Browse Source

Ajout documents

lauhub 3 months ago
parent
commit
2ed835bf90
64 changed files with 8212 additions and 32 deletions
  1. 17 0
      applications/anaconda.md
  2. 40 0
      applications/certbot-letsencrypt.md
  3. 38 0
      applications/docling.md
  4. 44 0
      applications/glpi.md
  5. BIN
      applications/images/vscodium-explorer-tri-des-fichiers-dossiers.png
  6. 4 0
      applications/vscodium-visualstudio-code.md
  7. 351 0
      documentation/how-to-delete-a-route-on-a-specific-interface.md
  8. 580 0
      documentation/how-to-direct-ip-route-through-specific-interface-in-os-x.md
  9. 194 0
      documentation/macos-staticroutes.md
  10. 49 0
      gnu-linux/debian.md
  11. 348 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow.html
  12. BIN
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/PayPal-Donate.gif
  13. 78 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/TechOverflow.svg
  14. 7 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/algolia.js
  15. 5 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/cdn.min.js
  16. 32 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/darkmode.js
  17. 2 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/docsearch.css
  18. 3 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/docsearch.js
  19. 61 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/donate.css
  20. 39 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/kicad.css
  21. 22 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/kicad.js
  22. 1 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/style.min.9a429de0074bb03b54a5dae5ec7013170c72f4d11103257e4b.css
  23. 5 0
      gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/techoverflow.css
  24. 79 0
      gnu-linux/recherche-de-pannes/disques-durs-supports-de-stockage.md
  25. 32 0
      gnu-linux/rustdesk.md
  26. BIN
      gnu-linux/serveurs/image.png
  27. 6 0
      gnu-linux/serveurs/installation/00-sommaire-installation.md
  28. 121 0
      gnu-linux/serveurs/installation/dns-ovh.md
  29. 104 5
      gnu-linux/serveurs/installation/ecaz-serveur-proxmox.md
  30. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-1.png
  31. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-3.png
  32. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-4.png
  33. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-5.png
  34. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-6.png
  35. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-7.png
  36. BIN
      gnu-linux/serveurs/installation/images/rescue-ovh-9.png
  37. 3 3
      gnu-linux/serveurs/installation/installation-proxmox.md
  38. 67 0
      gnu-linux/serveurs/installation/lvm-extension.md
  39. 326 0
      gnu-linux/serveurs/installation/serveur-deux-disques.md
  40. 16 0
      gnu-linux/serveurs/installation/yunohost-mise-a-jour.md
  41. 36 22
      gnu-linux/serveurs/installation/yunohost.md
  42. 144 0
      gnu-linux/serveurs/nas-rockpi-penta.md
  43. 29 0
      gnu-linux/serveurs/nextcloud.md
  44. 128 0
      gnu-linux/serveurs/nginx.md
  45. 5 0
      gnu-linux/serveurs/proxmox/activation-avx-proxmox.md
  46. 42 0
      gnu-linux/serveurs/proxmox/configuration-ovh.md
  47. 7 0
      gnu-linux/serveurs/proxmox/edition-disques-template.md
  48. 8 0
      gnu-linux/serveurs/proxmox/gestion-reseau-proxmox.md
  49. 120 0
      gnu-linux/serveurs/proxmox/how-to-share-host-folder-with-guest-vm-in-proxmox-using-virtiofs.md
  50. BIN
      gnu-linux/serveurs/proxmox/images/add-virtiofs-vm.webp
  51. BIN
      gnu-linux/serveurs/proxmox/images/pve-directory-mapping-1024x394.webp
  52. BIN
      gnu-linux/serveurs/proxmox/images/select-virtiofs-vm.webp
  53. 29 1
      gnu-linux/serveurs/proxmox/infrastructure-ovh.md
  54. 3 0
      gnu-linux/serveurs/proxmox/partage-dossier-vm.md
  55. 235 0
      gnu-linux/serveurs/samba-serveur-fichier.md
  56. 39 0
      gnu-linux/serveurs/securisation/bastion.md
  57. 24 0
      installation/firefox/extensions-firefox.md
  58. 3659 0
      installation/firefox/extensions-installées.html
  59. 25 0
      installation/venv-python.md
  60. 30 0
      javascript/selecteur-javascript-extraction-depots-github-depuis-organisation.md
  61. 813 0
      materiel/routeur-cisco-rv340w.html
  62. 160 0
      materiel/routeur-cisco-rv340w.md
  63. 1 0
      pandoc.css
  64. 1 1
      ssh/bash-completion-ssh.md

+ 17 - 0
applications/anaconda.md

@@ -0,0 +1,17 @@
+% Anaconda
+
+
+Do you wish to update your shell profile to automatically initialize conda?
+This will activate conda on startup and change the command prompt when activated.
+If you'd prefer that conda's base environment not be activated on startup,
+   run the following command when conda is activated:
+
+```bash
+conda config --set auto_activate_base false
+```
+
+You can undo this by running 
+
+```bash
+conda init --reverse $SHELL
+```

+ 40 - 0
applications/certbot-letsencrypt.md

@@ -0,0 +1,40 @@
+% Certbot Letsencrypt
+
+
+# Ajout d'un certificat
+
+```bash
+export maindomain=nu.aezi.fr
+export newsub=13ft.aezi.fr
+sudo certbot certificates -d $maindomain 2>/dev/null | awk -v newsub=$newsub '$1 == "Domains:"{$1=""; print $0","newsub}' | xargs | tr ' ' ',' | sudo xargs certbot --expand -d
+```
+
+# Renouvellement automatique
+
+## crontab
+
+Recommandation: lancer [`certbot` deux fois par jour](https://community.letsencrypt.org/t/cron-job-to-run-every-90-days-vs-3-months/51618/3)
+
+```
+SHELL=/bin/sh
+PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+0 */12 * * * /usr/bin/certbot renew --nginx -n >> /var/log/certbot.log 2>&1
+```
+
+## Logrotate
+
+Contenu de `/etc/logrotate.d/certbot`:
+
+```
+/var/log/certbot.log {
+  rotate 4
+  monthly
+  compress
+  missingok
+  notifempty
+}
+```
+
+
+

+ 38 - 0
applications/docling.md

@@ -0,0 +1,38 @@
+% Docling
+
+COnversion de documents
+
+
+# Prérequis
+
+## Préparation
+
+[python - mkvirtualenv: command not found - Stack Overflow](https://stackoverflow.com/questions/25774829/mkvirtualenv-command-not-found)
+
+[python - Cannot install pip module because there is 'no space' left on device - Ask Ubuntu](https://askubuntu.com/questions/1326304/cannot-install-pip-module-because-there-is-no-space-left-on-device)
+
+
+### .bashrc
+
+Édition
+
+```
+export WORKON_HOME=~/virtualenvs
+
+export VIRTUALENVWRAPPER_PYTHON=/usr/bin/python3
+
+source /usr/local/bin/virtualenvwrapper.sh
+```
+
+
+```bash
+. .bashrc
+```
+
+```bash
+mkvirtualenv docling_env
+workon docling_env
+export TMPDIR=/home/lauhub/tmp
+pip3 install docling
+```
+

+ 44 - 0
applications/glpi.md

@@ -0,0 +1,44 @@
+% GLPI
+
+# Bugs possibles
+
+## Problème d'affichage et de droits d'accès avec l'utilisateur GLPI
+
+### Description du problème
+
+En étant connecté avec l'utilisateur `glpi`, il peut y avoir différents dysfonctionnements/bugs d'affichage:
+
+- Dans Administration > Entités: seule l'entité racine est visible
+- Après avoir installé le plugin Tag (*Gestion des tags*) une erreur concernant les permissions est affichée et il est impossible d'ajouter des tags
+
+En se connectant avec un autre utilisateur ayant les droits super-admin, les sous-entités sont affichées et le plugin Tag est accessible.
+
+### Comment reproduire le problème
+
+Installer une nouvelle instance de GLPI sans aucune autre configuration
+
+### Résolution du problème
+
+Deux manipulations distinctes:
+
+#### Pour permettre à glpi d'ajouter des tags
+
+1. affecter l'habilitation *super-admin* à un autre utilisateur (pour l'entité racine) (par exemple `user1`)
+2. se connecter avec cet utilisateur
+3. vérifier que l'utilisateur `user1` a bien les droits super-admin
+4. supprimer l'habilitation super-admin de l'utilisateur `glpi`
+5. se connecter avec `glpi` et vérifier la suppression des droits
+6. se connecter avec l'utilisateur `user1` et ré-affecter les droits super-admin à l'utilisateur `glpi`
+
+Vérifier alors que l'utilisateur `glpi` peut ajouter des tags.
+
+
+#### Pour permettre à glpi de voir les sous-entités
+
+1. Aller dans Entités > Entité Racine > Règles
+2. Cliquer sur la règle `Root` (règle normalement créée automatiquement à l'installation de GLPI)
+3. Aller sur *Critère* et cliquer sur `Ajouter un nouveau critère`
+4. Sélectionner comme critère "Type d'authentification"
+5. Sélection `Est`
+6. Choisir "Authentification sur la base de données GLPI"
+7. Cliquer sur `+ Ajouter`

BIN
applications/images/vscodium-explorer-tri-des-fichiers-dossiers.png


+ 4 - 0
applications/vscodium-visualstudio-code.md

@@ -8,3 +8,7 @@
 2. Chercher `Copy Line Down` (resp. `Copy Line Up`) et remplacer le raccourci actuel avec le raccourci `alt`+`cmd`+`Arrow Down` (resp. `alt`+`cmd`+`Arrow Up`)
 2. Chercher `Copy Line Down` (resp. `Copy Line Up`) et remplacer le raccourci actuel avec le raccourci `alt`+`cmd`+`Arrow Down` (resp. `alt`+`cmd`+`Arrow Up`)
 3. Chercher `editor.action.insertCursor` et placer les raccourcis `Shift`+`Alt`+`Arrow Up` et `Shift`+`Alt`+`Arrow Down` pour `insertCursorAbove` et `insertCursorBelow`
 3. Chercher `editor.action.insertCursor` et placer les raccourcis `Shift`+`Alt`+`Arrow Up` et `Shift`+`Alt`+`Arrow Down` pour `insertCursorAbove` et `insertCursorBelow`
 
 
+## Trier les fichiers dans l'explorateur
+
+![Tri des fichiers](images/vscodium-explorer-tri-des-fichiers-dossiers.png)
+

+ 351 - 0
documentation/how-to-delete-a-route-on-a-specific-interface.md

@@ -0,0 +1,351 @@
+#### Stack Exchange Network
+
+Stack Exchange network consists of 183 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
+
+Loading…
+
+    - Tour
+                                
+                                    Start here for a quick overview of the site
+    - Help Center
+                            
+                                Detailed answers to any questions you might have
+    - Meta
+                                        
+                                            Discuss the workings and policies of this site
+    - About Us
+                                    
+                                        Learn more about Stack Overflow the company, and our products
+2. current community your communities Sign up or log in to customize your list. more stack exchange communities company blog
+
+### current community
+
+- Server Fault
+        
+
+
+
+help
+chat
+- Meta Server Fault
+
+### your communities
+
+or  to customize your list.
+
+### more stack exchange communities
+
+Log in
+
+Sign up
+
+<!-- image -->
+
+    1. Home
+    2. Questions
+    3. Unanswered
+    4. Tags
+    5. Chat
+    6. Users
+    7. Companies
+2. Teams
+
+
+
+            Ask questions, find answers and collaborate at work with Stack Overflow for Teams.
+        
+Try Teams for free
+Explore Teams
+3. Teams
+4. Ask questions, find answers and collaborate at work with Stack Overflow for Teams.
+            Explore Teams
+
+Teams
+
+Q&amp;A for work
+
+Connect and share knowledge within a single location that is structured and easy to search.
+
+# How to delete a route on a specific interface? [closed]
+
+86k times
+
+22
+
+This question is . It is not currently accepting answers.
+
+Questions should demonstrate reasonable business information technology management practices. Questions that relate to unsupported hardware or software platforms or unmaintained environments may not be suitable for Server Fault - see the help center.
+
+Closed 10 years ago.
+
+When I start a VPN connection, a new default route is added on the utun0 interface:
+
+```
+Destination        Gateway            Flags        Refs      Use   Netif Expire
+default            utun0              UCS            21        0   utun0
+default            192.168.43.1       UGScI          14        0     en1
+```
+
+I'd like to get rid of the default/utun0 route. When using route with the -ifscope modifier, I get the following error:
+
+```
+$ sudo route delete -ifscope utun0 -net 0.0.0.0
+route: writing to routing socket: not in table
+delete net 0.0.0.0: not in table
+```
+
+What am I doing wrong? What's the correct syntax of the route command in order to delete the default route?
+
+- mac-osx
+- route
+
+asked
+
+<!-- image -->
+
+- 1
+
+
+
+
+Before doing this. Keep in mind that it is a dangerous command if you are accessing your server online ! ;)
+
+– eVoxmusic
+
+
+Commented
+May 16, 2012 at 11:40
+- 1
+
+
+
+
+Telling the VPN clinet not to create the route sounds a lot cleaner to me.  The native pptp client can be configured like this. Are you using a different client?
+
+– Nitz
+
+
+Commented
+Aug 13, 2014 at 8:04
+- In macOS Monterey the following is working: sudo route delete -ifscope  utun0 default.
+
+– Jaime Hablutzel
+
+
+Commented
+Jan 18, 2022 at 3:23
+
+## 5 Answers
+                                    5
+
+9
+
+I know it's late, but I'd like to know what kind of VPN you're using.
+
+I've had this problem with Cisco Anyconnect VPN.
+
+Not seeing the same error as you, but the command would appear to execute, but the routing table would still look the same.
+
+I believe Cisco AnyConnect locks the routing table in some way so that it cannot be modified.
+
+If this isn't Cisco AnyConnect, it may do something similar. I haven't found any documentation on it, but that's the conclusion I've come to from my testing.
+
+I've found this also appears to apply on Windows.
+
+Cheers,
+Aaron
+
+answered
+
+<!-- image -->
+
+- It's Cisco. Our network topology changed, so I cannot verify the answers.
+
+– mgryszko
+
+
+Commented
+Nov 12, 2014 at 7:12
+
+8
+
+```
+$ sudo route delete -net 0.0.0.0 -ifp ppp0
+delete net 0.0.0.0
+```
+
+This is documented in route(8)
+
+answered
+
+<!-- image -->
+
+3
+
+You can try this:
+
+```
+sudo route delete -net default utun0
+```
+
+answered
+
+<!-- image -->
+
+1
+
+Not in front of a Mac right now, off the top of my head try;
+
+```
+sudo route del default dev utun0
+```
+
+answered
+
+<!-- image -->
+
+- Sorry, but it's not working. I tried also with sudo route delete default -ifscope utun0, but still without success
+
+– mgryszko
+
+
+Commented
+May 16, 2012 at 12:06
+
+1
+
+Try route del default wlp2s0. Where wlp2s0 is the interface name. This command deletes the first default gateway on the specific interface you provide to the command.
+
+answered
+
+<!-- image -->
+
+- Yes. Downvotes again for no reason, no explanation, just a downvote !!
+
+– 3bdalla
+
+
+Commented
+Jan 29, 2015 at 21:09
+- Try adding an explanation of exactly what your answer does and why you believe it will solve the problem.
+
+– fukawi2
+
+
+Commented
+Jan 30, 2015 at 5:52
+- You have a good point, although does not promote to be a downvote. I updated my answer.
+
+– 3bdalla
+
+
+Commented
+Jan 30, 2015 at 11:29
+
+Start asking to get answers
+
+Find the answer to your question by asking.
+
+Explore related questions
+
+- mac-osx
+- route
+
+See similar questions with these tags.
+
+- The Overflow Blog
+- How self-supervised language revolutionized natural language processing and...
+- “We’re not replacing you; we’re with you”: Where AI meets infrastructure
+- Featured on Meta
+- Updates to advertising guidelines
+- Evolving comments: An experiment to encourage engagement and follow-up questions
+
+#### Related
+
+4
+
+1
+
+0
+
+1
+
+4
+
+0
+
+0
+
+#### Hot Network Questions
+
+- I would like to know the standards for minimizing PCB clearance as much as possible
+- How to handle teammates pressuring me (even publicly) to redo my work after I already explained my reasoning?
+- How can heat pumps be more efficient than electric/resistive heating?
+- My work is being read but not used — what can I improve?
+- Has our understanding of genetics damaged existentialism?
+- Does OPTIMIZE FOR UNKNOWN do anything for table-valued variables/parameters?
+- Geometry Nodes used to generate wall layouts
+- Chern classes in Čech cohomology
+- How has the rotation of Earth been accounted for in the theory of gravitational time dilation?
+- What is stopping trader taking arbitarge in HKD-USD
+- Slow SQL query with nested subquery
+- Are there two "Saviors," or just one "Savior" manifest in two divine personages, in Titus 1?
+- In light cone, why is it a cone and not a sphere, given that light travels in all directions in space-time? Is it a projection of slice of 4D sphere?
+- How to achieve the Steel Division 2 frontline? (Dividing area smoothly with curves using a few points)
+- Combining vs. Separating Predictors: What’s Better for Prediction
+- Rude referee: ask to change or wait
+- Children and aliens grow up together
+- Geometry bevel profile appears four times, just want once
+- Can a darkmantle willingly detach?
+- Is it a problem if the antagonist appears later in the novel?
+- I worry that my advice to female academics will sound like platitudes
+- How to read a line from a file and output the line to a file
+- What is the fastest playable race?
+- Can we realize any triple linking number of 3-surfaces in 5-manifolds?
+
+<!-- image -->
+
+##### Server Fault
+
+- Tour
+- Help
+- Chat
+- Contact
+- Feedback
+
+##### Company
+
+- Stack Overflow
+- Teams
+- Advertising
+- Talent
+- About
+- Press
+- Legal
+- Privacy Policy
+- Terms of Service
+- Cookie Settings
+- Cookie Policy
+
+##### Stack Exchange Network
+
+- Technology
+- Culture &amp; recreation
+- Life &amp; arts
+- Science
+- Professional
+- Business
+- API
+- Data
+
+- Blog
+- Facebook
+- Twitter
+- LinkedIn
+- Instagram
+
+Site design / logo © 2025 Stack Exchange Inc; 
+user contributions licensed under 
+CC BY-SA
+. 
+rev 2025.4.29.25832

File diff suppressed because it is too large
+ 580 - 0
documentation/how-to-direct-ip-route-through-specific-interface-in-os-x.md


+ 194 - 0
documentation/macos-staticroutes.md

@@ -0,0 +1,194 @@
+% AnalysisMan, Friday, November 6, 2020
+
+### How to add and delete Static Routes on macOS (persistently)
+
+#### Problem
+
+I have several networks at home, including 192.168.1.0/24 and 192.168.2.0/24. A problem occurred when I connected to a VPN site because it gives a route with 192.168.2.0/23. So my traffic on 192.168.2.0/24 routed through the VPN tunnel instead of my internal home network.
+
+Therefore, I need to add a static route on my MacBook Pro.
+
+#### Solution
+
+Here is how to add or delete a static route on macOS.
+
+As you see below, I received the 192.168.2.0/23 route from the VPN, and it routes through the tunnel interface, utun3. First, disconnect the VPN and add a static route as described below.
+
+### To view the routing table:
+
+You can use the following command "
+
+" and use '
+
+' to filter with a specific network on the Terminal.
+
+#### ▶ Method 1. Add a static route temporarily
+
+### To add a static route:
+
+### To verify the route you added:
+
+Now, 192.168.2.0/24 routes through my Ethernet interface, en10.
+
+### To delete a static route:
+
+#### ▶ Method 2. Add a static route persistently
+
+The above route will be gone if you reboot your Mac. You need to add a static route permanently if you want to keep this route persistently.
+
+### To verify the route your interface:
+
+### To list devices (network adapters):
+
+Or
+
+### To list devices with the interface number:
+
+I prefer this command because it also shows the ethernet number (e.g. en10).
+
+### To add a static route permanently:
+
+### To verify the route you added:
+
+### To delete this permanent route:
+
+Use
+
+without the address, netmask, and gateway.
+
+### To see all commands:
+
+Or
+
+<!-- image -->
+
+#### 10 comments:
+
+<!-- image -->
+
+Thanks!
+
+<!-- image -->
+
+<!-- image -->
+
+Hi AnalysisMan
+
+Would you be able to help me with where/which file stores the route information that is displayed when we execute netstat -ln
+
+Regards
+Vinay Chandran
+
+<!-- image -->
+
+<!-- image -->
+
+In Macbook that is
+
+<!-- image -->
+
+<!-- image -->
+
+I refer to this page every so often, I appreciate you keeping this up. Very helpful!
+
+<!-- image -->
+
+<!-- image -->
+
+Thanks for this post. It was very useful. Just my additional 2 cents - 
+
+We can also get the configured permanent static routes using: networksetup -getadditionalroutes "USB 10/100/1000 LAN" .
+
+Also, if we want to add multiple routes permanently then we can add additional tuples     on the same command. Eg., sudo networksetup -setadditionalroutes "Wi-Fi" 192.168.230.0 255.255.255.0 192.168.20.82 192.168.68.0 255.255.255.0 192.168.20.82
+
+<!-- image -->
+
+<!-- image -->
+
+Life saver hack! Thanks a lot!
+
+<!-- image -->
+
+<!-- image -->
+
+<!-- image -->
+
+<!-- image -->
+
+I'm doing something wrong. I work from home and connect to my company's VPN. I need an SMB connection to our file server, which has the IP 192.168.2.108. VPN My network at home has the IP 192.168.68.1. Tunnel Interface is utun3. 
+
+When I run the command
+sudo networksetup -setadditionalroutes "VPN Work" 192.168.2.108 255.255.255.0 192.168.68.1
+my browser traffic goes through the VPN instead of my home network.
+What am I doing wrong?
+
+<!-- image -->
+
+<!-- image -->
+
+<!-- image -->
+
+<!-- image -->
+
+I run a bittorent server for openSource Linux distros. Over time I have manually blocked literally thousands of leachers and downloaders who I do not want to have access my system, as well as blocking 10s of 1,000s of botnets by firewalls. I have migrated my firewall settings to static routes blocked and the performance is much better. 
+
+I'm just having trouble consistently adding ip6 addresses to be blocked. 
+
+Beforehand, I enter the thousands of addresses I have collected to be blocked into JSON array lookup tables, to be accessed by a python script that reads them and inserts them into an iterating command line by nested for-loops.
+
+I always debug by entering the command first on a command line before automating the process.
+
+Example:
+
+I have been trying to set a permanent static route on my Mac using:
+networksetup -setadditionalroutes "Ethernet" 2408:8266:: ffff:ffff:fffc:0000:0000:0000:0000:0000 ::1
+   which returns:
+Route destination 2408:8266:: is not a valid IP address. ** Error: The parameters were not valid. ≈≈≈ That is not true as it is the top address of the CHINA UNICOM China169 Backbone server, from which I get scores of leachers and people who try to get past my firewall.
+
+   as well as trying:
+ifconfig en0 inet6 2408:8266:: prefixlen 32 alias
+  which blocks everything in 2408:8266::/32 except 2408:8266:: itself.
+
+My question is a) can networksetup -setadditionalroutes accept ip6 addresses and how?
+b) if not, can ifconfig block the root address of 2408:8266::/32?
+
+I would prefer a network setup solution because they much easier to clear than ifconfig ones.  Removing ifconfig entries can take hours, one and a time whereas networksetup just clears the service by name (Ethernet, WiFi, VPN) in moments
+
+On a parallel theme, is there away to wipe all the static route entries from my Mac, especially those put in by ifconfig in one fell swoop so I can re-enter them cleanly?
+
+Help is much appreciated.
+
+<!-- image -->
+
+Post a Comment
+
+## About Network + Security
+
+<!-- image -->
+
+## Search This Blog
+
+## Featured Post
+
+### Palo Alto firewall - Troubleshooting High DP CPU
+
+## Popular Posts
+
+- How to add and delete Static Routes on macOS (persistently)
+- Free Visio Stencils Download for Network Diagram
+- Extreme Switch - Reset to factory default when the password is unknown
+- Palo Alto firewall - Reset to Factory Default (3 cases)
+- Palo Alto firewall - How to clean up disk space
+- Palo Alto firewall - How to configure the Management IP via CLI
+- Extreme Switch - Reset to factory default
+
+## Tags
+
+## Links
+
+- LinkedIn Posts
+- AnalysisMan's Second Brain
+
+## Blog Archive
+
+- Home

+ 49 - 0
gnu-linux/debian.md

@@ -31,3 +31,52 @@ wget https://github.com/rustdesk/rustdesk/releases/download/1.3.7/rustdesk-1.3.7
 ```bash
 ```bash
 sudo dpkg -i rustdesk-1.3.7-x86_64-ubuntu.deb
 sudo dpkg -i rustdesk-1.3.7-x86_64-ubuntu.deb
 ```
 ```
+
+
+# Mises à jour
+
+## Automatisation des mises à jour
+
+Référence: [UnattendedUpgrades - Debian Wiki](https://wiki.debian.org/UnattendedUpgrades)
+
+### Installation
+
+```bash
+sudo apt update && sudo apt-get install unattended-upgrades apt-listchanges
+
+echo 'Unattended-Upgrade::Mail "root";' | sudo tee /etc/apt/apt.conf.d/52unattended-upgrades-local
+
+
+cat | sudo tee /etc/apt/apt.conf.d/20auto-upgrades <<EOF
+APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Unattended-Upgrade "1";
+EOF
+```
+
+### Vérification
+
+```bash
+sudo unattended-upgrade -d
+```
+
+
+# Problème trusted.gpg
+
+## Symptôme
+
+
+Sur un `apt update`:
+
+
+```
+W: http://security.debian.org/debian-security/dists/bookworm-security/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.
+```
+
+## Solution
+
+```bash
+apt-key --keyring /etc/apt/trusted.gpg list 2>/dev/null | grep -A 1 "pub " |grep -v "pub " | grep -v '\-\-' | awk -v OFS="" '{$1=$1}1' | xargs -i sudo bash -c 'apt-key --keyring /etc/apt/trusted.gpg export {} | gpg --dearmor -o /etc/apt/trusted.gpg.d/{}.gpg ;'
+```
+
+
+

File diff suppressed because it is too large
+ 348 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow.html


BIN
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/PayPal-Donate.gif


File diff suppressed because it is too large
+ 78 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/TechOverflow.svg


+ 7 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/algolia.js

@@ -0,0 +1,7 @@
+docsearch({
+    appId: "OM3Y6EI3ZO",
+    apiKey: "9d24756205acf92477519ef13cb375c4",
+    indexName: "techoverflow",
+    container: "#search",
+    debug: false  
+});

File diff suppressed because it is too large
+ 5 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/cdn.min.js


+ 32 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/darkmode.js

@@ -0,0 +1,32 @@
+(() => {
+  // <stdin>
+  var themeToggleDarkIcon = document.getElementById("theme-toggle-dark-icon");
+  var themeToggleLightIcon = document.getElementById("theme-toggle-light-icon");
+  if (localStorage.getItem("color-theme") === "dark" || !("color-theme" in localStorage) && window.matchMedia("(prefers-color-scheme: dark)").matches) {
+    themeToggleLightIcon.classList.remove("hidden");
+  } else {
+    themeToggleDarkIcon.classList.remove("hidden");
+  }
+  var themeToggleBtn = document.getElementById("theme-toggle");
+  themeToggleBtn.addEventListener("click", function() {
+    themeToggleDarkIcon.classList.toggle("hidden");
+    themeToggleLightIcon.classList.toggle("hidden");
+    if (localStorage.getItem("color-theme")) {
+      if (localStorage.getItem("color-theme") === "light") {
+        document.documentElement.classList.add("dark");
+        localStorage.setItem("color-theme", "dark");
+      } else {
+        document.documentElement.classList.remove("dark");
+        localStorage.setItem("color-theme", "light");
+      }
+    } else {
+      if (document.documentElement.classList.contains("dark")) {
+        document.documentElement.classList.remove("dark");
+        localStorage.setItem("color-theme", "light");
+      } else {
+        document.documentElement.classList.add("dark");
+        localStorage.setItem("color-theme", "dark");
+      }
+    }
+  });
+})();

File diff suppressed because it is too large
+ 2 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/docsearch.css


File diff suppressed because it is too large
+ 3 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/docsearch.js


+ 61 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/donate.css

@@ -0,0 +1,61 @@
+@font-face {
+    font-family: 'Cookie';
+    font-style: normal;
+    font-weight: 400;
+    font-display: swap;
+    src: url('/fonts/Cookie.ttf') format('truetype');
+}
+
+/* Buy me a coffee button */
+.bmc-btn {
+    min-width: 210px;
+    color: #000000;
+    background-color: #FFDD00 !important;
+    height: 60px;
+    border-radius: 12px;
+    font-size: 28px;
+    font-weight: Normal;
+    border: none;
+    padding: 0px 24px;
+    line-height: 27px;
+    text-decoration: none !important;
+    display: inline-flex !important;
+    align-items: center;
+    font-family: 'Cookie', cursive !important;
+    box-sizing: border-box !important;
+}
+
+.bmc-btn svg {
+    height: 32px !important;
+    margin-bottom: 0px !important;
+    box-shadow: none !important;
+    border: none !important;
+    vertical-align: middle !important;
+    transform: scale(0.9);
+    flex-shrink: 0;
+}
+
+.bmc-btn-text {
+    margin-left: 8px;
+    display: inline-block;
+    line-height: 0;
+    width: 100%;
+    flex-shrink: 0;
+}
+
+.logo-outline {
+    fill: #000;
+}
+
+.logo-coffee {
+    fill: white;
+}
+
+hr.after-content {
+    margin-top: 1em;
+    margin-bottom: 1em;
+}
+
+.donate-text {
+    margin-bottom:
+}

+ 39 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/kicad.css

@@ -0,0 +1,39 @@
+
+.kicad-schematic {
+    border: 1px solid #3034ec;
+    border-radius: 1em;
+    width: 100%;
+    max-width: 600px;
+}
+
+    .kicad-schematic .toolbar {
+        margin-top: -0.15em; /* Fix rounded corners not lining up */
+        text-align: center;
+        margin-bottom: 1em;
+        width: 100%;
+    }
+
+    .kicad-schematic .toolbar button {
+            background-color: #3034ec;
+            color: white;
+            cursor: pointer;
+            width: 100%;
+            border: 1px solid #3034ec;
+            border-radius: 1em 1em 0em 0em;
+            padding: 0.2em 0.4em;
+        }
+
+    .kicad-schematic .toolbar button:hover {
+            background-color: darkblue;
+        }
+
+    .kicad-schematic .image-container {
+        text-align: center;
+        width: 100%;
+    }
+
+    .kicad-schematic .image-container img {
+            display: block;
+            margin-left: auto;
+            margin-right: auto;
+        }

+ 22 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/kicad.js

@@ -0,0 +1,22 @@
+document.addEventListener('DOMContentLoaded', function() {
+    document.querySelectorAll('.kicad-copy-button').forEach(function(button) {
+        // Copy to clipboard button for kicad schematic
+        button.addEventListener('click', function() {
+            var dataId = this.getAttribute('data-id');
+            /* Get the <script> tag with id=dataId */
+            var script = document.getElementById(dataId);
+            var text = script.innerText;
+            /* Copy to clipboard */
+            navigator.clipboard.writeText(text).then(function() {
+                /* Change button text */
+                const originalInnerHTML = button.innerHTML;
+                button.innerHTML = '✔️ Copied to clipboard';
+                setTimeout(() => {
+                    button.innerHTML = originalInnerHTML;
+                }, 2000);
+            }, function() {
+                console.error('Failed to copy to clipboard');
+            });
+        });
+    });
+});

File diff suppressed because it is too large
+ 1 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/style.min.9a429de0074bb03b54a5dae5ec7013170c72f4d11103257e4b.css


+ 5 - 0
gnu-linux/recherche-de-pannes/How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow_fichiers/techoverflow.css

@@ -0,0 +1,5 @@
+/* Do not display tickmacks before short `code` */
+.prose :where(code):not(:where([class~=not-prose] *))::before,
+.prose :where(code):not(:where([class~="not-prose"] *))::after {
+    content: none !important;
+}

+ 79 - 0
gnu-linux/recherche-de-pannes/disques-durs-supports-de-stockage.md

@@ -0,0 +1,79 @@
+% Disques durs supports de stockage
+
+# Interpréter la sortie de smartctl
+
+## Instructions données par ChatGPT
+
+L’attribut Raw_Read_Error_Rate est souvent source de confusion, car il est interprété différemment selon le constructeur du disque. Voyons ça en détail :
+
+⸻
+
+1. Structure de la ligne
+
+ID# ATTRIBUTE_NAME          FLAG     VALUE WORST THRESH TYPE      UPDATED  WHEN_FAILED RAW_VALUE
+  1 Raw_Read_Error_Rate     0x000f   082   064   044    Pre-fail  Always       -       169987968
+
+	•	ID# 1 → C’est l’attribut S.M.A.R.T. standardisé pour les erreurs de lecture.
+	•	VALUE (82) → Valeur “normalisée” entre 1 et 100/200, fournie par le fabricant. Plus haut = meilleur.
+	•	WORST (64) → La plus mauvaise valeur atteinte dans l’historique.
+	•	THRESH (44) → Seuil en dessous duquel le disque est considéré en panne imminente.
+	•	TYPE Pre-fail → Signifie que si l’attribut franchit le seuil, le disque est considéré comme risqué pour la fiabilité.
+	•	RAW_VALUE (169987968) → Compteur brut. Son interprétation dépend du constructeur (Seagate, WD, Toshiba, etc.).
+
+⸻
+
+2. Interprétation
+	•	Ici, la valeur actuelle est 82, le pire atteint est 64, et le seuil critique est 44.
+👉 Comme 82 > 44, le disque n’a pas franchi la limite de sécurité fixée par le fabricant.
+	•	Le RAW_VALUE (169987968) n’est pas un nombre “d’erreurs brutes” simples :
+	•	Chez Seagate, ce nombre est souvent un compteur interne de tentatives et de corrections, pas directement une erreur fatale. Même un disque neuf peut avoir des valeurs RAW très élevées.
+	•	Chez Western Digital, cet attribut est parfois inutilisé ou toujours fixé à zéro.
+
+En résumé, il ne faut pas interpréter le RAW_VALUE comme “170 millions d’erreurs”, mais comme une donnée interne dont l’échelle est spécifique au firmware.
+
+⸻
+
+3. Comment savoir si c’est inquiétant ?
+	•	Ce qui compte réellement, c’est que la VALUE (82) reste au-dessus du THRESH (44).
+	•	Si vous voyez la valeur baisser régulièrement au fil des semaines/mois, le disque peut être en dégradation.
+	•	À court terme, avec 82 vs 44, le disque est encore jugé sain.
+
+⸻
+
+4. Vérifications complémentaires utiles
+	•	Regarder aussi les attributs :
+	•	5 Reallocated_Sector_Ct (secteurs réalloués)
+	•	197 Current_Pending_Sector (secteurs instables en attente)
+	•	198 Offline_Uncorrectable (secteurs non corrigibles)
+
+👉 Ce sont eux qui sont les indicateurs les plus fiables d’un disque en train de faillir.
+
+⸻
+
+✅ Interprétation pour votre cas :
+Votre disque est considéré sain du point de vue du constructeur : Raw_Read_Error_Rate est dans une plage normale, et la valeur est au-dessus du seuil critique. Le chiffre brut impressionnant est normal, surtout sur des disques Seagate.
+
+⸻
+
+Voulez-vous que je vous donne un petit script (en Bash ou Python) qui surveille automatiquement les attributs critiques S.M.A.R.T. (5, 197, 198) et vous alerte si ça se dégrade ?
+
+
+
+## Interprétation des erreurs SMARTCTL
+
+Voir cette page: [fichier local](How to interpret smartctl messages like ‘Error_ UNC at LBA’_ _ TechOverflow.html)
+
+Source: [https://techoverflow.net/2016/07/25/how-to-interpret-smartctl-messages-like-error-unc-at-lba/](https://techoverflow.net/2016/07/25/how-to-interpret-smartctl-messages-like-error-unc-at-lba/)
+
+
+# RAID5
+
+## enlever un disque défectueux en diminuant l'espace du filesystem
+
+[How to remove 1 disk from a raid-5 mdadm array? - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/391168/how-to-remove-1-disk-from-a-raid-5-mdadm-array)
+
+# Récupérer les données avec ddrescue
+
+À suivre partiellement (jusqu'avant le montage de l'image) : [Using ddrescue Command to Recover Data from Failing Disks](https://linuxhandbook.com/ddrescue-data-recovery/)
+
+Montage de l'image: [https://askubuntu.com/a/195310/138954](https://askubuntu.com/a/195310/138954)

+ 32 - 0
gnu-linux/rustdesk.md

@@ -0,0 +1,32 @@
+% Rustdesk
+
+# Connexion sans moniteur
+
+
+
+La base, mettre en place ceci: [Create or add extra fake virtual monitors in Linux to be used with Deskreen, AnyDesk, TeamViewer etc. · GitHub](https://gist.github.com/chitholian/9cac41d22b76364360429cc2a5ffa681)
+
+Ajouter ceci (voir [display - How to duplicate desktop in Linux with xrandr? - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/371793/how-to-duplicate-desktop-in-linux-with-xrandr)) à la fin de `fakemonitor` :
+
+
+```
+xrandr --output VIRTUAL$D --same-as HDMI2
+```
+
+Voir [display - How to duplicate desktop in Linux with xrandr? - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/371793/how-to-duplicate-desktop-in-linux-with-xrandr)
+
+:::warning
+
+Comment détecter le nom du moniteur affiché ?
+
+:::
+
+
+
+
+
+## Exécution automatique
+
+Au moment du démarrage de la session X
+
+[gdm - How to execute command before user login on linux - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/450835/how-to-execute-command-before-user-login-on-linux)

BIN
gnu-linux/serveurs/image.png


+ 6 - 0
gnu-linux/serveurs/installation/00-sommaire-installation.md

@@ -12,3 +12,9 @@
 Puis:
 Puis:
 
 
 [Infrastructure du réseau sur serveur Kimsufi OVH](../proxmox/infrastructure-ovh.html)
 [Infrastructure du réseau sur serveur Kimsufi OVH](../proxmox/infrastructure-ovh.html)
+
+
+Élément supplémentaire:
+
+[Proxmox 8 — Linux Server Wiki](https://wiki.csnu.org/index.php?title=Proxmox_8#Ajout_d'un_r%C3%A9seau_interne_vmbr1)
+

+ 121 - 0
gnu-linux/serveurs/installation/dns-ovh.md

@@ -0,0 +1,121 @@
+% Gestion du DNS OVH
+
+# Gestion du DNS OVH
+
+Pour que yunohost fonctionne sans *warning*.
+
+## Pour le sous-domaine principal
+
+### Création d'un premier champ `A`
+
+Créer un champ `A` qui pointe vers l'IP du serveur:
+
+```
+Type: A
+Name: nu
+Value: 188.165.235.71
+```
+
+
+### Création d'un second champ `A`
+
+Créer un champ `A` qui pointe vers l'IP du serveur:
+
+```
+Type: A
+Name: *.nu
+Value: 188.165.235.71
+```
+
+### Création d'un champ `CAA`
+
+```
+Type: CAA
+Name: nu
+Indicateur: 0
+Étiquette: issue
+Cible: letsencrypt.org
+```
+
+Ce qui donne :
+
+- Value: `0 issue "letsencrypt.org"`
+
+### Création d'un champ `MX`
+
+```
+Type: MX
+Name: nu
+Priorité: 10
+Cible: nu.aezi.fr.
+Value: 10 nu.aezi.fr.
+```
+
+### Création d'un champ `TXT`
+
+```
+Type: TXT
+Name: nu
+Value: "v=spf1 a mx -all"
+```
+
+### Autres champs
+
+Voir les *warnings* de
+
+```
+sudo yunohost diagnosis run ; sudo yunohost diagnosis show --issues --human-readable
+```
+
+
+
+
+## Pour chaque sous-domaine
+
+Exemple ici: `notes`
+
+### Création d'un premier champ `A`
+
+Créer un champ `A` qui pointe vers l'IP du serveur:
+
+```
+Type: A
+Name: notes
+Value: 188.165.235.71
+```
+
+
+### Création d'un second champ `A`
+
+Créer un champ `A` qui pointe vers l'IP du serveur:
+
+```
+Type: A
+Name: *.notes
+Value: 188.165.235.71
+```
+
+### Création d'un champ `MX`
+
+```
+Type: MX
+Name: notes
+Priorité: 10
+Value: 10 notes.aezi.fr.
+```
+
+### Création d'un champ `TXT`
+
+```
+Type: TXT
+Name: notes
+Value: "v=spf1 a mx -all"
+```
+
+### Création d'un champ `CAA`
+
+```
+Type: CAA
+Name: notes
+Value: 0 issue "letsencrypt.org"
+```

+ 104 - 5
gnu-linux/serveurs/installation/ecaz-serveur-proxmox.md

@@ -33,29 +33,120 @@ Intel Xeon E3-1245v2
 3x 2TB HDD Soft RAID Enterprise Class
 3x 2TB HDD Soft RAID Enterprise Class
 300Mbps unmetered public bandwidth
 300Mbps unmetered public bandwidth
 
 
+# Préparation du serveur
+
+## Passage en mode rescue
+
+Dans l'interface dédiée au serveur à installer, cliquer sur le bouton situé à droite de la section `Boot`
+
+![Interface principale](images/rescue-ovh-1.png)
+
+Puis cliquer sur `Modifier`
+
+![](images/rescue-ovh-3.png)
+
+Sur l'écran suivant, cliquer sur `Booter en mode rescue`
+
+![](images/rescue-ovh-4.png)
+
+
+Des champs supplémentaires apparaissent.
+
+Choisir:
+
+- Rescue Disponible: la dernière version de Debian disponible (ici `rescue12-customer - Debian-12-based`)
+- Authentification par clef SSH: sélectionner une des clefs que vous avez enregistrez précédemment
+
+![](images/rescue-ovh-6.png)
+
+Ensuite cliquer sur `Suivant`
+
+La zone de résumé apparaît:
+
+![](images/rescue-ovh-7.png)
+
+Cliquer sur `Valider`
+
+Le message `Le netboot a correctement été mis à jour. Vous devez redémarrer le serveur.` apparaît.
+
+## Redémarrer le serveur
+
+Dans la zone `État des services`, cliquer sur le bouton `...` puis `Redémarrer`
+
+![](images/rescue-ovh-9.png)
+
+
+Attendre quelques minutes puis se connecter via SSH au serveur, en tant que `root`.
+
+```
+ssh root@ip-serveur
+```
+
+Accepter l'authenticité de l'hôte (répondre `yes` en toutes lettres):
+
+```
+The authenticity of host 'ip-serveur (ip-serveur)' can't be established.
+ED25519 key fingerprint is SHA256:lmIOJfyoWR49yIDinH+F33Vyl28BPIqMSxue4Zm9HLx8.
+This key is not known by any other names.
+Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
+```
+
+Une invite de commande s'ouvre:
+
+```bash
+root@rescue12-customer-eu (nom-du-serveur) ~ #
+```
+
+:::information
+
+On peut maintenant passer à la suite de la configuration
+
+:::
+
 # Configuration
 # Configuration
 
 
 ## Disques durs
 ## Disques durs
 
 
+Cette configuration est basée sur trois disques durs de 2To chacun.
+
+
 ### Schéma de partitionnement
 ### Schéma de partitionnement
 
 
+Ce paragraphe décrit le schéma de partionnement qui sera appliqué au paragraphe suivant.
+
 #### Boot
 #### Boot
 
 
 512Mo en RAID1
 512Mo en RAID1
 
 
+:::information
+
+On met une partition identique sur les 3 disques pour permettre le boot.
+
+:::
+
 #### Swap
 #### Swap
 
 
 - 3 x 11.5Go de RAM
 - 3 x 11.5Go de RAM
 
 
+:::information
+
+Notre serveur possède 32Go de RAM. On affecte une taille équivalente de swap, ce qui représente environ 11,5Go par disque.
+
+:::
+
+
 #### Données en RAID
 #### Données en RAID
 
 
-Le reste de chaque disque dur
+Le reste de chaque disque dur sera dédié au données.
 
 
 ### Partitionnement
 ### Partitionnement
 
 
+On utilise `fdisk` pour lister l'ensemble des tables de partitions. De base.
+
+La commande `for identifier in {a..c} ; do fdisk -l /dev/sd${identifier} ; done`, devrait répondre quelque chose de similaire à ceci (à la taille des disques près):
 
 
 ```bash
 ```bash
-# for identifier in {a..c} ; do fdisk -l /dev/sd${identifier} ; done
+root@rescue12 ~ # for identifier in {a..c} ; do fdisk -l /dev/sd${identifier} ; done
 Disk /dev/sda: 1.8 TiB, 2000398934016 bytes, 3907029168 sectors
 Disk /dev/sda: 1.8 TiB, 2000398934016 bytes, 3907029168 sectors
 Disk model: HGST HUS724020AL
 Disk model: HGST HUS724020AL
 Units: sectors of 1 * 512 = 512 bytes
 Units: sectors of 1 * 512 = 512 bytes
@@ -178,9 +269,16 @@ Partition number (1-3, default 3):
 Partition type (type L to list all types): 29
 Partition type (type L to list all types): 29
 
 
 Changed type of partition 'Linux filesystem' to 'Linux RAID'.
 Changed type of partition 'Linux filesystem' to 'Linux RAID'.
+```
 
 
+On termine par la commande `w` pour sauvegarder les changements de la nouvelle table des partitions:
 
 
 ```
 ```
+Command (m for help): w
+The partition table has been altered.
+Calling ioctl() to re-read partition table.
+Syncing disks.
+```
 
 
 ##### Duplication sur les autres disques
 ##### Duplication sur les autres disques
 
 
@@ -391,17 +489,18 @@ mkfs.ext4 /dev/vg_raid/lv_data
 
 
 # Debootstrap
 # Debootstrap
 
 
-Aller sur la page [Debian -- Details of package debootstrap in bookworm](https://packages.debian.org/bookworm/debootstrap)[Debian -- Details of package debootstrap in bookworm](https://packages.debian.org/bookworm/debootstrap)
+Aller sur la page [Debian -- Details of package debootstrap in bookworm](https://packages.debian.org/bookworm/debootstrap)
+
 
 
 Récupérer l'adresse dans la section Télécharger et en cliquant sur `all`
 Récupérer l'adresse dans la section Télécharger et en cliquant sur `all`
 
 
-COpier un des liens et l'utiliser pour télécharger sur le serveur:
+Copier un des liens et l'utiliser pour télécharger sur le serveur:
 
 
 ```bash
 ```bash
 wget http://ftp.fr.debian.org/debian/pool/main/d/debootstrap/debootstrap_1.0.128+nmu2+deb12u2_all.deb
 wget http://ftp.fr.debian.org/debian/pool/main/d/debootstrap/debootstrap_1.0.128+nmu2+deb12u2_all.deb
 ```
 ```
 
 
-On l'exécute:
+On l'installe:
 
 
 ```bash
 ```bash
 dpkg -i debootstrap*.deb && rm -f debootstrap*.deb
 dpkg -i debootstrap*.deb && rm -f debootstrap*.deb

BIN
gnu-linux/serveurs/installation/images/rescue-ovh-1.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-3.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-4.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-5.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-6.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-7.png


BIN
gnu-linux/serveurs/installation/images/rescue-ovh-9.png


+ 3 - 3
gnu-linux/serveurs/installation/installation-proxmox.md

@@ -253,7 +253,7 @@ sudo systemctl restart ssh
 La commande la plus simple pour créer un tunnel redirigeant le port local 8006 vers le port distant du serveur *proxmox* n°8006 est:
 La commande la plus simple pour créer un tunnel redirigeant le port local 8006 vers le port distant du serveur *proxmox* n°8006 est:
 
 
 ```bash
 ```bash
-ssh -L 8006:localhost:8006 ecaz
+ssh -L 8206:localhost:8006 ecaz
 ```
 ```
 
 
 Cependant, ceci ouvre une session Shell.
 Cependant, ceci ouvre une session Shell.
@@ -261,7 +261,7 @@ Cependant, ceci ouvre une session Shell.
 Pour ouvrir le tunnel sans ouvrir une session dans le terminal on va plutôt utiliser:
 Pour ouvrir le tunnel sans ouvrir une session dans le terminal on va plutôt utiliser:
 
 
 ```bash
 ```bash
-ssh -f -N -T -L 8006:localhost:8006 ecaz
+ssh -f -N -T -L 8206:localhost:8006 ecaz
 ```
 ```
 
 
 
 
@@ -269,7 +269,7 @@ ssh -f -N -T -L 8006:localhost:8006 ecaz
 
 
 ## Connexion à l'interface
 ## Connexion à l'interface
 
 
-Après avoir ouver le tunnel, se connecter avec son navigateur à l'adresse suivante: [https://localhost:8006](https://localhost:8006)
+Après avoir ouver le tunnel, se connecter avec son navigateur à l'adresse suivante: [https://localhost:8206](https://localhost:8206)
 
 
 Accepter les risques de sécurité (tout passe par le tunnel SSH, donc les communications sont chiffrées entre votre poste de travail et le serveur)
 Accepter les risques de sécurité (tout passe par le tunnel SSH, donc les communications sont chiffrées entre votre poste de travail et le serveur)
 
 

+ 67 - 0
gnu-linux/serveurs/installation/lvm-extension.md

@@ -8,8 +8,75 @@ Ajout de disque virtuel dans une machine
 ```
 ```
 # pvcreate /dev/sdb
 # pvcreate /dev/sdb
   Physical volume "/dev/sdb" successfully created.
   Physical volume "/dev/sdb" successfully created.
+  
 # vgextend debian-template-vg /dev/sdb
 # vgextend debian-template-vg /dev/sdb
   Volume group "debian-template-vg" successfully extended
   Volume group "debian-template-vg" successfully extended
+
+# lvextend -L +10G /dev/debian-template-vg/root
+  Size of logical volume debian-template-vg/root changed from <6.81 GiB (1743 extents) to <16.81 GiB (4303 extents).
+  Logical volume debian-template-vg/root successfully resized.
+
+# resize2fs /dev/debian-template-vg/root
+resize2fs 1.47.0 (5-Feb-2023)
+Filesystem at /dev/debian-template-vg/root is mounted on /; on-line resizing required
+old_desc_blocks = 1, new_desc_blocks = 3
+The filesystem on /dev/debian-template-vg/root is now 4406272 (4k) blocks long.
+```
+
+# Sur nu
+
+## Augmentation de la taille de home
+
+```bash
+$ sudo pvdisplay
+...
+  --- Physical volume ---
+  PV Name               /dev/sdb
+  VG Name               debian-template-vg
+  PV Size               2.00 TiB / not usable 4.00 MiB
+  Allocatable           yes 
+  PE Size               4.00 MiB
+  Total PE              524287
+  Free PE               519167
+  Allocated PE          5120
+  PV UUID               tweAEt-2Bs5-s2aL-mhsI-b2Mc-aDBW-HdMkBf
+   
+ladmyn@nu:~$ sudo lvdisplay
+...   
+  --- Logical volume ---
+  LV Path                /dev/debian-template-vg/home
+  LV Name                home
+  VG Name                debian-template-vg
+  LV UUID                hsjGv1-aTf8-Fffq-x372-qXCu-m7yY-aiz8vz
+  LV Write Access        read/write
+  LV Creation host, time debian-template, 2025-01-29 12:49:26 +0100
+  LV Status              available
+  # open                 1
+  LV Size                <11.76 GiB
+  Current LE             3010
+  Segments               1
+  Allocation             inherit
+  Read ahead sectors     auto
+  - currently set to     256
+  Block device           254:2
 ```
 ```
 
 
+### Ajout d'espace à partir du VG dans le LV
 
 
+À partir des informations ci-dessus, on ajoute 500Go d'espace issus du VG `debian-template-vg` vers le LV `home` dont le chemin est `/dev/debian-template-vg/home`
+
+```
+ladmyn@nu:~$ sudo lvextend -L +500G /dev/debian-template-vg/home
+  Size of logical volume debian-template-vg/home changed from <11.76 GiB (3010 extents) to <511.76 GiB (131010 extents).
+  Logical volume debian-template-vg/home successfully resized.
+```
+
+Mise à jour de la taille de la partition:
+
+```bash
+ladmyn@nu:~$ sudo resize2fs /dev/debian-template-vg/home
+resize2fs 1.47.0 (5-Feb-2023)
+Filesystem at /dev/debian-template-vg/home is mounted on /home; on-line resizing required
+old_desc_blocks = 2, new_desc_blocks = 64
+The filesystem on /dev/debian-template-vg/home is now 134154240 (4k) blocks long.
+```

+ 326 - 0
gnu-linux/serveurs/installation/serveur-deux-disques.md

@@ -0,0 +1,326 @@
+% Configuration de deux disques avec LVM
+
+:::information
+
+Sur ce schéma de partitionnement, on ne privilégie pas la fiabilité ou la redondance mais l'espace disque.
+
+Ici, ce serveur (de secours) est configuré pour être en *backup* d'un autre serveur (principal): si le serveur principal plante, le serveur de secours prend le relais.
+
+La sauvegarde des données n'est donc pas ici assurée: elle doit l'être par un autre moyen, en mettant une politique de sauvegarde réfléchie.
+
+:::
+
+# Schéma de partitionnement
+
+:::warning
+
+Tuto à refaire: on va partir en RAID0 car plus simple pour un déchiffrement en une fois du système.
+
+:::
+
+
+## Partition de boot
+
+On crée une partition de boot uniquement sur le premier disque: 512 Mo
+
+## *Swap*
+
+On crée deux partitions (une sur chaque disque) de 11,6 Go.
+
+## Données
+
+Le reste des disques sera affecté aux données.
+
+# Partitionnement
+
+## Vérification de la présence d'UEFI
+
+:::warning
+
+Bien vérifier si vous avez un système UEFI:
+
+```bash
+ls /sys/firmware/efi
+```
+
+
+**Si ce fichier n'existe pas, il faut utiliser une table MBR**
+
+Source: [Check if Computer Uses UEFI or Legacy BIOS [Linux & Windows]](https://itsfoss.com/check-uefi-or-bios/)
+
+:::
+
+Dans le cas contraire: il faut utiliser une table de partition MBR.
+
+## Partitionnement du premier disque
+
+```bash
+fdisk /dev/sda
+```
+
+### Création de la partition de boot
+
+Utilisation de la commande `n`
+
+```
+Command (m for help): n
+```
+
+Ensuite, on crée la partition numéro `1`
+
+```
+Partition number (1-128, default 1): 1
+```
+
+On laisse la valeur par défaut pour le premier secteur en appuyant sur `Entrée`
+
+```
+First sector (2048-3907029134, default 2048): 
+```
+
+Puis on indique la taille `+512M`:
+
+```
+Last sector, +/-sectors or +/-size{K,M,G,T,P} (2048-3907029134, default 3907028991): +512M
+```
+
+Le message suivant indique que la première partition est bien créée:
+
+```
+Created a new partition 1 of type 'Linux filesystem' and of size 512 MiB.
+```
+
+
+
+### Création de la partition de Swap
+
+À nouveau, on utilise la commande `n`, mais cette fois on choisit une taille en secteurs (qui correspond ici à 11,5Go):
+
+```
+Command (m for help): n [ENTREE]
+Partition number (2-128, default 2): [ENTREE]
+First sector (1050624-3907029134, default 1050624): [ENTREE]
+Last sector, +/-sectors or +/-size{K,M,G,T,P} (1050624-3907029134, default 3907028991): +24117248 [ENTREE]
+```
+
+Le message de confirmation permet de vérifier la taille:
+
+```
+Created a new partition 2 of type 'Linux filesystem' and of size 11.5 GiB.
+```
+
+On modifie ensuite le type de partition pour la `2` avec la commande `t`:
+
+
+```
+Command (m for help): t
+Partition number (1,2, default 2): 2
+Partition type or alias (type L to list all): 19
+```
+
+
+### Création de la partition principale
+
+Ici, on appuie sur `Entrée` pour laisser les valeurs par défaut:
+
+```
+Command (m for help): n
+Partition number (3-128, default 3): 
+First sector (25167873-3907029134, default 25169920): 
+Last sector, +/-sectors or +/-size{K,M,G,T,P} (25169920-3907029134, default 3907028991): 
+
+Created a new partition 3 of type 'Linux filesystem' and of size 1.8 TiB.
+```
+
+Et on modifie le type de la partition pour la passer en `Linux LVM`:
+
+```
+Command (m for help): t
+Partition number (1-3, default 3): 
+Partition type or alias (type L to list all): 43
+
+Changed type of partition 'Linux LVM' to 'Linux LVM'.
+```
+
+On termine par la commande `w` pour sauvegarder les changements de la nouvelle table des partitions:
+
+```
+Command (m for help): w
+The partition table has been altered.
+Calling ioctl() to re-read partition table.
+Syncing disks.
+```
+
+
+## Partitionnement du second disque
+
+Cette fois, on ne crée que deux partitions:
+
+- une Swap de `+24117248` secteurs
+- une principale sur le reste du disque
+
+```bash
+fdisk /dev/sdb
+```
+
+```
+Command (m for help): g
+Created a new GPT disklabel (GUID: EB07A51E-0F98-0949-8126-E55071DD5879).
+
+Command (m for help): n
+Partition number (1-128, default 1): 
+First sector (2048-3907029134, default 2048): 
+Last sector, +/-sectors or +/-size{K,M,G,T,P} (2048-3907029134, default 3907028991): +24117248
+
+Created a new partition 1 of type 'Linux filesystem' and of size 11.5 GiB.
+
+Command (m for help): t
+Selected partition 1
+Partition type or alias (type L to list all): 19
+Changed type of partition 'Linux filesystem' to 'Linux swap'.
+
+Command (m for help): n
+Partition number (2-128, default 2): 
+First sector (24119297-3907029134, default 24121344): 
+Last sector, +/-sectors or +/-size{K,M,G,T,P} (24121344-3907029134, default 3907028991): 
+
+Created a new partition 2 of type 'Linux filesystem' and of size 1.8 TiB.
+
+Command (m for help): t
+Partition number (1,2, default 2): 
+Partition type or alias (type L to list all): 43
+
+Changed type of partition 'Linux filesystem' to 'Linux LVM'.
+
+Command (m for help): w
+```
+
+
+# Configuration de LVM
+
+## Installation de LVM
+
+```bash
+apt update && apt install -y cryptsetup lvm2 debian-keyring
+```
+
+## Création des deux Physical Volumes
+
+Création sur la partition 3 du premier disque:
+
+```
+pvcreate /dev/sda3
+```
+
+Création sur la partition 2 du second disque:
+
+```
+pvcreate /dev/sdb2
+```
+
+
+## Ajout des PV à un nouveau Volume Group
+
+Création du VG
+
+```bash
+vgcreate debian-zeta-vg /dev/sda3
+```
+
+Extension du VG
+
+```bash
+vgextend debian-zeta-vg /dev/sdb2
+```
+
+Vérification (ici le VG doit faire 3,6To):
+
+```
+# vgdisplay debian-zeta-vg 
+  --- Volume group ---
+  VG Name               debian-zeta-vg
+  System ID             
+  Format                lvm2
+  Metadata Areas        2
+  Metadata Sequence No  2
+  VG Access             read/write
+  VG Status             resizable
+  MAX LV                0
+  Cur LV                0
+  Open LV               0
+  Max PV                0
+  Cur PV                2
+  Act PV                2
+  VG Size               <3.62 TiB
+  PE Size               4.00 MiB
+  Total PE              947846
+  Alloc PE / Size       0 / 0   
+  Free  PE / Size       947846 / <3.62 TiB
+  VG UUID               i58CcT-sZgA-mjZc-8Kb1-qhLW-LOZP-rlI0if
+```
+
+## Création des volumes logiques
+
+Pour ce serveur Proxmox, on aura deux partitions LVM:
+
+- une partition de démarrage
+- une partition de données
+
+```bash
+lvcreate -L 100G -n lv_root debian-zeta-vg
+lvcreate -l 100%FREE -n lv_data debian-zeta-vg
+```
+
+## Formater et monter les volumes
+
+Formater en ext4 :
+
+```bash
+mkfs.ext4 /dev/vg_raid/lv_root
+mkfs.ext4 /dev/vg_raid/lv_data
+mkfs.ext4 /dev/sda1
+```
+
+
+
+# Installation du système Debian
+
+## Debootstrap
+
+Aller sur la page [Debian -- Details of package debootstrap in bookworm](https://packages.debian.org/bookworm/debootstrap)
+
+
+Récupérer l'adresse dans la section *Télécharger* et en cliquant sur `all`
+
+Copier un des liens et l'utiliser pour télécharger sur le serveur:
+
+```bash
+wget http://ftp.fr.debian.org/debian/pool/main/d/debootstrap/debootstrap_1.0.128+nmu2+deb12u2_all.deb
+```
+
+On l'installe:
+
+```bash
+dpkg -i debootstrap*.deb && rm -f debootstrap*.deb
+```
+
+## Montage des volumes pour l'installation
+
+Rappel:
+
+- /dev/sda1 > /boot
+- mount /dev/debian-zeta-vg/lv_root > /
+- mount /dev/debian-zeta-vg/lv_data > /data
+  
+Le tout étant dans un premier temps monté sur le point de montage `/mnt`
+
+```bash
+mount /dev/debian-zeta-vg/lv_root
+mkdir /mnt/data
+mount /dev/debian-zeta-vg/lv_data /mnt/data/
+mkdir /mnt/boot
+mount /dev/sda1 /mnt/boot
+```
+
+## Chiffrement des volumes
+

+ 16 - 0
gnu-linux/serveurs/installation/yunohost-mise-a-jour.md

@@ -0,0 +1,16 @@
+Warning: This permission is currently granted to all users in addition to other groups. You probably want to either remove the 'all_users' permission or remove the other groups it is currently granted to.
+Warning: This permission is currently granted to all users in addition to other groups. You probably want to either remove the 'all_users' permission or remove the other groups it is currently granted to.
+Info: Updating apt...
+Info: Updating database...
+Info: [+++.................] > Ensuring downward compatibility...
+Info: [###+++..............] > Upgrading nextcloud...
+Info: Upgrading to Nextcloud 30.0.8
+Info: [######++++..........] > Reconfiguring nextcloud...
+Warning: File /var/www/nextcloud/config/config.php has been manually modified since the installation or last upgrade. So it has been duplicated in /var/cache/yunohost/appconfbackup//var/www/nextcloud/config/config.php.backup.20250401.124808
+Info: [##########+++.......] > Reapplying file permissions...
+Info: [#############+++....] > Regenerating system configurations for nextcloud...
+Info: The service nginx has correctly executed the action reload-or-restart.
+Info: The service fail2ban has correctly executed the action reload-or-restart.
+Info: [####################] > Upgrade of nextcloud completed
+Success! nextcloud upgraded
+

+ 36 - 22
gnu-linux/serveurs/installation/yunohost.md

@@ -1,6 +1,37 @@
 % Installation de YunoHost
 % Installation de YunoHost
 
 
 
 
+# Installation initiale
+
+## Espace disque minimal
+
+Le système de fichier doit comporter au moins 30 Go d'espace. Pour ajouter cet espace, voir la procédure ci-dessous
+
+### Ajout d'espace sur un disque via LVM
+
+Nécessité d'augmenter l'espace disque : [How to add an extra second hard drive on Linux LVM and increase the size of storage](https://www.cyberciti.biz/faq/howto-add-disk-to-lvm-volume-on-linux-to-increase-size-of-pool/)
+
+
+```bash
+# pvcreate /dev/sdb
+  Physical volume "/dev/sdb" successfully created.
+# vgextend debian-template-vg /dev/sdb
+  Volume group "debian-template-vg" successfully extended
+# lvextend -L +20G /dev/debian-template-vg/root
+  Size of logical volume debian-template-vg/root changed from <6.81 GiB (1743 extents) to <26.81 GiB (6863 extents).
+  Logical volume debian-template-vg/root successfully resized.
+# man resize2fs
+# man ^C
+# resize2fs -p /dev/mapper/debian--template--vg-root 
+resize2fs 1.47.0 (5-Feb-2023)
+Filesystem at /dev/mapper/debian--template--vg-root is mounted on /; on-line resizing required
+old_desc_blocks = 1, new_desc_blocks = 4
+The filesystem on /dev/mapper/debian--template--vg-root is now 7027712 (4k) blocks long.
+```
+
+
+## Procédure
+
 ```bash
 ```bash
 # wget -O - https://install.yunohost.org | bash
 # wget -O - https://install.yunohost.org | bash
 --2025-02-22 00:53:35--  https://install.yunohost.org/
 --2025-02-22 00:53:35--  https://install.yunohost.org/
@@ -79,30 +110,8 @@ Saving to: ‘STDOUT’
   │                                                                           │
   │                                                                           │
   │ It is available at the following URL : ➡️  https://yunohost.org/admindoc   │
   │ It is available at the following URL : ➡️  https://yunohost.org/admindoc   │
   ╰───────────────────────────────────────────────────────────────────────────╯
   ╰───────────────────────────────────────────────────────────────────────────╯
-
-
 ```
 ```
 
 
-Nécessité d'augmenter l'espace disque : [How to add an extra second hard drive on Linux LVM and increase the size of storage](https://www.cyberciti.biz/faq/howto-add-disk-to-lvm-volume-on-linux-to-increase-size-of-pool/)
-
-
-```bash
-# pvcreate /dev/sdb
-  Physical volume "/dev/sdb" successfully created.
-# vgextend debian-template-vg /dev/sdb
-  Volume group "debian-template-vg" successfully extended
-# lvextend -L +20G /dev/debian-template-vg/root
-  Size of logical volume debian-template-vg/root changed from <6.81 GiB (1743 extents) to <26.81 GiB (6863 extents).
-  Logical volume debian-template-vg/root successfully resized.
-# man resize2fs
-# man ^C
-# resize2fs -p /dev/mapper/debian--template--vg-root 
-resize2fs 1.47.0 (5-Feb-2023)
-Filesystem at /dev/mapper/debian--template--vg-root is mounted on /; on-line resizing required
-old_desc_blocks = 1, new_desc_blocks = 4
-The filesystem on /dev/mapper/debian--template--vg-root is now 7027712 (4k) blocks long.
-
-```
 
 
 
 
 
 
@@ -318,6 +327,8 @@ On va rajouter les certificats en suivant les informations données sur la page
 
 
 # Authentification pour certaines app
 # Authentification pour certaines app
 
 
+## Pour une application dans son propre sous-domaine
+
 En cas d'erreur 401, il peut être nécessaire de désactiver certaines lignes de la configuration NGINX sur la VM YunoHost.
 En cas d'erreur 401, il peut être nécessaire de désactiver certaines lignes de la configuration NGINX sur la VM YunoHost.
 
 
 Voir [Install web app on main domain while keeping Synapse it&#39;s server name - Tutorials - YunoHost Forum](https://forum.yunohost.org/t/install-web-app-on-main-domain-while-keeping-synapse-its-server-name/21893)
 Voir [Install web app on main domain while keeping Synapse it&#39;s server name - Tutorials - YunoHost Forum](https://forum.yunohost.org/t/install-web-app-on-main-domain-while-keeping-synapse-its-server-name/21893)
@@ -343,3 +354,6 @@ Redémarrer `nginx`
 ```bash
 ```bash
 sudo systemctl restart nginx
 sudo systemctl restart nginx
 ```
 ```
+
+
+

+ 144 - 0
gnu-linux/serveurs/nas-rockpi-penta.md

@@ -0,0 +1,144 @@
+% Configuration NAS Penta Rock Pi
+
+# Installation sur eMMC
+
+On grave sur une carte SD une image correspondant à `Rock Pi 4B plus`
+
+On boote dessus
+
+On flash l'eMMC en utilisant [ce tutoriel](https://wiki.radxa.com/Rockpi4/install/eMMC):
+
+:::information
+
+If you have no eMMC to μSD card converter board or you have ROCK 4A Plus or 4B Plus,
+
+    Install Debian Linux (or another Linux variant) first to microSD card following the microSD card installation page.
+    Insert both your microSD
+    Insert the (empty) eMMC module into the ROCK 4A, 4B, 4C, 4 SE, 4C Plus, for 4A Plus, 4B Plus, you have eMMC on the board already
+    Reboot it. It will boot from microSD
+
+You can now use that Linux on ROCK 4 to download your desired OS from Rockpi4/downloads and install it onto the eMMC module. Example:
+
+Verify that the system has booted from μSD, which should be /dev/mmcblk0p5 and that the eMMC module is found as /dev/mmcblk1:
+
+```bash
+$ dmesg | grep mmcblk
+...
+[...] EXT4-fs (mmcblk0p5): mounted filesystem with ordered data mode.
+
+$ ls -l /dev/mmcblk1
+brw-rw---- 1 root disk 179, 0 Jan  6 13:25 /dev/mmcblk1
+```
+
+Then write your downloaded OS image to eMMC:
+
+```bash
+$ sudo dd if=rockpi4_debian_stretch_lxde_armhf_20181105_2120-gpt.img of=/dev/mmcblk1 bs=1M
+```
+
+If you image downloaded is img.xz format, it's compressed, use
+
+```bash
+$ xzcat rockpi-4cplus-ubuntu-focal-server-arm64-20220520-1242-gpt.img.xz | sudo dd of=/dev/mmcblk1 bs=1M
+```
+
+A CLI tool to write an image with write diagnostics is pv:
+
+
+```bash
+$ sudo apt install pv
+$ sudo pv -ptera < rockpi4_debian_stretch_lxde_armhf_20181105_2120-gpt.img | dd of=/dev/mmcblk1 bs=1M
+```
+
+Power off your ROCK 4, remove the μSD and power on again. The system will now boot from the on board eMMC or eMMC module. 
+
+:::
+
+# Configuration du réseau
+
+D'après [How to Configure Network Connection Using 'nmcli' Tool](https://www.tecmint.com/nmcli-configure-network-connection/)
+
+## État des lieux
+
+```bash
+sudo nmcli c
+```
+
+Donne:
+
+```
+NAME                UUID                                  TYPE      DEVICE 
+Wired connection 1  249328cb-11d9-364d-9e2d-0ef7ae271bd3  ethernet  end0   
+lo                  d86532c4-4ba9-4144-bb9b-7c1945180e2f  loopback  lo    
+```
+
+```bash
+ip a
+```
+
+```
+1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
+    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
+    inet 127.0.0.1/8 scope host lo
+       valid_lft forever preferred_lft forever
+    inet6 ::1/128 scope host noprefixroute 
+       valid_lft forever preferred_lft forever
+2: end0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
+    link/ether 76:80:df:60:56:74 brd ff:ff:ff:ff:ff:ff
+    inet 192.168.0.202/24 brd 192.168.0.255 scope global dynamic noprefixroute end0
+       valid_lft 7026sec preferred_lft 7026sec
+    inet6 fe80::c968:5ddf:6b30:821f/64 scope link noprefixroute 
+       valid_lft forever preferred_lft forever
+3: wlan0: <NO-CARRIER,BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state DORMANT group default qlen 1000
+    link/ether d4:9c:dd:a1:14:6a brd ff:ff:ff:ff:ff:ff
+```
+
+
+
+```bash
+$ sudo nmcli dev status
+DEVICE         TYPE      STATE                   CONNECTION         
+end0           ethernet  connected               Wired connection 1 
+lo             loopback  connected (externally)  lo                 
+wlan0          wifi      disconnected            --                 
+p2p-dev-wlan0  wifi-p2p  disconnected            --
+```
+
+## Configuration
+
+
+```bash
+sudo nmcli connection add con-name connexion_filaire ifname end0 type ethernet
+```
+
+```bash
+sudo nmcli con mod connexion_filaire ipv4.addresses 192.168.0.15/24
+sudo nmcli con mod connexion_filaire ipv4.gateway 192.168.0.1
+sudo nmcli con mod connexion_filaire ipv4.dns "192.168.0.1"
+sudo nmcli con mod connexion_filaire ipv4.method manual
+```
+
+Mise en route:
+
+
+:::warning
+
+Attention: cela va déconnecter votre session SSH
+
+:::
+
+```bash
+sudo nmcli con up connexion_filaire
+```
+
+
+## Switch OTG
+
+
+C'est le petit switch placé juste sous les ports USB3
+
+![alt text](image.png)
+
+On le positionne vers la gauche pour activer le mode hôte et permettre la connection de périphériques supplémentaires.
+
+https://wiki.radxa.com/Rockpi4/dev/usb-host-and-otg-switch-on-rock-pi-4

+ 29 - 0
gnu-linux/serveurs/nextcloud.md

@@ -0,0 +1,29 @@
+% NextCloud
+
+
+Sur le client Webdav
+
+https://cloud.aezi.fr/remote.php/dav/files/USER
+
+Correspond sur le serveur à 
+
+/home/yunohost.app/nextcloud/data/USER/files/Joplin/test.txt
+
+
+## Configuration pour Joplin (WebDav)
+
+
+[Nginx: 413 - Request Entity Too Large Error and Solution - nixCraft](https://www.cyberciti.biz/faq/linux-unix-bsd-nginx-413-request-entity-too-large/)
+
+### Erreur 413 nginx
+
+Sur le reverse Proxy
+
+Créer un fichier nommé  `/etc/nginx/conf.d/nextcloud-client-size-body.conf`
+
+Y placer le texte suivant:
+
+```
+client_max_body_size 10G;
+```
+

+ 128 - 0
gnu-linux/serveurs/nginx.md

@@ -0,0 +1,128 @@
+% NGINX
+
+
+# Mode Maintenance
+
+
+## Fichier d'accueil
+
+```html
+<!-- index.html -->
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Site en Maintenance</title>
+</head>
+<body>
+    <h1>Site en Maintenance</h1>
+    <p>Merci de revenir plus tard !</p>
+</body>
+</html>
+```
+
+
+## Configuration
+
+
+Ajouter ce bloc:
+
+
+```
+	###### MAINTENANCE ######
+	#Changer la valeur de  maintenance a on ou off (decommenter/commenter la seconde ligne)
+	#set $maintenance off;
+	set $maintenance on;
+
+	if ($remote_addr ~ (83.193.14.206)) {
+		set $maintenance off;
+	}
+	if ($maintenance = on) {
+		return 503;
+	}
+
+	location /maintenance {
+	}
+
+	error_page 503 @maintenance;
+	location @maintenance {
+		root /var/www/maintenance ;
+		#rewrite  ^(/images/logo.png)$ /images/logo.png break;
+		rewrite  ^(.*)$ /index.html break;
+	}
+	###### FIN MAINTENANCE ######
+```
+
+
+
+Par exemple:
+
+
+```
+server{
+        listen 443 ssl;
+
+	# AJOUT DES CERTIFICATS
+    ssl_certificate /etc/letsencrypt/live/garagepourtous.fr/fullchain.pem ;
+	#/etc/letsencrypt/live/garagepourtous.fr/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/garagepourtous.fr/privkey.pem ;
+	# /etc/letsencrypt/live/garagepourtous.fr/privkey.pem; # managed by Certbot
+ 
+        server_name www.garagepourtous.fr garagepourtous.fr;
+        root    /var/www/www.garagepourtous.fr;
+        index     index.php index.html index.htm;
+ 
+        access_log /var/log/nginx/fr.garagepourtous.access_log;
+        error_log /var/log/nginx/fr.garagepourtous.error_log;
+ 
+        # Security
+        include global/security.conf;
+ 
+	###### MAINTENANCE ######
+
+    #ICI
+
+	###### FIN MAINTENANCE ######
+
+        location / {
+                # This is cool because no php is touched for static content.
+                # include the "?$args" part so non-default permalinks doesn't break when using query string
+                try_files $uri $uri/ /index.php?$args;
+        }
+ 
+    # PHP-FPM
+    include global/php-fpm-redis.conf;
+ 
+    # STATICS FILES
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
+                expires max;
+                log_not_found off;
+        }
+
+
+}
+
+```
+
+
+# Gestion des mots de passe et accès dans nginx
+
+```
+sudo sh -c "echo -n 'thomas.richard3:'
+sudo sh -c "openssl passwd -apr1"
+```
+
+Éditer le fichier (par exemple `/etc/nginx/.auth.allow`)
+
+
+# Webographie
+
+## Yunohost
+
+* [YunoHost behind a reverse proxy - Discuss / Advanced use case - YunoHost Forum](https://forum.yunohost.org/t/yunohost-behind-a-reverse-proxy/6378)
+* [Nginx reverse proxy + URL rewrite - Server Fault](https://serverfault.com/questions/379675/nginx-reverse-proxy-url-rewrite)
+* [Reverse proxy avec Nginx - Support - YunoHost Forum](https://forum.yunohost.org/t/reverse-proxy-avec-nginx/207)
+* [Nginx de Yunohost en reverse proxy - Le blog de Genma](https://blog.genma.fr/?Nginx-de-Yunohost-en-reverse-proxy)
+* [Reverse proxy and Reverse DNS for YunoHost installation - Support - YunoHost Forum](https://forum.yunohost.org/t/reverse-proxy-and-reverse-dns-for-yunohost-installation/25672)
+* [ACME Client Implementations - Let's Encrypt](https://letsencrypt.org/docs/client-options/)

+ 5 - 0
gnu-linux/serveurs/proxmox/activation-avx-proxmox.md

@@ -0,0 +1,5 @@
+% Activation AVX
+
+* [Enable AVX | Proxmox Support Forum](https://forum.proxmox.com/threads/enable-avx.129019/)
+* [Feature Suggestion: AVX/AVX2 CPU flags | Proxmox Support Forum](https://forum.proxmox.com/threads/feature-suggestion-avx-avx2-cpu-flags.114688/)
+* [CPU with AVX support, | Proxmox Support Forum](https://forum.proxmox.com/threads/cpu-with-avx-support.146138/)

+ 42 - 0
gnu-linux/serveurs/proxmox/configuration-ovh.md

@@ -83,6 +83,12 @@ iface vmbr0 inet static
 #Réseau Interne
 #Réseau Interne
 ```
 ```
 
 
+:::important
+
+Voir la section "Problème de redémarrage du serveur / problème réseau" en cas de problème de redémarrage par OVH / blocage de la carte réseau / absence de ping
+
+:::
+
 :::warning
 :::warning
 
 
 **VOIR REMARQUE CI-DESSOUS**
 **VOIR REMARQUE CI-DESSOUS**
@@ -136,3 +142,39 @@ Voir:
 ## Désactiver le firewall
 ## Désactiver le firewall
 
 
 Datacenter > Firewall > Options > Firewall : No
 Datacenter > Firewall > Options > Firewall : No
+
+
+# Problème de redémarrage du serveur / problème réseau
+
+Si ce genre d'erreur arrive suite à un blocage réseau:
+
+
+```
+Jul 06 04:22:09 ecaz kernel: e1000e 0000:00:19.0 eth0: Detected Hardware Unit Hang:
+                               TDH                  <76>
+                               TDT                  <82>
+                               next_to_use          <82>
+                               next_to_clean        <76>
+                             buffer_info[next_to_clean]:
+                               time_stamp           <120b19abb>
+                               next_to_watch        <77>
+                               jiffies              <120b1d6c0>
+                               next_to_watch.status <0>
+                             MAC Status             <40080083>
+                             PHY Status             <796d>
+                             PHY 1000BASE-T Status  <3800>
+                             PHY Extended Status    <3000>
+                             PCI Status             <10>
+```
+
+
+
+
+
+* [(2) [SOLVED] - Intel NIC e1000e hardware unit hang | Proxmox Support Forum](https://forum.proxmox.com/threads/intel-nic-e1000e-hardware-unit-hang.106001/)
+* [(2) Trap error on e1000 network adapter | Proxmox Support Forum](https://forum.proxmox.com/threads/trap-error-on-e1000-network-adapter.105758/)
+* [linux - How to fix “eth0: Detected Hardware Unit Hang” in Debian 9? - Super User](https://superuser.com/questions/1270723/how-to-fix-eth0-detected-hardware-unit-hang-in-debian-9)
+* [networking - e1000e Reset adapter unexpectedly / Detected Hardware Unit Hang - Server Fault](https://serverfault.com/questions/616485/e1000e-reset-adapter-unexpectedly-detected-hardware-unit-hang)
+* [ubuntu - Linux e1000e (Intel networking driver) problems galore, where do I start? - Server Fault](https://serverfault.com/questions/193114/linux-e1000e-intel-networking-driver-problems-galore-where-do-i-start)
+* [Intel Ethernet Drivers and Utilities / Bugs / #378 82579LM e1000e driver hardware hang](https://web.archive.org/web/20160205153351/http://ehc.ac/p/e1000/bugs/378/)
+* [networking - e1000e Reset adapter unexpectedly / Detected Hardware Unit Hang - Server Fault](https://serverfault.com/questions/616485/e1000e-reset-adapter-unexpectedly-detected-hardware-unit-hang)

+ 7 - 0
gnu-linux/serveurs/proxmox/edition-disques-template.md

@@ -0,0 +1,7 @@
+% Édition de disques des VMs ou des templates
+
+# Prérequis
+
+```bash
+sudo apt-get install libguestfs-tools
+```

+ 8 - 0
gnu-linux/serveurs/proxmox/gestion-reseau-proxmox.md

@@ -14,3 +14,11 @@ Ici `192.168.12.0/24` est l'identifiant du réseau pour lequel le "switch" fonct
 Mettre un routeur entre le réseau privé et un réseau externe
 Mettre un routeur entre le réseau privé et un réseau externe
 
 
 
 
+# Réseau privé interne
+
+Accélération des performances entre les VM
+
+- [Proxmox NETWORKING: VLANs, Bridges, and Bonds! - YouTube](https://www.youtube.com/watch?v=zx5LFqyMPMU)
+- [Proxmox 8 — Linux Server Wiki](https://wiki.csnu.org/index.php?title=Proxmox_8#Ajout_d'un_r%C3%A9seau_interne_vmbr1)
+- [How to Create a Private Network in Proxmox](https://blog.jenningsga.com/private-network-with-proxmox/)
+- [How to: Create an internal only/isolated network for guest OS/Virtual Machines (VM) on Proxmox VE (PVE) like in VMware Workstation (Host-Only network but different)](https://dannyda.com/2020/06/01/how-to-create-an-internal-only-isolated-network-for-guest-os-virtual-machines-vm-on-proxmox-ve-pve-like-in-vmware-workstation-host-only-network-but-different/)

+ 120 - 0
gnu-linux/serveurs/proxmox/how-to-share-host-folder-with-guest-vm-in-proxmox-using-virtiofs.md

@@ -0,0 +1,120 @@
+# How to Share Host Folder with Guest VM in Proxmox Using Virtiofs
+
+<!-- image -->
+
+This guide explains how to access a shared folder on the host from a guest VM in Proxmox VE.
+
+– Make sure virtiofsd is installed on the Proxmox host
+
+```
+apt install virtiofsd
+```
+
+– Create a shared directory on the Proxmox host.
+
+```
+mkdir -p /srv/sharefolder/vm101
+```
+
+– Go to Proxmox GUI, select Datacenter | Directory Mappings. Click add. Adjust Name, Node, and the Path
+
+![](images/pve-directory-mapping-1024x394.webp)
+
+– Select VM who will access the folder share. Select Hardware | Add | Virtiofs
+
+![](images/add-virtiofs-vm.webp)
+
+![](images/select-virtiofs-vm.webp)
+
+– Start VM after added Virtiofs
+
+If your VM is running, you can shut it down and start it again.
+
+– Mounting folder share from VM
+
+Mount virtiofs
+
+```
+mount -t virtiofs vm101 /mnt/
+```
+
+To make the mounting permanent and automatic at boot, add it to the fstab. The content is as follows:
+
+```
+vm101 /mnt virtiofs rw,relatime 0 0
+```
+
+Good Luck 🙂
+
+### Share this:
+
+- Click to email a link to a friend (Opens in new window)
+Email
+- Click to share on Facebook (Opens in new window)
+Facebook
+- Click to share on X (Opens in new window)
+X
+- Click to share on LinkedIn (Opens in new window)
+LinkedIn
+- Click to share on Pinterest (Opens in new window)
+Pinterest
+- Click to share on Tumblr (Opens in new window)
+Tumblr
+- Click to share on Telegram (Opens in new window)
+Telegram
+- Click to share on WhatsApp (Opens in new window)
+WhatsApp
+- Click to share on Reddit (Opens in new window)
+Reddit
+
+## Post navigation
+
+### How to Limit Email Attachment Size for Individual Users in Zimbra
+
+### How to Set Up a Ceph Cluster on a Single Node
+
+### Leave a Reply Cancel reply
+
+Your email address will not be published. Required fields are marked *
+
+Comment *
+
+Name *
+
+Email *
+
+Website
+
+Notify me of follow-up comments by email.
+
+Notify me of new posts by email.
+
+
+This site uses Akismet to reduce spam. Learn how your comment data is processed.
+
+### Categories
+
+### Recent Comments
+
+- Luis Navas on Zimbra Tips : How To Configure Rate Limit Sending Message on PolicyD
+- Imanudin Ahmad on Relay Tips Based on User/Domain Receiver on Zimbra 8.5-8.6
+- Imanudin Ahmad on Zimbra Tips : How To Configure Rate Limit Sending Message on PolicyD
+- Rajaji on Relay Tips Based on User/Domain Receiver on Zimbra 8.5-8.6
+- Luis Navas on Zimbra Tips : How To Configure Rate Limit Sending Message on PolicyD
+
+### Tags
+
+### Books &amp; Publishing
+
+<!-- image -->
+
+<!-- image -->
+
+### Search
+
+## 
+
+## 
+
+### 

BIN
gnu-linux/serveurs/proxmox/images/add-virtiofs-vm.webp


BIN
gnu-linux/serveurs/proxmox/images/pve-directory-mapping-1024x394.webp


BIN
gnu-linux/serveurs/proxmox/images/select-virtiofs-vm.webp


+ 29 - 1
gnu-linux/serveurs/proxmox/infrastructure-ovh.md

@@ -6,6 +6,21 @@
 
 
 Aide: [Architecture de services avec Proxmox sur un serveur kimsufi - Vincent Dillenschneider](https://vdillenschneider.fr/architecture-de-services-avec-proxmox-sur-un-serveur-kimsufi)
 Aide: [Architecture de services avec Proxmox sur un serveur kimsufi - Vincent Dillenschneider](https://vdillenschneider.fr/architecture-de-services-avec-proxmox-sur-un-serveur-kimsufi)
 
 
+## Adressage
+
+| Machine          | Id    | Adresse        |
+|------------------|-------|----------------|
+| ecaz             | NA    | 10.1.0.1       |
+| reverse-proxy    | 100   | 10.1.0.10      |
+| web-formation    | 101   | 10.1.0.101     |
+|                  |       | 10.1.0.        |
+| yunohost nu      | 103   | 10.1.0.14      |
+|                  |       | 10.1.0.        |
+| web-gestion      | 104   | 10.1.0.22      |
+| bastion          | 105   | 10.1.0.11      |
+| development-vm   | 801   | 10.1.0.81      |
+
+
 # Reverse Proxy NGINX
 # Reverse Proxy NGINX
 
 
 ## Certificats
 ## Certificats
@@ -58,4 +73,17 @@ sudo iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 80 -j DNAT --to 10.1.
 sudo iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 443 -j DNAT --to 10.1.0.10:443
 sudo iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 443 -j DNAT --to 10.1.0.10:443
 ```
 ```
 
 
-  
+  
+
+
+# Exemple
+
+```
++---------------------+    +---------------------+    +---------------------+
+| reverse proxy       |    | VM 10.1.0.22        |    | Docker-Compose      |
+| only redirects any  |    |                     |    |                     |
+| request to the VM   |--->|  no nginx installed |--->| original nginx      |
+| (see nginx conf     |    |                     |    | from AppFlowy-Cloud |
+| above )             |    |                     |    | repos               |
++---------------------+    +---------------------+    +---------------------+
+```

+ 3 - 0
gnu-linux/serveurs/proxmox/partage-dossier-vm.md

@@ -0,0 +1,3 @@
+% Partage de dossier aux VM Proxmox
+
+[How to Share Host Folder with Guest VM in Proxmox Using Virtiofs - Ahmad Imanudin](https://imanudin.net/2025/04/20/how-to-share-host-folder-with-guest-vm-in-proxmox-using-virtiofs/)

+ 235 - 0
gnu-linux/serveurs/samba-serveur-fichier.md

@@ -0,0 +1,235 @@
+% Serveur de fichiers samba
+
+# Installation et configuration
+
+## Installation
+
+
+```bash
+sudo apt update && sudo apt install -y samba samba-vfs-modules
+```
+
+## Configuration
+
+```conf
+[global]
+
+## Browsing/Identification ###
+
+# Change this to the workgroup/NT-domain name your Samba server will part of
+   workgroup = AEZI
+
+#### Debugging/Accounting ####
+
+# This tells Samba to use a separate log file for each machine
+# that connects
+   log file = /var/log/samba/log.%m
+
+# Cap the size of the individual log files (in KiB).
+   max log size = 1000
+
+# We want Samba to only log to /var/log/samba/log.{smbd,nmbd}.
+# Append syslog@1 if you want important messages to be sent to syslog too.
+   logging = file
+
+# Do something sensible when Samba crashes: mail the admin a backtrace
+   panic action = /usr/share/samba/panic-action %d
+
+
+####### Authentication #######
+
+# Server role. Defines in which mode Samba will operate. Possible
+# values are "standalone server", "member server", "classic primary
+# domain controller", "classic backup domain controller", "active
+# directory domain controller". 
+#
+# Most people will want "standalone server" or "member server".
+# Running as "active directory domain controller" will require first
+# running "samba-tool domain provision" to wipe databases and create a
+# new domain.
+   server role = standalone server
+
+   obey pam restrictions = yes
+
+# This boolean parameter controls whether Samba attempts to sync the Unix
+# password with the SMB password when the encrypted SMB password in the
+# passdb is changed.
+   unix password sync = yes
+
+# For Unix password sync to work on a Debian GNU/Linux system, the following
+# parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for
+# sending the correct chat script for the passwd program in Debian Sarge).
+   passwd program = /usr/bin/passwd %u
+   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
+
+# This boolean controls whether PAM will be used for password changes
+# when requested by an SMB client instead of the program listed in
+# 'passwd program'. The default is 'no'.
+   pam password change = yes
+
+# This option controls how unsuccessful authentication attempts are mapped
+# to anonymous connections
+   map to guest = bad user
+
+#[global]
+#======== From https://serverfault.com/a/1085863/139286 ========
+
+allow dns updates = disabled
+client min protocol = SMB3_11
+dcerpc endpoint servers = rpcecho
+delete veto files = Yes
+disable netbios = Yes
+disable spoolss = Yes
+dns forwarder = 192.168.1.1
+dns proxy = No
+enhanced browsing = No
+# Next line requires catia (needed if no Windows clients?)
+fruit:encoding = native
+fruit:metadata = stream
+# Do not use NFS access control entries
+fruit:nfs_aces = No
+# Enable extended attributes (requires streams_xattr)
+fruit:resource = xattr
+# Next line is already the default
+;fruit:zero_file_id = Yes
+host msdfs = No
+inherit acls = Yes
+inherit permissions = Yes
+lm announce = No
+load printers = No
+log file = /var/log/samba/log.smbd
+log level = 1
+logging = file
+max log size = 10000
+# Next 2 lines defer mDNS config to Avahi (better for icon and Time Machine)
+mdns name = mdns
+multicast dns register = No
+name resolve order = host bcast
+pam password change = Yes
+panic action = /usr/share/samba/panic-action %d
+passwd chat = "*New Password:*" %n\n "*Reenter New Password:*" %n\n "*Password changed.*"
+passwd program = /usr/bin/passwd %u
+printcap cache time = 0
+printcap name = /dev/null
+printable = No
+printing = bsd
+restrict anonymous = 2
+rpc_daemon:spoolssd = disabled
+rpc_server:epmapper = disabled
+rpc_server:winreg = disabled
+rpc_server:lsarpc = disabled
+rpc_server:samr = disabled
+rpc_server:netlogon = disabled
+rpc_server:netdfs = disabled
+rpc_server:dssetup = disabled
+rpc_server:wkssvc = disabled
+rpc_server:spoolss = disabled
+rpc_server:svcctl = disabled
+rpc_server:ntsvcs = disabled
+rpc_server:eventlog = disabled
+rpc_server:initshutdown = disabled
+rpc_server:mdssvc = disabled
+server max protocol = SMB3_11
+server min protocol = SMB3_11
+# Next line experimental until 4.15 - macOS clients support multi-channel SMB3
+server multi channel support = Yes
+server role = standalone server
+server services = rpc, smb
+server string = %h server (Samba , Debian RockPi4B+)
+show add printer wizard = No
+smb ports = 445
+unix password sync = Yes
+use sendfile = Yes
+veto files = /._*/.DS_Store/
+vfs objects = catia fruit streams_xattr
+
+
+#======================= Share Definitions =======================
+
+[homes]
+   comment = Home Directories
+   browseable = no
+
+# By default, the home directories are exported read-only. Change the
+# next parameter to 'no' if you want to be able to write to them.
+   read only = yes
+
+# File creation mask is set to 0700 for security reasons. If you want to
+# create files with group=rw permissions, set next parameter to 0775.
+   create mask = 0700
+
+# Directory creation mask is set to 0700 for security reasons. If you want to
+# create dirs. with group=rw permissions, set next parameter to 0775.
+   directory mask = 0700
+
+# By default, \\server\username shares can be connected to by anyone
+# with access to the samba server.
+# The following parameter makes sure that only "username" can connect
+# to \\server\username
+# This might need tweaking when using external authentication schemes
+   valid users = %S
+
+# Un-comment the following and create the netlogon directory for Domain Logons
+# (you need to configure Samba to act as a domain controller too.)
+;[netlogon]
+;   comment = Network Logon Service
+;   path = /home/samba/netlogon
+;   guest ok = yes
+;   read only = yes
+
+# Un-comment the following and create the profiles directory to store
+# users profiles (see the "logon path" option above)
+# (you need to configure Samba to act as a domain controller too.)
+# The path below should be writable by all users so that their
+# profile directory may be created the first time they log on
+;[profiles]
+;   comment = Users profiles
+;   path = /home/samba/profiles
+;   guest ok = no
+;   browseable = no
+;   create mask = 0600
+;   directory mask = 0700
+
+;[printers]
+;   comment = All Printers
+;   browseable = no
+;   path = /var/tmp
+;   printable = yes
+;   guest ok = no
+;   read only = yes
+;   create mask = 0700
+
+# Windows clients look for this share name as a source of downloadable
+# printer drivers
+;[print$]
+;   comment = Printer Drivers
+;   path = /var/lib/samba/printers
+;   browseable = yes
+;   read only = yes
+;   guest ok = no
+# Uncomment to allow remote administration of Windows print drivers.
+# You may need to replace 'lpadmin' with the name of the group your
+# admin users are members of.
+# Please note that you also need to set appropriate Unix permissions
+# to the drivers directory for these users to have write rights in it
+;   write list = root, @lpadmin
+
+[toshiba_4_noir]
+    comment = Share to serve
+    path = /path/to/directory/to/serve
+    browseable = yes
+    read only = no
+    guest ok = no
+    spotlight = no
+    veto files = /._*/.DS_Store/
+    delete veto files = yes
+    writable = yes
+
+```
+
+## Redémarrage
+
+```bash
+sudo systemctl enable smbd
+sudo systemctl restart smbd
+```

+ 39 - 0
gnu-linux/serveurs/securisation/bastion.md

@@ -1,6 +1,45 @@
 % Bastion
 % Bastion
 
 
+# Installation
+
+Installation en cours: Devuan
+
+```bash
+ssh bastion
+```
+
+## TODO
+
+- [ ] [linux - Limit SSH access to specific clients by IP address - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/406245/limit-ssh-access-to-specific-clients-by-ip-address)
+- [ ] [Using iptables to prevent SSH brute force attacks and DDOS attacks](https://serverfault.com/questions/847755/using-iptables-to-prevent-ssh-brute-force-attacks-and-ddos-attacks)
+  - [ ] [How to Block Brute-Force Attacks on SSH: Step by Step guide](https://codenotary.com/blog/how-to-block-brute-force-attacks-on-ssh)
+- [ ] [https://goteleport.com/blog/ssh-bastion-host/](https://goteleport.com/blog/ssh-bastion-host/)
+- [ ] [https://goteleport.com/blog/security-hardening-ssh-bastion-best-practices/](https://goteleport.com/blog/security-hardening-ssh-bastion-best-practices/)
+- [ ] [https://goteleport.com/blog/ssh-key-management/](https://goteleport.com/blog/ssh-key-management/)
+  - [ ] [14.3. Using OpenSSH Certificate Authentication | Deployment Guide | Red Hat Enterprise Linux | 6 | Red Hat Documentation](https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/6/html/deployment_guide/sec-using_openssh_certificate_authentication#sec-Introduction_to_SSH_Certificates)
+
+### Sécurisation (ajouts possibles)
+
+* [Sécurisation d'un serveur Linux sous debian - HackMD](https://hackmd.io/@Ben-Rahiti-Romain/SkciYWMWj)
+* [Hardening - Debian Wiki](https://wiki.debian.org/Hardening)
+* [Welcome to The Bastion documentation! — The Bastion 3.20.00 documentation](https://ovh.github.io/the-bastion/index.html)
+
+# Webographie
+
 * [(1) Option for double bastion Terraform setup? | Proxmox Support Forum](https://forum.proxmox.com/threads/option-for-double-bastion-terraform-setup.94418/)
 * [(1) Option for double bastion Terraform setup? | Proxmox Support Forum](https://forum.proxmox.com/threads/option-for-double-bastion-terraform-setup.94418/)
 * [(1) Best practices for having a SSH jumphost | Proxmox Support Forum](https://forum.proxmox.com/threads/best-practices-for-having-a-ssh-jumphost.112357/)
 * [(1) Best practices for having a SSH jumphost | Proxmox Support Forum](https://forum.proxmox.com/threads/best-practices-for-having-a-ssh-jumphost.112357/)
 * [What is an SSH Bastion? | SSH Bastion host setup](https://goteleport.com/blog/ssh-bastion-host/)
 * [What is an SSH Bastion? | SSH Bastion host setup](https://goteleport.com/blog/ssh-bastion-host/)
 * [ssh - SSHFS over a jumphost - Server Fault](https://serverfault.com/questions/941934/sshfs-over-a-jumphost)
 * [ssh - SSHFS over a jumphost - Server Fault](https://serverfault.com/questions/941934/sshfs-over-a-jumphost)
+
+## Certificats
+
+- [How to use Let's Encrypt with an SSH Bastion](https://goteleport.com/blog/letsencrypt-teleport-ssh/)
+
+
+## Autres solutions
+
+[Comment configurer un serveur Bastion avec Warpgate sur Debian](https://fr.linux-console.net/?p=30725)
+
+
+
+

+ 24 - 0
installation/firefox/extensions-firefox.md

@@ -0,0 +1,24 @@
+% Extensions FIrefox
+
+- adBlocker ultimate
+- Bookmark dupes
+- Copy selected tab info
+- don't fuck with paste
+- don't track me google
+- easy youtube video downloader express
+- enhancer for youtube
+- foxyproxy
+- keepassxc-browser
+- lilo moteur et solidaire
+- myJDownloader
+- newsGuard
+- NoScript
+- Orbit
+- Sticky windows container
+- Tab Stash
+- uBlock Origin
+- Video Downloader Helper
+- Wallabagger
+- Web Archives
+
+

File diff suppressed because it is too large
+ 3659 - 0
installation/firefox/extensions-installées.html


+ 25 - 0
installation/venv-python.md

@@ -0,0 +1,25 @@
+% Gestion des venv Python
+
+# Installation virtualenvwrapper
+
+```bash
+brew install virtualenvwrapper
+```
+
+Ajout de `source virtualenvwrapper.sh` dans .profile .bashrc .bash_profile
+
+Voir [virtualenvwrapper 6.1.2.dev6+g1da1602 &#8212; virtualenvwrapper 6.1.2.dev6+g1da1602 documentation](https://virtualenvwrapper.readthedocs.io/en/latest/)
+
+```bash
+$ mkvirtualenv figure_latex
+
+$ pip3 install pandocfilters
+```
+
+Ajouter le chemin vers le python qui est dans le bin du venv dans le hashbang
+
+```
+#!/Users/lauhub/.virtualenvs/figure_latex/bin/python
+```
+
+

+ 30 - 0
javascript/selecteur-javascript-extraction-depots-github-depuis-organisation.md

@@ -0,0 +1,30 @@
+% Extracteur des dépôts GitHub dans une organisation
+
+# Code Javascript
+
+```js
+let elems ;
+let mylist = "";
+// https://stackoverflow.com/questions/54225477/get-element-by-part-of-class-name-javascript
+elems = document.querySelectorAll("div[class^='ListView-module'], div[class*=' ListView-module']");
+
+if (elems.length > 0) {
+    mylist = "";
+    let lines = document.querySelectorAll("li[class^='ListItem-module__listItem'], li[class*=' ListItem-module__listItem']");
+    for (const line of lines) {
+        let titles = line.querySelectorAll("a[class^='Title-module__anchor'], a[class*=' Title-module__anchor']");
+        if(titles.length > 0) {
+            let title = titles[0].getAttribute("href") ;
+            if(mylist.length > 0) {mylist = mylist + "\n" + title;}
+            else {mylist = title;}
+        }
+		else {console.log("ERROR: "+line);}
+    }
+    console.log(mylist + "\n");
+}
+
+
+
+```
+
+À utiliser ensuite avec `retrievegitrepos` (dossier `~/bin`)

File diff suppressed because it is too large
+ 813 - 0
materiel/routeur-cisco-rv340w.html


+ 160 - 0
materiel/routeur-cisco-rv340w.md

@@ -0,0 +1,160 @@
+% Routeur CISCO RV340W
+
+# Récapitulatif des adresses
+
+| WIFI            | Réseau | Routeur     | Adresse       |
+|-----------------|--------|-------------|---------------|
+| `ipiwifi01`     | VLAN1  | *ipiwifi01* | `10.29.10.251`  |
+| `ipiwifi01-mgt` | VLAN2  | *ipiwifi01* | `192.168.251.1` |
+| `ipiwifi02`     | VLAN1  | *ipiwifi02* | `10.29.10.252`  |
+| `ipiwifi02-mgt` | VLAN2  | *ipiwifi02* | `192.168.252.1` |
+
+
+# Configuration d'un réseau de gestion
+
+## Créer un second VLAN
+
+- VLAN2
+- Activer l'interface de gestion
+- IPIWIFI01 (pour l'interface wireless `ipiwifi01-mgt`)
+  - 192.168.251.1
+  - 255.255.255.0
+- IPIWIFI02 (pour l'interface wireless `ipiwifi02-mgt`)
+  - 192.168.252.1
+  - 255.255.255.0
+- DHCP server
+  - DNS 1.1.1.3 et 1.0.0.3
+
+## Créer un second Wireless
+
+- `ipiwifi01-mgt` (respectivement `ipiwifi02-mgt`)
+- SSID Broadcast: disable (pour éviter que tout le monde le voit)
+- PMF: capable
+- WMM: disable (**IMPORTANT** : dans le cas contraire le réseau fonctionne mal)
+- VLAN: 2
+
+
+
+
+
+# Configuration LAN seul
+
+## Accéder à la configuration du routeur
+
+
+Par défaut: [https://192.168.1.1 ](https://192.168.1.1)
+
+
+## WAN
+
+WAN > WAN Settings
+
+- Pour WAN1 et WAN2 :
+- Connection Type : choisis Disabled si disponible, sinon laisse par défaut, tu ne l’utiliseras pas.
+
+## LAN
+
+LAN > VLAN Settings
+
+Éditer le VLAN1 (le seul existant normalement):
+
+- DHCP Type: `Disabled`
+- IPv4 Address: `10.29.10.252` (ou une autre adresse)
+- Subnet Mask: `255.255.255.0`
+
+Laisser tous les ports sur `U` (*Untagged*)
+
+Cliquer sur `Apply`
+
+## Wi-Fi
+
+
+Aller dans `Wireless > Basic Settings` et éditer le réseau courant.
+
+Décocher la case `WMM` pour le désactiver.
+
+Autre piste: cocher la case `Wireless Isolation within SSID` pour l'activer.
+
+Sélectionner `VLAN` > `1`
+
+:::information
+
+En cas de forts ralentissements/dysfonctionnements du réseau en Wi-Fi:
+
+- vérifier que la case `WMM` est **décochée** pour le désactiver.
+
+
+:::
+
+## Firewall
+
+Désactiver le firewall
+
+## System Configuration > System
+
+Host Name: `router34E972-ipiwifi01`
+ou `router34E972` est le nom par défaut et `ipiwifi01` ou `ipiwifi02` le label sur le boitier
+
+## System Configuration > Time
+
+
+Activer Daylight saving time
+
+Cocher Recurring
+
+| Action | Month | Week | Day | Time H | Time M |
+|--------|-------|------|-----|--------|--------|
+| From   | 3     | Last | Sun | 2      |    0   | 
+| To     | 10    | Last | Sun | 2      |    0   | 
+
+Offset `+60` Minutes
+
+
+## Administration
+
+:::information
+
+Pour enregistrer la configuration à prendre en compte au redémarrage
+
+:::
+
+
+## Enregistrement de la configuration
+
+Configuration Management
+
+- Source: Running Configuration
+- Destination: Startup Configuration
+
+Et cliquer sur `Apply`
+
+
+
+# Configuration Wan Bridgé
+
+:::warning
+
+WAN bridgé ne fonctionne pas avec un port WAN connecté
+
+:::
+
+# Connection en mode routeur
+
+## Correction Bug WAN
+
+Bug référencé: [Solved: Re: RV340 & WISP WAN Connection Problems - Cisco Community](https://community.cisco.com/t5/routing/rv340-amp-wisp-wan-connection-problems/m-p/3827586#M312317)
+
+- aller dans WAN > Multi-WAN > sélectionner le port WAN > (éditer)
+- décocher la case `Enable Network Service Detection`
+
+
+
+# Références
+
+- [Solved: Re: RV340 & WISP WAN Connection Problems - Cisco Community](https://community.cisco.com/t5/routing/rv340-amp-wisp-wan-connection-problems/m-p/3827586#M312317)
+* [Solved: Re: RV340 SSH Access - Cisco Community](https://community.cisco.com/t5/routers-small-business/rv340-ssh-access/m-p/4424462#M41557)
+* [CSCvn25722 - RV340W Wireless instability causing disconnections - Page 2 - Cisco Community](https://community.cisco.com/t5/cisco-bug-discussions/cscvn25722-rv340w-wireless-instability-causing-disconnections/td-p/3798540/page/2)
+* [CISCO RV340W - slow WiFi connectivity (both 2.4G and 5G) - Cisco Community](https://community.cisco.com/t5/routers-small-business/cisco-rv340w-slow-wifi-connectivity-both-2-4g-and-5g/td-p/3769730)
+* [Slows speeds on RV340W - Cisco Community](https://community.cisco.com/t5/routers-small-business/slows-speeds-on-rv340w/td-p/4105220)
+* [[SOLVED] - Cisco RV340 not getting speed more than 100mbps? | Tom's Hardware Forum](https://forums.tomshardware.com/threads/cisco-rv340-not-getting-speed-more-than-100mbps.3722296/)
+* [Problèmes Et Solutions - Cisco RV340W Guide De Démarrage Rapide [Page 10] | ManualsLib](https://www.manualslib.fr/manual/206596/Cisco-Rv340W.html?page=10)

+ 1 - 0
pandoc.css

@@ -0,0 +1 @@
+/Users/lauhub/Documents/04_travail/AV-enseignement/0-Outils/_GUIDE_GENERATION/pandoc.css

+ 1 - 1
ssh/bash-completion-ssh.md

@@ -2,7 +2,7 @@
 
 
 
 
 
 
-
+* [bash - Autocomplete server names for SSH and SCP - Unix & Linux Stack Exchange](https://unix.stackexchange.com/questions/136351/autocomplete-server-names-for-ssh-and-scp)
 * [How to enable bash completion in macOS](https://www.simplified.guide/macos/bash-completion)
 * [How to enable bash completion in macOS](https://www.simplified.guide/macos/bash-completion)
 * [Install Bash Completion for Mac OS-X - MagePsycho Blog](https://blog.magepsycho.com/bash-completion-mac-os-x/)
 * [Install Bash Completion for Mac OS-X - MagePsycho Blog](https://blog.magepsycho.com/bash-completion-mac-os-x/)
 * [bash-completion/bash_completion at f565bf9f2c3315a102174eb8b6c93253fc3e9353 · scop/bash-completion](https://github.com/scop/bash-completion/blob/f565bf9f2c3315a102174eb8b6c93253fc3e9353/bash_completion#L2515)
 * [bash-completion/bash_completion at f565bf9f2c3315a102174eb8b6c93253fc3e9353 · scop/bash-completion](https://github.com/scop/bash-completion/blob/f565bf9f2c3315a102174eb8b6c93253fc3e9353/bash_completion#L2515)