@ Ici `192.168.12.0/24` est l'identifiant du réseau pour lequel le "switch" fonct
 Mettre un routeur entre le réseau privé et un réseau externe
 
 
+# Réseau privé interne
+
+Accélération des performances entre les VM
+
+- [Proxmox NETWORKING: VLANs, Bridges, and Bonds! - YouTube](https://www.youtube.com/watch?v=zx5LFqyMPMU)
+- [Proxmox 8 — Linux Server Wiki](https://wiki.csnu.org/index.php?title=Proxmox_8#Ajout_d'un_r%C3%A9seau_interne_vmbr1)
+- [How to Create a Private Network in Proxmox](https://blog.jenningsga.com/private-network-with-proxmox/)
+- [How to: Create an internal only/isolated network for guest OS/Virtual Machines (VM) on Proxmox VE (PVE) like in VMware Workstation (Host-Only network but different)](https://dannyda.com/2020/06/01/how-to-create-an-internal-only-isolated-network-for-guest-os-virtual-machines-vm-on-proxmox-ve-pve-like-in-vmware-workstation-host-only-network-but-different/)

+ 120 - 0
gnu-linux/serveurs/proxmox/how-to-share-host-folder-with-guest-vm-in-proxmox-using-virtiofs.md

@@ -0,0 +1,120 @@
+# How to Share Host Folder with Guest VM in Proxmox Using Virtiofs
+
+<!-- image -->
+
+This guide explains how to access a shared folder on the host from a guest VM in Proxmox VE.
+
+– Make sure virtiofsd is installed on the Proxmox host
+
+```
+apt install virtiofsd
+```
+
+– Create a shared directory on the Proxmox host.
+
+```
+mkdir -p /srv/sharefolder/vm101
+```
+
+– Go to Proxmox GUI, select Datacenter | Directory Mappings. Click add. Adjust Name, Node, and the Path
+
+![](images/pve-directory-mapping-1024x394.webp)
+
+– Select VM who will access the folder share. Select Hardware | Add | Virtiofs
+
+![](images/add-virtiofs-vm.webp)
+
+![](images/select-virtiofs-vm.webp)
+
+– Start VM after added Virtiofs
+
+If your VM is running, you can shut it down and start it again.
+
+– Mounting folder share from VM
+
+Mount virtiofs
+
+```
+mount -t virtiofs vm101 /mnt/
+```
+
+To make the mounting permanent and automatic at boot, add it to the fstab. The content is as follows:
+
+```
+vm101 /mnt virtiofs rw,relatime 0 0
+```
+
+Good Luck 🙂
+
+### Share this:
+
+- Click to email a link to a friend (Opens in new window)
+Email
+- Click to share on Facebook (Opens in new window)
+Facebook
+- Click to share on X (Opens in new window)
+X
+- Click to share on LinkedIn (Opens in new window)
+LinkedIn
+- Click to share on Pinterest (Opens in new window)
+Pinterest
+- Click to share on Tumblr (Opens in new window)
+Tumblr
+- Click to share on Telegram (Opens in new window)
+Telegram
+- Click to share on WhatsApp (Opens in new window)
+WhatsApp
+- Click to share on Reddit (Opens in new window)
+Reddit
+
+## Post navigation
+
+### How to Limit Email Attachment Size for Individual Users in Zimbra
+
+### How to Set Up a Ceph Cluster on a Single Node
+
+### Leave a Reply Cancel reply
+
+Your email address will not be published. Required fields are marked *
+
+Comment *
+
+Name *
+
+Email *
+
+Website
+
+Notify me of follow-up comments by email.
+
+Notify me of new posts by email.
+
+
+This site uses Akismet to reduce spam. Learn how your comment data is processed.
+
+### Categories
+
+### Recent Comments
+
+- Luis Navas on Zimbra Tips : How To Configure Rate Limit Sending Message on PolicyD
+- Imanudin Ahmad on Relay Tips Based on User/Domain Receiver on Zimbra 8.5-8.6
+- Imanudin Ahmad on Zimbra Tips : How To Configure Rate Limit Sending Message on PolicyD
+- Rajaji on Relay Tips Based on User/Domain Receiver on Zimbra 8.5-8.6
+- Luis Navas on Zimbra Tips : How To Configure Rate Limit Sending Message on PolicyD
+
+### Tags
+
+### Books &amp; Publishing
+
+<!-- image -->
+
+<!-- image -->
+
+### Search
+
+## 
+
+## 
+
+### 

BIN
gnu-linux/serveurs/proxmox/images/add-virtiofs-vm.webp


BIN
gnu-linux/serveurs/proxmox/images/pve-directory-mapping-1024x394.webp


BIN
gnu-linux/serveurs/proxmox/images/select-virtiofs-vm.webp


+ 29 - 1
gnu-linux/serveurs/proxmox/infrastructure-ovh.md

@@ -6,6 +6,21 @@
 
 Aide: [Architecture de services avec Proxmox sur un serveur kimsufi - Vincent Dillenschneider](https://vdillenschneider.fr/architecture-de-services-avec-proxmox-sur-un-serveur-kimsufi)
 
+## Adressage
+
+| Machine          | Id    | Adresse        |
+|------------------|-------|----------------|
+| ecaz             | NA    | 10.1.0.1       |
+| reverse-proxy    | 100   | 10.1.0.10      |
+| web-formation    | 101   | 10.1.0.101     |
+|                  |       | 10.1.0.        |
+| yunohost nu      | 103   | 10.1.0.14      |
+|                  |       | 10.1.0.        |
+| web-gestion      | 104   | 10.1.0.22      |
+| bastion          | 105   | 10.1.0.11      |
+| development-vm   | 801   | 10.1.0.81      |
+
+
 # Reverse Proxy NGINX
 
 ## Certificats
@@ -58,4 +73,17 @@ sudo iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 80 -j DNAT --to 10.1.
 sudo iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 443 -j DNAT --to 10.1.0.10:443
 ```
 
-  
+  
+
+
+# Exemple
+
+```
++---------------------+    +---------------------+    +---------------------+
+| reverse proxy       |    | VM 10.1.0.22        |    | Docker-Compose      |
+| only redirects any  |    |                     |    |                     |
+| request to the VM   |--->|  no nginx installed |--->| original nginx      |
+| (see nginx conf     |    |                     |    | from AppFlowy-Cloud |
+| above )             |    |                     |    | repos               |
++---------------------+    +---------------------+    +---------------------+
+```

+ 3 - 0
gnu-linux/serveurs/proxmox/partage-dossier-vm.md

@@ -0,0 +1,3 @@
+% Partage de dossier aux VM Proxmox
+
+[How to Share Host Folder with Guest VM in Proxmox Using Virtiofs - Ahmad Imanudin](https://imanudin.net/2025/04/20/how-to-share-host-folder-with-guest-vm-in-proxmox-using-virtiofs/)

+ 235 - 0
gnu-linux/serveurs/samba-serveur-fichier.md

@@ -0,0 +1,235 @@
+% Serveur de fichiers samba
+
+# Installation et configuration
+
+## Installation
+
+
+```bash
+sudo apt update && sudo apt install -y samba samba-vfs-modules
+```
+
+## Configuration
+
+```conf
+[global]
+
+## Browsing/Identification ###
+
+# Change this to the workgroup/NT-domain name your Samba server will part of
+   workgroup = AEZI
+
+#### Debugging/Accounting ####
+
+# This tells Samba to use a separate log file for each machine
+# that connects
+   log file = /var/log/samba/log.%m
+
+# Cap the size of the individual log files (in KiB).
+   max log size = 1000
+
+# We want Samba to only log to /var/log/samba/log.{smbd,nmbd}.
+# Append syslog@1 if you want important messages to be sent to syslog too.
+   logging = file
+
+# Do something sensible when Samba crashes: mail the admin a backtrace
+   panic action = /usr/share/samba/panic-action %d
+
+
+####### Authentication #######
+
+# Server role. Defines in which mode Samba will operate. Possible
+# values are "standalone server", "member server", "classic primary
+# domain controller", "classic backup domain controller", "active
+# directory domain controller". 
+#
+# Most people will want "standalone server" or "member server".
+# Running as "active directory domain controller" will require first
+# running "samba-tool domain provision" to wipe databases and create a
+# new domain.
+   server role = standalone server
+
+   obey pam restrictions = yes
+
+# This boolean parameter controls whether Samba attempts to sync the Unix
+# password with the SMB password when the encrypted SMB password in the
+# passdb is changed.
+   unix password sync = yes
+
+# For Unix password sync to work on a Debian GNU/Linux system, the following
+# parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for
+# sending the correct chat script for the passwd program in Debian Sarge).
+   passwd program = /usr/bin/passwd %u
+   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
+
+# This boolean controls whether PAM will be used for password changes
+# when requested by an SMB client instead of the program listed in
+# 'passwd program'. The default is 'no'.
+   pam password change = yes
+
+# This option controls how unsuccessful authentication attempts are mapped
+# to anonymous connections
+   map to guest = bad user
+
+#[global]
+#======== From https://serverfault.com/a/1085863/139286 ========
+
+allow dns updates = disabled
+client min protocol = SMB3_11
+dcerpc endpoint servers = rpcecho
+delete veto files = Yes
+disable netbios = Yes
+disable spoolss = Yes
+dns forwarder = 192.168.1.1
+dns proxy = No
+enhanced browsing = No
+# Next line requires catia (needed if no Windows clients?)
+fruit:encoding = native
+fruit:metadata = stream
+# Do not use NFS access control entries
+fruit:nfs_aces = No
+# Enable extended attributes (requires streams_xattr)
+fruit:resource = xattr
+# Next line is already the default
+;fruit:zero_file_id = Yes
+host msdfs = No
+inherit acls = Yes
+inherit permissions = Yes
+lm announce = No
+load printers = No
+log file = /var/log/samba/log.smbd
+log level = 1
+logging = file
+max log size = 10000
+# Next 2 lines defer mDNS config to Avahi (better for icon and Time Machine)
+mdns name = mdns
+multicast dns register = No
+name resolve order = host bcast
+pam password change = Yes
+panic action = /usr/share/samba/panic-action %d
+passwd chat = "*New Password:*" %n\n "*Reenter New Password:*" %n\n "*Password changed.*"
+passwd program = /usr/bin/passwd %u
+printcap cache time = 0
+printcap name = /dev/null
+printable = No
+printing = bsd
+restrict anonymous = 2
+rpc_daemon:spoolssd = disabled
+rpc_server:epmapper = disabled
+rpc_server:winreg = disabled
+rpc_server:lsarpc = disabled
+rpc_server:samr = disabled
+rpc_server:netlogon = disabled
+rpc_server:netdfs = disabled
+rpc_server:dssetup = disabled
+rpc_server:wkssvc = disabled
+rpc_server:spoolss = disabled
+rpc_server:svcctl = disabled
+rpc_server:ntsvcs = disabled
+rpc_server:eventlog = disabled
+rpc_server:initshutdown = disabled
+rpc_server:mdssvc = disabled
+server max protocol = SMB3_11
+server min protocol = SMB3_11
+# Next line experimental until 4.15 - macOS clients support multi-channel SMB3
+server multi channel support = Yes
+server role = standalone server
+server services = rpc, smb
+server string = %h server (Samba , Debian RockPi4B+)
+show add printer wizard = No
+smb ports = 445
+unix password sync = Yes
+use sendfile = Yes
+veto files = /._*/.DS_Store/
+vfs objects = catia fruit streams_xattr
+
+
+#======================= Share Definitions =======================
+
+[homes]
+   comment = Home Directories
+   browseable = no
+
+# By default, the home directories are exported read-only. Change the
+# next parameter to 'no' if you want to be able to write to them.
+   read only = yes
+
+# File creation mask is set to 0700 for security reasons. If you want to
+# create files with group=rw permissions, set next parameter to 0775.
+   create mask = 0700
+
+# Directory creation mask is set to 0700 for security reasons. If you want to
+# create dirs. with group=rw permissions, set next parameter to 0775.
+   directory mask = 0700
+
+# By default, \\server\username shares can be connected to by anyone
+# with access to the samba server.
+# The following parameter makes sure that only "username" can connect
+# to \\server\username
+# This might need tweaking when using external authentication schemes
+   valid users = %S
+
+# Un-comment the following and create the netlogon directory for Domain Logons
+# (you need to configure Samba to act as a domain controller too.)
+;[netlogon]
+;   comment = Network Logon Service
+;   path = /home/samba/netlogon
+;   guest ok = yes
+;   read only = yes
+
+# Un-comment the following and create the profiles directory to store
+# users profiles (see the "logon path" option above)
+# (you need to configure Samba to act as a domain controller too.)
+# The path below should be writable by all users so that their
+# profile directory may be created the first time they log on
+;[profiles]
+;   comment = Users profiles
+;   path = /home/samba/profiles
+;   guest ok = no
+;   browseable = no
+;   create mask = 0600
+;   directory mask = 0700
+
+;[printers]
+;   comment = All Printers
+;   browseable = no
+;   path = /var/tmp
+;   printable = yes
+;   guest ok = no
+;   read only = yes
+;   create mask = 0700
+
+# Windows clients look for this share name as a source of downloadable
+# printer drivers
+;[print$]
+;   comment = Printer Drivers
+;   path = /var/lib/samba/printers
+;   browseable = yes
+;   read only = yes
+;   guest ok = no
+# Uncomment to allow remote administration of Windows print drivers.
+# You may need to replace 'lpadmin' with the name of the group your
+# admin users are members of.
+# Please note that you also need to set appropriate Unix permissions
+# to the drivers directory for these users to have write rights in it
+;   write list = root, @lpadmin
+
+[toshiba_4_noir]
+    comment = Share to serve
+    path = /path/to/directory/to/serve
+    browseable = yes
+    read only = no
+    guest ok = no
+    spotlight = no
+    veto files = /._*/.DS_Store/
+    delete veto files = yes
+    writable = yes
+
+```
+
+## Redémarrage
+
+```bash
+sudo systemctl enable smbd
+sudo systemctl restart smbd
+```

+ 39 - 0
gnu-linux/serveurs/securisation/bastion.md

@@ -1,6 +1,45 @@
 % Bastion
 
+# Installation
+
+Installation en cours: Devuan
+
+```bash
+ssh bastion
+```
+
+## TODO
+
+- [ ] [linux - Limit SSH access to specific clients by IP address - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/406245/limit-ssh-access-to-specific-clients-by-ip-address)
+- [ ] [Using iptables to prevent SSH brute force attacks and DDOS attacks](https://serverfault.com/questions/847755/using-iptables-to-prevent-ssh-brute-force-attacks-and-ddos-attacks)
+  - [ ] [How to Block Brute-Force Attacks on SSH: Step by Step guide](https://codenotary.com/blog/how-to-block-brute-force-attacks-on-ssh)
+- [ ] [https://goteleport.com/blog/ssh-bastion-host/](https://goteleport.com/blog/ssh-bastion-host/)
+- [ ] [https://goteleport.com/blog/security-hardening-ssh-bastion-best-practices/](https://goteleport.com/blog/security-hardening-ssh-bastion-best-practices/)
+- [ ] [https://goteleport.com/blog/ssh-key-management/](https://goteleport.com/blog/ssh-key-management/)
+  - [ ] [14.3. Using OpenSSH Certificate Authentication | Deployment Guide | Red Hat Enterprise Linux | 6 | Red Hat Documentation](https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/6/html/deployment_guide/sec-using_openssh_certificate_authentication#sec-Introduction_to_SSH_Certificates)
+
+### Sécurisation (ajouts possibles)
+
+* [Sécurisation d'un serveur Linux sous debian - HackMD](https://hackmd.io/@Ben-Rahiti-Romain/SkciYWMWj)
+* [Hardening - Debian Wiki](https://wiki.debian.org/Hardening)
+* [Welcome to The Bastion documentation! — The Bastion 3.20.00 documentation](https://ovh.github.io/the-bastion/index.html)
+
+# Webographie
+
 * [(1) Option for double bastion Terraform setup? | Proxmox Support Forum](https://forum.proxmox.com/threads/option-for-double-bastion-terraform-setup.94418/)
 * [(1) Best practices for having a SSH jumphost | Proxmox Support Forum](https://forum.proxmox.com/threads/best-practices-for-having-a-ssh-jumphost.112357/)
 * [What is an SSH Bastion? | SSH Bastion host setup](https://goteleport.com/blog/ssh-bastion-host/)
 * [ssh - SSHFS over a jumphost - Server Fault](https://serverfault.com/questions/941934/sshfs-over-a-jumphost)
+
+## Certificats
+
+- [How to use Let's Encrypt with an SSH Bastion](https://goteleport.com/blog/letsencrypt-teleport-ssh/)
+
+
+## Autres solutions
+
+[Comment configurer un serveur Bastion avec Warpgate sur Debian](https://fr.linux-console.net/?p=30725)
+
+
+
+

+ 24 - 0
installation/firefox/extensions-firefox.md

@@ -0,0 +1,24 @@
+% Extensions FIrefox
+
+- adBlocker ultimate
+- Bookmark dupes
+- Copy selected tab info
+- don't fuck with paste
+- don't track me google
+- easy youtube video downloader express
+- enhancer for youtube
+- foxyproxy
+- keepassxc-browser
+- lilo moteur et solidaire
+- myJDownloader
+- newsGuard
+- NoScript
+- Orbit
+- Sticky windows container
+- Tab Stash
+- uBlock Origin
+- Video Downloader Helper
+- Wallabagger
+- Web Archives
+
+

Fichier diff supprimé car celui-ci est trop grand
+ 3659 - 0
installation/firefox/extensions-installées.html


+ 25 - 0
installation/venv-python.md

@@ -0,0 +1,25 @@
+% Gestion des venv Python
+
+# Installation virtualenvwrapper
+
+```bash
+brew install virtualenvwrapper
+```
+
+Ajout de `source virtualenvwrapper.sh` dans .profile .bashrc .bash_profile
+
+Voir [virtualenvwrapper 6.1.2.dev6+g1da1602 &#8212; virtualenvwrapper 6.1.2.dev6+g1da1602 documentation](https://virtualenvwrapper.readthedocs.io/en/latest/)
+
+```bash
+$ mkvirtualenv figure_latex
+
+$ pip3 install pandocfilters
+```
+
+Ajouter le chemin vers le python qui est dans le bin du venv dans le hashbang
+
+```
+#!/Users/lauhub/.virtualenvs/figure_latex/bin/python
+```
+
+

+ 30 - 0
javascript/selecteur-javascript-extraction-depots-github-depuis-organisation.md

@@ -0,0 +1,30 @@
+% Extracteur des dépôts GitHub dans une organisation
+
+# Code Javascript
+
+```js
+let elems ;
+let mylist = "";
+// https://stackoverflow.com/questions/54225477/get-element-by-part-of-class-name-javascript
+elems = document.querySelectorAll("div[class^='ListView-module'], div[class*=' ListView-module']");
+
+if (elems.length > 0) {
+    mylist = "";
+    let lines = document.querySelectorAll("li[class^='ListItem-module__listItem'], li[class*=' ListItem-module__listItem']");
+    for (const line of lines) {
+        let titles = line.querySelectorAll("a[class^='Title-module__anchor'], a[class*=' Title-module__anchor']");
+        if(titles.length > 0) {
+            let title = titles[0].getAttribute("href") ;
+            if(mylist.length > 0) {mylist = mylist + "\n" + title;}
+            else {mylist = title;}
+        }
+		else {console.log("ERROR: "+line);}
+    }
+    console.log(mylist + "\n");
+}
+
+
+
+```
+
+À utiliser ensuite avec `retrievegitrepos` (dossier `~/bin`)

Fichier diff supprimé car celui-ci est trop grand
+ 813 - 0
materiel/routeur-cisco-rv340w.html


+ 160 - 0
materiel/routeur-cisco-rv340w.md

@@ -0,0 +1,160 @@
+% Routeur CISCO RV340W
+
+# Récapitulatif des adresses
+
+| WIFI            | Réseau | Routeur     | Adresse       |
+|-----------------|--------|-------------|---------------|
+| `ipiwifi01`     | VLAN1  | *ipiwifi01* | `10.29.10.251`  |
+| `ipiwifi01-mgt` | VLAN2  | *ipiwifi01* | `192.168.251.1` |
+| `ipiwifi02`     | VLAN1  | *ipiwifi02* | `10.29.10.252`  |
+| `ipiwifi02-mgt` | VLAN2  | *ipiwifi02* | `192.168.252.1` |
+
+
+# Configuration d'un réseau de gestion
+
+## Créer un second VLAN
+
+- VLAN2
+- Activer l'interface de gestion
+- IPIWIFI01 (pour l'interface wireless `ipiwifi01-mgt`)
+  - 192.168.251.1
+  - 255.255.255.0
+- IPIWIFI02 (pour l'interface wireless `ipiwifi02-mgt`)
+  - 192.168.252.1
+  - 255.255.255.0
+- DHCP server
+  - DNS 1.1.1.3 et 1.0.0.3
+
+## Créer un second Wireless
+
+- `ipiwifi01-mgt` (respectivement `ipiwifi02-mgt`)
+- SSID Broadcast: disable (pour éviter que tout le monde le voit)
+- PMF: capable
+- WMM: disable (**IMPORTANT** : dans le cas contraire le réseau fonctionne mal)
+- VLAN: 2
+
+
+
+
+
+# Configuration LAN seul
+
+## Accéder à la configuration du routeur
+
+
+Par défaut: [https://192.168.1.1 ](https://192.168.1.1)
+
+
+## WAN
+
+WAN > WAN Settings
+
+- Pour WAN1 et WAN2 :
+- Connection Type : choisis Disabled si disponible, sinon laisse par défaut, tu ne l’utiliseras pas.
+
+## LAN
+
+LAN > VLAN Settings
+
+Éditer le VLAN1 (le seul existant normalement):
+
+- DHCP Type: `Disabled`
+- IPv4 Address: `10.29.10.252` (ou une autre adresse)
+- Subnet Mask: `255.255.255.0`
+
+Laisser tous les ports sur `U` (*Untagged*)
+
+Cliquer sur `Apply`
+
+## Wi-Fi
+
+
+Aller dans `Wireless > Basic Settings` et éditer le réseau courant.
+
+Décocher la case `WMM` pour le désactiver.
+
+Autre piste: cocher la case `Wireless Isolation within SSID` pour l'activer.
+
+Sélectionner `VLAN` > `1`
+
+:::information
+
+En cas de forts ralentissements/dysfonctionnements du réseau en Wi-Fi:
+
+- vérifier que la case `WMM` est **décochée** pour le désactiver.
+
+
+:::
+
+## Firewall
+
+Désactiver le firewall
+
+## System Configuration > System
+
+Host Name: `router34E972-ipiwifi01`
+ou `router34E972` est le nom par défaut et `ipiwifi01` ou `ipiwifi02` le label sur le boitier
+
+## System Configuration > Time
+
+
+Activer Daylight saving time
+
+Cocher Recurring
+
+| Action | Month | Week | Day | Time H | Time M |
+|--------|-------|------|-----|--------|--------|
+| From   | 3     | Last | Sun | 2      |    0   | 
+| To     | 10    | Last | Sun | 2      |    0   | 
+
+Offset `+60` Minutes
+
+
+## Administration
+
+:::information
+
+Pour enregistrer la configuration à prendre en compte au redémarrage
+
+:::
+
+
+## Enregistrement de la configuration
+
+Configuration Management
+
+- Source: Running Configuration
+- Destination: Startup Configuration
+
+Et cliquer sur `Apply`
+
+
+
+# Configuration Wan Bridgé
+
+:::warning
+
+WAN bridgé ne fonctionne pas avec un port WAN connecté
+
+:::
+
+# Connection en mode routeur
+
+## Correction Bug WAN
+
+Bug référencé: [Solved: Re: RV340 & WISP WAN Connection Problems - Cisco Community](https://community.cisco.com/t5/routing/rv340-amp-wisp-wan-connection-problems/m-p/3827586#M312317)
+
+- aller dans WAN > Multi-WAN > sélectionner le port WAN > (éditer)
+- décocher la case `Enable Network Service Detection`
+
+
+
+# Références
+
+- [Solved: Re: RV340 & WISP WAN Connection Problems - Cisco Community](https://community.cisco.com/t5/routing/rv340-amp-wisp-wan-connection-problems/m-p/3827586#M312317)
+* [Solved: Re: RV340 SSH Access - Cisco Community](https://community.cisco.com/t5/routers-small-business/rv340-ssh-access/m-p/4424462#M41557)
+* [CSCvn25722 - RV340W Wireless instability causing disconnections - Page 2 - Cisco Community](https://community.cisco.com/t5/cisco-bug-discussions/cscvn25722-rv340w-wireless-instability-causing-disconnections/td-p/3798540/page/2)
+* [CISCO RV340W - slow WiFi connectivity (both 2.4G and 5G) - Cisco Community](https://community.cisco.com/t5/routers-small-business/cisco-rv340w-slow-wifi-connectivity-both-2-4g-and-5g/td-p/3769730)
+* [Slows speeds on RV340W - Cisco Community](https://community.cisco.com/t5/routers-small-business/slows-speeds-on-rv340w/td-p/4105220)
+* [[SOLVED] - Cisco RV340 not getting speed more than 100mbps? | Tom's Hardware Forum](https://forums.tomshardware.com/threads/cisco-rv340-not-getting-speed-more-than-100mbps.3722296/)
+* [Problèmes Et Solutions - Cisco RV340W Guide De Démarrage Rapide [Page 10] | ManualsLib](https://www.manualslib.fr/manual/206596/Cisco-Rv340W.html?page=10)

+ 1 - 0
pandoc.css

@@ -0,0 +1 @@
+/Users/lauhub/Documents/04_travail/AV-enseignement/0-Outils/_GUIDE_GENERATION/pandoc.css

+ 1 - 1
ssh/bash-completion-ssh.md

@@ -2,7 +2,7 @@
 
 
 
-
+* [bash - Autocomplete server names for SSH and SCP - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/136351/autocomplete-server-names-for-ssh-and-scp)
 * [How to enable bash completion in macOS](https://www.simplified.guide/macos/bash-completion)
 * [Install Bash Completion for Mac OS-X - MagePsycho Blog](https://blog.magepsycho.com/bash-completion-mac-os-x/)
 * [bash-completion/bash_completion at f565bf9f2c3315a102174eb8b6c93253fc3e9353 · scop/bash-completion](https://github.com/scop/bash-completion/blob/f565bf9f2c3315a102174eb8b6c93253fc3e9353/bash_completion#L2515)