makeITsimple wiki - linux

alpine-kiosk

Anonymous (anonymous@undisclosed.example.com) — 2025-02-05T13:46:03+00:00

Création d'un Kiosk Alpine * Sur une carte SD, créer une partition FAT32 de 512Mb * Copier les fichiers sur la carte * Démarrer le raspbery et se loguer en root (pas de pwd) * Entrer la commande setup-alpine * Si pendant l'install il dit

apache-proxy

Anonymous (anonymous@undisclosed.example.com) — 2022-04-21T10:56:10+00:00

Serveur Apache Proxy avec authentification * Installer les utilitaires: apt install apache2 apache2-utils * Editer le fichier d'apache nano /etc/apache2/sites-enables/000... et y modifier le contenu de la sorte ProxyPreserveHost On ProxyPass / http://serverlocal:port/ ProxyPassReverse / http://serverlocal:port/ Timeout 5400 ProxyTimeout 5400 ServerName server Order deny,allow Allow from all Authtype …

apache-wsgi

Anonymous (anonymous@undisclosed.example.com) — 2023-04-01T08:54:08+00:00

Apache2 & wsgi Install * Installer les paquets: apt update && apt dist-upgrade apt install apache2 python3 python3-pip python3-venv * Créer l'environnement: cd /opt && mkdir flask-app cd flask-app python3 -m venv flask-venv source flask-venv/bin/activate pip3 install flask

bash-commands

Anonymous (anonymous@undisclosed.example.com) — 2021-09-05T03:31:16+00:00

Quelques commandes bash utiles * Actions en masse sur base d'une extension: for f in *.vmdk; do echo $f; done NB: find pourrait être plus simple à utiliser selon les cas

certbot

Anonymous (anonymous@undisclosed.example.com) — 2021-06-20T09:40:08+00:00

Certbot - Let's encrypt Instructions * Installer le paquet apt install certbot python-certbot-nginx * Lancer la configuration pour nginx certbot --nginx * Rajouter une commande pour mettre à jour les domaines automatiquement crontab -e

chroot_sftp

Anonymous (anonymous@undisclosed.example.com) — 2021-06-20T09:40:08+00:00

chroot pour un utilisateur sftp Instructions * Editer le fichier sshd_conf nano /etc/ssh/sshd_config Et rajouter après UsePam=yes Match User **UTILISATEUR** ChrootDirectory /path AllowTCPForwarding no X11Forwarding no ForceCommand internal-sftp

clavier

Anonymous (anonymous@undisclosed.example.com) — 2023-01-14T17:59:47+00:00

apt install console-data keyboard-configuration

clone-rsync

Anonymous (anonymous@undisclosed.example.com) — 2021-06-20T09:40:06+00:00

Cloner un système avec Rsync Opération * rsync -aHAXSz --delete --info=progress2 --numeric-ids -e "ssh -p 22" --exclude={"/dev/*","/proc/*","/sys/*","/tmp/*","/run/*","/mnt/*","/media/*","/lost+found","/etc/fstab","/etc/udev/rules.d/*","/etc/network/*","/lib/modprobe.d/*"} root@serveur_distant:/ /

convert-ssh-key

Anonymous (anonymous@undisclosed.example.com) — 2026-03-24T20:42:29+00:00

sshpk-conv /path/to/your/private/key -t ssh -p.

crowdsec

Anonymous (anonymous@undisclosed.example.com) — 2023-12-26T09:02:18+00:00

Crowdsec Installation de Crowdsec curl -s https://packagecloud.io/install/repositories/crowdsec/crowdsec/script.deb.sh | bash apt-get install crowdsec systemctl restart crowdsec Installation d'un bouncer Crowdsec Un bouncer est une application qui prend action sur base des détections de Crowdsec. Il en existe pour plusieurs applications (wordpress, nginx,

curl

Anonymous (anonymous@undisclosed.example.com) — 2023-06-11T18:57:32+00:00

Curl en vrac curl -d "{ \n \"action\":\"inventory\",\n \"deviceid\":\"testCUrl\",\n \"version\":\"12\",\n \"name\":\"curl_agent\",\n \"content\":[\n {\n \"bios\":[{\"mmanufacturer\":\"vsoft\",\"smodel\":\"smodel222\"}],\n \"operatingsystem\":[{\"version\":\"Windows 11\",\"kernel_version\":\"22H2\"}]\n }\n ]\n}" -H "Content-Type: application/json" -H "Content-Encoding: gzip" http://10.0.0.19:8069/front/inventory.php curl -d "{\"action\":\"contact\",\"deviceid\":\"WINCC-LS…

dhcp

Anonymous (anonymous@undisclosed.example.com) — 2023-01-10T22:08:07+00:00

DHCP Server sous Debian bullseye apt install isc-dhcp-server nano /etc/default/isc-dhcp-server # Décommenter la ligne suivante: DHCPDv4_CONF=/etc/dhcp/dhcpd.conf #DHCPDv6_CONF=/etc/dhcp/dhcpd6.conf INTERFACESv4="eth0" nano /etc/dhcp/dhcpd.conf option domain-name "exop.lan"; option domain-name-servers 192.168.178.211; authoritative; subnet 192.168.178.0 netmask 255.255.255.0 { option routers 192.168.178.1; # specify subnet mask option subnet-mask 255.255.255.0; # specif…

docker-nvidia-ollama

Anonymous (anonymous@undisclosed.example.com) — 2025-02-25T15:48:59+00:00

Docker Ollama avec support Nvidia A utiliser sous Ubuntu 22.4 Le port du service est 3000 Drivers NVIDIA lspci | grep -i nvidia apt install ubuntu-drivers-common -y ubuntu-drivers install Drivers NVIDIA Cuda wget https://developer.download.nvidia.com/compute/cuda/repos/ubuntu2204/x86_64/cuda-keyring_1.1-1_all.deb dpkg -i cuda-keyring_1.1-1_all.deb apt update apt-get -y install cuda-toolkit-12-6

docker

Anonymous (anonymous@undisclosed.example.com) — 2025-03-08T09:25:30+00:00

Docker Installation * Désinstaller les paquets problématiques: for pkg in docker.io docker-doc docker-compose podman-docker containerd runc; do apt-get remove $pkg; done * Installer les certificats et le repository apt-get update apt-get install ca-certificates curl install -m 0755 -d /etc/apt/keyrings curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc chmod a+r /etc/apt/keyrings/docker.asc # Add the repository to Apt sources: echo \ "deb [arch=$…

fail2ban

Anonymous (anonymous@undisclosed.example.com) — 2021-06-20T09:40:06+00:00

Fail2ban * Installation: apt install fail2ban * Editer le fichier de config debian nano /etc/fail2ban/jail.d/defaults-debian.conf et voici un exemple de config: [sshd] enabled = true [sogo-auth] enabled = true [dovecot] enabled = true [postfix-rbl] enabled = true [postfix-sasl] enabled = true [postfix] enable = true

fio

Anonymous (anonymous@undisclosed.example.com) — 2023-01-14T07:33:28+00:00

fio -direct=1 -iodepth=32 -rw=randwrite -ioengine=libaio -bs=4k -numjobs=4 -time_based=1 ^Cuntime=1000 -group_reporting -filename=/dev/vdx -name=test #Tests de performances d'E/S par seconde fio --size=4GB --direct=1 --rw=randrw --bs=4k --ioengine=libaio --iodepth=256 --runtime=120 --numjobs=4 --time_based --group_reporting --name=iops-test-job --eta-newline=1 #Tests des performances de débit fio --size=500GB --direct=1 --rw=randrw --bs=64k --ioengine=libaio --iodepth=64 --runtime=120 --numjo…

fusionpbx

Anonymous (anonymous@undisclosed.example.com) — 2025-07-05T17:29:42+00:00

FusionPBX Configuration Sip Trunk * Dans Accounts > Gateways: rajouter un compte * Dans Advanced > Access control: rajouter l'IP Wan du serveur SIP Trunk dans la règle Providers * Dans Status > Sip Status: Relancer les ACL * Dans Dialplan > Destinantion: Ajouter une règle pour le numéro entrant

goaccess

Anonymous (anonymous@undisclosed.example.com) — 2021-10-13T16:21:52+00:00

Go access Install: apt install build-essential libncursesw5-dev libgeoip-dev wget https://tar.goaccess.io/goaccess-1.5.2.tar.gz tar xvzf goaccess-1.5.2.tar.gz ./configure --enable-utf8 --enable-geoip=legacy --with-openslsl make make install Version interactive

grafana

Anonymous (anonymous@undisclosed.example.com) — 2022-05-03T20:09:43+00:00

apt update && apt dist-upgrade dpkg-reconfigure locales dpkg-reconfigure tzdata apt-get install -y apt-transport-https gnupg2 software-properties-common wget wget -q -O - https://packages.grafana.com/gpg.key | apt-key add - echo "deb https://packages.grafana.com/oss/deb stable main" | tee -a /etc/apt/sources.list.d/grafana.list apt update apt-get install grafana systemctl daemon-reload systemctl enable grafana-server --now

gravity

Anonymous (anonymous@undisclosed.example.com) — 2025-03-07T09:02:55+00:00

Gravity Installation * Installer Docker * Créer un fichier docker compose: nano docker-compose.yml avec le contenu: --- version: "3.4" services: gravity: # Important for this to be static and unique hostname: gravity1 image: ghcr.io/beryju/gravity:stable restart: unless-stopped network_mode: host volumes: - data:/data # environment: # LOG_LEVEL: info # The default log level of info logs DHCP and DNS queries, so ensure # the logs aren…

grommunio-linux

Anonymous (anonymous@undisclosed.example.com) — 2023-07-14T19:01:58+00:00

Grommunio Install on debian Préliminaires * Mettre à jour le système: apt update && apt dist-upgrade * Configurer les locales: dpkg-reconfigure locales (choisir FR-BE.UTF8) * Documenter le hostname dans /etc/hosts et /etc/hostname *

hpe-packages

Anonymous (anonymous@undisclosed.example.com) — 2021-06-20T09:40:06+00:00

HPE packages pour Debian Installation * Installer curl apt install curl * Ajouter les clés curl https://downloads.linux.hpe.com/SDR/hpPublicKey2048.pub | apt-key add - curl https://downloads.linux.hpe.com/SDR/hpPublicKey2048_key1.pub | apt-key add - curl https://downloads.linux.hpe.com/SDR/hpePublicKey2048_key1.pub | apt-key add -

hpe-raid

Anonymous (anonymous@undisclosed.example.com) — 2026-01-07T09:20:30+00:00

Raid HP Support sous linux Install curl https://downloads.linux.hpe.com/SDR/hpPublicKey2048.pub | apt-key add - curl https://downloads.linux.hpe.com/SDR/hpPublicKey2048_key1.pub | apt-key add - curl https://downloads.linux.hpe.com/SDR/hpePublicKey2048_key1.pub | apt-key add - nano /etc/apt/sources.list.d/hpe.list deb http://downloads.linux.hpe.com/SDR/repo/mcp/ bullseye/current non-free apt install ssacli

install_xca

Anonymous (anonymous@undisclosed.example.com) — 2023-03-10T11:17:37+00:00

Installer XCA * apt install build-essential cmake git wget curl cmake gcc g++ qt4-qmake openssl libnss3 libnss3-dev qt5-default qttools5-dev-tools checkinstall automake autoconf libltdl-dev libssl-dev * Télécharger l'application et la décompresser

install-samba-backport

Anonymous (anonymous@undisclosed.example.com) — 2023-09-18T18:58:27+00:00

Installer samba en backport echo "deb http://deb.debian.org/debian bullseye-backports main contrib non-free" > /etc/apt/sources.list.d/backport.list apt update apt -t bullseye-backports install samba-ad-dc

jitsi

Anonymous (anonymous@undisclosed.example.com) — 2021-08-13T18:58:46+00:00

Jitsi Meet Serveur apt install gnupg2 nginx-full apt-transport-https curl https://download.jitsi.org/jitsi-key.gpg.key | sh -c 'gpg --dearmor > /usr/share/keyrings/jitsi-keyring.gpg' echo 'deb [signed-by=/usr/share/keyrings/jitsi-keyring.gpg] https://download.jitsi.org stable/' | tee /etc/apt/sources.list.d/jitsi-stable.list > /dev/null apt update apt install jitsi-meet

letsencrypt

Anonymous (anonymous@undisclosed.example.com) — 2021-06-20T09:40:08+00:00

Quelques commandes sur let'sencrypt Ajouter un domaine ./certbot-auto certonly --nginx --agree-tos --expand -d web.makeitsimple.be,makeitsimple.be,www.makeitsimple.be,wiki.makeitsimple.be --cert-name web.makeitsimple.be-0001 --cert-name web.makeitsimple.be-0001 pour specifier le certificat

librenms

Anonymous (anonymous@undisclosed.example.com) — 2021-06-20T09:40:06+00:00

Librenms * Installer les paquets nécessaires apt install acl curl composer fping git graphviz imagemagick mariadb-client mariadb-server mtr-tiny nginx-full nmap php7.3-cli php7.3-curl php7.3-fpm php7.3-gd php7.3-json php7.3-mbstring php7.3-mysql php7.3-snmp php7.3-xml php7.3-zip python3-dotenv python3-pymysql python3-redis python3-setuptools rrdtool snmp snmpd whois python3-pip

mailpiler

Anonymous (anonymous@undisclosed.example.com) — 2023-03-27T13:08:29+00:00

Mail Piler Installation des prérequis apt purge postfix apt install gnupg2 sysstat python3-mysqldb mariadb-server default-libmysqlclient-dev memcached libapache2-mod-php php-mysql libtre5 libtre-dev openssl libssl-dev libzip-dev libzip4 build-essential gcc libwrap0 libwrap0-dev

moodle

Anonymous (anonymous@undisclosed.example.com) — 2024-06-10T07:09:49+00:00

Moodle Reverse Proxy Sur le serveur Proxy ServerName server.moodle.be ErrorLog ${APACHE_LOG_DIR}/campus-error.log CustomLog ${APACHE_LOG_DIR}/campus-access.log combined ProxyRequests Off ProxyPreserveHost Off RequestHeader set X-Forwarded-Host rproxy1.makeitsimple.be RequestHeader set X-Forwarded-Server rproxy1.makeitsimple.be ProxyPass / http://10.20.53.18/ nocanon ProxyPassReverse / http://10.20.53.18/ SSLCertificateFile /etc/le…

mssql

Anonymous (anonymous@undisclosed.example.com) — 2021-06-20T09:40:06+00:00

Microsoft SQL Server sur Ubuntu 20.04 Installation * Mettre à jour le système apt update apt dist-upgrade * Installer quelques paquets nécessaires apt install gnupg curl software-properties-common * Ajouter la clé du repository MS wget -qO- https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add -

network-performance

Anonymous (anonymous@undisclosed.example.com) — 2025-10-17T04:23:00+00:00

Problème de performance réseau Vérifier le mtu for s in 1472 1452 1432 1412 1392 1372 1352; do echo -n "$s: "; ping -M do -s $s -c1 pbsh2.makeitsimple.be | tail -1; done Si le MTU le plus haut est par exemple 1452, on configure l'interface avec 28 en plus (20 pour l'entète IP et 8 pour ICMP)

ohmyform

Anonymous (anonymous@undisclosed.example.com) — 2023-08-27T20:16:43+00:00

Install Ohmyform apt install apt-transport-https ca-certificates curl gnupg2 software-properties-common curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add - add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/debian $(lsb_release -cs) stable" apt update apt-cache policy docker-ce apt install docker-ce systemctl status docker nano docker-compose.yml

omada

Anonymous (anonymous@undisclosed.example.com) — 2024-07-25T19:13:15+00:00

Omada controller install apt install openjdk-17-jre-headless jsvc gpg curl -y curl -sSL http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl1.1_1.1.1-1ubuntu2.1~18.04.23_amd64.deb -o libssl1.1.deb dpkg -i libssl1.1.deb curl -fsSL https://www.mongodb.org/static/pgp/server-4.4.asc | gpg -o /usr/share/keyrings/mongodb-server-4.4.gpg --dearmor echo "deb [ signed-by=/usr/share/keyrings/mongodb-server-4.4.gpg ] http://repo.mongodb.org/apt/debian buster/mongodb-org/4.4 main" | tee /etc/ap…

postgres

Anonymous (anonymous@undisclosed.example.com) — 2024-01-04T07:28:26+00:00

Postgres Quelques commandes su postgres psql # Affiche les databases \l # Se connecte à la db Creapix \c creapix # Affiche toutes les tables commençant par makeitsimple \dt makeitsimple* # Affiche toutes les tables \dt # Quitte \q # Effacer une table et redémarrer l'index TRUNCATE makeitsimple_itsm_software_name RESTART IDENTITY CASCADE;

proxmox-backup-server

Anonymous (anonymous@undisclosed.example.com) — 2026-03-28T20:10:56+00:00

Proxmox Backup Server Créer un nouveau volume newpath="isis" newsize="2600G" lvcreate -n $newpath -L $newsize vg0 mkfs.ext4 /dev/vg0/$newpath mkdir /srv/$newpath nano /etc/fstab systemctl daemon-reload mount /srv/$newpath/ proxmox-backup-manager datastore create $newpath /srv/$newpath

proxmox-sur-hetzner

Anonymous (anonymous@undisclosed.example.com) — 2024-12-29T19:51:30+00:00

Hetzner Proxmox & ZFS Installation * En mode rescue, se connecter en SSH et introduire la commande installimage * Choisir Other * Puis Proxmox Bullseye * Dans le fichier de configuration * Modifier le hostname * Réaliser une partition de la sorte:

raid1-vers-raid5

Anonymous (anonymous@undisclosed.example.com) — 2021-08-13T12:13:04+00:00

Convertir un raid1 vers un raid5 Parfois une configuration de base chez un fournisseur livre le serveur avec 4 disques en raid1 ... * Afficher le statut de l'array: mdadm /dev/md4 --detail cat /proc/mdstat * Supprimer les disques raid1 en trop:

resize-lvm

Anonymous (anonymous@undisclosed.example.com) — 2024-04-26T06:56:54+00:00

Faire un resize LVM on the fly Ceci n'est valable que pour les partitions en LVM. Dans Proxmox * Augmenter la taille du disque sur Proxmox * Cliquer sur la VM * Se rendre dans l'onglet Hardware * Sélectionner le disque dur à augmenter

rustdesk

Anonymous (anonymous@undisclosed.example.com) — 2024-08-29T12:53:24+00:00

Rustdesk Config Server Addressbook preset-address-book-name=KlinicareShop remove-preset-password-warning=Y preset-user-name=vincent

smartmontools

Anonymous (anonymous@undisclosed.example.com) — 2021-06-30T06:40:36+00:00

Linux: Monitorer l'état des disques avec Smartmontools Configuration * Installer postfix pour recevoir les notifications par email: apt install postfix et choisir Internet Site * Faire un test d'envoi email echo -e "Subject: Test envoi postfix\nFonctionne" | sendmail email@makeitsimple.be

systemd

Anonymous (anonymous@undisclosed.example.com) — 2022-08-03T05:45:22+00:00

systemd * Config: /etc/systemd * Bibliothèque: /usr/lib/systemd

ubuntu-netplan

Anonymous (anonymous@undisclosed.example.com) — 2025-03-07T09:14:07+00:00

Ubuntu Netplan Les fichiers de configuration se trouvent dans /etc/netplan/ Exemple d'une config en ip fixe: network: ethernets: ens18: addresses: - 10.0.0.240/24 routes: - to: default via: 10.0.0.1 nameservers: search: [dp2.lan] addresses: [10.0.0.242,1.1.1.1] version: 2

ufw

Anonymous (anonymous@undisclosed.example.com) — 2021-06-20T09:40:08+00:00

UFW Installation apt install ufw Quelques commandes * Afficher le statut (rajouter verbose pour plus de détails) ufw status * Activer le firewall et le lancer automatiquement au démarrage ufw enable * Désactiver le firewall ufw disable

unattended-upgrades

Anonymous (anonymous@undisclosed.example.com) — 2021-06-30T09:40:10+00:00

Linux: Mises à jours automatiques (unattended-upgrades) Configuration * Installer les paquets nécessaires install unattended-upgrades apt-listchanges * Vérifier la configuration: nano /etc/apt/apt.conf.d/20auto-upgrades Il faut vérifier la présence de ces deux lignes:

unifi-controler

Anonymous (anonymous@undisclosed.example.com) — 2021-06-20T09:40:08+00:00

Unifi controler sur Debian 10 Installation * Mettre à jour apt update && apt dist-upgrage * Installer les paquets suivant: apt install wget gnupg2 ca-certificates apt-transport-https dirmngr gnupg software-properties-common multiarch-support

vaultwarden

Anonymous (anonymous@undisclosed.example.com) — 2022-09-03T20:07:43+00:00

Vaultwarden en vrac: apt install mariadb-server mariadb-client libmariadb3 libpq5 wget https://download.opensuse.org/repositories/home:/Masgalor:/Vaultwarden/Debian_11/amd64/vaultwarden_1.25.2-1+1.1_amd64.deb wget https://download.opensuse.org/repositories/home:/Masgalor:/Vaultwarden/Debian_11/all/vaultwarden-webvault_2022.6.2-1+12.1_all.deb dpkg -i *.deb nano /etc/apache2/sites-enabled/000-default.conf # The ServerName directive sets the request scheme, hostnam…

wazo

Anonymous (anonymous@undisclosed.example.com) — 2024-03-21T14:48:35+00:00

Wazo Installation Première utilisation Le login: Autoprovisionning Yealink Côte Wazo Activation des templates * Aller dans le menu Paramètres Globaux -> Modules de Périphériques * Activer le module qui vous intéresse Côté Téléphone

wazuh

Anonymous (anonymous@undisclosed.example.com) — 2024-04-22T10:35:41+00:00

Installation de wazuh installation server * ouvrir le terminal * entrer curl -sO https://packages.wazuh.com/4.7/wazuh-install.sh && sudo bash ./wazuh-install.sh -a le logiciel va automatiquement installer indexer, server et dashboard Le mot de passe administrateur sera donner a la fin de l'isntallation, `n'oubliez pas de le noter`

wikijs

Anonymous (anonymous@undisclosed.example.com) — 2024-04-11T10:19:18+00:00

WikiJS Installer Postgresql apt install postgresql sudo sudo -u postgres psql ALTER USER postgres WITH PASSWORD 'password'; CREATE USER wikijs with CREATEDB CREATEROLE; ALTER USER wikijs with PASSWORD 'password'; CREATE DATABASE wikijs OWNER wikijs; \l

zabbix

Anonymous (anonymous@undisclosed.example.com) — 2025-12-10T19:24:42+00:00

Zabbix Encore à faire: * Icones ? * Francisation?. * Surveiller Process * Surveiller Ping Zabbix Agent Générer une clé PSK openssl rand -hex 32 Zabbix Agent sous Linux wget https://repo.zabbix.com/zabbix/6.2/debian/pool/main/z/zabbix-release/zabbix-release_6.2-4%2Bdebian11_all.deb dpkg -i zabbix-release_5.2-1+debian10_all.deb apt update apt install zabbix-agent nano /etc/zabbix/zabbix_agentd.conf Server=10.0.0.213 ServerActive=10.0.0.213 Hostname=Server2 service zabbix-agent res…

zfs

Anonymous (anonymous@undisclosed.example.com) — 2025-07-28T05:43:22+00:00

ZFS Histoire d'une recovery Proxmox en initramfs Le client était bloqué en initramfs, le démarrage ne pouvant monter les volumes zfs. Cette page m'a donné les informations pour pouvoir redémarrer. zpool import rpool zpool import pool1 mkdir /mnt cd /mnt mkdir proxmox zfs set mountpoint=/mnt/proxmox /rpool/ROOT/pve-1 zfs mount rpool/ROOT/pve-1 mount -t proc /proc /mnt/proxmox/proc mount --rb…