-
-
Notifications
You must be signed in to change notification settings - Fork 502
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
50 changed files
with
2,730 additions
and
2,344 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,5 +1,5 @@ | ||
| file:/// / | ||
| file:///root /root | ||
| file:///root Home | ||
| file:///mnt/dietpi_userdata DietPi User Data | ||
| file:///mnt/samba Samba Client | ||
| file:///mnt/nfs_client NFS Client |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,92 @@ | ||
| # https://nlnetlabs.nl/documentation/unbound/unbound.conf/ | ||
| server: | ||
| # Do not daemonize, to allow proper systemd service control and status estimation. | ||
| do-daemonize: no | ||
|
|
||
| # A single thread is pretty sufficient for home or small office instances. | ||
| num-threads: 1 | ||
|
|
||
| # Logging: For the sake of privacy and performance, keep logging at a minimum! | ||
| # - Verbosity 2 and up practically contains query and reply logs. | ||
| verbosity: 0 | ||
| log-queries: no | ||
| log-replies: no | ||
| # - If required, uncomment to log to a file, else logs are available via "journalctl -u unbound". | ||
| #logfile: "/var/log/unbound.log" | ||
|
|
||
| # Set interface to "0.0.0.0" to make Unbound listen on all network interfaces. | ||
| # Set it to "127.0.0.1" to listen on requests from the same machine only, useful in combination with Pi-hole. | ||
| interface: 0.0.0.0 | ||
| # Default DNS port is "53". When used with Pi-hole, set this to e.g. "5335", since "5353" is used by mDNS already. | ||
| port: 53 | ||
|
|
||
| # Control IP ranges which should be able to use this Unbound instance. | ||
| # The DietPi defaults permit access from official local network IP ranges only, hence requests from www are denied. | ||
| access-control: 0.0.0.0/0 refuse | ||
| access-control: 10.0.0.0/8 allow | ||
| access-control: 127.0.0.1/8 allow | ||
| access-control: 172.16.0.0/12 allow | ||
| access-control: 192.168.0.0/16 allow | ||
| access-control: ::/0 refuse | ||
| access-control: ::1/128 allow | ||
| access-control: fd00::/8 allow | ||
| access-control: fe80::/10 allow | ||
|
|
||
| # Private IP ranges, which shall never be returned or forwarded as public DNS response. | ||
| # NB: 127.0.0.1/8 is sometimes used by adblock lists, hence DietPi by default allows those as response. | ||
| private-address: 10.0.0.0/8 | ||
| private-address: 172.16.0.0/12 | ||
| private-address: 192.168.0.0/16 | ||
| private-address: 169.254.0.0/16 | ||
| private-address: fd00::/8 | ||
| private-address: fe80::/10 | ||
|
|
||
| # Define protocols for connections to and from Unbound. | ||
| # NB: Disabling IPv6 does not disable IPv6 IP resolving, which depends on the clients request. | ||
| do-udp: yes | ||
| do-tcp: yes | ||
| do-ip4: yes | ||
| do-ip6: yes | ||
| prefer-ip6: no | ||
|
|
||
| # DNS root server information file. Update regularly via: "curl -# https://www.internic.net/domain/named.root > /var/lib/unbound/root.hints" | ||
| root-hints: "/var/lib/unbound/root.hints" | ||
|
|
||
| # Maximum number of queries per second | ||
| ratelimit: 1000 | ||
|
|
||
| # Defend against and print warning when reaching unwanted reply limit. | ||
| unwanted-reply-threshold: 10000 | ||
|
|
||
| # Set EDNS reassembly buffer size to match new upstream default, as of DNS Flag Day 2020 recommendation. | ||
| edns-buffer-size: 1232 | ||
|
|
||
| # Increase incoming and outgoing query buffer size to cover traffic peaks. | ||
| so-rcvbuf: 4m | ||
| so-sndbuf: 4m | ||
|
|
||
| # Hardening | ||
| harden-glue: yes | ||
| harden-dnssec-stripped: yes | ||
| harden-algo-downgrade: yes | ||
| harden-large-queries: yes | ||
| harden-short-bufsize: yes | ||
|
|
||
| # Privacy | ||
| use-caps-for-id: yes # Spoof protection by randomising capitalisation | ||
| rrset-roundrobin: yes | ||
| qname-minimisation: yes | ||
| minimal-responses: yes | ||
| hide-identity: yes | ||
| identity: "Server" # Purposefully a dummy identity name | ||
| hide-version: yes | ||
|
|
||
| # Caching | ||
| cache-min-ttl: 300 | ||
| cache-max-ttl: 86400 | ||
| serve-expired: yes | ||
| neg-cache-size: 4M | ||
| prefetch: yes | ||
| prefetch-key: yes | ||
| msg-cache-size: 50m | ||
| rrset-cache-size: 100m |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,4 @@ | ||
| #!/bin/bash | ||
| #!/bin/dash | ||
| { | ||
| #//////////////////////////////////// | ||
| # DietPi Raspimjpeg control Script | ||
|
|
@@ -7,7 +7,7 @@ | |
| # Created by Daniel Knight / [email protected] / dietpi.com | ||
| # | ||
| # Info: | ||
| # - Location: /var/lib/dietpi/dietpi-software/services/raspimjpeg.sh | ||
| # - Location: /var/lib/dietpi/dietpi-software/installed/raspimjpeg.sh | ||
| # - Allows service control for Raspimjpeg and PHP schedule, used by RPi Camera Web | ||
| # - Called from /etc/systemd/system/raspimjpeg.service | ||
| # | ||
|
|
@@ -24,17 +24,17 @@ | |
| mkdir -p /dev/shm/mjpeg | ||
| chown www-data:www-data /dev/shm/mjpeg | ||
| chmod 777 /dev/shm/mjpeg | ||
| sudo -u www-data raspimjpeg &> /dev/null & | ||
| sudo -u www-data raspimjpeg > /dev/null 2>&1 & | ||
| sleep 4 | ||
| sudo -u www-data php /var/www/rpicam/schedule.php &> /dev/null & | ||
| sudo -u www-data php /var/www/rpicam/schedule.php > /dev/null 2>&1 & | ||
|
|
||
| } | ||
|
|
||
| if [[ $1 == 'stop' ]]; then | ||
| if [ "$1" = 'stop' ]; then | ||
|
|
||
| Raspimjeg_Stop | ||
|
|
||
| elif [[ $1 == 'start' ]]; then | ||
| elif [ "$1" = 'start' ]; then | ||
|
|
||
| Raspimjeg_Start | ||
|
|
||
|
|
||
Oops, something went wrong.