/ • This is a web feed, also known as an Atom feed. Subscribe by copying the URL from the address bar into your newsreader. Visit About Feeds to learn more and get started. It's free. Visit website Recent posts Updated on $DATE date Andrew Wippler's Sketchpad Ideas, blog, etc. Zola2025-09-25T08:39:46.009249+00:00/atom.xml 2025-09-25T08:39:46.009249+00:00 2025-09-25T08:39:46.009249+00:00 Andrew Wippler /2025-09-25-helper-scripts/ <p>I replaced OnlyOffice with Collabora in my lab. I was able to extend their WOPI example to produce a <a class="external" href="https://github.com/andrewwippler/Waffle-WOPI">Minimum Viable Product</a>. As it stands now, the software is feature complete for my use case. From there, I mount my data to my NFS storage and sync that folder with Dropbox. This lets me use a filebrowser for my currently in work documents. I can then access those contents from my <a href="/2021-04-02-remarkable-2-review.md">reMarkable</a> using the Dropbox integration. Unfortunately, the reMarkable reads PDFs and not docx. To combat this problem, I have created a nightly script to convert the files to PDF. This is easily packaged into a container and run as a kubernetes cronjob. Since my NFS storage is also a persistent volume claim, I can reuse the same ReadWriteMany mount for both my Waffle WOPI server and the wrapper script to libreoffice.</p> <h2 id="the-script">The Script</h2> <pre data-lang="bash" class="language-bash z-code"><code class="language-bash" data-lang="bash"><span class="z-source z-shell z-bash"><span class="z-comment z-line z-number-sign z-shell"><span class="z-punctuation z-definition z-comment z-begin z-shell">#</span></span><span class="z-comment z-line z-number-sign z-shell">!/usr/bin/env bash</span><span class="z-comment z-line z-number-sign z-shell"> </span></span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-support z-function z-set z-shell">set</span></span><span class="z-meta z-function-call z-arguments z-shell"> -euo pipefail</span> </span><span class="z-source z-shell z-bash"> </span><span class="z-source z-shell z-bash"><span class="z-comment z-line z-number-sign z-shell"><span class="z-punctuation z-definition z-comment z-begin z-shell">#</span></span><span class="z-comment z-line z-number-sign z-shell"> Defaults: mounted /data directory</span><span class="z-comment z-line z-number-sign z-shell"> </span></span><span class="z-source z-shell z-bash"><span class="z-variable z-other z-readwrite z-assignment z-shell">input_dir</span><span class="z-keyword z-operator z-assignment z-shell">=</span><span class="z-string z-unquoted z-shell"><span class="z-string z-quoted z-double z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&quot;</span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-definition z-variable z-shell">$</span><span class="z-punctuation z-section z-expansion z-parameter z-begin z-shell">{</span></span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-variable z-other z-readwrite z-shell">1</span></span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-keyword z-operator z-assignment z-shell">:-</span></span><span class="z-meta z-group z-expansion z-parameter z-shell">/data</span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-section z-expansion z-parameter z-end z-shell">}</span></span><span class="z-punctuation z-definition z-string z-end z-shell">&quot;</span></span></span> </span><span class="z-source z-shell z-bash"><span class="z-variable z-other z-readwrite z-assignment z-shell">output_dir</span><span class="z-keyword z-operator z-assignment z-shell">=</span><span class="z-string z-unquoted z-shell"><span class="z-string z-quoted z-double z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&quot;</span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-definition z-variable z-shell">$</span><span class="z-punctuation z-section z-expansion z-parameter z-begin z-shell">{</span></span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-variable z-other z-readwrite z-shell">2</span></span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-keyword z-operator z-assignment z-shell">:-</span></span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-definition z-variable z-shell">$</span><span class="z-variable z-other z-readwrite z-shell">input_dir</span></span></span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-section z-expansion z-parameter z-end z-shell">}</span></span><span class="z-punctuation z-definition z-string z-end z-shell">&quot;</span></span></span> </span><span class="z-source z-shell z-bash"> </span><span class="z-source z-shell z-bash"><span class="z-comment z-line z-number-sign z-shell"><span class="z-punctuation z-definition z-comment z-begin z-shell">#</span></span><span class="z-comment z-line z-number-sign z-shell"> Ensure output directory exists</span><span class="z-comment z-line z-number-sign z-shell"> </span></span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">mkdir</span></span><span class="z-meta z-function-call z-arguments z-shell"><span class="z-variable z-parameter z-option z-shell"><span class="z-punctuation z-definition z-parameter z-shell"> -</span>p</span> <span class="z-string z-quoted z-double z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&quot;</span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-definition z-variable z-shell">$</span><span class="z-variable z-other z-readwrite z-shell">output_dir</span></span><span class="z-punctuation z-definition z-string z-end z-shell">&quot;</span></span></span> </span><span class="z-source z-shell z-bash"> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-support z-function z-echo z-shell">echo</span></span><span class="z-meta z-function-call z-arguments z-shell"> <span class="z-string z-quoted z-double z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&quot;</span>Converting DOCX files from: <span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-definition z-variable z-shell">$</span><span class="z-variable z-other z-readwrite z-shell">input_dir</span></span><span class="z-punctuation z-definition z-string z-end z-shell">&quot;</span></span></span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-support z-function z-echo z-shell">echo</span></span><span class="z-meta z-function-call z-arguments z-shell"> <span class="z-string z-quoted z-double z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&quot;</span>Saving PDFs to: <span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-definition z-variable z-shell">$</span><span class="z-variable z-other z-readwrite z-shell">output_dir</span></span><span class="z-punctuation z-definition z-string z-end z-shell">&quot;</span></span></span> </span><span class="z-source z-shell z-bash"> </span><span class="z-source z-shell z-bash"><span class="z-comment z-line z-number-sign z-shell"><span class="z-punctuation z-definition z-comment z-begin z-shell">#</span></span><span class="z-comment z-line z-number-sign z-shell"> Convert all .docx → .pdf</span><span class="z-comment z-line z-number-sign z-shell"> </span></span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-support z-function z-shopt z-shell">shopt</span></span><span class="z-meta z-function-call z-arguments z-shell"> -s nullglob</span> </span><span class="z-source z-shell z-bash"><span class="z-variable z-other z-readwrite z-assignment z-shell">files</span><span class="z-keyword z-operator z-assignment z-shell">=</span><span class="z-punctuation z-section z-parens z-begin z-shell">(</span><span class="z-string z-quoted z-double z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&quot;</span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-definition z-variable z-shell">$</span><span class="z-variable z-other z-readwrite z-shell">input_dir</span></span><span class="z-punctuation z-definition z-string z-end z-shell">&quot;</span></span>/<span class="z-keyword z-operator z-regexp z-quantifier z-shell">*</span>.docx<span class="z-punctuation z-section z-parens z-end z-shell">)</span> </span><span class="z-source z-shell z-bash"> </span><span class="z-source z-shell z-bash"><span class="z-keyword z-control z-conditional z-if z-shell">if</span> <span class="z-support z-function z-test z-begin z-shell">[</span><span class="z-meta z-function-call z-arguments z-shell"> <span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-definition z-variable z-shell">$</span><span class="z-punctuation z-section z-expansion z-parameter z-begin z-shell">{</span></span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-keyword z-operator z-arithmetic z-shell">#</span></span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-variable z-other z-readwrite z-shell">files<span class="z-punctuation z-section z-braces z-begin z-shell">[</span><span class="z-variable z-language z-array z-shell">@</span><span class="z-punctuation z-section z-braces z-end z-shell">]</span></span></span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-section z-expansion z-parameter z-end z-shell">}</span></span> <span class="z-variable z-parameter z-option z-shell"><span class="z-punctuation z-definition z-parameter z-shell">-</span>eq</span> 0 <span class="z-support z-function z-test z-end z-shell">]</span></span><span class="z-keyword z-operator z-logical z-continue z-shell">;</span> <span class="z-keyword z-control z-conditional z-then z-shell">then</span> </span><span class="z-source z-shell z-bash"> <span class="z-meta z-function-call z-shell"><span class="z-support z-function z-echo z-shell">echo</span></span><span class="z-meta z-function-call z-arguments z-shell"> <span class="z-string z-quoted z-double z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&quot;</span>No .docx files found in <span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-definition z-variable z-shell">$</span><span class="z-variable z-other z-readwrite z-shell">input_dir</span></span><span class="z-punctuation z-definition z-string z-end z-shell">&quot;</span></span></span> </span><span class="z-source z-shell z-bash"> <span class="z-meta z-function-call z-shell"><span class="z-support z-function z-exit z-shell">exit</span></span><span class="z-meta z-function-call z-arguments z-shell"> 0</span> </span><span class="z-source z-shell z-bash"><span class="z-keyword z-control z-conditional z-end z-shell">fi</span> </span><span class="z-source z-shell z-bash"> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">soffice</span></span><span class="z-meta z-function-call z-arguments z-shell"><span class="z-variable z-parameter z-option z-shell"><span class="z-punctuation z-definition z-parameter z-shell"> --</span>headless</span><span class="z-variable z-parameter z-option z-shell"><span class="z-punctuation z-definition z-parameter z-shell"> --</span>convert-to</span> pdf:writer_pdf_Export<span class="z-variable z-parameter z-option z-shell"><span class="z-punctuation z-definition z-parameter z-shell"> --</span>outdir</span> <span class="z-string z-quoted z-double z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&quot;</span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-definition z-variable z-shell">$</span><span class="z-variable z-other z-readwrite z-shell">output_dir</span></span><span class="z-punctuation z-definition z-string z-end z-shell">&quot;</span></span> <span class="z-string z-quoted z-double z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&quot;</span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-definition z-variable z-shell">$</span><span class="z-punctuation z-section z-expansion z-parameter z-begin z-shell">{</span></span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-variable z-other z-readwrite z-shell">files<span class="z-punctuation z-section z-braces z-begin z-shell">[</span><span class="z-variable z-language z-array z-shell">@</span><span class="z-punctuation z-section z-braces z-end z-shell">]</span></span></span><span class="z-meta z-group z-expansion z-parameter z-shell"><span class="z-punctuation z-section z-expansion z-parameter z-end z-shell">}</span></span><span class="z-punctuation z-definition z-string z-end z-shell">&quot;</span></span></span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-support z-function z-echo z-shell">echo</span></span><span class="z-meta z-function-call z-arguments z-shell"> <span class="z-string z-quoted z-double z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&quot;</span>Conversion complete.<span class="z-punctuation z-definition z-string z-end z-shell">&quot;</span></span></span> </span></code></pre> <h2 id="the-dockerfile">The Dockerfile</h2> <pre data-lang="Dockerfile" class="language-Dockerfile z-code"><code class="language-Dockerfile" data-lang="Dockerfile"><span class="z-source z-dockerfile"><span class="z-keyword z-control z-dockerfile">FROM</span> debian:<span class="z-entity z-name z-enum z-tag-digest">bullseye-slim</span> </span><span class="z-source z-dockerfile"> </span><span class="z-source z-dockerfile"><span class="z-comment z-dockerfile"><span class="z-punctuation z-definition z-comment z-dockerfile">#</span> Install LibreOffice (soffice) </span></span><span class="z-source z-dockerfile"><span class="z-keyword z-control z-dockerfile">RUN </span>apt-get update &amp;&amp; apt-get install -y libreoffice &amp;&amp; rm -rf /var/lib/apt/lists/* </span><span class="z-source z-dockerfile"> </span><span class="z-source z-dockerfile"><span class="z-comment z-dockerfile"><span class="z-punctuation z-definition z-comment z-dockerfile">#</span> Working directory for mounted data </span></span><span class="z-source z-dockerfile"><span class="z-keyword z-control z-dockerfile">WORKDIR </span>/data </span><span class="z-source z-dockerfile"> </span><span class="z-source z-dockerfile"><span class="z-comment z-dockerfile"><span class="z-punctuation z-definition z-comment z-dockerfile">#</span> Copy script </span></span><span class="z-source z-dockerfile"><span class="z-keyword z-control z-dockerfile">COPY</span> convert.sh /usr/local/bin/convert.sh </span><span class="z-source z-dockerfile"><span class="z-keyword z-control z-dockerfile">RUN </span>chmod +x /usr/local/bin/convert.sh </span><span class="z-source z-dockerfile"> </span><span class="z-source z-dockerfile"><span class="z-comment z-dockerfile"><span class="z-punctuation z-definition z-comment z-dockerfile">#</span> Default entrypoint </span></span><span class="z-source z-dockerfile"><span class="z-keyword z-operator z-dockerfile">ENTRYPOINT </span>[<span class="z-string z-quoted z-double z-dockerfile"><span class="z-punctuation z-definition z-string z-begin z-dockerfile">&quot;</span>/usr/local/bin/convert.sh<span class="z-punctuation z-definition z-string z-end z-dockerfile">&quot;</span></span>] </span></code></pre> <h2 id="the-cronjob">The Cronjob</h2> <pre data-lang="yaml" class="language-yaml z-code"><code class="language-yaml" data-lang="yaml"><span class="z-source z-yaml"><span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">apiVersion</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">batch/v1</span> </span><span class="z-source z-yaml"><span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">kind</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">CronJob</span> </span><span class="z-source z-yaml"><span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">metadata</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">remarkable-dropbox-helper</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">namespace</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">collabora</span> </span><span class="z-source z-yaml"><span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">spec</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">concurrencyPolicy</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">Forbid</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">failedJobsHistoryLimit</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-constant z-numeric z-integer z-decimal z-yaml">1</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">jobTemplate</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">metadata</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">remarkable-dropbox-helper</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">spec</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">template</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">spec</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">containers</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">image</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">docker-domain/remarkable-dropbox-helper:latest</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">command</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-meta z-flow-sequence z-yaml"><span class="z-punctuation z-definition z-sequence z-begin z-yaml">[</span><span class="z-string z-quoted z-double z-yaml"><span class="z-punctuation z-definition z-string z-begin z-yaml">&quot;</span>convert.sh<span class="z-punctuation z-definition z-string z-end z-yaml">&quot;</span></span><span class="z-punctuation z-separator z-sequence z-yaml">,</span> <span class="z-string z-quoted z-double z-yaml"><span class="z-punctuation z-definition z-string z-begin z-yaml">&quot;</span>/data/editable<span class="z-punctuation z-definition z-string z-end z-yaml">&quot;</span></span><span class="z-punctuation z-definition z-sequence z-end z-yaml">]</span></span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">imagePullPolicy</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">Always</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">remarkable-dropbox-helper</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">volumeMounts</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">mountPath</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">/data</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">remarkable-dropbox-helper-pvc</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">dnsPolicy</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">ClusterFirst</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">imagePullSecrets</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">regsecret</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">restartPolicy</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">OnFailure</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">terminationGracePeriodSeconds</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-constant z-numeric z-integer z-decimal z-yaml">30</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">volumes</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">remarkable-dropbox-helper-pvc</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">persistentVolumeClaim</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">claimName</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">middleware-files-pvc</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">schedule</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-quoted z-single z-yaml"><span class="z-punctuation z-definition z-string z-begin z-yaml">&#39;</span>@daily<span class="z-punctuation z-definition z-string z-end z-yaml">&#39;</span></span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">timeZone</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">Europe/Helsinki</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">successfulJobsHistoryLimit</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-constant z-numeric z-integer z-decimal z-yaml">1</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">suspend</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-constant z-language z-boolean z-yaml">false</span> </span></code></pre> 2025-09-23T19:33:51.550596+00:00 2025-09-23T19:33:51.550596+00:00 Andrew Wippler /2025-09-23-thoroughly-convinced/ <p>I am thoroughly convinced that God still desires to pour out His Spirit into His chosen vessels as recorded in Acts 2:17–18, with the ultimate end being the salvation of souls (Acts 2:21). God’s purposes have not changed; He can empower His people so that He receives the glory through the lives that are transformed. While ministry today does not look exactly as it did in the first century, God remains more than capable of working through those who willingly submit to His plan (John 7:38–39). The same Spirit who filled the upper room is still available to fill surrendered hearts.</p> <p>However, at times, we as His ambassadors are not truly positioned to receive this outpouring. We are easily distracted, can have divided loyalties, or are plagued by spiritual instability through inconsistency. This inadequacy can transform us to be like a cup in the unsteady hand of a child. When our Heavenly Father tries to pour His Spirit into our cups our shifting nature spills the liquid and is unable to fully contain what God wants for us. The issue is never with the abundance of God’s supply, but with the steadiness of our vessel.</p> <p>It is in these very moments that God allows trials to enter our lives – not so that we crumble beneath the weight of the pressures, but to steady us to fully receive what He wants to give us. Through testing, He refines our faith and teaches us to wait patiently for Him. Trials teach us to throw out the anchor of our soul and fasten it firmly to the Solid Rock. As we lift our eyes from circumstances and fix them on Christ alone, stability begins to take root.</p> <p>As we continue on this patient path with hearts resting in Him, we experience the truth David proclaimed in Psalm 23: our cup runneth over. The oversupply of God is not an accident. It is the intended state for the believer. We are not filled with His supply just so that we might be benefactors. We overflow and are splling over so that others may see Christ.</p> 2025-09-12T15:55:56.778969+00:00 2025-09-12T15:55:56.778969+00:00 Andrew Wippler /2025-09-12-feeling-super-productive/ <p>Since August, I have been updating my digital life, which began with organizing my digital collection of books. I had never truly looked too indepth at Calibre before August 2025, but I am clearly blown away at its capabilities. I feel a bit awkward keeping the library on my desktop computer, but I have a script to periodically backup my home folder to my NAS. Today I finished organizing them in Calibre. I have discovered that I have 458 digital books - I have read 131, and have 135 on my reading list. The remainder are my wife's digital collection and reference material.</p> <p>I read books for information. Sometimes the information is good, so I highlight it for later consumption. I have build <a class="external" href="https://github.com/andrewwippler/SpeakerWindows">SpeakerWindows</a> as a means to organize those highlights and other thoughts for later use. This past month, I created two importers - readwise and play books. Readwise gathered my highlights from the Amazon's kindle, while Google Play Books sync their highlights in Google Drive. The end result was over 5,000 highlights that needed to be sorted.</p> <p>At first, I updated 5 a day through a prompts to ChatGPT, but that process was slow. So, I built a script that asked a local LLM to categorize the content of my notes and thoughts. It took about 2 hours to churn through those notes and create relavant tags for all of them. In the end, I am very happy with the results.</p> <p>I am now motivated to read books as fast as I can in Google Play Books, export them to Google Drive, and import them to SpeakerWindows.</p> 2025-09-10T06:13:21.365082+00:00 2025-09-10T06:13:21.365082+00:00 Andrew Wippler /2025-09-10-additional-insight-into-collaborative-editors/ <p>I think I had it all wrong when I accused OnlyOffice of sending data to the Russian goverment. This architectural design is called WOPI and was created for web applications that want to integrate with Microsoft Office. That means the architecture was really designed for the CIA to intercept a target's documents saved to Office 365.<sup class="footnote-reference" id="fr-1-1"><a href="#fn-1">1</a></sup> I think good targets would asummably be those <a class="external" href="https://www.ndr.de/fernsehen/sendungen/panorama/aktuell/NSA-targets-the-privacy-conscious,nsa230.html">people who were subscribed to or read</a> <a class="external" href="https://www.linuxjournal.com/content/nsa-linux-journal-extremist-forum-and-its-readers-get-flagged-extra-surveillance">a certain magazine in the early 2010's</a>.</p> <p>As a software design spec, WOPI appears to be robost for online collaborations, but when configured incorrectly, it can become an easy target for interception. I do not have that warm, fuzzy feeling that Russia does not have a backdoor to OnlyOffice, China does not have a backdoor to WPS Office, and the US government does not have a backdoor to Office 365 - so I think I will stay away from those implementations.<sup class="footnote-reference" id="fr-2-1"><a href="#fn-2">2</a></sup> Although, as a US Citizen, I know that there is a due process of law before any sort of surveillance can occur. A judge has to be convinced that there is ample evidence of wrongdoing before any sort of warrant will be granted for surveillance. The other two countries do not seem to afford that legal roadblock.</p> <p>A fourth option of the WOPI protocol is Collabora, which is the original web implementation of LibreOffice. This appeals to me as an alternative to my current OnlyOffice setup. Collabora has <a class="external" href="https://sdk.collaboraonline.com/docs/How_to_integrate.html">great docs</a> and even an example <a class="external" href="https://github.com/CollaboraOnline/collabora-online-sdk-examples//tree/master/webapp/nodejs">low-footprint WOPI server</a>. This will be better than my <a href="/2025-09-08-Only-Office-for-personal-use">Vibe coded OnlyOffice middleware server</a>.</p> <section class="footnotes"> <ol class="footnotes-list"> <li id="fn-1"> <p>This is a totally sarcastic statement, but has a vague realism to it. <a href="#fr-1-1">↩</a></p> </li> <li id="fn-2"> <p>I stay away from Mircrosoft products for other reasons too. Mainly, they are jumbled pieces of software designed for their largest US consumers, <a class="external" href="https://www.youtube.com/watch?v=BKorP55Aqvg">who have no idea what they want in a product</a>. <a href="#fr-2-1">↩</a></p> </li> </ol> </section> 2025-09-08T09:03:20.706302+00:00 2025-09-08T09:03:20.706302+00:00 Andrew Wippler /2025-09-08-recompiling-abiword/ <p>In my quest to replace Google Docs, I came across AbiWord, Gnome's editor. It looks newer than LibreOffice, appears feature complete, and has footnote support. The only problem is that it does not have keyboard shortcuts for footnotes. This is how I compiled AbiWord from the git source:</p> <h2 id="install-the-dependencies">Install the dependencies</h2> <pre data-lang="bash" class="language-bash z-code"><code class="language-bash" data-lang="bash"><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">sudo</span></span><span class="z-meta z-function-call z-arguments z-shell"> dnf install gcc gcc-c++ make autoconf automake libtool intltool m4 pkgconfig gtk3-devel libgsf-devel libxml2-devel glib2-devel libX11-devel libXext-devel libXpm-devel libXft-devel gperf bison flex libjpeg-turbo-devel libtiff-devel libpng-devel poppler-glib-devel cairo-devel pango-devel atk-devel gdk-pixbuf2-devel desktop-file-utils docbook2X docbook-dtds libxslt-devel libICE-devel libSM-devel libuuid-devel libIDL-devel boost-devel</span> </span></code></pre> <h2 id="build">Build</h2> <p>To build, one has to do "the normal Unix installation method": <code>./autogen.sh</code>, <code>./configure --prefix=$HOME/abi-install</code><sup class="footnote-reference" id="fr-1-1"><a href="#fn-1">1</a></sup>, <code>make -j$(nproc)</code>, and <code>make install</code>. However, on my Fedora 42 install, I received the error:</p> <pre data-lang="bash" class="language-bash z-code"><code class="language-bash" data-lang="bash"><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">./autogen.sh</span></span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">libtoolize:</span></span><span class="z-meta z-function-call z-arguments z-shell"> putting auxiliary files in <span class="z-string z-quoted z-single z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&#39;</span>.<span class="z-punctuation z-definition z-string z-end z-shell">&#39;</span></span>.</span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">libtoolize:</span></span><span class="z-meta z-function-call z-arguments z-shell"> copying file <span class="z-string z-quoted z-single z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&#39;</span>./ltmain.sh<span class="z-punctuation z-definition z-string z-end z-shell">&#39;</span></span></span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">libtoolize:</span></span><span class="z-meta z-function-call z-arguments z-shell"> putting macros in AC_CONFIG_MACRO_DIRS, <span class="z-string z-quoted z-single z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&#39;</span>m4<span class="z-punctuation z-definition z-string z-end z-shell">&#39;</span></span>.</span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">libtoolize:</span></span><span class="z-meta z-function-call z-arguments z-shell"> copying file <span class="z-string z-quoted z-single z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&#39;</span>m4/libtool.m4<span class="z-punctuation z-definition z-string z-end z-shell">&#39;</span></span></span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">libtoolize:</span></span><span class="z-meta z-function-call z-arguments z-shell"> copying file <span class="z-string z-quoted z-single z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&#39;</span>m4/ltoptions.m4<span class="z-punctuation z-definition z-string z-end z-shell">&#39;</span></span></span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">libtoolize:</span></span><span class="z-meta z-function-call z-arguments z-shell"> copying file <span class="z-string z-quoted z-single z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&#39;</span>m4/ltsugar.m4<span class="z-punctuation z-definition z-string z-end z-shell">&#39;</span></span></span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">libtoolize:</span></span><span class="z-meta z-function-call z-arguments z-shell"> copying file <span class="z-string z-quoted z-single z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&#39;</span>m4/ltversion.m4<span class="z-punctuation z-definition z-string z-end z-shell">&#39;</span></span></span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">libtoolize:</span></span><span class="z-meta z-function-call z-arguments z-shell"> copying file <span class="z-string z-quoted z-single z-shell"><span class="z-punctuation z-definition z-string z-begin z-shell">&#39;</span>m4/lt~obsolete.m4<span class="z-punctuation z-definition z-string z-end z-shell">&#39;</span></span></span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">configure.ac:58:</span></span><span class="z-meta z-function-call z-arguments z-shell"> error: possibly undefined macro: AC_MSG_ERROR If this token and others are legitimate, please use m4_pattern_allow. See the Autoconf documentation.</span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">autoreconf:</span></span><span class="z-meta z-function-call z-arguments z-shell"> error: /usr/bin/autoconf failed with exit status: 1</span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">Running</span></span><span class="z-meta z-function-call z-arguments z-shell"> ./configure<span class="z-variable z-parameter z-option z-shell"><span class="z-punctuation z-definition z-parameter z-shell"> --</span>enable-maintainer-mode</span> ...</span> </span><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">configure:</span></span><span class="z-meta z-function-call z-arguments z-shell"> error: cannot find required auxiliary files: compile missing install-sh config.guess config.sub</span> </span></code></pre> <p>That meant I needed an additional package:</p> <pre data-lang="bash" class="language-bash z-code"><code class="language-bash" data-lang="bash"><span class="z-source z-shell z-bash"><span class="z-meta z-function-call z-shell"><span class="z-variable z-function z-shell">sudo</span></span><span class="z-meta z-function-call z-arguments z-shell"> dnf install autoconf-archive</span> </span></code></pre> <p>After recompiling, I found out that my added shortcuts did not integrate properly. I filed an issue against the repo and am awaiting a response.</p> <section class="footnotes"> <ol class="footnotes-list"> <li id="fn-1"> <p>the prefix is to have a second, butchered version available to test. I can continue using distro version of AbiWord if this doesn't work out. <a href="#fr-1-1">↩</a></p> </li> </ol> </section> 2025-09-08T07:18:03.408003+00:00 2025-09-08T07:18:03.408003+00:00 Andrew Wippler /2025-09-08-only-office-for-personal-use/ <p>Vibe coding is supposedly going to replace actual programmers. I can’t wait for it to go away. Robots have a terrible way of doing things, and they are not very good at writing code. That, however, has not kept me from regularly dabbling with ChatGPT and code generation.</p> <p>Programming is my hobby - not my livelihood. So when it comes to solving an personal issue with code, ChatGPT appeals to me. I am too busy in life to spend hours catching myself up from recent advancements in technology in order to find the right framework, read the docs, and use that knowledge to write good, secure code.</p> <p>I am still not convinced that ChatGPT is smart enough to replace anything of value. In my haste of finding an alternative to Google Docs, I asked ChatGPT to help me code a simple middleware to load OnlyOffice behind authentication.<sup class="footnote-reference" id="fr-1-1"><a href="#fn-1">1</a></sup> OnlyOffice required a JSON Web Token, but their docs were very vague - a vice of all companies that want free fixes from Open Source Software enthusiasts, yet also want money.</p> <p>What was supposed to be a simple task ended up to be a conversaion where ChatGPT said, "Ah, OnlyOffice does x,y,z, but I wrote a,b,c instead. Here, let me fix that for you." When that did not work, ChatGPT would say, "Ah, let's try this instead." To save others from having to spend hours repeating the conversation I had with a robot to generate boilerplate code, let me provide you with the end result.</p> <p>To host and OnlyOffice locally, you need middleware that signs a JSON Web Token, and passes it to OnlyOffice's Document Server for identification. This Document server stores your text and sends it to <del>Vladimir Putin and the Kremlin</del> your storage server after you close your browser window. If anyone wants <del>to send their important documents to dubious destinations</del> to self host OnlyOffice, you may find help with this generated code:</p> <h2 id="middleware-server">Middleware Server</h2> <pre data-lang="javascript" class="language-javascript z-code"><code class="language-javascript" data-lang="javascript"><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">require</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>dotenv<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">config</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">express</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">require</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>express<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">axios</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">require</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>axios<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">jwt</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">require</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>jsonwebtoken<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">qs</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">require</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>querystring<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">fs</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">require</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>fs<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">path</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">require</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>path<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">session</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">require</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>express-session<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">officegen</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">require</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>officegen<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">app</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-entity z-name z-function z-ts">express</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">port</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-support z-variable z-object z-process z-ts">process</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-process z-ts">env</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-constant z-property z-ts">PORT</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-constant z-numeric z-decimal z-ts">3000</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-object-binding-pattern-variable z-ts"><span class="z-punctuation z-definition z-binding-pattern z-object z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-object-binding-pattern-variable z-ts"> <span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">DEX_ISSUER</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-object-binding-pattern-variable z-ts"> <span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">CLIENT_ID</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-object-binding-pattern-variable z-ts"> <span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">CLIENT_SECRET</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-object-binding-pattern-variable z-ts"> <span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">JWT_SECRET</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-object-binding-pattern-variable z-ts"> <span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">DOCUMENTSERVER_URL</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-object-binding-pattern-variable z-ts"> <span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">MIDDLEWARE_SERVER</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-object-binding-pattern-variable z-ts"> <span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">NODE_ENV</span></span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-object-binding-pattern-variable z-ts"><span class="z-punctuation z-definition z-binding-pattern z-object z-ts">}</span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-support z-variable z-object z-process z-ts">process</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-process z-ts">env</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-variable z-other z-constant z-ts">DEX_ISSUER</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-variable z-other z-constant z-ts">CLIENT_ID</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-variable z-other z-constant z-ts">CLIENT_SECRET</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-variable z-other z-constant z-ts">JWT_SECRET</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-variable z-other z-constant z-ts">DOCUMENTSERVER_URL</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-variable z-other z-constant z-ts">MIDDLEWARE_SERVER</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span><span class="z-source z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-support z-class z-console z-ts">console</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-console z-ts">error</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Missing required env vars. Please set DEX_ISSUER, CLIENT_ID, CLIENT_SECRET, JWT_SECRET, DOCUMENTSERVER_URL, MIDDLEWARE_SERVER<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span><span class="z-source z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-support z-variable z-object z-process z-ts">process</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-process z-ts">exit</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-constant z-numeric z-decimal z-ts">1</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span><span class="z-source z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">NODE_ENV</span> <span class="z-keyword z-operator z-comparison z-ts">===</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>production<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span><span class="z-source z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-dom z-ts">set</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>trust proxy<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-constant z-numeric z-decimal z-ts">1</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span><span class="z-source z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Body parsers</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">use</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">express</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">json</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">use</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">express</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">urlencoded</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">extended</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-constant z-language z-boolean z-true z-ts">true</span> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Session</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">use</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-function-call z-ts"><span class="z-entity z-name z-function z-ts">session</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">secret</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-constant z-ts">JWT_SECRET</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">resave</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-constant z-language z-boolean z-false z-ts">false</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">saveUninitialized</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-constant z-language z-boolean z-false z-ts">false</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">cookie</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">secure</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-constant z-ts">NODE_ENV</span> <span class="z-keyword z-operator z-comparison z-ts">===</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>production<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">httpOnly</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-constant z-language z-boolean z-true z-ts">true</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">sameSite</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>lax<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"></span><span class="z-punctuation z-definition z-block z-ts">}</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Files directory</span> </span><span class="z-source z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">FILES_DIR</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">path</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">join</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-support z-variable z-object z-node z-ts">__dirname</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>files<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"><span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">fs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">existsSync</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">FILES_DIR</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">fs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">mkdirSync</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">FILES_DIR</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">recursive</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-constant z-language z-boolean z-true z-ts">true</span> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Utility: create empty docx</span> </span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-storage z-type z-function z-ts">function</span> <span class="z-meta z-definition z-function z-ts"><span class="z-entity z-name z-function z-ts">createEmptyDocx</span></span><span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">filePath</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-flow z-ts">return</span> <span class="z-new z-expr z-ts"><span class="z-keyword z-operator z-new z-ts">new</span> <span class="z-entity z-name z-type z-ts">Promise</span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-arrow z-ts"><span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">resolve</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">reject</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-new z-expr z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">docx</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-entity z-name z-function z-ts">officegen</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>docx<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-new z-expr z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">out</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">fs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">createWriteStream</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">filePath</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-new z-expr z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-new z-expr z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">out</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">on</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>error<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-arrow z-ts"><span class="z-variable z-parameter z-ts">err</span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> </span><span class="z-meta z-function-call z-ts"><span class="z-entity z-name z-function z-ts">reject</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">err</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-new z-expr z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">docx</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">on</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>error<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-arrow z-ts"><span class="z-variable z-parameter z-ts">err</span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> </span><span class="z-meta z-function-call z-ts"><span class="z-entity z-name z-function z-ts">reject</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">err</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-new z-expr z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">out</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">on</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>close<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-meta z-arrow z-ts"> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> </span><span class="z-meta z-function-call z-ts"><span class="z-entity z-name z-function z-ts">resolve</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">filePath</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-new z-expr z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-new z-expr z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">docx</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">generate</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">out</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-new z-expr z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Middleware: login required</span> </span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-storage z-type z-function z-ts">function</span> <span class="z-meta z-definition z-function z-ts"><span class="z-entity z-name z-function z-ts">requireLogin</span></span><span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">req</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">next</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">session</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">user</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">session</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">redirectAfterLogin</span> <span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">originalUrl</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-flow z-ts">return</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">redirect</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/login<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-entity z-name z-function z-ts">next</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-block z-ts"><span class="z-punctuation z-definition z-comment z-ts">/*</span> ---------------- Routes ---------------- <span class="z-punctuation z-definition z-comment z-ts">*/</span></span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Root</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Dashboard</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-dom z-ts">get</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">requireLogin</span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-meta z-arrow z-ts"> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">req</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">user</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">session</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">user</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">files</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">fs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">readdirSync</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">FILES_DIR</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">filter</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-arrow z-ts"><span class="z-variable z-parameter z-ts">f</span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> </span><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">f</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">endsWith</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>.docx<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">fileLinks</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">files</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-ts">length</span> <span class="z-keyword z-operator z-ternary z-ts">?</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">files</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">map</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-arrow z-ts"><span class="z-variable z-parameter z-ts">f</span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> </span><span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span>&lt;li&gt;&lt;a href=&quot;/edit/<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">encodeURIComponent</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">f</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>&quot;&gt;<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-readwrite z-ts">f</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>&lt;/a&gt;&lt;/li&gt;<span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">join</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span><span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-operator z-ternary z-ts">:</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>&lt;li&gt;No documents yet&lt;/li&gt;<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;!DOCTYPE html&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;html&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;head&gt;&lt;title&gt;Dashboard&lt;/title&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;style&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> body { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> font-family: &quot;Segoe UI&quot;, Tahoma, Geneva, Verdana, sans-serif; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> margin: 0; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> padding: 20px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> background: #f7f8fa; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> color: #333; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> h1, h2 { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> color: #222; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> ul { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> list-style-type: none; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> padding-left: 0; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> li { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> margin-bottom: 8px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> a { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> text-decoration: none; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> color: #0078d4; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> a:hover { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> text-decoration: underline; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> form { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> margin-bottom: 20px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> background: #fff; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> padding: 15px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> border-radius: 8px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> box-shadow: 0 2px 6px rgba(0,0,0,0.1); </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> input[type=&quot;text&quot;] { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> padding: 6px 10px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> width: 250px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> border-radius: 4px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> border: 1px solid #ccc; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> button { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> padding: 6px 12px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> background-color: #0078d4; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> color: #fff; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> border: none; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> border-radius: 4px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> cursor: pointer; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> button:hover { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> background-color: #005a9e; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> .topbar { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> margin-bottom: 20px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> font-size: 0.9rem; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> .topbar a { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> margin-left: 10px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;/style&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;/head&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;body&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;h1&gt;Welcome, <span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-object z-ts">user</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">name</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>&lt;/h1&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;h2&gt;Your Documents&lt;/h2&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;ul&gt;<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-readwrite z-ts">fileLinks</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>&lt;/ul&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;h2&gt;Create New Document&lt;/h2&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;form action=&quot;/create&quot; method=&quot;post&quot;&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;input type=&quot;text&quot; name=&quot;filename&quot; placeholder=&quot;Document name&quot; required&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;button type=&quot;submit&quot;&gt;Create&lt;/button&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;/form&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;h2&gt;Rename Document&lt;/h2&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;form action=&quot;/rename&quot; method=&quot;post&quot;&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;select name=&quot;oldName&quot;&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> <span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">files</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">map</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-arrow z-ts"><span class="z-variable z-parameter z-ts">f</span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> </span><span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span>&lt;option value=&quot;<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-readwrite z-ts">f</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>&quot;&gt;<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-readwrite z-ts">f</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>&lt;/option&gt;<span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">join</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span><span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;/select&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;input type=&quot;text&quot; name=&quot;newName&quot; placeholder=&quot;New name&quot; required&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;button type=&quot;submit&quot;&gt;Rename&lt;/button&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;/form&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;p&gt;&lt;a href=&quot;/logout&quot;&gt;Logout&lt;/a&gt;&lt;/p&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;/body&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;/html&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> <span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Create new document</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">post</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/create<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">requireLogin</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-arrow z-ts"><span class="z-storage z-modifier z-async z-ts">async</span> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">req</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">let</span> <span class="z-meta z-object-binding-pattern-variable z-ts"><span class="z-punctuation z-definition z-binding-pattern z-object z-ts">{</span> <span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-readwrite z-ts">filename</span></span> <span class="z-punctuation z-definition z-binding-pattern z-object z-ts">}</span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">body</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-variable z-other z-readwrite z-ts">filename</span> <span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">filename</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">replace</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-regexp z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">/</span><span class="z-constant z-other z-character-class z-set z-regexp"><span class="z-punctuation z-definition z-character-class z-regexp">[</span><span class="z-constant z-character z-escape z-backslash z-regexp">\/</span><span class="z-constant z-character z-escape z-backslash z-regexp">\\</span>?%*:|&quot;&lt;&gt;<span class="z-punctuation z-definition z-character-class z-regexp">]</span></span><span class="z-punctuation z-definition z-string z-end z-ts">/</span><span class="z-keyword z-other z-ts">g</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-string z-quoted z-single z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&#39;</span><span class="z-punctuation z-definition z-string z-end z-ts">&#39;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">replace</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-regexp z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">/</span><span class="z-constant z-other z-character-class z-set z-regexp"><span class="z-punctuation z-definition z-character-class z-regexp">[</span> <span class="z-punctuation z-definition z-character-class z-regexp">]</span></span><span class="z-punctuation z-definition z-string z-end z-ts">/</span><span class="z-keyword z-other z-ts">g</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-string z-quoted z-single z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&#39;</span>-<span class="z-punctuation z-definition z-string z-end z-ts">&#39;</span></span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-operator z-arithmetic z-ts">+</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>.docx<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">filePath</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">path</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">join</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">FILES_DIR</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">filename</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">fs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">existsSync</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">filePath</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-control z-flow z-ts">return</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>File exists. &lt;a href=&#39;/&#39;&gt;Back&lt;/a&gt;<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-trycatch z-ts">try</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-flow z-ts">await</span> <span class="z-meta z-function-call z-ts"><span class="z-entity z-name z-function z-ts">createEmptyDocx</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">filePath</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">redirect</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span>/edit/<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">encodeURIComponent</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">filename</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span><span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span> <span class="z-keyword z-control z-trycatch z-ts">catch</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">err</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-support z-class z-console z-ts">console</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-console z-ts">error</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">err</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Error creating file. &lt;a href=&#39;/&#39;&gt;Back&lt;/a&gt;<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Rename document</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">post</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/rename<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">requireLogin</span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-meta z-arrow z-ts"> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">req</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">let</span> <span class="z-meta z-object-binding-pattern-variable z-ts"><span class="z-punctuation z-definition z-binding-pattern z-object z-ts">{</span> <span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-readwrite z-ts">oldName</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-readwrite z-ts">newName</span></span> <span class="z-punctuation z-definition z-binding-pattern z-object z-ts">}</span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">body</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-variable z-other z-readwrite z-ts">newName</span> <span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">newName</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">replace</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-regexp z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">/</span><span class="z-constant z-other z-character-class z-set z-regexp"><span class="z-punctuation z-definition z-character-class z-regexp">[</span><span class="z-constant z-character z-escape z-backslash z-regexp">\/</span><span class="z-constant z-character z-escape z-backslash z-regexp">\\</span>?%*:|&quot;&lt;&gt;<span class="z-punctuation z-definition z-character-class z-regexp">]</span></span><span class="z-punctuation z-definition z-string z-end z-ts">/</span><span class="z-keyword z-other z-ts">g</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-string z-quoted z-single z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&#39;</span><span class="z-punctuation z-definition z-string z-end z-ts">&#39;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">replace</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-regexp z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">/</span><span class="z-constant z-other z-character-class z-set z-regexp"><span class="z-punctuation z-definition z-character-class z-regexp">[</span> <span class="z-punctuation z-definition z-character-class z-regexp">]</span></span><span class="z-punctuation z-definition z-string z-end z-ts">/</span><span class="z-keyword z-other z-ts">g</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-string z-quoted z-single z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&#39;</span>-<span class="z-punctuation z-definition z-string z-end z-ts">&#39;</span></span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-operator z-arithmetic z-ts">+</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>.docx<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">oldPath</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">path</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">join</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">FILES_DIR</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">oldName</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">newPath</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">path</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">join</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">FILES_DIR</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">newName</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">fs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">existsSync</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">oldPath</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-control z-flow z-ts">return</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Original file not found. &lt;a href=&#39;/&#39;&gt;Back&lt;/a&gt;<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">fs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">existsSync</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">newPath</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-control z-flow z-ts">return</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Target filename exists. &lt;a href=&#39;/&#39;&gt;Back&lt;/a&gt;<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">fs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">renameSync</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">oldPath</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">newPath</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">redirect</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Dex login</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-dom z-ts">get</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/login<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-meta z-arrow z-ts"> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">req</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">redirect_uri</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span><span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-constant z-ts">MIDDLEWARE_SERVER</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>/callback<span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">authUrl</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span><span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-constant z-ts">DEX_ISSUER</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>/auth?client_id=<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">encodeURIComponent</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">CLIENT_ID</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>&amp;redirect_uri=<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">encodeURIComponent</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">redirect_uri</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>&amp;response_type=code&amp;scope=openid%20email%20profile<span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">redirect</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">authUrl</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Dex callback</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-dom z-ts">get</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/callback<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-arrow z-ts"><span class="z-storage z-modifier z-async z-ts">async</span> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">req</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-trycatch z-ts">try</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">code</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">query</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">code</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-variable z-other z-readwrite z-ts">code</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-control z-flow z-ts">return</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">status</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-constant z-numeric z-decimal z-ts">400</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Missing code<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">tokenResp</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-keyword z-control z-flow z-ts">await</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">axios</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">post</span></span><span class="z-meta z-brace z-round z-ts">(</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"> <span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span><span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-constant z-ts">DEX_ISSUER</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>/token<span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">qs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">stringify</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">grant_type</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>authorization_code<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-variable z-other z-readwrite z-ts">code</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">redirect_uri</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span><span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-constant z-ts">MIDDLEWARE_SERVER</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>/callback<span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">client_id</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-constant z-ts">CLIENT_ID</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">client_secret</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-constant z-ts">CLIENT_SECRET</span> </span></span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"> <span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">headers</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Content-Type<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span></span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>application/x-www-form-urlencoded<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"> <span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">idToken</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">tokenResp</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">data</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">id_token</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-variable z-other z-readwrite z-ts">idToken</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-control z-flow z-ts">return</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">status</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-constant z-numeric z-decimal z-ts">500</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>No id_token received<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">userInfo</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">jwt</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">decode</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">idToken</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-variable z-other z-readwrite z-ts">userInfo</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-variable z-other z-object z-ts">userInfo</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">sub</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-control z-flow z-ts">return</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">status</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-constant z-numeric z-decimal z-ts">500</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Invalid id_token<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">session</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">user</span> <span class="z-keyword z-operator z-assignment z-ts">=</span><span class="z-meta z-objectliteral z-ts"> <span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">id</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-object z-ts">userInfo</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">sub</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">email</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-object z-ts">userInfo</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">email</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">name</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-object z-ts">userInfo</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">name</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-variable z-other z-object z-ts">userInfo</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">preferred_username</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-variable z-other z-object z-ts">userInfo</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">email</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Unnamed User<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">session</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">redirectAfterLogin</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">redirectUrl</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">session</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">redirectAfterLogin</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-operator z-expression z-delete z-ts">delete</span> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">session</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">redirectAfterLogin</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-flow z-ts">return</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">redirect</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">redirectUrl</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">redirect</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span> <span class="z-keyword z-control z-trycatch z-ts">catch</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">err</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-support z-class z-console z-ts">console</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-console z-ts">error</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Callback error:<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-object z-ts">err</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">response</span><span class="z-punctuation z-accessor z-optional z-ts">?.</span><span class="z-support z-variable z-property z-dom z-ts">data</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-variable z-other z-object z-ts">err</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">message</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">status</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-constant z-numeric z-decimal z-ts">500</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Authentication failed<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Logout</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-dom z-ts">get</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/logout<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-meta z-arrow z-ts"> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">req</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">session</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">destroy</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-arrow z-ts"><span class="z-variable z-parameter z-ts">err</span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">logoutUrl</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-constant z-ts">DEX_ISSUER</span> <span class="z-keyword z-operator z-ternary z-ts">?</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-constant z-object z-ts">DEX_ISSUER</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">endsWith</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-operator z-ternary z-ts">?</span> <span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span><span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-constant z-ts">DEX_ISSUER</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>logout<span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span> <span class="z-keyword z-operator z-ternary z-ts">:</span> <span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span><span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-constant z-ts">DEX_ISSUER</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>/logout<span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-operator z-ternary z-ts">:</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">redirect</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span>/<span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> New document without login</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-dom z-ts">get</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/new<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-arrow z-ts"><span class="z-storage z-modifier z-async z-ts">async</span> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">req</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-trycatch z-ts">try</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">fileId</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span>new-<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-class z-builtin z-ts">Date</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">now</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>.docx<span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">newFilePath</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">path</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">join</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">FILES_DIR</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">fileId</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-flow z-ts">await</span> <span class="z-meta z-function-call z-ts"><span class="z-entity z-name z-function z-ts">createEmptyDocx</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">newFilePath</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">redirect</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span>/edit/<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">encodeURIComponent</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">fileId</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span><span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span> <span class="z-keyword z-control z-trycatch z-ts">catch</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">err</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-support z-class z-console z-ts">console</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-console z-ts">error</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Error creating new file:<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">err</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">status</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-constant z-numeric z-decimal z-ts">500</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Failed to create new document<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Serve files</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">use</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/files<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">express</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">static</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">FILES_DIR</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-entity z-name z-function z-ts">setHeaders</span></span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span><span class="z-meta z-arrow z-ts"> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">setHeader</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Cache-Control<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>no-cache, no-store, must-revalidate<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">setHeader</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Pragma<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>no-cache<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">setHeader</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Expires<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>0<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span></span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"></span><span class="z-punctuation z-definition z-block z-ts">}</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Edit OnlyOffice document</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-dom z-ts">get</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/edit/:filename<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">requireLogin</span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-meta z-arrow z-ts"> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">req</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">fileId</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">params</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">filename</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">filePath</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">path</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">join</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">FILES_DIR</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">fileId</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-keyword z-operator z-logical z-ts">!</span><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">fs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">existsSync</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">filePath</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-control z-flow z-ts">return</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">status</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-constant z-numeric z-decimal z-ts">404</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>File not found<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">documentUrl</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span><span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-constant z-ts">MIDDLEWARE_SERVER</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>/files/<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-function z-ts">encodeURIComponent</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">fileId</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>?v=<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-class z-builtin z-ts">Date</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">now</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span><span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">documentKey</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span><span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-readwrite z-ts">fileId</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>-<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-class z-builtin z-ts">Date</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">now</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span><span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">user</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">session</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">user</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">dsPayload</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">document</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">fileType</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>docx<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">key</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-readwrite z-ts">documentKey</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">title</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-readwrite z-ts">fileId</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">url</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-readwrite z-ts">documentUrl</span> </span></span></span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">editorConfig</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">mode</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>edit<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">user</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">id</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-object z-ts">user</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">id</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">name</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-variable z-other z-object z-ts">user</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">name</span> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">callbackUrl</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>${MIDDLEWARE_SERVER}/onlyoffice-callback<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span> </span></span></span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">iat</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-meta z-function-call z-ts"><span class="z-support z-constant z-math z-ts">Math</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-math z-ts">floor</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-function-call z-ts"><span class="z-support z-class z-builtin z-ts">Date</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">now</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-operator z-arithmetic z-ts">/</span> <span class="z-constant z-numeric z-decimal z-ts">1000</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">exp</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-meta z-function-call z-ts"><span class="z-support z-constant z-math z-ts">Math</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-math z-ts">floor</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-function-call z-ts"><span class="z-support z-class z-builtin z-ts">Date</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">now</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-operator z-arithmetic z-ts">/</span> <span class="z-constant z-numeric z-decimal z-ts">1000</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-operator z-arithmetic z-ts">+</span> <span class="z-constant z-numeric z-decimal z-ts">3600</span> </span></span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-var z-expr z-ts"><span class="z-meta z-objectliteral z-ts"><span class="z-meta z-object z-member z-ts"> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">dsToken</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">jwt</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">sign</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">dsPayload</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-constant z-ts">JWT_SECRET</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">algorithm</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>HS256<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;!DOCTYPE html&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;html&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;head&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;meta charset=&quot;utf-8&quot;&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;title&gt;Editing <span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-readwrite z-ts">fileId</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>&lt;/title&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;style&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> html, body { height: 100%; margin: 0; background: #f7f8fa; font-family: &quot;Segoe UI&quot;, Tahoma, Geneva, Verdana, sans-serif; } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> #placeholder { width: 100%; height: 100%; } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> .topbar { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> position: absolute; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> top: 8px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> right: 12px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> z-index: 10; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> font-family: &quot;Segoe UI&quot;, Tahoma, Geneva, Verdana, sans-serif; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> background: rgba(255,255,255,0.9); </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> padding: 6px 10px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> border-radius: 6px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> box-shadow: 0 2px 6px rgba(0,0,0,0.1); </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> .topbar a { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> margin-left: 8px; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> color: #0078d4; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> text-decoration: none; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> .topbar a:hover { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> text-decoration: underline; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> } </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts">&lt;/style&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;/head&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;body&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;div id=&quot;placeholder&quot;&gt;&lt;/div&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;div class=&quot;topbar&quot;&gt;Logged in as <span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-entity z-name z-function z-ts">escapeHtml</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-object z-ts">user</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">name</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span> | &lt;a href=&quot;/logout&quot;&gt;Logout&lt;/a&gt;&lt;/div&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;script src=&quot;<span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-constant z-ts">DOCUMENTSERVER_URL</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>/web-apps/apps/api/documents/api.js&quot;&gt;&lt;/script&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;script&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> const config = { </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> document: <span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-constant z-json z-ts">JSON</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-json z-ts">stringify</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-object z-ts">dsPayload</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">document</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>, </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> documentType: &quot;word&quot;, </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> editorConfig: <span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-constant z-json z-ts">JSON</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-json z-ts">stringify</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-object z-ts">dsPayload</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">editorConfig</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span>, </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> token: <span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-meta z-function-call z-ts"><span class="z-support z-constant z-json z-ts">JSON</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-json z-ts">stringify</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">dsToken</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> }; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> const docEditor = new DocsAPI.DocEditor(&quot;placeholder&quot;, config); </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;/script&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;/body&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> &lt;/html&gt; </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-string z-template z-ts"> <span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> ONLYOFFICE callback</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">post</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/onlyoffice-callback<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-arrow z-ts"><span class="z-storage z-modifier z-async z-ts">async</span> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">req</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">data</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">body</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-support z-class z-console z-ts">console</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-console z-ts">log</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>ONLYOFFICE callback:<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">data</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-array z-literal z-ts"><span class="z-meta z-brace z-square z-ts">[</span><span class="z-constant z-numeric z-decimal z-ts">2</span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-constant z-numeric z-decimal z-ts">6</span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-constant z-numeric z-decimal z-ts">7</span><span class="z-meta z-brace z-square z-ts">]</span></span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">includes</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-object z-ts">data</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">status</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-keyword z-operator z-logical z-ts">&amp;&amp;</span> <span class="z-variable z-other z-object z-ts">data</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">url</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-trycatch z-ts">try</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">originalFilename</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">data</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">key</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">split</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>.docx<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-array z-literal z-ts"><span class="z-meta z-brace z-square z-ts">[</span><span class="z-constant z-numeric z-decimal z-ts">0</span><span class="z-meta z-brace z-square z-ts">]</span></span> <span class="z-keyword z-operator z-arithmetic z-ts">+</span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>.docx<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">filepath</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">path</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">join</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">FILES_DIR</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">originalFilename</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">response</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-keyword z-control z-flow z-ts">await</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">axios</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-dom z-ts">get</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-object z-ts">data</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">url</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">responseType</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>arraybuffer<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">fs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">writeFileSync</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">filepath</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-object z-ts">response</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">data</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-support z-class z-console z-ts">console</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-console z-ts">log</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span>Saved document: <span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-readwrite z-ts">filepath</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span><span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span> <span class="z-keyword z-control z-trycatch z-ts">catch</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">err</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-support z-class z-console z-ts">console</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-console z-ts">error</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>Error saving document:<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-object z-ts">err</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">response</span><span class="z-punctuation z-accessor z-optional z-ts">?.</span><span class="z-support z-variable z-property z-dom z-ts">data</span> <span class="z-keyword z-operator z-logical z-ts">||</span> <span class="z-variable z-other z-object z-ts">err</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-property z-ts">message</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span> </span></span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-meta z-block z-ts"> <span class="z-punctuation z-definition z-block z-ts">}</span></span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">json</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-objectliteral z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> <span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts">error</span></span><span class="z-meta z-object z-member z-ts"><span class="z-meta z-object-literal z-key z-ts"><span class="z-punctuation z-separator z-key-value z-ts">:</span></span> <span class="z-constant z-numeric z-decimal z-ts">0</span> </span><span class="z-punctuation z-definition z-block z-ts">}</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> Serve individual files</span> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-dom z-ts">get</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>/files/:filename<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-meta z-arrow z-ts"> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">req</span><span class="z-punctuation z-separator z-parameter z-ts">,</span> <span class="z-variable z-parameter z-ts">res</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">filename</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-variable z-other z-object z-ts">req</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-variable z-other z-object z-property z-ts">params</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-variable z-property z-dom z-ts">filename</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-meta z-var z-expr z-ts"><span class="z-storage z-type z-ts">const</span> <span class="z-meta z-var-single-variable z-expr z-ts"><span class="z-meta z-definition z-variable z-ts"><span class="z-variable z-other z-constant z-ts">filepath</span></span> </span><span class="z-keyword z-operator z-assignment z-ts">=</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">path</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">join</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-constant z-ts">FILES_DIR</span><span class="z-punctuation z-separator z-comma z-ts">,</span> <span class="z-variable z-other z-readwrite z-ts">filename</span><span class="z-meta z-brace z-round z-ts">)</span></span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">if</span> <span class="z-meta z-brace z-round z-ts">(</span><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">fs</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">existsSync</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">filepath</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">sendFile</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">filepath</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-conditional z-ts">else</span> <span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">res</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">status</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-constant z-numeric z-decimal z-ts">404</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">send</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>File not found<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-arrow z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-comment z-line z-double-slash z-ts"><span class="z-punctuation z-definition z-comment z-ts">//</span></span><span class="z-comment z-line z-double-slash z-ts"> XSS helper</span> </span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-storage z-type z-function z-ts">function</span> <span class="z-meta z-definition z-function z-ts"><span class="z-entity z-name z-function z-ts">escapeHtml</span></span><span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-variable z-parameter z-ts">str</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> <span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">{</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"> <span class="z-keyword z-control z-flow z-ts">return</span> <span class="z-meta z-function-call z-ts"><span class="z-support z-class z-builtin z-ts">String</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">str</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">replace</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-regexp z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">/</span>&amp;<span class="z-punctuation z-definition z-string z-end z-ts">/</span><span class="z-keyword z-other z-ts">g</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>&amp;amp;<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">replace</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-regexp z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">/</span>&lt;<span class="z-punctuation z-definition z-string z-end z-ts">/</span><span class="z-keyword z-other z-ts">g</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>&amp;lt;<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">replace</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-regexp z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">/</span>&gt;<span class="z-punctuation z-definition z-string z-end z-ts">/</span><span class="z-keyword z-other z-ts">g</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>&amp;gt;<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">replace</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-regexp z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">/</span>&quot;<span class="z-punctuation z-definition z-string z-end z-ts">/</span><span class="z-keyword z-other z-ts">g</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>&amp;quot;<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-function-call z-ts"><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-ts">replace</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-regexp z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">/</span>&#39;<span class="z-punctuation z-definition z-string z-end z-ts">/</span><span class="z-keyword z-other z-ts">g</span></span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-string z-quoted z-double z-ts"><span class="z-punctuation z-definition z-string z-begin z-ts">&quot;</span>&amp;#039;<span class="z-punctuation z-definition z-string z-end z-ts">&quot;</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></span></span><span class="z-source z-ts"><span class="z-meta z-function z-ts"><span class="z-meta z-block z-ts"><span class="z-punctuation z-definition z-block z-ts">}</span></span></span> </span><span class="z-source z-ts"> </span><span class="z-source z-ts"><span class="z-meta z-function-call z-ts"><span class="z-variable z-other z-object z-ts">app</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-entity z-name z-function z-ts">listen</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-variable z-other z-readwrite z-ts">port</span><span class="z-punctuation z-separator z-comma z-ts">,</span><span class="z-meta z-arrow z-ts"> <span class="z-meta z-parameters z-ts"><span class="z-punctuation z-definition z-parameters z-begin z-ts">(</span><span class="z-punctuation z-definition z-parameters z-end z-ts">)</span></span> </span><span class="z-meta z-arrow z-ts"><span class="z-storage z-type z-function z-arrow z-ts">=&gt;</span> </span><span class="z-meta z-function-call z-ts"><span class="z-support z-class z-console z-ts">console</span><span class="z-punctuation z-accessor z-ts">.</span><span class="z-support z-function z-console z-ts">log</span></span><span class="z-meta z-brace z-round z-ts">(</span><span class="z-string z-template z-ts"><span class="z-punctuation z-definition z-string z-template z-begin z-ts">`</span>OnlyOffice middleware listening on port <span class="z-meta z-template z-expression z-ts"><span class="z-punctuation z-definition z-template-expression z-begin z-ts">${</span></span><span class="z-meta z-template z-expression z-ts"><span class="z-meta z-embedded z-line z-ts"><span class="z-variable z-other z-readwrite z-ts">port</span></span><span class="z-punctuation z-definition z-template-expression z-end z-ts">}</span></span><span class="z-punctuation z-definition z-string z-template z-end z-ts">`</span></span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-meta z-brace z-round z-ts">)</span><span class="z-punctuation z-terminator z-statement z-ts">;</span> </span></code></pre> <h2 id="package-json">Package.json</h2> <pre data-lang="json" class="language-json z-code"><code class="language-json" data-lang="json"><span class="z-source z-json"><span class="z-meta z-mapping z-json"><span class="z-punctuation z-section z-mapping z-begin z-json">{</span> </span></span><span class="z-source z-json"><span class="z-meta z-mapping z-json"> </span><span class="z-meta z-mapping z-key z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>name<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span></span><span class="z-meta z-mapping z-json"><span class="z-punctuation z-separator z-mapping z-key-value z-json">:</span> </span><span class="z-meta z-mapping z-value z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>onlyoffice-middleware<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span><span class="z-punctuation z-separator z-mapping z-pair z-json">,</span> </span></span><span class="z-source z-json"><span class="z-meta z-mapping z-value z-json"> </span><span class="z-meta z-mapping z-key z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>version<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span></span><span class="z-meta z-mapping z-value z-json"><span class="z-punctuation z-separator z-mapping z-key-value z-json">:</span> </span><span class="z-meta z-mapping z-value z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>1.0.0<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span><span class="z-punctuation z-separator z-mapping z-pair z-json">,</span> </span></span><span class="z-source z-json"><span class="z-meta z-mapping z-value z-json"> </span><span class="z-meta z-mapping z-key z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>main<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span></span><span class="z-meta z-mapping z-value z-json"><span class="z-punctuation z-separator z-mapping z-key-value z-json">:</span> </span><span class="z-meta z-mapping z-value z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>index.js<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span><span class="z-punctuation z-separator z-mapping z-pair z-json">,</span> </span></span><span class="z-source z-json"><span class="z-meta z-mapping z-value z-json"> </span><span class="z-meta z-mapping z-key z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>dependencies<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span></span><span class="z-meta z-mapping z-value z-json"><span class="z-punctuation z-separator z-mapping z-key-value z-json">:</span> </span><span class="z-meta z-mapping z-value z-json"><span class="z-meta z-mapping z-json"><span class="z-punctuation z-section z-mapping z-begin z-json">{</span> </span></span></span><span class="z-source z-json"><span class="z-meta z-mapping z-value z-json"><span class="z-meta z-mapping z-json"> </span><span class="z-meta z-mapping z-key z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>express<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span></span><span class="z-meta z-mapping z-json"><span class="z-punctuation z-separator z-mapping z-key-value z-json">:</span> </span><span class="z-meta z-mapping z-value z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>^4.18.2<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span><span class="z-punctuation z-separator z-mapping z-pair z-json">,</span> </span></span></span><span class="z-source z-json"><span class="z-meta z-mapping z-value z-json"><span class="z-meta z-mapping z-value z-json"> </span><span class="z-meta z-mapping z-key z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>jsonwebtoken<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span></span><span class="z-meta z-mapping z-value z-json"><span class="z-punctuation z-separator z-mapping z-key-value z-json">:</span> </span><span class="z-meta z-mapping z-value z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>^9.0.0<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span><span class="z-punctuation z-separator z-mapping z-pair z-json">,</span> </span></span></span><span class="z-source z-json"><span class="z-meta z-mapping z-value z-json"><span class="z-meta z-mapping z-value z-json"> </span><span class="z-meta z-mapping z-key z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>axios<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span></span><span class="z-meta z-mapping z-value z-json"><span class="z-punctuation z-separator z-mapping z-key-value z-json">:</span> </span><span class="z-meta z-mapping z-value z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>^1.6.0<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span><span class="z-punctuation z-separator z-mapping z-pair z-json">,</span> </span></span></span><span class="z-source z-json"><span class="z-meta z-mapping z-value z-json"><span class="z-meta z-mapping z-value z-json"> </span><span class="z-meta z-mapping z-key z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>dotenv<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span></span><span class="z-meta z-mapping z-value z-json"><span class="z-punctuation z-separator z-mapping z-key-value z-json">:</span> </span><span class="z-meta z-mapping z-value z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>^16.0.0<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span><span class="z-punctuation z-separator z-mapping z-pair z-json">,</span> </span></span></span><span class="z-source z-json"><span class="z-meta z-mapping z-value z-json"><span class="z-meta z-mapping z-value z-json"> </span><span class="z-meta z-mapping z-key z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>express-session<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span></span><span class="z-meta z-mapping z-value z-json"><span class="z-punctuation z-separator z-mapping z-key-value z-json">:</span> </span><span class="z-meta z-mapping z-value z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>^1.17.3<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span><span class="z-punctuation z-separator z-mapping z-pair z-json">,</span> </span></span></span><span class="z-source z-json"><span class="z-meta z-mapping z-value z-json"><span class="z-meta z-mapping z-value z-json"> </span><span class="z-meta z-mapping z-key z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>officegen<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span></span><span class="z-meta z-mapping z-value z-json"><span class="z-punctuation z-separator z-mapping z-key-value z-json">:</span> </span><span class="z-meta z-mapping z-value z-json"><span class="z-string z-quoted z-double z-json"><span class="z-punctuation z-definition z-string z-begin z-json">&quot;</span>^0.6.4<span class="z-punctuation z-definition z-string z-end z-json">&quot;</span></span> </span></span></span><span class="z-source z-json"><span class="z-meta z-mapping z-value z-json"><span class="z-meta z-mapping z-value z-json"> <span class="z-punctuation z-section z-mapping z-end z-json">}</span></span> </span></span><span class="z-source z-json"><span class="z-meta z-mapping z-value z-json"><span class="z-punctuation z-section z-mapping z-end z-json">}</span></span> </span><span class="z-source z-json"> </span></code></pre> <h2 id="dockerfile">Dockerfile</h2> <pre class="z-code"><code><span class="z-text z-plain">FROM node:20-alpine </span><span class="z-text z-plain">WORKDIR /app </span><span class="z-text z-plain">COPY package*.json ./ </span><span class="z-text z-plain">RUN npm install --production </span><span class="z-text z-plain">COPY . . </span><span class="z-text z-plain">EXPOSE 3000 </span><span class="z-text z-plain">CMD [&quot;node&quot;, &quot;index.js&quot;] </span><span class="z-text z-plain"> </span></code></pre> <h2 id="environment-variables">Environment Variables</h2> <p>The needed Environment variables are:</p> <ul> <li>DEX_ISSUER: The domain name to your OAuth2 server</li> <li>CLIENT_ID: OAuth2 client ID</li> <li>CLIENT_SECRET: OAuth2 client secret</li> <li>JWT_SECRET: What you set in OnlyOffice Document Server as the JWT Secret</li> <li>DOCUMENTSERVER_URL: The DocumentServer doman name</li> <li>MIDDLEWARE_SERVER: the domain name serving this application</li> </ul> <h2 id="kubernetes-deployment-example">Kubernetes deployment example</h2> <p>I host this application in my kubernetes cluster.<sup class="footnote-reference" id="fr-2-1"><a href="#fn-2">2</a></sup> with the following deployment manifest:</p> <pre data-lang="yaml" class="language-yaml z-code"><code class="language-yaml" data-lang="yaml"><span class="z-source z-yaml"><span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">apiVersion</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">apps/v1</span> </span><span class="z-source z-yaml"><span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">kind</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">Deployment</span> </span><span class="z-source z-yaml"><span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">metadata</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">onlyoffice-middleware</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">namespace</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">onlyoffice</span> </span><span class="z-source z-yaml"><span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">spec</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">replicas</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-constant z-numeric z-integer z-decimal z-yaml">1</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">selector</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">matchLabels</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">app</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">onlyoffice-middleware</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">template</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">metadata</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">labels</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">app</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">onlyoffice-middleware</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">spec</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">imagePullSecrets</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">regsecret</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">containers</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">middleware</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">image</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">d.domain.tld/onlyoffice-middleware:latest</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">imagePullPolicy</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">Always</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">ports</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">containerPort</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-constant z-numeric z-integer z-decimal z-yaml">3000</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">resources</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">requests</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">cpu</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-quoted z-double z-yaml"><span class="z-punctuation z-definition z-string z-begin z-yaml">&quot;</span>100m<span class="z-punctuation z-definition z-string z-end z-yaml">&quot;</span></span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">memory</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-quoted z-double z-yaml"><span class="z-punctuation z-definition z-string z-begin z-yaml">&quot;</span>128Mi<span class="z-punctuation z-definition z-string z-end z-yaml">&quot;</span></span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">limits</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">cpu</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-quoted z-double z-yaml"><span class="z-punctuation z-definition z-string z-begin z-yaml">&quot;</span>500m<span class="z-punctuation z-definition z-string z-end z-yaml">&quot;</span></span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">memory</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-quoted z-double z-yaml"><span class="z-punctuation z-definition z-string z-begin z-yaml">&quot;</span>512Mi<span class="z-punctuation z-definition z-string z-end z-yaml">&quot;</span></span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">env</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">DEX_ISSUER</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">value</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-quoted z-double z-yaml"><span class="z-punctuation z-definition z-string z-begin z-yaml">&quot;</span>https://dex.domain.tld<span class="z-punctuation z-definition z-string z-end z-yaml">&quot;</span></span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">CLIENT_ID</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">value</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-quoted z-double z-yaml"><span class="z-punctuation z-definition z-string z-begin z-yaml">&quot;</span>onlyoffice-middleware-domain.tld<span class="z-punctuation z-definition z-string z-end z-yaml">&quot;</span></span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">DOCUMENTSERVER_URL</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">value</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-quoted z-double z-yaml"><span class="z-punctuation z-definition z-string z-begin z-yaml">&quot;</span>https://office.domain.tld<span class="z-punctuation z-definition z-string z-end z-yaml">&quot;</span></span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">CLIENT_SECRET</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">valueFrom</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">secretKeyRef</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">onlyoffice-secrets</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">key</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">MIDDLEWARE_SECRET</span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">JWT_SECRET</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">valueFrom</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">secretKeyRef</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">onlyoffice-secrets</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">key</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">JWT_SECRET</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">volumeMounts</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">files-storage</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">mountPath</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">/app/files</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">volumes</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-punctuation z-definition z-block z-sequence z-item z-yaml">-</span> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">name</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">files-storage</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">persistentVolumeClaim</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> </span><span class="z-source z-yaml"> <span class="z-string z-unquoted z-plain z-out z-yaml"><span class="z-entity z-name z-tag z-yaml">claimName</span></span><span class="z-punctuation z-separator z-key-value z-mapping z-yaml">:</span> <span class="z-string z-unquoted z-plain z-out z-yaml">middleware-files-pvc</span> </span></code></pre> <h2 id="conclusion">Conclusion</h2> <p>The middleware has a simple gui for creating new documents and editing existing ones. There is a delay when you save in the web app and see the changes in the actual file. For my use case, these documents will be short lived. <a class="external" href="https://news.ycombinator.com/item?id=43503467">According to one hackernews post</a>, OnlyOffice has Russian ties. While I like free software, I do not support Russia's agression in Ukraine.<sup class="footnote-reference" id="fr-3-1"><a href="#fn-3">3</a></sup> The free world has imposed sanctions on Russia, and I participate in those by not using Russian-based software. So, if you know of a good lightweight editor that is not markdown based, let me know.</p> <section class="footnotes"> <ol class="footnotes-list"> <li id="fn-1"> <p>I have Dex which is connected to my local LDAP server. <a href="#fr-1-1">↩</a></p> </li> <li id="fn-2"> <p>At least until I find a better lightweight word processor that has easy footnote support. <a href="#fr-2-1">↩</a></p> </li> <li id="fn-3"> <p>I have even gone as far as removing nginx from my kubernetes cluster. <a href="#fr-3-1">↩</a></p> </li> </ol> </section> 2025-09-06T16:22:14.660761+00:00 2025-09-06T16:22:14.660761+00:00 Andrew Wippler /2025-09-06-word-processor-to-replace-google-docs/ <h2 id="the-problem">The problem</h2> <p><a href="/2025-09-06-An-open-letter-to-Google">I have a few frustrations with Google Docs</a>. It has gotten slow over the years. There is now a sudden push to migrate to Google Workspaces, which is something I do not want to do. There a few routes I can go in an endeavor to switch away from Google Docs.</p> <h3 id="web-options">Web Options</h3> <ul> <li>Office 365</li> <li>Etherpad-lite</li> <li><a class="external" href="https://hedgedoc.org/">Hedgedoc</a></li> <li>OnlyOffice</li> <li>Other various options that do not support footnotes</li> </ul> <h3 id="desktop-options">Desktop Options</h3> <ul> <li>LibreOffice</li> <li>VSCode</li> <li>Geany</li> <li>Other options not as good as the ones listed</li> </ul> <h2 id="the-direction">The Direction</h2> <p>I really only need a word processor. I do not need a full blown office replacement. LibreOffice is nice, but I would like something that looks more modern. Hedgedoc is a great option, but footnotes are a bit clunky.<sup class="footnote-reference" id="fr-1-1"><a href="#fn-1">1</a></sup> Etherpad-lite says it will do what I need, but all of the plugins that I would want to use do not work with the latest version. VSCode and Geany do not support footnotes as I would need them. That left me with only one option to try OnlyOffice.<sup class="footnote-reference" id="fr-2-1"><a href="#fn-2">2</a></sup></p> <h2 id="onlyoffice">OnlyOffice</h2> <p>OnlyOffice is bundled with well known third-party solutions, such as CryptPad, NextCloud, and OwnCloud. Those options offer more than a document processor, and I am only looking to add a word processor. This meant I had to custom supply my own OnlyOffice solution.<sup class="footnote-reference" id="fr-3-1"><a href="#fn-3">3</a></sup> In a followup post, I will post how I accomplished to vibe code middleware to handle the Document server oddities behind an OAuth2 authentication flow.</p> <h2 id="conclusion">Conclusion</h2> <p>I thought there would be more free wordprocessing options available in 2025, but it appears everyone stopped developing new things once Google created their free Google Docs product. It appears others paid OnlyOffice to write competitive software in 2015. I am just thankful there is an AGPL v3.0 license .... even if the Documentation is difficult to understand.</p> <section class="footnotes"> <ol class="footnotes-list"> <li id="fn-1"> <p>I would have to manually type the references. While this is what I do on this blog, when I write, I want fast footnote insertion. If Hedgedoc had a button I could press, it would have switched to it in a heartbeat. <a href="#fr-1-1">↩</a></p> </li> <li id="fn-2"> <p>Worst case scenario, I could code my own option, but this is not ideal. <a href="#fr-2-1">↩</a></p> </li> <li id="fn-3"> <p>This is more difficult than it seems. The Docs were lacking in this area. <a href="#fr-3-1">↩</a></p> </li> </ol> </section> 2025-09-06T16:17:10.887031+00:00 2025-09-06T16:17:10.887031+00:00 Andrew Wippler /2025-09-06-an-open-letter-to-google/ <p>Dear Google,</p> <p>I want a functioning product that is fast. That means I do not want to participate in your “simulate slowness experiments.” I use your product because I think it is good. You do not have to annoy me about trying your new Google workspace. If I want to try it, I will try it.</p> <p>When I dismiss your notifications, it means I have acknowledged your banner, read the contents, and do not want to try this new offering. It does not mean you need to prompt me about Google Workspace at every opportunity. This behavior has become very annoying to me and has now caused me to seek other options for word processing.</p> <p>I wish I could stay with your Google Doc application, but my writing time needs to be without interruption. Even the little change (such as nesting page numbers in a sub menu, which adds another click) can be tolerated for a time, but this 90px banner is just too much for me.</p> <p>Sincerely, Andrew</p> 2025-09-03T07:53:48.094453+00:00 2025-09-03T07:53:48.094453+00:00 Andrew Wippler /2025-09-03-goodbye-wordpress/ <p>I have delayed switching away from Wordpress on my personal blog to something different for quite some time. I liked the new idea of a flat-file static html concept, but Jekyll did not appeal to me. Then, Hugo appeared on the scene and appeared to take the rightful place as the cool kid on the block. Hugo has a simple concept and drew my interest from being written in Go, but from my delay in switching, I have been able to discover a potential flaw in my workflow. Occasional bloggers like me are fighting with updates just to add a new post.<sup class="footnote-reference" id="fr-1-1"><a href="#fn-1">1</a></sup></p> <p>In my opinion, markdown has its own challenges. It seems very clunky and difficult to memorize the correct ordering of braces<sup class="footnote-reference" id="fr-markdown-1"><a href="#fn-markdown">2</a></sup> compared to the old-stlye BB code or regular html. Switching to a new blogging platform that adds more complexity <em>AND</em> forces me to move to markdown is not appealing. However, I came across <a class="external" href="https://www.getzola.org/">Zola</a>, which I heard updates "once every other glacial age."<sup class="footnote-reference" id="fr-2-1"><a href="#fn-2">3</a></sup> That explanation that enough to pique my interest and switch this blog over.</p> <p>Wordpress has served me well over the years, and I still have one application running a Wordpress frontend. I have another with Wordpress as a Headless CMS. I will continue to use Wordpress whenever I need an easy admin interface that a simpleton like myself can use when half asleep.<sup class="footnote-reference" id="fr-wordpress-1"><a href="#fn-wordpress">4</a></sup> However, I like the idea of removing another MySql/MariaDB database as I slowly port over to PostgreSQL.<sup class="footnote-reference" id="fr-postgre-1"><a href="#fn-postgre">5</a></sup></p> <p>It took several hobby hours on my day off to make the change, but I have a fairly good workflow now. I asked ChatGPT to create a script for new post generation, and it gave me this python<sup class="footnote-reference" id="fr-3-1"><a href="#fn-3">6</a></sup> file:</p> <pre data-lang="python" class="language-python z-code"><code class="language-python" data-lang="python"><span class="z-source z-python"><span class="z-meta z-statement z-import z-python"><span class="z-keyword z-control z-import z-python">import</span> <span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">os</span></span></span> </span><span class="z-source z-python"><span class="z-meta z-statement z-import z-python"><span class="z-keyword z-control z-import z-from z-python">from</span></span><span class="z-meta z-statement z-import z-python"><span class="z-meta z-import-source z-python"> <span class="z-meta z-import-path z-python"><span class="z-meta z-import-name z-python">datetime</span></span> <span class="z-meta z-statement z-import z-python"><span class="z-keyword z-control z-import z-python">import</span></span></span></span><span class="z-meta z-statement z-import z-python"></span><span class="z-meta z-statement z-import z-python"> <span class="z-meta z-generic-name z-python">datetime</span></span> </span><span class="z-source z-python"> </span><span class="z-source z-python"><span class="z-comment z-line z-number-sign z-python"><span class="z-punctuation z-definition z-comment z-python">#</span> Step 1: Get the current date and timestamp </span></span><span class="z-source z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">now</span></span> <span class="z-keyword z-operator z-assignment z-python">=</span> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">datetime</span></span><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">now</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> </span><span class="z-source z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">date_str</span></span> <span class="z-keyword z-operator z-assignment z-python">=</span> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">now</span></span><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">strftime</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-constant z-other z-placeholder z-python">%Y</span>-<span class="z-constant z-other z-placeholder z-python">%m</span>-<span class="z-constant z-other z-placeholder z-python">%d</span><span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> </span><span class="z-source z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">timestamp</span></span> <span class="z-keyword z-operator z-assignment z-python">=</span> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">now</span></span><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">isoformat</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> </span><span class="z-source z-python"> </span><span class="z-source z-python"><span class="z-comment z-line z-number-sign z-python"><span class="z-punctuation z-definition z-comment z-python">#</span> Step 2: Prompt user for title and tags </span></span><span class="z-source z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">title</span></span> <span class="z-keyword z-operator z-assignment z-python">=</span> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-support z-function z-builtin z-python">input</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python">Enter title: <span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span><span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">strip</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> </span><span class="z-source z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">tags_input</span></span> <span class="z-keyword z-operator z-assignment z-python">=</span> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-support z-function z-builtin z-python">input</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python">Enter comma-separated tags: <span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span><span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">strip</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> </span><span class="z-source z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">tags</span></span> <span class="z-keyword z-operator z-assignment z-python">=</span> <span class="z-meta z-sequence z-list z-python"><span class="z-punctuation z-section z-sequence z-begin z-python">[</span><span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">tag</span></span><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">strip</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> <span class="z-meta z-expression z-generator z-python"><span class="z-keyword z-control z-loop z-for z-generator z-python">for</span> <span class="z-meta z-generic-name z-python">tag</span> <span class="z-keyword z-control z-loop z-for z-in z-python">in</span></span> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">tags_input</span></span><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">split</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python">,<span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> <span class="z-keyword z-control z-conditional z-if z-python">if</span> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">tag</span></span><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">strip</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span><span class="z-punctuation z-section z-sequence z-end z-python">]</span></span> </span><span class="z-source z-python"> </span><span class="z-source z-python"><span class="z-comment z-line z-number-sign z-python"><span class="z-punctuation z-definition z-comment z-python">#</span> Step 3: Prepare directory and file path </span></span><span class="z-source z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">safe_title</span></span> <span class="z-keyword z-operator z-assignment z-python">=</span> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">title</span></span><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">replace</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"> <span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-separator z-arguments z-python">,</span> <span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python">-<span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span><span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">replace</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python">/<span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-separator z-arguments z-python">,</span> <span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python">-<span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> <span class="z-comment z-line z-number-sign z-python"><span class="z-punctuation z-definition z-comment z-python">#</span> sanitize title </span></span><span class="z-source z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">filename</span></span> <span class="z-keyword z-operator z-assignment z-python">=</span> <span class="z-storage z-type z-string z-python">f</span><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-interpolated z-python"><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-begin z-python">{</span><span class="z-source z-python z-embedded"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">date_str</span></span></span></span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-end z-python">}</span></span><span class="z-string z-quoted z-double z-python">-</span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-begin z-python">{</span><span class="z-source z-python z-embedded"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">safe_title</span></span></span></span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-end z-python">}</span></span><span class="z-string z-quoted z-double z-python">.md<span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span> </span><span class="z-source z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">content_dir</span></span> <span class="z-keyword z-operator z-assignment z-python">=</span> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">os</span><span class="z-punctuation z-accessor z-dot z-python">.</span><span class="z-meta z-generic-name z-python">path</span></span><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">join</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">os</span></span><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">getcwd</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span><span class="z-punctuation z-separator z-arguments z-python">,</span> <span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python">content<span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> </span><span class="z-source z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">filepath</span></span> <span class="z-keyword z-operator z-assignment z-python">=</span> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">os</span><span class="z-punctuation z-accessor z-dot z-python">.</span><span class="z-meta z-generic-name z-python">path</span></span><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">join</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">content_dir</span></span><span class="z-punctuation z-separator z-arguments z-python">,</span> <span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">filename</span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> </span><span class="z-source z-python"> </span><span class="z-source z-python"><span class="z-comment z-line z-number-sign z-python"><span class="z-punctuation z-definition z-comment z-python">#</span> Step 4: Write content </span></span><span class="z-source z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">content</span></span> <span class="z-keyword z-operator z-assignment z-python">=</span> <span class="z-storage z-type z-string z-python">f</span><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-block z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;&quot;&quot;</span></span></span><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-block z-python">+++ </span></span></span><span class="z-source z-python"><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-block z-python">title = &quot;</span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-begin z-python">{</span><span class="z-source z-python z-embedded"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">title</span></span></span></span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-end z-python">}</span></span><span class="z-string z-quoted z-double z-block z-python">&quot; </span></span></span><span class="z-source z-python"><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-block z-python">date = </span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-begin z-python">{</span><span class="z-source z-python z-embedded"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">timestamp</span></span></span></span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-end z-python">}</span></span><span class="z-string z-quoted z-double z-block z-python"> </span></span></span><span class="z-source z-python"><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-block z-python">[taxonomies] </span></span></span><span class="z-source z-python"><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-block z-python">tags = [</span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-begin z-python">{</span><span class="z-source z-python z-embedded"><span class="z-meta z-string z-python"><span class="z-string z-quoted z-single z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&#39;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-single z-python">, <span class="z-punctuation z-definition z-string z-end z-python">&#39;</span></span></span><span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">join</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-meta z-sequence z-list z-python"><span class="z-punctuation z-section z-sequence z-begin z-python">[</span><span class="z-storage z-type z-string z-python">f</span><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-single z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&#39;</span></span></span><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-single z-python">&quot;</span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-begin z-python">{</span><span class="z-source z-python z-embedded"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">tag</span></span></span></span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-end z-python">}</span></span><span class="z-string z-quoted z-single z-python">&quot;<span class="z-punctuation z-definition z-string z-end z-python">&#39;</span></span></span> <span class="z-meta z-expression z-generator z-python"><span class="z-keyword z-control z-loop z-for z-generator z-python">for</span> <span class="z-meta z-generic-name z-python">tag</span> <span class="z-keyword z-control z-loop z-for z-in z-python">in</span></span> <span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">tags</span></span><span class="z-punctuation z-section z-sequence z-end z-python">]</span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span></span></span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-end z-python">}</span></span><span class="z-string z-quoted z-double z-block z-python">] </span></span></span><span class="z-source z-python"><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-block z-python">+++ </span></span></span><span class="z-source z-python"><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-block z-python"> </span></span></span><span class="z-source z-python"><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-block z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;&quot;&quot;</span></span></span> </span><span class="z-source z-python"> </span><span class="z-source z-python"><span class="z-meta z-statement z-with z-python"><span class="z-keyword z-control z-flow z-with z-python">with</span> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-support z-function z-builtin z-python">open</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">filepath</span></span><span class="z-punctuation z-separator z-arguments z-python">,</span> <span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python">w<span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-separator z-arguments z-python">,</span> <span class="z-variable z-parameter z-python">encoding</span><span class="z-keyword z-operator z-assignment z-python">=</span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-python"><span class="z-string z-quoted z-double z-python">utf-8<span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> <span class="z-meta z-statement z-with z-python"><span class="z-keyword z-control z-flow z-with z-as z-python">as</span></span></span><span class="z-meta z-statement z-with z-python"> <span class="z-meta z-generic-name z-python">f</span><span class="z-punctuation z-section z-block z-with z-python">:</span></span> </span><span class="z-source z-python"> <span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">f</span></span><span class="z-meta z-qualified-name z-python"><span class="z-punctuation z-accessor z-dot z-python">.</span></span><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-meta z-generic-name z-python">write</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">content</span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> </span><span class="z-source z-python"> </span><span class="z-source z-python"><span class="z-meta z-function-call z-python"><span class="z-meta z-qualified-name z-python"><span class="z-variable z-function z-python"><span class="z-support z-function z-builtin z-python">print</span></span></span></span><span class="z-meta z-function-call z-arguments z-python"><span class="z-punctuation z-section z-arguments z-begin z-python">(</span><span class="z-storage z-type z-string z-python">f</span><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-begin z-python">&quot;</span></span></span><span class="z-meta z-string z-interpolated z-python"><span class="z-string z-quoted z-double z-python">File created: </span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-begin z-python">{</span><span class="z-source z-python z-embedded"><span class="z-meta z-qualified-name z-python"><span class="z-meta z-generic-name z-python">filepath</span></span></span></span><span class="z-meta z-interpolation z-python"><span class="z-punctuation z-section z-interpolation z-end z-python">}</span></span><span class="z-string z-quoted z-double z-python"><span class="z-punctuation z-definition z-string z-end z-python">&quot;</span></span></span><span class="z-punctuation z-section z-arguments z-end z-python">)</span></span> </span><span class="z-source z-python"> </span></code></pre> <p>I have added a few of my edits to the script it output. For instace, I removed the line creating the directory because I know it already exists and I added a few new lines to the content so I do not have to add them in when I open the file.</p> <p>My future workflow of creating a blog post is:</p> <pre class="z-code"><code><span class="z-text z-plain">python new-post.py </span><span class="z-text z-plain">&lt;edit file&gt; </span><span class="z-text z-plain">./build-container.sh </span><span class="z-text z-plain">./update-container.sh </span><span class="z-text z-plain">python announce-to-socials.py </span></code></pre> <p>This seems like a lot of steps for one post. I have not even created the script to update or announce to socials yet. I will probably create the announcement cod in golang - so I can include it in the update-container script.</p> <h2 id="footnotes">Footnotes</h2> <section class="footnotes"> <ol class="footnotes-list"> <li id="fn-1"> <p><a class="external" href="https://commaok.xyz/post/on_hugo/">https://commaok.xyz/post/on_hugo/</a> <a href="#fr-1-1">↩</a></p> </li> <li id="fn-markdown"> <p>I think I will have to visit <a class="external" href="https://github.com/pulldown-cmark/pulldown-cmark/blob/f4a326d225e79412b5ecabd1c241c851e8160815/guide/src/cheat-sheet.md">https://github.com/pulldown-cmark/pulldown-cmark/blob/f4a326d225e79412b5ecabd1c241c851e8160815/guide/src/cheat-sheet.md</a> regularly <a href="#fr-markdown-1">↩</a></p> </li> <li id="fn-2"> <p><a class="external" href="https://mamot.fr/@thibaultamartin/115123535906012521">https://mamot.fr/@thibaultamartin/115123535906012521</a> <a href="#fr-2-1">↩</a></p> </li> <li id="fn-wordpress"> <p>This is the true test of application robustness. <a href="#fr-wordpress-1">↩</a></p> </li> <li id="fn-postgre"> <p>I like that PostgreSQL has an easy admin interface with PgAdmin, better integration with Prometheus, and had easier options to load the data into RAM for faster queries. <a href="#fr-postgre-1">↩</a></p> </li> <li id="fn-3"> <p>Python is another one of those languages that I try to stay away from. I prefer more elegant looking code like TypeScript, Ruby, or Go. <a href="#fr-3-1">↩</a></p> </li> </ol> </section> 2024-12-16T19:37:30+00:00 2024-12-16T19:37:30+00:00 Andrew Wippler /2024-12-16-gnucash-mysql-backend-on-fedora/ <p>I have been using GnuCash for personal finance since 2014. Two years ago, I switched over to a mysql backend because it was available in the flatpak. I never understood why the regular package on Fedora did not allow for opening a mysql database until today.</p> <p>On Fedora, GnuCash is bundled with weak dependencies. GnuCash does not need mysql support to run properly. It does not make sense to require mysql support for everyone, but if you want mysql support, here is how to enable it:</p> <ul> <li>Find out what GnuCash depends upon:</li> </ul> <pre class="z-code"><code><span class="z-text z-plain">sudo dnf repoquery --depends gnucash </span><span class="z-text z-plain">Updating and loading repositories: </span><span class="z-text z-plain">Repositories loaded. </span><span class="z-text z-plain">/usr/bin/perl </span><span class="z-text z-plain">dconf </span><span class="z-text z-plain">gnome-icon-theme </span><span class="z-text z-plain">gnucash-docs &gt;= 5.9 </span><span class="z-text z-plain">libaqbanking.so.44()(64bit) </span><span class="z-text z-plain">libboost_filesystem.so.1.83.0()(64bit) </span><span class="z-text z-plain">libboost_locale.so.1.83.0()(64bit) </span><span class="z-text z-plain">libboost_program_options.so.1.83.0()(64bit) </span><span class="z-text z-plain">libc.so.6(GLIBC_2.38)(64bit) </span><span class="z-text z-plain">libcairo.so.2()(64bit) </span><span class="z-text z-plain">libdbi-dbd-mysql </span><span class="z-text z-plain">libdbi-dbd-pgsql </span><span class="z-text z-plain">libdbi-dbd-sqlite </span><span class="z-text z-plain">... </span><span class="z-text z-plain"># These three packages enable support for their respective DB </span><span class="z-text z-plain"> </span></code></pre> <ul> <li>Install the option you want</li> </ul> <pre class="z-code"><code><span class="z-text z-plain">$ sudo dnf install -y libdbi-dbd-mysql </span></code></pre> <ul> <li>Enjoy using the native GnuCash package to save to mysql.</li> </ul> 2024-05-16T09:52:56+00:00 2024-05-16T09:52:56+00:00 Andrew Wippler /2024-05-16-my-heartfelt-apologies-to-oulunkyla/ <p>ChatGPT4 has emotion now, and I asked it to write a song about everything being just OK in Oulunkylä (A neighborhood of Helsinki). I have visited there and one of the dentist's office signs declared itself to be an "OK Dentist," which prompted this massively incorrect song about the neighborhood.</p> <p>(Verse 1) Oh, the streets of Oulunkylä are so serene, Where the potholes are just a massage machine, The traffic lights play a game of red and green, But don't worry, everything is just pristine.</p> <p>(Chorus) Oh, everything is OK in Oulunkylä, Where the chaos is just part of the allure-a, The sidewalks are cracked, but don't you fret, It's a quirky charm you won't forget.</p> <p>(Verse 2) The buses run like clockwork, that's a fact, If by "clockwork" you mean they're always packed, But hey, who needs space when you've got tact? In Oulunkylä, we're always on the right track.</p> <p>(Chorus) Oh, everything is OK in Oulunkylä, Where the delays are just part of the culture-a, The public transport's a cozy squeeze, Just enjoy the ride and feel the breeze.</p> <p>(Bridge) The winters here are mild, if you're a polar bear, And summer's heatwave? It’s a sauna in the air, The parks are pristine, if you squint and stare, Oulunkylä, life's without a care.</p> <p>(Verse 3) The neighbors' parties are a silent delight, Except for the bass that rocks you at night, And the construction? A lullaby in daylight, In Oulunkylä, everything is just right.</p> <p>(Chorus) Oh, everything is OK in Oulunkylä, Where the noise is our symphony aura, The peace and quiet might be a myth, But it's a lovely place to take a fifth.</p> <p>(Outro) So come on down to Oulunkylä town, Where nothing ever brings you down, It's a utopia of slight despair, But hey, it's Oulunkylä, and we don't care!</p> <p>(Verse 1) Oi, Oulunkylän kadut ovat niin rauhalliset, Missä kuopat ovat vain hierontakoneet, Liikennevalot pelaavat punaista ja vihreää, Mutta älä huoli, kaikki on ihan priimaa.</p> <p>(Chorus) Oi, kaikki on just OK Oulunkylässä, Missä kaaos on osa vetovoimaa, Jalkakäytävät halkeilee, mutta älä pelkää, Se on outo viehätys, jonka muistat.</p> <p>(Verse 2) Bussit kulkevat kuin kellokoneisto, se on fakta, Jos "kellokoneistolla" tarkoitat aina täynnä, Mutta hei, kuka tarvitsee tilaa, kun on taitoa? Oulunkylässä olemme aina oikealla radalla.</p> <p>(Chorus) Oi, kaikki on just OK Oulunkylässä, Missä viivästykset ovat osa kulttuuria, Julkinen liikenne on tiivis kokemus, Nauti matkasta ja tunne tuuli.</p> <p>(Bridge) Talvet täällä ovat leutoja, jos olet jääkarhu, Ja kesän helle? Se on sauna ilmassa, Puistot ovat puhtaita, jos siristät silmiä, Oulunkylä, elämä ilman huolia.</p> <p>(Verse 3) Naapureiden juhlat ovat hiljainen ilo, Paitsi basso, joka rokkaa yöllä, Ja rakennustyö? Kehtolaulu päivällä, Oulunkylässä kaikki on juuri oikein.</p> <p>(Chorus) Oi, kaikki on just OK Oulunkylässä, Missä melu on meidän sinfonia, Rauha ja hiljaisuus saattavat olla myytti, Mutta se on ihana paikka ottaa viides.</p> <p>(Outro) Joten tule Oulunkylän kylään, Missä mikään ei koskaan masenna, Se on utopiaa pienellä epätoivolla, Mutta hei, se on Oulunkylä, eikä meitä haittaa!</p> 2024-04-19T05:40:54+00:00 2024-04-19T05:40:54+00:00 Andrew Wippler /2024-04-19-new-glasses/ <p>For most of my life I had to visit the optometrist yearly as my vision changed frequently, but as I got older, my eyes stopped degrading. For the last 5 years, I was on the same prescription, which is worth celebrating. However, I noticed a slight blur at a distance, and for the last 3 months, I just sort of lived with that new reality. At first, I was able to shrug it off and think that it was just my imagination. I could still clearly read items that were within a 1 kilometer range. Then, my son started to squint a bit more (a clear sign that his eyes were changing). Considering he needed the checkup, I made one for myself on the same day. The result was that both of us needed new prescriptions. Whereas my strength did not need correction, the astigmatism (focus) changed.</p> <p>As I wear my new glasses now, I can see the sharp edges of characters in text and contrasts are more vibrant. I am able to enjoy knowing that my vision is correct and that I have a functional tool at my disposal. Oh, how foolish I was for delaying that check-up! Things are better now than before.</p> 2023-12-22T07:23:29+00:00 2023-12-22T07:23:29+00:00 Andrew Wippler /2023-12-22-new-year-reading-plan/ <p>Next year I want to encourage my children to read the Bible through at least once. However, I found that most yearly Bible reading plans repeat reading the books of Psalms or Proverbs. Sure, that feature may make normal daily reading more enjoyable for adults, but extra reading is too much for children who have never read the Bible before. I wanted a plan for my children that would get them through the complete Bible and not repeat any verses. Unfortunately, most reading plans I found for children were not the complete Bible. This meant if I wanted them to read the Bible through once without repeated reading, I had to make my own plan for them.</p> <p>Luckily for my children, their dad is a computer nerd. I loaded up my database with data from <a class="external" href="https://github.com/scrollmapper/bible_databases">scrollmapper</a> to get the book, chapter, and verse bindings. Then I proceeded to calculate the total number of verse in the 66 books of the canon of Scripture - 31,102. To make it as easy as possible, the plan would have to have an equal amount of verses for each day. (Sadly, 31,102 does not reduce into 365 or 366 rounded segments.) I was able to get all the verses into a yearly plan by having the first 77 days with 86 verses and the remainder of the year at 85 verses a day (77*86)+(288*85)=31,102.</p> <p>Even with the reduced number, it seemed 86 or 85 verses a day might be too much for a 7 year old to read in one sitting. Therefore, I split the reading into two sections - morning and evening portions. The morning will have 43 verses and the evening will have the remainder. Thus, if a child cannot read all 86 verses in one sitting, they have opportunity to break it up in the day. Based upon my youngest's reading speed, it will take him approximately 45 minutes a day to complete this reading plan.</p> <p>Because this will appear to be a very difficult task for my children - to read the Bible from cover to cover in a year, we are offering them 10 € per month of completed reading. Hopefully this will help them conquer bigger tasks in the future.</p> <p>The generated plans and code (for leap and non-leap years) are available at <a class="external" href="https://gist.github.com/andrewwippler/b0977ef9d8c8c79483ef9110f3cb53ae">https://gist.github.com/andrewwippler/b0977ef9d8c8c79483ef9110f3cb53ae</a></p> 2023-07-18T11:23:43+00:00 2023-07-18T11:23:43+00:00 Andrew Wippler /2023-07-18-from-nginx-to-traefik-and-solving-x-forwarded-for/ <p>I recently switched my home setup from <em>nginx</em> to <em>traefik</em>. I had to get used to the new configuration styles and weird doc style of <em>traefik</em>, but suffice to say, I am happy at the end results.</p> <p><em>Traefik</em> ships with SNI, allowing me to snoop the connection and prevent unauthorized access to my file server. (One must have the correct <em>hostname</em> to see my shared photos.) My first action was to replace my edge <em>nginx</em> reverse proxy with <em>traefik</em>. If this was a success, then I would move onto replacing <em>nginx</em> in my k8s cluster. I was surprized that after zero OS tuning changes, <em>traefik</em> was able to serve pages faster for my k8s cluster. I initially thought that <em>traefik</em> would perform marginally slower than <em>nginx</em> due to additional <em>HostSNI</em> checks, but that was totally disproved by the first page load.</p> <p>After switching to <em>traefik</em> inside my k8s cluster, performance improved even more. However, a new problem emerged: I was getting the IPs of my internal traffic logged instead of the real origin IP. While I would not normally care, malicious bots were attempting to brute force my WordPress installations, and I need to block their IPs.</p> <p>I was able to get the <em>X-Forwarded-For</em> header populated with the true ip by enabling the Proxy Protocol on my edge <em>traefik</em>, setting externalTrafficPolicy: Local on my <em>traefik</em> k8s service, and finally telling <em>traefik</em> to accept the <em>proxyProtocol</em> information from the edge server.</p> <pre class="z-code"><code><span class="z-text z-plain"># Edge Router providers.yaml </span><span class="z-text z-plain">... </span><span class="z-text z-plain">tcp: </span><span class="z-text z-plain"> routers: </span><span class="z-text z-plain"> to-web: </span><span class="z-text z-plain"> service: web </span><span class="z-text z-plain"> rule: HostSNIRegexp(`www.andrewwippler.com`, `andrewwippler.com`, ...) </span><span class="z-text z-plain"> entryPoints: </span><span class="z-text z-plain"> - web </span><span class="z-text z-plain"> to-websecure: </span><span class="z-text z-plain"> service: websecure </span><span class="z-text z-plain"> rule: HostSNIRegexp(`www.andrewwippler.com`, `andrewwippler.com`, ...) </span><span class="z-text z-plain"> entryPoints: </span><span class="z-text z-plain"> - websecure </span><span class="z-text z-plain"> tls: </span><span class="z-text z-plain"> passthrough: true </span><span class="z-text z-plain">services: </span><span class="z-text z-plain"> web: </span><span class="z-text z-plain"> loadBalancer: </span><span class="z-text z-plain"> proxyProtocol: </span><span class="z-text z-plain"> version: 2 </span><span class="z-text z-plain"> servers: </span><span class="z-text z-plain"> - ... </span><span class="z-text z-plain"> websecure: </span><span class="z-text z-plain"> loadBalancer: </span><span class="z-text z-plain"> proxyProtocol: </span><span class="z-text z-plain"> version: 2 </span><span class="z-text z-plain"> servers: </span><span class="z-text z-plain"> - ... </span><span class="z-text z-plain">... </span></code></pre> <pre class="z-code"><code><span class="z-text z-plain"># traefik k8s deployment and service </span><span class="z-text z-plain"># missing service account definition and CRDs </span><span class="z-text z-plain">apiVersion: apps/v1 </span><span class="z-text z-plain">kind: Deployment </span><span class="z-text z-plain">metadata: </span><span class="z-text z-plain"> name: traefik </span><span class="z-text z-plain">spec: </span><span class="z-text z-plain"> replicas: 3 #&lt;-- one for each of my nodes, for failover </span><span class="z-text z-plain"> strategy: #&lt;-- forces k8s to update pods on configuration change </span><span class="z-text z-plain"> rollingUpdate: </span><span class="z-text z-plain"> maxSurge: 1 </span><span class="z-text z-plain"> maxUnavailable: 1 </span><span class="z-text z-plain"> type: RollingUpdate </span><span class="z-text z-plain"> selector: </span><span class="z-text z-plain"> matchLabels: </span><span class="z-text z-plain"> app: traefik </span><span class="z-text z-plain"> template: </span><span class="z-text z-plain"> metadata: </span><span class="z-text z-plain"> labels: </span><span class="z-text z-plain"> app: traefik </span><span class="z-text z-plain"> spec: </span><span class="z-text z-plain"> affinity: #&lt;-- one replica per node </span><span class="z-text z-plain"> podAntiAffinity: </span><span class="z-text z-plain"> requiredDuringSchedulingIgnoredDuringExecution: </span><span class="z-text z-plain"> - labelSelector: </span><span class="z-text z-plain"> matchExpressions: </span><span class="z-text z-plain"> - key: app </span><span class="z-text z-plain"> operator: In </span><span class="z-text z-plain"> values: </span><span class="z-text z-plain"> - traefik </span><span class="z-text z-plain"> topologyKey: &quot;kubernetes.io/hostname&quot; </span><span class="z-text z-plain"> serviceAccountName: traefik-ingress-controller </span><span class="z-text z-plain"> containers: </span><span class="z-text z-plain"> - name: traefik </span><span class="z-text z-plain"> image: traefik:v2.10.3 </span><span class="z-text z-plain"> args: </span><span class="z-text z-plain"> - --entrypoints.web.address=:80 </span><span class="z-text z-plain"> - --entrypoints.websecure.address=:443 </span><span class="z-text z-plain"> - --entrypoints.websecure.http.tls </span><span class="z-text z-plain"> - --entrypoints.websecure.http3 </span><span class="z-text z-plain"> - --experimental.http3=true </span><span class="z-text z-plain"> - --providers.kubernetesingress </span><span class="z-text z-plain"> - --providers.kubernetescrd </span><span class="z-text z-plain"> - --log.level=DEBUG </span><span class="z-text z-plain"> - --entrypoints.web.http.redirections.entrypoint.scheme=https </span><span class="z-text z-plain"> - --entrypoints.web.http.redirections.entrypoint.to=websecure </span><span class="z-text z-plain"> # - --accesslog </span><span class="z-text z-plain"> - --entryPoints.web.proxyProtocol.trustedIPs=127.0.0.1/32,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 #&lt;-- local CIDRs </span><span class="z-text z-plain"> - --entryPoints.websecure.proxyProtocol.trustedIPs=127.0.0.1/32,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 #&lt;-- local CIDRs </span><span class="z-text z-plain"> ports: </span><span class="z-text z-plain"> - name: web </span><span class="z-text z-plain"> containerPort: 80 </span><span class="z-text z-plain"> - name: websecure </span><span class="z-text z-plain"> containerPort: 443 </span><span class="z-text z-plain">--- </span><span class="z-text z-plain">apiVersion: v1 </span><span class="z-text z-plain">kind: Service </span><span class="z-text z-plain">metadata: </span><span class="z-text z-plain"> name: traefik </span><span class="z-text z-plain">spec: </span><span class="z-text z-plain"> type: NodePort </span><span class="z-text z-plain"> selector: </span><span class="z-text z-plain"> app: traefik </span><span class="z-text z-plain"> ports: </span><span class="z-text z-plain"> - protocol: TCP </span><span class="z-text z-plain"> port: 80 </span><span class="z-text z-plain"> name: web </span><span class="z-text z-plain"> targetPort: 80 </span><span class="z-text z-plain"> - protocol: TCP </span><span class="z-text z-plain"> port: 443 </span><span class="z-text z-plain"> name: websecure </span><span class="z-text z-plain"> targetPort: 443 </span><span class="z-text z-plain"> externalTrafficPolicy: Local # &lt;--- changed </span></code></pre> 2023-06-27T13:05:09+00:00 2023-06-27T13:05:09+00:00 Andrew Wippler /2023-06-27-how-do-you-repent-from-sin/ <p>How do you repent from sin? How does one get all of their sins forgiven? These questions often fill the minds of those who have sin. Perform a search query on a popular web indexing service and you will find many interpretations of these questions.</p> <p>I was surprised at the results from the Church of Jesus Christ (LDS, Mormonism) and popular writings concerning Allah. They both came to the same conclusions that one must be performers of an action in order to know for certain they have been forgiven. For the mormon, <a class="external" href="https://www.churchofjesuschrist.org/study/manual/gospel-principles/chapter-19-repentance?lang=eng">one must keep the commandments of God</a>, and for the Islamic worshipper of Allah, <a class="external" href="https://yaqeeninstitute.org/roohi-tahir/how-do-i-ask-allah-for-forgiveness">one must follow the four R's</a>. A logical flaw is present in both of these conclusions - humans are not able to repeatedly reproduce perfect outcomes.</p> <p>For example, If I were to present a list of 10 questions and to a person for 1 minute. Then if I were to request that same person to fill in the answers on a new paper with only the questions, the person might get it correct on the first try. Now, if I were to repeat this process to the same person - showing 10 new questions and answers - eventually, the person will miss a question. It may not be immediate. It may take days before the person gets a question wrong. However, that person will get a question wrong - not because the person is uneducated or lacks memorizing ability, but because he is a human.</p> <p>One of my favorite hobbies is computer science. I read a lot of technical papers and designs. Still, with all the advancements that have been made, computer bugs find a way to exist. Even with the best error correction mechanisms in place, humans find a way to create flawed computer code that does not work. It is not because they lack intelligence in organizing words and characters into computer instructions, but because humans lack the ability of perfection.</p> <p>All humans are flawed humans. At the risk of losing credibility, I must also admit that I have the capacity to be wrong. I am flawed. In Bible terms, this is called being a sinner. As a sinner, I have sin and this sin causes me to be imperfect. At one point in my life, I asked the right question - how do you repent from sin? - to the right person. The answer I was given was to place my trust in Jesus - to believe that Jesus is real, that He died on a cross for my sin, and that Jesus rose again on the third day. The Bible supports this fact: those who put their trust in Jesus are given forgiveness of past, present, and future sin.</p> <p>It has now been over 20 years since I placed my trust in Jesus. Each day, I live in the reality of grace, with absolute knowledge that my sins have been forgiven.</p> 2023-06-09T09:06:28+00:00 2023-06-09T09:06:28+00:00 Andrew Wippler /2023-06-09-til-zoom-has-captions/ <p>The Zoom application has built in AI captions for various languages. It is great for those hard of hearing to read the words that are spoken.</p> <p>In other news, you can select the spoken language to be in Finnish, speak in English, and get wonderfully funny sentences in Finnish.</p> 2023-05-31T07:44:33+00:00 2023-05-31T07:44:33+00:00 Andrew Wippler /2023-05-31-a-few-pictures-on-my-phone/ <div> <a class="gallery-image" href="/2023-05-31-a-few-pictures-on-my-phone/wp_story1685519071518_2884776088272888422.jpg" target="_blank"> <img src="&#x2F;processed_images&#x2F;wp_story1685519071518_2884776088272888422.fdebd650e5045d95.jpg" alt="Gallery image" loading="lazy" /> </a> <a class="gallery-image" href="/2023-05-31-a-few-pictures-on-my-phone/wp_story1685519071519_15560477310965744105.jpg" target="_blank"> <img src="&#x2F;processed_images&#x2F;wp_story1685519071519_15560477310965744105.4a42b44ebf7c6b07.jpg" alt="Gallery image" loading="lazy" /> </a> <a class="gallery-image" href="/2023-05-31-a-few-pictures-on-my-phone/wp_story1685519072052_55849421647301837682.jpg" target="_blank"> <img src="&#x2F;processed_images&#x2F;wp_story1685519072052_55849421647301837682.f7c92e2c432e4284.jpg" alt="Gallery image" loading="lazy" /> </a> <a class="gallery-image" href="/2023-05-31-a-few-pictures-on-my-phone/wp_story1685519072232_06890778882110170040.jpg" target="_blank"> <img src="&#x2F;processed_images&#x2F;wp_story1685519072232_06890778882110170040.dce6b293f6db8f22.jpg" alt="Gallery image" loading="lazy" /> </a> <a class="gallery-image" href="/2023-05-31-a-few-pictures-on-my-phone/wp_story1685519072422_43809962456477229500.jpg" target="_blank"> <img src="&#x2F;processed_images&#x2F;wp_story1685519072422_43809962456477229500.092bc9dc404a35dd.jpg" alt="Gallery image" loading="lazy" /> </a> <a class="gallery-image" href="/2023-05-31-a-few-pictures-on-my-phone/wp_story1685519731795_35627313678291969325.jpg" target="_blank"> <img src="&#x2F;processed_images&#x2F;wp_story1685519731795_35627313678291969325.02e647c478a512fe.jpg" alt="Gallery image" loading="lazy" /> </a> </div> 2023-05-16T11:02:55+00:00 2023-05-16T11:02:55+00:00 Andrew Wippler /2023-05-16-who-is-the-author-in-ai-generated-content/ <p>As AI tools are becoming more frequent, many have found interesting use cases. Some are using AI tools to publish children's books or other creative works primarily done by humans. However, when one publishes a work that was generated by AI, who is the author of the work? Should a notice be included or a sub author be added to the work that was derived from an AI tool? If two publish a paragraph of the same text at the same time from the same AI tool, who gets to declare that they were the original work?</p> <p>These questions are difficult to answer through legal matters. Consider the following paragraph:</p> <pre class="z-code"><code><span class="z-text z-plain"># Sheep: The Domesticated Mammal </span><span class="z-text z-plain"> </span><span class="z-text z-plain">Sheep have been domesticated by humans since Creation. They have been bred for their wool, milk, and meat. Specialized breeds Despite their seemingly simple appearance, sheep have a lot of interesting physical characteristics, a unique relationship with humans, and a crucial role in agriculture that make them an important part of human life and civilization. </span><span class="z-text z-plain"> </span><span class="z-text z-plain">## Physical Characteristics of Sheep </span><span class="z-text z-plain"> </span><span class="z-text z-plain">Sheep are mammals that belong to the Bovidae family, which includes cows, goats, and antelopes. They are herbivores and have four-chambered stomachs that allow them to digest tough plant material efficiently. Sheep have thick woolly coats that can be white, brown, black, or gray. The wool serves as insulation and protects them from the elements. Sheep are social animals and prefer to live in groups called flocks. They have excellent hearing and can detect sounds up to 10 times better than humans. This heightened sense of hearing helps them stay alert to potential predators. </span><span class="z-text z-plain"> </span><span class="z-text z-plain">## Sheep and Humans </span><span class="z-text z-plain"> </span><span class="z-text z-plain">Sheep have played an important role in human civilization for thousands of years. They were one of the first animals to be domesticated, and their wool, meat, and milk have been used for various purposes. Sheep have also been used for their skin, which can be made into leather. The wool from sheep has been used for clothing, blankets, and carpets. In some cultures, sheep are also used for religious ceremonies. </span><span class="z-text z-plain"> </span><span class="z-text z-plain">The relationship between sheep and humans is unique. Farmers have developed a deep understanding of their sheep&#39;s behavior and needs, and shepherds have been known to develop close bonds with their flocks. Sheep are also used in therapy programs to provide comfort and companionship to people in need. Their gentle nature and calming presence have been shown to have a positive effect on mental health. </span><span class="z-text z-plain"> </span><span class="z-text z-plain">## Sheep in Agriculture </span><span class="z-text z-plain"> </span><span class="z-text z-plain">Sheep are an important part of agriculture. They are raised for their wool, meat, and milk. Sheep farming is a major industry in many countries, and the demand for sheep products continues to grow. Sheep are also used for grazing and can help control weeds and keep the grass short. They are often used to maintain grasslands and prevent soil erosion. Additionally, sheep are known for their ability to convert low-quality forage into high-quality meat and wool, making them a valuable resource for farmers and communities. </span><span class="z-text z-plain"> </span><span class="z-text z-plain">## Conclusion </span><span class="z-text z-plain"> </span><span class="z-text z-plain">In conclusion, sheep are fascinating creatures that have played an integral role in human life and civilization. Their physical characteristics, unique relationship with humans, and crucial role in agriculture make them an important part of our world. As we continue to rely on sheep for their wool, meat, and milk, it&#39;s important that we treat them with the respect and care that they deserve. By doing so, we can ensure that these gentle creatures continue to thrive and contribute to our society for years to come. </span></code></pre> <p>This article was solely developed through the Notion AI engine. (At first, I did not like the generated paragraph about sheep. I requested the engine to make it longer, which is the version posted above.)</p> <p>Now consider this different paragraph about sheep:</p> <pre class="z-code"><code><span class="z-text z-plain">Sheep have been domesticated by humans since the Fall of Man, with Abel offering a lamb of his fold to God in Genesis 4. Specialized breeds, such as the California Variegated Mutant or Finnish Landrace, display mutant-like qualities or produce more young than average. Nevertheless, all sheep today are primarily raised for their wool, milk, and meat. Despite looking seemingly simple, sheep have a lot of interesting physical characteristics, a unique relationship with humans, and a crucial role in agriculture which makes them an important part of human life and civilization. </span><span class="z-text z-plain"> </span><span class="z-text z-plain">Sheep are mammals that belong to the same animal family as cows, goats, and antelopes. Sheep are plant eaters and have four-chambered stomachs. Sheep are social animals and live in flocks, which sometimes makes them an easy target for predators. However, sheep have excellent hearing which helps them stay alert to potential predators. Sheep come in a variety of colors, such as white, brown, black, or gray. The thick, woolly coat serves the sheep by insulating it from the elements, which is why humans have used it for various purposes. </span><span class="z-text z-plain"> </span><span class="z-text z-plain">Over time, farmers have developed a deep understanding of their sheep&#39;s behavior and needs, which has bonded shepherds with their flocks. Scripture records that David, as a young shepherd boy, fought both a lion and a bear to rescue his sheep. Some have begun using sheep in therapy programs because their gentle nature and calming presence have been proven to have a positive effect on mental health. </span><span class="z-text z-plain"> </span><span class="z-text z-plain">The demand for sheep products continues to grow, including their physical presence in a field. Sheep have an immense desire to eat, which helps control weeds and keep grass short. Sheep are rented out to maintain grasslands in some areas. Additionally, sheep are known for their ability to convert low-quality forage into high-quality meat and wool, making them a valuable resource for farmers and communities. </span><span class="z-text z-plain"> </span><span class="z-text z-plain">Sheep share an important part of our world. When we treat them with care, we can ensure that these gentle creatures continue to thrive and contribute to our society for years to come. </span></code></pre> <p>I produced this second article using a summarization technique after reading the first one. These words were formed from using a combination of editing the underlying text and inserting my narrative. Could that mean I co-authored the text with AI? I am certain that I could fool people into thinking the second article is my original content; however, I would be in a difficult spot if I were to be asked to produce sources of the claims. (Although, I did do <a class="external" href="https://www.raisingsheep.net/cvm-sheep">a little research which uncovered mutant sheep</a>.)</p> <p>Who is the author of a published work that is generated by AI? It is an AI program. Proper attribution to the rightful author should be mandated everywhere. Until that time comes, one can spot AI generated content through its lack of sources cited and repeated textual patterns.</p> 2023-05-10T08:18:29+00:00 2023-05-10T08:18:29+00:00 Andrew Wippler /2023-05-10-personal-tech-debt/ <p>This past week I have been able to traverse down the rabbit hole of personal tech debt. After a week's work, I think I was able to get to the bottom and give everything an updated timestamp! All kidding aside, here were some of the projects I was able to revisit:</p> <h2 id="kubernetes-cluster">Kubernetes Cluster</h2> <p>My k8s cluster hosts websites, internal applications, and personal projects. While many choose to host their services on cloud services, I find it easier (and cheaper) to run it in a controlled home cluster. This week I was able to troubleshoot why some services were sluggish and crashing. After deploying prometheus and grafana a month ago, I was able to determine that my cluster was maxed out. I added another node to the cluster and performance improved. On a side note, I do not understand why people want to purchase barebone Intel NUCs when one can get everything included in a Dell Optiplex 5050 micro form factor.</p> <h2 id="website-redesign">Website redesign</h2> <p>My theme from 2015 was based on bootstrap 4 and had a few Admin UI bugs. The errors were only visible to me, so I have been putting it off for quite a while. This took me a morning to clean up with TailwindCSS. There are still a few UI features missing on the frontend due to a problem with my build and deployment process. I hope this new tech debt does not stay on the list for very long.</p> <h2 id="personal-finances">Personal Finances</h2> <p>I have been using GnuCash since 2014, and I have found that it is a perfect program for dual-entry accounting. However, it requires that I use a computer and the program to add or remove purchases. The reporting features are also lacking functionality; however, the program has been working flawlessly. It has been on my list to revisit how I do finances to see if a web-based solution would be better. Considering I now have multiple currencies, I need a program that could do both USD and Euro. GnuCash already has this feature and I found the new Alpha Vantage API to be quite buggy.</p> <p>Considering I have been a longtime user of GnuCash, my file had some corrupted entries. GnuCash did not have any friendly warnings that would hint at the solution. I could not save the file in SQLite or in MySQL to use the Python library piecash.</p> <p>I looked at Firefly-iii and considered migrating to that - it had multi-currency support as well. The rules feature meant I could create a webhook that updates transactions from USD to Euro against the public trading exchange rate for that day. At first, this program looked promising.</p> <p>I was able to export my files to simple CSVs and attempt to import and map them to appropriate fields. However, account splits did not export very well. I had to spend 4 hours manually importing my splits into Firefly-iii. Then I tried importing new CSVs from my bank into Firefly-iii and I found that I would have to spend several minutes creating rules in Firefly-iii. At this point, I realized that these rules were already programmed into GnuCash. If Firefly-iii existed in 2014, I think I would have begun my personal finance with it, but the work required now to migrate to this solution is, in my opinion, not worth it for me.</p> <p>In GnuCash, I can import CSV, QFX, and QIF. I can map the transactions quickly and easily. Since 2014, GnuCash has been training on my data to give me a personalized experience, which has kept me on this program. It has served my financial banking needs, but now I realized I had to figure out the corruption problem.</p> <h2 id="gnucash-corruption-problem">GnuCash Corruption problem</h2> <p>Tech dept often snowballs into bigger problems. I was facing the largest snowball in existence. How am I supposed to find this transaction_id that the GnuCash error was telling me? I cannot save the file as SQLite to use the piecash python library to find it. It seemed hopeless.</p> <p>Then I realized I am a forgetful nerd.</p> <p>In my attempt to create a clean, XML export to CSV of GnuCash, I came across a <a class="external" href="https://github.com/cebe/gnucash-php">PHP GnuCash XML library</a>. I then created a script which outputted all of the information I needed for <a class="external" href="https://github.com/andrewwippler/firefly_import">exporting GnuCash XML to CSV</a>. The odd transactions, which had errors, were searchable in the CSV my script created. I was able to find and fix my GnuCash transactions. Then, I was able to successfully save my GnuCash file in SQLite.</p> <p>I still laugh at the GnuCash error: Transaction description cannot be null. My faulty transactions had the string "null" in them. Once I removed the string, saving worked.</p> <h2 id="new-tech-debt">New tech debt</h2> <p>The processing of my personal tech debt is down to two items: 1.) Fixing the CSS bugs in my new website theme. 2.) Creating scripts to extend GnuCash functionality through the SQL backend. I think I can work on some of these next month :)</p> 2023-04-22T06:40:25+00:00 2023-04-22T06:40:25+00:00 Andrew Wippler /2023-04-22-speaker-windows/ <p>I have been working on a personal project to organize my preaching illustrations. Whereas one could use a tool such as Notion, Evernote, or Obsidian, I have had a desire to keep my data in an easy to use interface. I should not have to spend 10 minutes to find that illustration I need. Plus, those services might charge me more than $3/month to access advanced features I may become dependent upon.</p> <p><a href="/2023/04/speakerwindows.png"><img src="/2023/04/speakerwindows.png" alt="" /></a></p> <p>Over the years, I have collected over a thousand notes and jots from various sources, which I have been storing in <a class="external" href="https://github.com/andrewwippler/speaker-illustrations">Speaker Illustrations</a>. However, the time has come to add features (such as attaching images or videos) and I am not very proficient in Rails to make such a change. I have re-written Speaker Illustrations in JavaScript using React and Nextjs, with an API provided by AdonisJS. I have called it <a class="external" href="https://github.com/andrewwippler/SpeakerWindows">Speaker Windows</a> because an illustration is just a window for people to look through to understand your meaning.</p> <p><a href="/2023/04/ability.png"><img src="/2023/04/ability.png" alt="" /></a></p> <p>Anyone can host their own copy of <a class="external" href="https://github.com/andrewwippler/SpeakerWindows">Speaker Windows</a>, but I know how most who would benefit from this service are inept to install software on a server. Therefore, I have designed the application with multi-user auth. Anyone can register for an account on my <a class="external" href="https://sw.wplr.rocks/">publicly hosted instance</a>.</p> <p><a href="/2023/04/speakerwindows2.png"><img src="/2023/04/speakerwindows2.png" alt="" /></a></p> <p>The new features have yet to be added, but the project is now at the same functionality as my old implementation. Currently, I am satisfied with the rewrite and am happy with using NextJS and AdonisJS in future personal projects, such as a shopping list app to replace our use of Google Keep. (There are rumors Google Keep is being axed.)</p> 2023-03-29T07:32:49+00:00 2023-03-29T07:32:49+00:00 Andrew Wippler /2023-03-29-what-will-cause-you-to-change/ <p>"I am right. Therefore, you must change." This is a common sentiment among anyone who holds an opinion. Major convincing arguments are then given as to reasons why others must change to your point of view.</p> <p>It is proud to assume that you have all of the right answers to everything. To make such a claim is to decree that you are like God: all-knowing and perfect in every way. However, any human cannot make such a claim. Humans are notorious for failure.</p> <p>Did Edison invent the lightbulb on the first try? Did all the Apollo missions succeed without incident? How many attempts did it take Spacex engineers to land a rocket? Was it 1? How many answers did you get wrong on all of the tests you took in school? Was it 0?</p> <p>As a human, I understand my faults. Compared to a Holy God, I can never be perfect. Thankfully, this God offers forgiveness of sin through placing one's trust in His substitutionary death on the cross. Oh, what freedom I experienced when I trusted Christ!</p> <p>Now, as I have been a Christian for over two decades, it disturbs me at the audacity of some who claim the inability to change their opinions. Our sacred text shows a few examples of the opposite. Job had an idea of God, but when he saw Him, Job's lifestyle changed (Job 42:5-6). Paul admonished the reduction of one's liberty to maintain the edification of one another (Romans 14:19-21). Even the early church demonstrated the necessity of change to minister to the needs of those who were experiencing poverty from becoming a Christian (Acts 4:32-35).</p> <p>Christianity is not a list of stubborn rules which are unmovable. Instead, it is a journey leading one "to be conformed to the image of his Son" (Romans 8:29), and it is built upon continual scrutiny of one's decisions (Romans 12:2). Change (or demonstration of critical thinking as to why one is not changing) is an indicator of one's belief in God. "We have always done it this way" is not acceptable thinking in Christianity. Change must be performed when necessitated.</p> <p>What will cause you to change from your position? What evidence is required for you to stay with your current thinking? Defining these should be a requirement for any individual desiring to hold a position of ministry.</p> 2023-02-13T08:05:48+00:00 2023-02-13T08:05:48+00:00 Andrew Wippler /2023-02-13-three-goals-in-bible-reading/ <p>Recently, I evaluated why I take time out of my day to read the Bible. I have heard that the Bible has one singular meaning. If that is true, then reading the Bible through once is sufficient. However, those that promote singular meaning also advocate for daily Bible reading. This seems like a logical fallacy, which should be addressed; nevertheless, I attempt to achieve at least one of these three goals every time I open my Bible to read it.</p> <ol> <li> <p>Personal Growth I need to learn God's view of man's relations. I need to adapt my lifestyle to fit.</p> </li> <li> <p>Time with God Sometimes the only result I get is adding minutes to our relationship. When I was dating my wife, it did not matter if all we did was sit and watch an old movie. We were adding minutes of being together. The same is true for any relationship - time spent together matters.</p> </li> <li> <p>Finding a truth to teach others Pet peeves are often taught as truth; however, one must follow the logical, linguistic chain to find the truth that Scripture teaches. One must pull out the application rather than inject the thought into the text. One must be fully equipped in the truth to be able to teach others the same truth.</p> </li> </ol> 2023-02-07T10:09:58+00:00 2023-02-07T10:09:58+00:00 Andrew Wippler /2023-02-07-link-sharing-in-the-blog-era/ <p>I just remembered how painful it was to share content through a blog to friends. Social media, such as Twitter, solved that issue. I do not want to attempt trying to remember my Digg.it password (Does the site even exist anymore?)</p> <p>Anyway, I said all of that to say this: I know where both of these locations are:</p> <p><a class="external" href="https://yle.fi/a/74-20016727?origin=rss">https://yle.fi/a/74-20016727</a></p> <p>I can be excited for both the US and Finnish teams.</p> 2023-01-25T04:32:17+00:00 2023-01-25T04:32:17+00:00 Andrew Wippler /2023-01-25-extension-to-make-twitter-more-usable/ <p>After setting up an RSS reader and a bridge to pull in tweets, I no longer access Twitter. If there is interesting content, I click the link on my RSS reader and comment directly without visiting the Twitter homepage.</p> <p>If I were a more regular user of Twitter, I think I would use this extension: <a class="external" href="https://github.com/insin/tweak-new-twitter">https://github.com/insin/tweak-new-twitter</a></p> <p>I might even install it for the few times a month I click on a Twitter link.</p> 2023-01-19T08:50:38+00:00 2023-01-19T08:50:38+00:00 Andrew Wippler /2023-01-19-depression-and-anxiety/ <p>This morning I read from one of the people I follow a short, concise list of comparing Depression and Anxiety. <a class="external" href="https://twitter.com/JoeShakour/status/1615766430535778333?s=20">It is quite good to read over</a>, but I think it is quite lacking in its explanation. Primarily limited from the 280 character posts on Twitter.</p> <p>I feel like I have authority to speak on this subject because I am the son of a medically-diagnosed bi-polar manic depressive and my other parent is anxious about living in the perfect climate known as San Diego, California. To say that I know what depression and anxiety look like would be an understatement. Not only have I observed it in my parents, but I have had seasons where the struggle between the two extremes was real in my own life. Now, as a parent, I view some of the struggles that I have seen in my parents and my own life beginning to surface in my children.</p> <p>How does one overcome anxiety or depression? Here are some solutions:</p> <ol> <li> <p><strong>Find an anchor.</strong> An anchor is one that does not change over time. Some like to put their anchor in a schedule, in a relationship, in a religious set of beliefs, or in a church; however, those are false anchors.</p> <p>The only true anchor is God.</p> <p>David wrote, "Truly my soul waiteth upon God: from him cometh my salvation. He only is my rock and my salvation; he is my defence; I shall not be greatly moved." (Psalm 62:1-2).</p> </li> <li> <p><strong>Belong to a church that develops your connection to the anchor.</strong> Some like to evaluate this position to mean that the church has a ton of programs going on. However, the way to evaluate this section is if the pastor gives a sermon (or brings in men to preach on his behalf), that equip you to become better attached to the anchor. This is amplified through opportunities to use this attachment.</p> <p>Sadly, it is increasingly common to find a church in America that preaches republicanism where Trump is god or wokeism where everything must be accepted. If you increasingly feel better equipped to attack the other side rather than develop the peace which is in God (John 14:27), it is time for you to find a different church.</p> <p>Paul wrote, "For the kingdom of God is not meat and drink; but righteousness, and peace, and joy in the Holy Ghost. For he that in these things serveth Christ is acceptable to God, and approved of men. Let us therefore follow after the things which make for peace, and things wherewith one may edify another." (Romans 14:17-19)</p> </li> <li> <p><strong>Understand: depression and anxiety are temporary seasons (Ecc 3:1).</strong> If you are finding that they linger longer than expected, you might have to seek medical help. Medicine is the use of God's created resources to aid in the sustainability of His creation.</p> <p>Anxiety is relieved when that particular worry is completely let go to be cared for by God (1 Peter 5:7). It is a difficult practice to learn, but God's outcomes are better than mine.</p> <p>Depression has many causes and it is complex to even identify the reason for the depression. The worst thing you can do to yourself is to hide this depression from others. Seek help when necessary from your pastor or a Nuethetic Counselor he recommends.</p> <p>What makes me get into a depressive mood is when I am overwhelmed with tasks. I feel like I am drowning and there appears to be no deliverer. This is often caused by my own doing; therefore, it is solvable by me without the help of others. I have to remove tasks from my workload through completing them or not taking as many on as I would like. In recent days, I have discovered a new thing that contributes to my depression - a lack of sunlight. Whereas this only affects those who live in the earth's extremities, the solution is easily known - take Vitamin D.</p> <p>When it comes to depression, one should not seek to self-diagnose or fix by one's self. Depression is exaggerated when there is no one to help you. However, to this seemingly impossible season, the Bible is the source giver of hope:</p> <p>"There hath no temptation taken you but such as is common to man: but God is faithful, who will not suffer you to be tempted above that ye are able; but will with the temptation also make a way to escape, that ye may be able to bear it." (1 Cor 10:13 - memorize it if you have not already done so!)</p> </li> <li> <p><strong>If you are not currently going through a season of depression or anxiety, help someone who is.</strong></p> <p>"And the Lord said, Simon, Simon, behold, Satan hath desired to have you, that he may sift you as wheat:</p> <p>But I have prayed for thee, that thy faith fail not: and when thou art converted, strengthen thy brethren." (Luke 22:31-32)</p> </li> </ol> 2023-01-18T07:07:40+00:00 2023-01-18T07:07:40+00:00 Andrew Wippler /2023-01-18-ironic/ <p>It is very ironic - to me at least - that when I visit drive.google.com on a Chromebook, I am presented with a notification to install Google drive.</p> <p>This is a Chromebook.</p> <p>Google apps are loaded by default.</p> <p>This includes Google drive.</p> <p>I just prefer the web experience over the native file explorer.</p> 2022-12-28T08:53:04+00:00 2022-12-28T08:53:04+00:00 Andrew Wippler /2022-12-28-2023-return-to-the-syndicated-stone-age-rssa/ <p>The new year has already been dubbed by some in the tech world as the year of RSS, meaning people will ditch social media for the consumption-style RSS feed. It is the same concept of switching from a smartphone to a mobile phone. You might be thinking, "Why would anyone go backwards in technology?" Everyone may have their own reasons for doing so, but mine is simply because of the social media trap.</p> <p>The past few months I have noticed a personal, increased social media presence. I would have my app open 7 or 8 times a day, and because of the algorithms to keep me in the app longer, this would equate to 4 or 5 hours a day. I was managing to keep my studies, work, and family life balanced so I do not feel as if I have somehow lost that time or that I am wrong for spending that spare time on social media. It is just that 4 or 5 hours can be a bit excessive for a single particular hobby.</p> <p>One of the items I have learned through osmosis is that having regularly scheduled checkpoints to evaluate my personal life is important. Just like the feedback loop in software engineering presents a better product, a feedback loop in daily life is just as important. Software engineering says the feedback loop should be the shortest possible to completion; however, my feedback loop is every 3 months. This gives me enough time to cycle through and evaluate how I am doing without changing too rapidly. This last iteration, ending in September, allowed me to gather the data to know I was spending about 24 hours a week on social media.</p> <p>This current iteration was filled with thoughts of, "I know I need to do something, but what!?" However, when Elon Musk bought Twitter, everyone scrambled off of it to their own respective platforms. It was then I remembered that a solution exists in the form of RSS. The content I want to view and consume is retrieved without the help of a company's algorithm of keeping me on their platform.</p> <p>I settled for <a class="external" href="https://github.com/nkanaev/yarr">Yarr</a> as my feed reader and <a class="external" href="https://github.com/RSS-Bridge/rss-bridge">RSS-Bridge</a> for middleware when RSS feeds were not available. I am hosting these apps in my Kubernetes homelab and am using Github OAuth for authentication. While I have only tested this option for several weeks now, it seems to have kept me out of the algorithm octopus. Preliminary observations have shown 3-5 more hours for other hobbies - such as sleep, books, video games, blog posts, and other silly stuff that is interesting to me alone.</p> 2022-12-24T15:22:18+00:00 2022-12-24T15:22:18+00:00 Andrew Wippler /2022-12-24-i-think-i-will-keep-lastpass/ <p>LastPass was recently hacked and the hacker was able to steal keys from a developer which had access to the company's backup files. In the backup files, the hacker could use the decryption keys he stole from the developer to create something like:</p> <pre class="z-code"><code><span class="z-text z-plain">somesite.com,&lt;plaintext_username&gt;,&lt;hashed_password&gt; </span></code></pre> <p>I can assume my data has been leaked. I am a LastPass user; however, I do not think this is good reason for my departure from LastPass.</p> <p>This is not the first time a hacker was able to get this sort of information from LastPass. I was also a LastPass user during that time and my passwords were never compromised after than hack. The Zero-knowledge password storing employed by LastPass seems to have worked in the past, and I anticipate it being sufficient again.</p> <p>As a safety precaution, I went ahead and changed my financial passwords, but other than that step, is there anything else that needs to be done? Perhaps I will change my Master password once more. If LastPass gets hacked again, at least all my SHAs will be different.</p> 2022-12-17T09:37:18+00:00 2022-12-17T09:37:18+00:00 Andrew Wippler /2022-12-17-incarnation-haiku/ <p>God became a man. He experienced life. A life without sin.</p> <p>He, unworthily, Received punishment for sin. God the Son had died.</p> <p>Three days have now passed. And Jesus did not stay dead He came back to life.</p> <p>It was His power. Without the help of others. Life came back to Him.</p> <p>By resurrection, Jesus says, “Place trust in me.” “I make all things new.”</p> <p>This event declares And even more loudly proclaims Flawless victory.</p> 2022-12-07T09:36:03+00:00 2022-12-07T09:36:03+00:00 Andrew Wippler /2022-12-07-impossible-to-define/ <p>It is impossible to define a complex thought with one sentence. Even the previous sentence demands further information. What kind of thoughts do I mean? What is the reasoning for saying such a thing? Context adds further information to the reasoning behind such a statement. It also sets the stage for the real reason for the statement or provokes further thought.</p> <p>If one considers the previous paragraph to be accurate in its message, then one should not settle for a single verse to explain a complex doctrine, such as salvation.</p> 2022-12-06T11:25:44+00:00 2022-12-06T11:25:44+00:00 Andrew Wippler /2022-12-06-asking-chatgpt-to-define-love/ <p>As programmers develop new text generation methods, what can come as a result is interesting. Recently, ChatGPT responses have been propagating to Twitter, with many asking the AI text generator for common paradigms with known human solutions. Some posts have been insightful about how the chatbot was instructed to learn and associate words. However, to those who have programmed AI models, the shortcomings are apparent, and there is no immediate threat of a robot uprising. Currently, many perceived issues are corrected by inputting the correct wording to the chatbot, indicating the idiom, garbage in - garbage out, is still valid.</p> <p>I was interested in asking the ChatGPT to clarify the love quality found in John 3:16.</p> <p>Love is an emotion that is, in Christian circles, attributed to different levels or types of love. One can have a love for a sports team, a love for a spouse, and a love for chocolate. However, these types of love vary based on each object and the love holder.</p> <p>In English, we would use the same word for love to describe the varying emotion, but in other languages, the varying degrees are expressed in different word choices. It is common for Bible preachers to equate Greek word choices with varying forms of love, such as in the dialog between Peter and Jesus in John 21. (Although Carson has made good dialog into overthrowing this perceived relation.¹)</p> <p>My recent study of the Greek text in John 3:16 revealed a language barrier between what is written in Greek and what is translated into English. When written, love was given a form without English verb equivalency. It is translated in the English past tense, which offers a sense of something performed in previous times, but does not apply to today. However, as John wrote in Greek, the phrasal action exists in an eternal state.</p> <p>Perhaps ChatGPT could describe this immeasurable amount of love:</p> <p><a href="/2022/12/gnome-shell-screenshot-6xv4gg.png"><img src="/2022/12/gnome-shell-screenshot-6xv4gg.png" alt="ChatGPT trying to express love by stating: Ultimately, the best way to express an immeasurable amount of love is to show it through your actions, and to make the other person feel loved and valued." title="ChatGPT question" /></a></p> <p>The response is what you would expect of popular psychology, being there for a person regardless of the circumstance. The fallacy of this thought is easily identified in a situation where the one you love has escaped from prison. In that instance, supporting them would require you to harbor a known fugitive - an act punishable by US law. It is also impossible to be supportive of everyone's actions at all times. Can immeasurable love be shown to groups that have contrary opinions? However, this type of love is expressed in John 3:16.</p> <p>God's love is an immeasurable amount of love, which has lasting effects that continually build up. The potency by which God shows His love is presented through its conceptualization and increasing exponential power, which began in eternity past. In essence, God's love will continually build upon the foundation until the recipient has no more room to receive it. At this point, God's love is exponentially more.</p> <p>The very nature of God’s love felt for the world is signified by this thought: God expressed it in giving the most prized possession He had - His only begotten Son. The power and intensity by which God loves are based on the virtue of Jesus Christ.</p> <p>God so loved; therefore, He gave.</p> <p>¹D. A. Carson, <em>Exegetical Fallacies</em>, 2nd ed. (Grand Rapids, MI: Baker Books, 2013). 51-53.</p> 2022-11-22T10:36:04+00:00 2022-11-22T10:36:04+00:00 Andrew Wippler /2022-11-22-back-to-the-blogs/ <p>The painfully slow death of social media is pushing the masses back into our blog-o-spheres. In 2 years, the only people doing social media will be those who are not technical enough to click a one-button wordpress/ghost install and pay $5/month from a hosting provider. Of course, there will be the faithful few who still insist that Markdown is the way to go.</p> <p>For now, I want to experiment and see how a "status" post format works.</p> 2021-04-02T22:22:45+00:00 2021-04-02T22:22:45+00:00 Andrew Wippler /2021-04-02-remarkable-2-review/ <p>At first glance, the reMarkable seemed expensive for a one show pony. Replacing a pad of paper for notes was its only selling point and truly main focus. Could it really fit my use case and deliver an experience I needed?</p> <p>As one who regularly types notes and prints them for use in public speaking, I sought out a replacement for physical paper. I had multiple copies of notes, printed quite regularly, and often would get copies confused. In my flow, I numbered the pages as to not get them confused which order they were to be referred. I reprinted each time a correction to the notes or if the paper withered due to use. This seemed like a huge waste of paper. (At $.05 estimated per sheet of paper, 10 pages of notes would cost approximately $2 by the time I was finished.)</p> <p>I first started using my Kindle Paperwhite as a replacement to printing. I could easily send myself a PDF and have it appear on my Kindle. Over time I realized the screen was perfect for the lighting environments where I routinely looked at my notes - a pulpit. It was like having my notes printed, but without the glare of an LED from a tablet. One flaw of the Kindle stood out: while it was the perfect size for reading a book, it was too small for reading full sized PDF documents at a distance. I learned that I had to type "convert" in the subject line of each PDF email sent to my Kindle. This allowed better font viewing, but my formatting would not appear the way I needed it to.</p> <p>When I first saw the reMarkable, it looked like it would alleviate my two concerns. Once I received my remarkable (thank you, stimulus money), I was able to import a few PDFs and view them as full-sized on the glare-free e-ink display. The formatting was also exactly as I set it in my word processor. Everything seemed as if it was going to be perfect; however, the reMarkable had one flaw - it does not have a typing program. Yes, it does have an on-screen keyboard for filling out items such as filenames, emails, and others, but if you want to word process, you have to manually write out the letters. While this is good for hand-written note takers, this threw a wrench in my workflow. I could not use the reMarkable as an all-inclusive document processor to where I would no longer need to type on a computer. (To reMarkable's credit, they did not market the device as such, but I was erroneously thinking there would be some sort of typing application included.)</p> <p>After some reviewing my workflow of typing my document in GSuite, saving it as PDF, and uploading it to the reMarkable, I figured this required too much effort to get something on the reMarkable. There had to be an easier way - considering I would update my typed document quite frequently. Looking for options, I was able to find the <a class="external" href="https://github.com/bsdz/google-drive-remarkable-sync">google-drive-sync</a> script and <a class="external" href="https://github.com/bsdz/google-drive-remarkable-sync/pull/11">extend it to include Documents and convert them to PDFs.</a> My workflow now is as follows:</p> <p>I. I type a document into GSuite 2. It syncs to remarkable cloud and my device 3. I copy the file to a local folder, make annotations in the process of reviewing 4. I update the file on GSuite 5. Repeat from step 2</p> <p>I still have a few flaws to work out with the sync, but it works for now.</p> <p>As for the other aspect of the reMarkable - note taking and eBook reading, I have to say, that I quite enjoy the experience. Jotting down a to-do list, quickly putting thoughts down (instead of waiting for a note app to boot on a phone or computer), and notating on top of eBooks have been a breeze. The experience is just like using paper, and for one who can detect lag from a stylus, I cannot tell that I am using one.</p> <p>For a device that is marketed as replacing paper notes, it does quite well. My use case is also satisfied with some modifications that I have made. Overall, I am satisfied in the purchase and 2 year break-even point.</p> 2019-08-21T16:20:23+00:00 2019-08-21T16:20:23+00:00 Andrew Wippler /2019-08-21-use-the-same-dockerfile-please/ <p>As Containers have progressed, Docker has stood out as the defacto standard. As many of the laggards are coming up to speed, Dockerfiles can be seen in many open source repositories. With the addition to that, I have seen a few repos with a <code>Dockerfile-prod</code>, <code>Dockerfile-dev</code>, <code>Dockerfile-test</code>, etc.</p> <p>Additionally, you find an IF clause in the <code>CMD</code> statement such as:</p> <pre class="z-code"><code><span class="z-text z-plain">CMD if [ &quot;$REACT_NODE_ENV&quot; = &quot;development&quot; ]; \ </span><span class="z-text z-plain"> then yarn dev; \ </span><span class="z-text z-plain"> else yarn build &amp;&amp; yarn start --only=production; \ </span><span class="z-text z-plain"> fi </span></code></pre> <p>To those repositories, I have one daunting question:</p> <h2 id="why">WHY?</h2> <p>Container start commands can be overwritten at run time. Here is how to do it:</p> <pre class="z-code"><code><span class="z-text z-plain"># Dockerfile </span><span class="z-text z-plain">FROM alpine:3.6 </span><span class="z-text z-plain"> </span><span class="z-text z-plain">CMD echo &quot;production start command&quot; </span></code></pre> <pre class="z-code"><code><span class="z-text z-plain"># docker-compose.yml </span><span class="z-text z-plain">version: &#39;3&#39; </span><span class="z-text z-plain">services: </span><span class="z-text z-plain"> dev-server: </span><span class="z-text z-plain"> build: . </span><span class="z-text z-plain"> command: echo &#39;development start command&#39; </span></code></pre> <pre class="z-code"><code><span class="z-text z-plain"># kubernetes-deployment.yml </span><span class="z-text z-plain">apiVersion: apps/v1 </span><span class="z-text z-plain">kind: Deployment </span><span class="z-text z-plain">metadata: </span><span class="z-text z-plain"> name: cool-app </span><span class="z-text z-plain"> namespace: cool-app-testing </span><span class="z-text z-plain"> labels: </span><span class="z-text z-plain"> app: cool-app </span><span class="z-text z-plain">spec: </span><span class="z-text z-plain"> replicas: 1 </span><span class="z-text z-plain"> selector: </span><span class="z-text z-plain"> matchLabels: </span><span class="z-text z-plain"> app: cool-app </span><span class="z-text z-plain"> template: </span><span class="z-text z-plain"> metadata: </span><span class="z-text z-plain"> labels: </span><span class="z-text z-plain"> app: cool-app </span><span class="z-text z-plain"> spec: </span><span class="z-text z-plain"> containers: </span><span class="z-text z-plain"> - name: cool-app </span><span class="z-text z-plain"> image: alpine:3.6 </span><span class="z-text z-plain"> command: </span><span class="z-text z-plain"> - echo </span><span class="z-text z-plain"> - &#39;testing start command&#39; </span></code></pre> 2018-11-29T15:17:59+00:00 2018-11-29T15:17:59+00:00 Andrew Wippler /2018-11-29-wordpress-containerization-boilerplate/ <p>As a step further to my previous post, I have created a boilerplate for future WordPress projects. It can be accessed at <a class="external" href="https://github.com/andrewwippler/WordPress-Containerization-Boilerplate">https://github.com/andrewwippler/WordPress-Containerization-Boilerplate</a>.</p> <p>To quickly start a WordPress environment, simply run the following commands:</p> <pre class="z-code"><code><span class="z-text z-plain">git clone git@github.com:andrewwippler/WordPress-Containerization-Boilerplate.git </span><span class="z-text z-plain">cd WordPress-Containerization-Boilerplate/ </span><span class="z-text z-plain">docker-compose up </span></code></pre> <p>and by visiting <a class="external" href="http://localhost:8080">http://localhost:8080</a></p> <p>More instructions are in the repo README.</p> <p>Happy Plugin/Theme development.</p> 2018-11-27T20:16:55+00:00 2018-11-27T20:16:55+00:00 Andrew Wippler /2018-11-27-docker-izing-wordpress-for-kubernetes/ <p>WordPress is amazingly popular considering how antiquated the file structure and code appears to be. Even still, it is the easiest CMS that I have used and the community has created plugins to make the copy-folder-for-a-new-theme/plugin at least tolerable. A challenge comes when one wants to use the 1990's method of serving web applications in a more modern way (such as running inside a container on top of Kubernetes).</p> <p>Containers are meant to be immutable and treated as read-only. (No change to files in the container after they are built.) Containers are supposed to be a point-in-time release of software. As such, I can roll-back to a specific container version and have that specific code running. This causes a problem when one wants to use a file-dependent application such as WordPress. The best I could come up with for running WordPress in a container is a forward-only method of deploying code (basically, giving up the ability to use a previous version of code.) There <strong>is</strong> a way to keep that functionality, but it would mean storing everything (including uploads) inside an ever-growing container or using a central object store such as S3 for uploads. It would also require a re-build of the container every time a plugin is updated - which would presumably be every hour.</p> <p>My deployments of WordPress are so little that I can hardly justify using S3 for uploads, keeping the plugins in sync, and going backwards in time.</p> <p>When deploying to Kubernetes, one can scale the replicas to N copies. Keeping plugins, themes, and updates the same across all replicas will require a READ WRITE MANY (rwx) volume to be shared. This could be a GlusterFS volume or NFS, but it cannot be a AWS EBS volume or any other single-use block storage.</p> <p>When looking at the available WordPress images, there are three that seem interesting. With the official image, I like that I can use php-fpm and alpine. The next top two implementations of WordPress have <a class="external" href="https://hub.docker.com/r/bitnami/wordpress/~/dockerfile/">very</a> <a class="external" href="https://hub.docker.com/r/centurylink/wordpress/~/dockerfile/">bloated</a> docker files. I have come to the conclusion that my WordPress container will have to be built from scratch.</p> <p>The <a class="external" href="https://gist.githubusercontent.com/andrewwippler/9b62322d3dff2ddd3b1890ae0a22a17c/raw/ee25ecc4abf5dd0f9a2170c8bca19a244fbf9a72/Dockerfile">Dockerfile</a> is very similar to the official WordPress container. It uses <code>php:7.2-fpm-alpine</code> as the base image, adds in nginx, and inserts a generic <a class="external" href="https://gist.githubusercontent.com/andrewwippler/9b62322d3dff2ddd3b1890ae0a22a17c/raw/ee25ecc4abf5dd0f9a2170c8bca19a244fbf9a72/wp-config.php">wp-config.php</a> file.</p> <p>The folder structure for the container is as follows:</p> <pre class="z-code"><code><span class="z-text z-plain">WordPress Container Folder </span><span class="z-text z-plain">├── docker-entrypoint.sh </span><span class="z-text z-plain">├── Dockerfile </span><span class="z-text z-plain">├── html </span><span class="z-text z-plain">│   └── ... Contents of wordpress-X.Y.Z.zip </span><span class="z-text z-plain">├── nginx.conf </span><span class="z-text z-plain">└── wp-config.php </span><span class="z-text z-plain"> </span></code></pre> <p>It can be built by running a command similar to <code>docker build -t andrewwippler/wordpress:latest .</code></p> <p><a class="external" href="https://gist.githubusercontent.com/andrewwippler/9b62322d3dff2ddd3b1890ae0a22a17c/raw/ee25ecc4abf5dd0f9a2170c8bca19a244fbf9a72/nginx.conf">nginx.conf</a> is a very basic configuration file with gzip and cache headers. The real neat things come in the <a class="external" href="https://gist.githubusercontent.com/andrewwippler/9b62322d3dff2ddd3b1890ae0a22a17c/raw/ee25ecc4abf5dd0f9a2170c8bca19a244fbf9a72/docker-entrypoint.sh">docker-entrypoint.sh</a> file.</p> <p>I <a class="external" href="https://github.com/docker-library/wordpress/blob/443eb3028423485fdf3943250db5609f3f37afbe/php7.0/fpm-alpine/docker-entrypoint.sh#L218-L257">borrowed</a> the database creation script; however, since PHP was already installed in the container, I ran a few more checks in PHP rather than bash. For instance, the container places the local code in <code>/var/www/html-original</code> and rsyncs it to <code>/var/www/html</code> where the webserver sees it, but it only does this if the code in <code>html-original</code> is newer than <code>html</code>. This allows an operator to mount a storage volume at <code>/var/www/html</code> which can be shared across Kubernetes Deployment replicas. The code for this is:</p> <pre class="z-code"><code><span class="z-text z-plain">// see if we need to copy files over </span><span class="z-text z-plain">include &#39;/var/www/html-original/wp-includes/version.php&#39;; </span><span class="z-text z-plain">$dockerWPversion = $wp_version; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">if (file_exists(&#39;/var/www/html/wp-includes/version.php&#39;)) { </span><span class="z-text z-plain"> include &#39;/var/www/html/wp-includes/version.php&#39;; </span><span class="z-text z-plain"> $installedWPversion = $wp_version; </span><span class="z-text z-plain">} else { </span><span class="z-text z-plain"> $installedWPversion = &#39;0.0.0&#39;; </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">fwrite($stderr, &quot;dockerWPversion: $dockerWPversion - installedWPversion: $installedWPversion\n&quot;); </span><span class="z-text z-plain">if(version_compare($dockerWPversion, $installedWPversion, &#39;&gt;&#39;)) { </span><span class="z-text z-plain"> fwrite($stderr, &quot;Installing wordpress files\n&quot;); </span><span class="z-text z-plain"> exec(&#39;rsync -au /var/www/html-original/ /var/www/html&#39;); </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span></code></pre> <p>I have also included a theme-only check that will update the theme if it has changed. This is necessary to update the theme files when the version of WordPress has not changed.</p> <pre class="z-code"><code><span class="z-text z-plain">if (filemtime(&#39;/var/www/html-original/wp-content/themes&#39;) &gt; filemtime(&#39;/var/www/html/wp-content/themes&#39;)) { </span><span class="z-text z-plain"> fwrite($stderr, &quot;Updating theme files\n&quot;); </span><span class="z-text z-plain"> exec(&#39;rsync -au --delete-after /var/www/html-original/wp-content/themes/ /var/www/html/wp-content/themes&#39;); </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span></code></pre> <p>All files I have referenced in this article are<a class="external" href="https://gist.github.com/andrewwippler/9b62322d3dff2ddd3b1890ae0a22a17c"> located in a gist</a>. In addition to those files a local docker-compose.yml file might be helpful for your local development:</p> <pre class="z-code"><code><span class="z-text z-plain">version: &#39;2&#39; </span><span class="z-text z-plain">services: </span><span class="z-text z-plain"> db: </span><span class="z-text z-plain"> image: mariadb:10 </span><span class="z-text z-plain"> volumes: </span><span class="z-text z-plain"> - ./tmp/db:/var/lib/mysql </span><span class="z-text z-plain"> environment: </span><span class="z-text z-plain"> - MYSQL_ROOT_PASSWORD=secretPASS </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> wordpress: </span><span class="z-text z-plain"> build: wordpress </span><span class="z-text z-plain"> volumes: </span><span class="z-text z-plain"> - ./html:/var/www/html </span><span class="z-text z-plain"> - ./nginx.conf:/etc/nginx/nginx.conf:ro </span><span class="z-text z-plain"> links: </span><span class="z-text z-plain"> - db </span><span class="z-text z-plain"> environment: </span><span class="z-text z-plain"> - WORDPRESS_DB_NAME=wordpress </span><span class="z-text z-plain"> - WORDPRESS_DB_HOST=db </span><span class="z-text z-plain"> - WORDPRESS_DB_USER=root </span><span class="z-text z-plain"> - WORDPRESS_DB_PASSWORD=secretPASS </span><span class="z-text z-plain"> ports: </span><span class="z-text z-plain"> - 8080:80 </span><span class="z-text z-plain"> </span></code></pre> 2018-07-09T13:58:16+00:00 2018-07-09T13:58:16+00:00 Andrew Wippler /2018-07-09-kubernetes-heapster-to-metrics-server/ <p>I recently updated my kubernetes cluster from <code>1.10.2</code> to <code>1.11.0</code>. I noticed heapster was being deprecated and completely removed by version <code>1.13.0</code>. I thought this would be the perfect time to try out metrics-server. I had to download the git repo to apply the kubernetes yaml to my cluster. Since this is sometimes not as ideal as I would like, (I prefer <code>kubectl apply -f http://</code> when it comes from a trusted source) I am writing the below for easy access in the future:</p> <pre class="z-code"><code><span class="z-text z-plain"> </span><span class="z-text z-plain">kubectl apply -f https://raw.githubusercontent.com/kubernetes-incubator/metrics-server/master/deploy/1.8%2B/auth-delegator.yaml </span><span class="z-text z-plain">kubectl apply -f https://raw.githubusercontent.com/kubernetes-incubator/metrics-server/master/deploy/1.8%2B/auth-reader.yaml </span><span class="z-text z-plain">kubectl apply -f https://raw.githubusercontent.com/kubernetes-incubator/metrics-server/master/deploy/1.8%2B/metrics-apiservice.yaml </span><span class="z-text z-plain">kubectl apply -f https://raw.githubusercontent.com/kubernetes-incubator/metrics-server/master/deploy/1.8%2B/metrics-server-deployment.yaml </span><span class="z-text z-plain">kubectl apply -f https://raw.githubusercontent.com/kubernetes-incubator/metrics-server/master/deploy/1.8%2B/metrics-server-service.yaml </span><span class="z-text z-plain">kubectl apply -f https://raw.githubusercontent.com/kubernetes-incubator/metrics-server/master/deploy/1.8%2B/resource-reader.yaml </span><span class="z-text z-plain"> </span></code></pre> <p>Note: this is for clusters running v1.8.0 or greater.</p> 2018-06-06T12:15:42+00:00 2018-06-06T12:15:42+00:00 Andrew Wippler /2018-06-06-jenkins-x-on-home-kubernetes-cluster/ <p><a class="external" href="https://jenkins-x.io">Jenkins-x</a> appears to be the next big thing in CI/CD workflows - especially if you develop applications on kubernetes. There were a few tweaks I needed to do to set it up:</p> <ol> <li> <p>I had to manually create Persistent Volumes (no big deal, below are what I have for my NFS share)</p> <pre class="z-code"><code><span class="z-text z-plain">apiVersion: v1 </span><span class="z-text z-plain">kind: PersistentVolume </span><span class="z-text z-plain">metadata: </span><span class="z-text z-plain"> name: jenkins </span><span class="z-text z-plain"> namespace: jx </span><span class="z-text z-plain"> labels: </span><span class="z-text z-plain"> app: jenkins </span><span class="z-text z-plain">spec: </span><span class="z-text z-plain"> capacity: </span><span class="z-text z-plain"> storage: 30Gi </span><span class="z-text z-plain"> accessModes: </span><span class="z-text z-plain"> - ReadWriteOnce </span><span class="z-text z-plain"> nfs: </span><span class="z-text z-plain"> server: 192.168.0.101 </span><span class="z-text z-plain"> path: &quot;/volume1/k8s/jenkins/jenkins&quot; </span><span class="z-text z-plain">--- </span><span class="z-text z-plain">apiVersion: v1 </span><span class="z-text z-plain">kind: PersistentVolume </span><span class="z-text z-plain">metadata: </span><span class="z-text z-plain"> name: jenkins-x-chartmuseum </span><span class="z-text z-plain"> namespace: jx </span><span class="z-text z-plain"> labels: </span><span class="z-text z-plain"> app: jenkins-x-chartmuseum </span><span class="z-text z-plain">spec: </span><span class="z-text z-plain"> capacity: </span><span class="z-text z-plain"> storage: 100Gi </span><span class="z-text z-plain"> accessModes: </span><span class="z-text z-plain"> - ReadWriteOnce </span><span class="z-text z-plain"> nfs: </span><span class="z-text z-plain"> server: 192.168.0.101 </span><span class="z-text z-plain"> path: &quot;/volume1/k8s/jenkins/jenkins-x-chartmuseum&quot; </span><span class="z-text z-plain">--- </span><span class="z-text z-plain">apiVersion: v1 </span><span class="z-text z-plain">kind: PersistentVolume </span><span class="z-text z-plain">metadata: </span><span class="z-text z-plain"> name: jenkins-x-docker-registry </span><span class="z-text z-plain"> namespace: jx </span><span class="z-text z-plain"> labels: </span><span class="z-text z-plain"> app: jenkins-x-docker-registry </span><span class="z-text z-plain">spec: </span><span class="z-text z-plain"> capacity: </span><span class="z-text z-plain"> storage: 30Gi </span><span class="z-text z-plain"> accessModes: </span><span class="z-text z-plain"> - ReadWriteOnce </span><span class="z-text z-plain"> nfs: </span><span class="z-text z-plain"> server: 192.168.0.101 </span><span class="z-text z-plain"> path: &quot;/volume1/k8s/jenkins/jenkins-x-docker-registry&quot; </span><span class="z-text z-plain">--- </span><span class="z-text z-plain">apiVersion: v1 </span><span class="z-text z-plain">kind: PersistentVolume </span><span class="z-text z-plain">metadata: </span><span class="z-text z-plain"> name: jenkins-x-mongodb </span><span class="z-text z-plain"> namespace: jx </span><span class="z-text z-plain"> labels: </span><span class="z-text z-plain"> app: jenkins-x-mongodb </span><span class="z-text z-plain">spec: </span><span class="z-text z-plain"> capacity: </span><span class="z-text z-plain"> storage: 30Gi </span><span class="z-text z-plain"> accessModes: </span><span class="z-text z-plain"> - ReadWriteOnce </span><span class="z-text z-plain"> nfs: </span><span class="z-text z-plain"> server: 192.168.0.101 </span><span class="z-text z-plain"> path: &quot;/volume1/k8s/jenkins/jenkins-x-mongodb&quot; </span><span class="z-text z-plain">--- </span><span class="z-text z-plain">apiVersion: v1 </span><span class="z-text z-plain">kind: PersistentVolume </span><span class="z-text z-plain">metadata: </span><span class="z-text z-plain"> name: jenkins-x-nexus </span><span class="z-text z-plain"> namespace: jx </span><span class="z-text z-plain"> labels: </span><span class="z-text z-plain"> app: jenkins-x-nexus </span><span class="z-text z-plain">spec: </span><span class="z-text z-plain"> capacity: </span><span class="z-text z-plain"> storage: 30Gi </span><span class="z-text z-plain"> accessModes: </span><span class="z-text z-plain"> - ReadWriteOnce </span><span class="z-text z-plain"> nfs: </span><span class="z-text z-plain"> server: 192.168.0.101 </span><span class="z-text z-plain"> path: &quot;/volume1/k8s/jenkins/jenkins-x-nexus&quot; </span></code></pre> </li> <li> <p>I had to modify the install line<code>jx install --ingress-namespace ingress-nginx --domain wplr.rocks --tls-acme true --skip-ingress</code></p> </li> <li> <p>I had to modify the <code>jenkins-x-mongodb</code> deployment to use image <code>mongo:3.6.5-jessie</code>. Still wonder why people use bitnami images.</p> </li> <li> <p>I had to</p> <pre class="z-code"><code><span class="z-text z-plain">securityContext: </span><span class="z-text z-plain"> runAsUser: 1024 </span></code></pre> <p>on the <code>jenkins-x-nexus</code> deployment. The container was trying to change permissions on my nfs mount. Not sure why my Synology NFS does not like permission changes.</p> </li> </ol> <p>Even after those changes, <code>jenkins-x-monocular-ui</code> still fails to start -_- ... I have run out of time for now. More debugging to come later (MUCH MUCH later)</p> 2018-04-04T16:17:19+00:00 2018-04-04T16:17:19+00:00 Andrew Wippler /2018-04-04-dhcp-ip-updater/ <p>This is the script I use to change the DNS record of my home IP when it changes. I have it running once a week and have not noticed a lapse in coverage. If your ISP has DHCP configured correctly, you will receive the same IP address when you are due for a renew. Otherwise you need a script like the one below.</p> <pre class="z-code"><code><span class="z-text z-plain">#!/usr/bin/ruby </span><span class="z-text z-plain"> </span><span class="z-text z-plain">require &#39;aws-sdk&#39; </span><span class="z-text z-plain">require &#39;socket&#39; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">def my_first_public_ipv4 </span><span class="z-text z-plain"> Socket.ip_address_list.detect{|intf| intf.ipv4? and !intf.ipv4_loopback? and !intf.ipv4_multicast? and !intf.ipv4_private?} </span><span class="z-text z-plain">end </span><span class="z-text z-plain"> </span><span class="z-text z-plain">ip = my_first_public_ipv4.ip_address </span><span class="z-text z-plain"> </span><span class="z-text z-plain">unless ip.nil? </span><span class="z-text z-plain"> </span><span class="z-text z-plain">change = { </span><span class="z-text z-plain"> :action =&gt; &#39;UPSERT&#39;, </span><span class="z-text z-plain"> :resource_record_set =&gt; { </span><span class="z-text z-plain"> :name =&gt; &quot;home.andrewwippler.com&quot;, </span><span class="z-text z-plain"> :type =&gt; &quot;A&quot;, </span><span class="z-text z-plain"> :ttl =&gt; 600, </span><span class="z-text z-plain"> :resource_records =&gt; [{:value =&gt; ip}] </span><span class="z-text z-plain">}} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">route53 = Aws::Route53::Client.new( </span><span class="z-text z-plain"> region: &#39;us-east-1&#39; </span><span class="z-text z-plain">) </span><span class="z-text z-plain">route53.change_resource_record_sets({ </span><span class="z-text z-plain"> hosted_zone_id: &#39;/hostedzone/XXXXXXXXXXXXXXX&#39;, # required </span><span class="z-text z-plain"> change_batch: { # required </span><span class="z-text z-plain"> changes: [change], </span><span class="z-text z-plain"> }, </span><span class="z-text z-plain">}) </span><span class="z-text z-plain"> </span><span class="z-text z-plain">end </span><span class="z-text z-plain"> </span></code></pre> 2018-04-03T15:36:25+00:00 2018-04-03T15:36:25+00:00 Andrew Wippler /2018-04-03-allowing-outside-access-to-home-kubernetes-cluster/ <p>After I created a home kubernetes cluster, I immediately wanted to allow external access to pods/services/ingresses hosted inside the cluster. One must be aware that in bare metal environments, there is no receiver of an api call to create a load balancer. Since there is not a scriptable environment available to kubernetes, kubernetes cannot request external IP addresses or provision resources that one has come to expect in cloud environments such as AWS. This is a huge bummer - especially since dynamically built environments are fun to have.</p> <p>To route traffic to web services inside of kubernetes, you have to options available: <code>ingress</code> and <code>service</code>. Services can be exposed via <code>NodePort</code>, <code>LoadBalancer</code>, or <code>ClusterIP</code>. In bare metal, <code>LoadBalancer</code> would never work (unless you coded your own API call to configure a load balancer outside of kubernetes). <code>ClusterIP</code> might work if you want to manage a routing table somewhere inside your network, and <code>NodePort</code> will work if you want to manage a port forwarding table on your router. None of these options are fun for home labs on bare metal. An <code>Ingress</code> is like a layer 7 firewall in that it reads the hostname and path of the incoming HTTP request and can route to applicable services. This works great for a dynamic environment where I am going to host multiple http endpoints.</p> <p>The overall view of this traffic is going to be: <code>Internet</code> &gt; <code>Router</code> &gt; <code>k8s Ingress</code> &gt; <code>k8s Service</code> &gt; <code>Pod(s)</code>.</p> <p>To create an ingress in kubernetes, you have to make it a <code>Service</code>. In cloud environments, the <code>Ingress</code> is created as type <code>LoadBalancer</code> in home labs, we create this as type <code>NodePort</code> and port forward on the router to any node in the kubernetes cluster.</p> <pre class="z-code"><code><span class="z-text z-plain">$ kubectl get svc -n ingress-nginx </span><span class="z-text z-plain">NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE </span><span class="z-text z-plain">default-http-backend ClusterIP 10.102.173.184 80/TCP 3d </span><span class="z-text z-plain">ingress-nginx NodePort 10.110.162.247 80:30746/TCP,443:32641/TCP 3d </span><span class="z-text z-plain"> </span></code></pre> <p>In my home lab, I am port forwarding on my router <code>0.0.0.0:80 -&gt; &lt;any_node&gt;:30746</code> and <code>0.0.0.0:443 -&gt; &lt;any_node&gt;:32641</code>.</p> <p>Since I have a non-traditional home router (a Linux <a class="external" href="https://amzn.to/2EeaCDu">server with two nics</a>), I had to either enter these into <code>iptables</code> or I could improve upon that by setting up a load balancer such as <code>nginx</code>. <code>nginx</code> will allow me to port-forward load balance across all my nodes and have an easy config file to edit. Because I also want to use <code>cert-manager</code> with Let's Encrypt free SSLs, I chose to use the TCP stream server of <code>nginx</code>.</p> <p>Another hiccup (so to speak) in home based labs, is that ISPs give DHCP addresses. So when my internet IP changes, I need to update the DNS of all my http endpoints. Rather than doing that, I have all my home urls (<code>*.wplr.rocks</code>) CNAME to a single hostname which I update with a script with the correct IP.</p> 2018-04-02T15:26:52+00:00 2018-04-02T15:26:52+00:00 Andrew Wippler /2018-04-02-home-kubernetes-cluster/ <p>So I admit it - I am completely obsessed with Kubernetes. All of the web app/api deployment challenges in the past 20 years have been somewhat solved with the Kubernetes orchestration and scheduling platform. Kubernetes brings fault-tolerance, and Highly available systems if set up correctly (i.e. use a Kubernetes cloud installer). I enjoy having the power to write yaml and apply it to infrastructure and it eventually becomes what I told it to be. No longer do I need to write the scripts to do it - it does it for me :)</p> <p>In my first kubernetes home cluster, I re-used my home router and my old media center as a single node + master, but I was hit by a 2 year old Kubernetes bug. It appears my old PC was out in the open. Since my 2 year old son likes to press power buttons, he came over and constantly pressed the power button on my Kubernetes master. This caused me to find a small mini computer that I could place in my cabinet out of view. I finally settled on <a class="external" href="https://amzn.to/2GsTRL3">this as my computer of choice</a>. At $150/each for 4 cores, 4GB RAM, and 32GB nve, I thought it was a good deal and ample to run a few containers per node with a nfs-backed storage array.</p> <p>These little machines booted via UEFI pxe (after pressing DEL for bios and selecting the Realtek boot in the save/exit page). I used this kickstart file which installed CentOS 7 minimal by passing in the <code>ks</code> argument to a CentOS initramfs:</p> <p>After the servers installed, I ran this script:</p> <p>Note: for one of the three machines I received, I had to put <code>modprobe br_netfilter</code> in <code>/etc/rc.local</code> before <code>/etc/sysctl.d/k8s.conf</code> would apply.</p> 2018-03-31T08:00:31+00:00 2018-03-31T08:00:31+00:00 Andrew Wippler /2018-03-31-why-jesus-and-easter-matters/ <p><em>There is a God and He loves you</em>. John 3:16 says, “For God so loved the world, that he gave his only begotten Son, that whosoever believeth in him should not perish, but have everlasting life.”</p> <p><em>Everyone is a sinner</em> and our sin separates us from the love that God wants to express toward us “For all have sinned, and come short of the glory of God;” (Romans 3:23) “But your iniquities have separated between you and your God, and your sins have hid his face from you...” (Isaiah 59:2).</p> <p><em>Jesus came to break down the barrier of sin.</em> “But God commendeth his love toward us, in that, while we were yet sinners, Christ died for us” (Romans 5:8).</p> <p><em>The death of Jesus satisfied all the requirements</em>, but Jesus did not stay dead. Three days later - Easter morning, He arose from the grave by His own power. “He is not here: for he is risen, as he said.” (Matthew 28:6) “No man taketh it from me, but I lay it down of myself. I have power to lay it down, and I have power to take it again.”(John 10:18)</p> <p><em>Having a relationship with God is not about being good or religious. It is claiming the work Jesus fulfilled on the cross.</em></p> <p>Jesus said in John 6:47, “He that believeth on me hath everlasting life.”</p> <p>Those who trust in Jesus are saved from the penalty and power of sin and will have eternal life in Heaven with God.</p> <p>“For whosoever shall call upon the name of the Lord shall be saved” (Romans 10:13).</p> <p>Place your trust in Jesus today.</p> 2018-02-02T14:02:17+00:00 2018-02-02T14:02:17+00:00 Andrew Wippler /2018-02-02-not-posting-as-much/ <p>I have not been posting as much tech stuff on my blog as I want to. The reason for this is I have been mulling about the idea of submitting my tutorials to a publication and get paid for my work. I still have not decided if this is the right course of action. Not that I have to explain myself with the readers of my blog - I just wanted something other than a Christmas post as my newest blog post :o</p> 2017-12-25T15:00:49+00:00 2017-12-25T15:00:49+00:00 Andrew Wippler /2017-12-25-merry-christmas-2/ <p>Merry Christmas from the Wippler family!</p> <p>We pray that you are enjoying this season of celebration as we reflect upon our Saviour's birth. Truly, for the Christian, Christ is the focal point of the season.</p> <p>October was unusually mild and warm for Minnesota. Then on Friday, October 27, a snowstorm swept through our area dumping the highest one-day snowfall total ever recorded in Duluth since October 1933! Quite a rude awakening for this California family. However, we are loving the snow and are adjusting to the colder climate (although we're told the worst is yet to come). Like today, when the high is going to be -10°F!</p> <p>On the family side of things, it's been a joy to watch the Lord work in Mollie's life this past year--first with her salvation in June and then with her decision to be baptized 3 weeks ago. She has a tender heart, and we're praying the Lord uses her greatly. On a humorous note, she decided yesterday she wanted to style her hair like "mommy's." While Nicole prepared lunch downstairs, Mollie was upstairs adjusting her hairstyle.</p> <p><a href="/2017/12/IMG_20171222_135215883.jpg"><img src="/2017/12/IMG_20171222_135215883.jpg" alt="" /></a></p> <p>Fortunately, not too much damage was done, and the hairdresser informed us that having shorter layers in the front and longer in the back is the "in" look.</p> <p>Meg turned 4 on November 7, while Clark celebrated his 3rd birthday on December 15! How time flies! Meg continues to astound us with her love of and ability to learn. She's a thinker for sure: the other day during family devotions, Nicole asked her why Mary washed Jesus feet with her hair, hoping she'd say something along the lines of "because she loved Jesus." Instead she responded with, "because she didn't have any towels."</p> <p>Now that Jake's gotten a little older, Clark and Jake have become car/train playing buddies. It's hilarious to watch them playing/dragging their blankets together around the house. Both boys are becoming more articulate. After Clark fell on his face one day, Nicole teasingly said, "Oh no! Your face has broken into 100 pieces. Let's get some glue." With a panic stricken tone, Clark told Mollie, "Get the glue, Mollie! Hurry! My face is broken!" We're truly blessed with 4 precious children!</p> <p>Speaking of blessings, it's been a tremendous blessing to see the Lord working in our church. At our annual Christmas dinner, we had many visitors with several making professions of salvation. The following Sunday morning we had our children's Christmas program. The auditorium was filled, and several of our bus children had family in attendance. One little girl invited and saw her school mentor in attendance. We're praying that many of these visitors will be saved, baptized, and then discipled in the upcoming months.</p> <p>In closing, let us wish your family a Happy New Year! We truly appreciate your prayers as we seek to be faithful to the Lord and His calling upon our lives. You are in our thoughts and prayers as well.</p> <p>Love,</p> <p>Andrew and Nicole</p> 2017-12-08T15:00:22+00:00 2017-12-08T15:00:22+00:00 Andrew Wippler /2017-12-08-kubernetes-health-check/ <p>The day before thanksgiving, I was pondering an issue I was having. I was pinning a package to a specific version in my Docker container and the repository I grabbed it from stopped offering this specific version. This resulted in a container that Jenkins responded as being built correctly, but missing an integral package that allowed my application to function properly. This led me to believe I had to implement <a class="external" href="https://puppet.com/blog/using-lumogon-inspect-your-containers">Puppet's Lumogon</a> in my Jenkins build process. Curious if anyone had something like this already developed, I headed over to github.com which eventually led me to compose this tweet:</p> <blockquote> <p>Step 1: Have k8s technical problem Step 2: Review <a class="external" href="https://twitter.com/kelseyhightower?ref_src=twsrc%5Etfw">@kelseyhightower</a>'s recent git pushes Step 3: Find: <a class="external" href="https://github.com/kelseyhightower/ato/blob/master/deployments/helloworld.yaml#L26-L29">https://github.com/kelseyhightower/ato/blob/master/deployments/helloworld.yaml#L26-L29</a>Step 4: Realize this is exactly something I needed to implement Step 5: Implement feature Step 6: Enjoy thanksgiving without worry Step 7: Blog post</p> <p>— Andrew J. Wippler (@AndrewWippler) <a class="external" href="https://twitter.com/AndrewWippler/status/933413365837418498?ref_src=twsrc%5Etfw">November 22, 2017</a></p> </blockquote> <p>This <code>readinessProbe</code> communicates with <code>kubeproxy</code> to either allow a pod to be in service or out of service. At first I thought the <code>readinessProbe</code> was a once-and-done check, but I found out later this is not the case. When a pod gets launched, kubernetes waits until the container is in the ready state. We can define what consists of a ready container by the use of probes. Coupled with a kubernetes strategy, we can also define and ensure our application survives broken container updates.</p> <p>Since the application I am supporting is already HTTP based, making an HTTP check to an endpoint that reports on connectivity to core services was the most trivial to implement. I created a script to verify connectivity to MariaDB, MongoDB, Memcached, Message Queue, and verified certain paths on the NFS share were present. All of these items are important to my application and most of them require certain configuration values in my containers to operate. Having kubernetes run this script every time there is a new pod verifies I will never an experience an outage due to a missing package again. As I mentioned before, I thought the <code>readinessProbe</code> was a once-and-done, however, I found that after implementing it, my metrics indicated the script was running every 10 seconds per every replica... this quickly added up!</p> <p>After some chatting in the #kubernetes-users slack, I was able to get more understanding of the <code>readinessProbe</code> and how it was designed to communicate with kubeproxy so that you could "shut off" a container by taking it out of rotation. This was not the behavior I wanted so it was suggested that I create a state file. This state file is created after the check and, if it is present, it skips all checks. Due to the ephemeral nature of container storage, it can be assumed this file will never exist on a pod where this check has not been performed.</p> 2017-12-01T15:00:36+00:00 2017-12-01T15:00:36+00:00 Andrew Wippler /2017-12-01-adding-a-user-to-k8s-rbac/ <p>In order to add a user to a kubernetes cluster, we will need several things: kubectl, CA.crt and CA.key (found in your head node's <code>/etc/kubernetes/pki</code> folder), and openssl.</p> <p>First, create a private key for the new user. In this example, we will name the file employee.key:</p> <pre class="z-code"><code><span class="z-text z-plain">openssl genrsa -out employee.key 2048 </span></code></pre> <p>Next, we will need to create a certificate sign request - employee.csr - using the private key we just created (employee.key in this example). Make sure to specify your username and group in the <code>-subj</code> section (CN is for the username and O for the group).</p> <pre class="z-code"><code><span class="z-text z-plain">openssl req -new -key employee.key -out employee.csr -subj &quot;/CN=username/O=developer&quot; </span></code></pre> <p>Generate the final certificate employee.crt by approving the certificate sign request, employee.csr, you made earlier. In this example, the certificate will be valid for 90 days.</p> <pre class="z-code"><code><span class="z-text z-plain">openssl x509 -req -in employee.csr -CA CA.crt -CAkey CA.key -CAcreateserial -out employee.crt -days 90 </span></code></pre> <p>Give <strong>employee.crt</strong>, <strong>employee.key</strong>, and <strong>CA.crt</strong> to the new employee and have the employee follow the below steps.</p> <pre class="z-code"><code><span class="z-text z-plain"># Set up the cluster </span><span class="z-text z-plain">$ kubectl config set-cluster k8s.domain.tld --server https://api.k8s.domain.tld --certificate-authority /path/to/CA.crt --embed-certs=true </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Set up the credentials (a.k.a login information) </span><span class="z-text z-plain">$ kubectl config set-credentials &lt;name&gt; --client-certificate=/path/to/cert.crt --client-key=/path/to/cert.key --embed-certs=true </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># bind login to server </span><span class="z-text z-plain">$ kubectl config set-context k8s.domain.tld --cluster= k8s.domain.tld --user=&lt;name&gt; </span><span class="z-text z-plain"># Optional: append `--namespace=&lt;namespace&gt;` to the command to set a default namespace. </span></code></pre> <p><em>Note</em>: You may move the certificates to a safe location since the commands included <code>--embed-certs=true</code>. This saved the certs in base64 format in the kubernetes config.</p> <p>Sometimes I post to my blog so I remember how to do a particular thing. This is one of those times.</p> 2017-11-28T21:01:51+00:00 2017-11-28T21:01:51+00:00 Andrew Wippler /2017-11-28-reusable-containers-with-confd/ <p>I recently had the need to populate a file in a docker container based upon whether or not the container is in production or development. I eventually came across <a class="external" href="https://github.com/kelseyhightower/confd">confd</a> which let me populate data in files based upon particular environment variables. While confd excels with distributed key value stores, my needs (and infrastructure) is at a much simpler level.</p> <p><a class="external" href="http://andrewwippler.com/wp-content/uploads/2017/11/Screenshot-from-2017-11-28-14-07-15.png"><img src="/2017/11/Screenshot-from-2017-11-28-14-07-15.png" alt="" /></a></p> <p>Confd requires a few folders to store a toml (/etc/confd/conf.d/) and a template file (/etc/confd/templates/). When confd runs, it will look at the contents of each toml file in the conf.d directory and process them according to their instructions.</p> <p><a class="external" href="https://github.com/andrewwippler/blog-confd">In my repository example</a>, I am wanting a container to say hello to me when it senses a NAME environment variable and print out the current datetime. If no environment variable is set, only the datetime is printed out. To do this, I must create the toml file <a class="external" href="https://github.com/andrewwippler/blog-confd/blob/master/docker/confd/conf.d/echo.toml">to look like this</a>:</p> <pre class="z-code"><code><span class="z-text z-plain">[template] </span><span class="z-text z-plain">src = &quot;echo.tmpl&quot; </span><span class="z-text z-plain">dest = &quot;/echo&quot; </span><span class="z-text z-plain"> </span></code></pre> <p>This file is instructing confd to generate the echo file, place it in the root (/) and use <a class="external" href="https://github.com/andrewwippler/blog-confd/blob/master/docker/confd/templates/echo.tmpl">/etc/confd/templates/echo.tmpl</a> as the contents.</p> <p>When we are building the container, we must include these configuration files and ensure confd is ran to generate the destination file. My <a class="external" href="https://github.com/andrewwippler/blog-confd/blob/master/Dockerfile">example Dockerfile</a> is doing just that by including all of the files in the container and running the <a class="external" href="https://github.com/andrewwippler/blog-confd/blob/master/docker/docker-entrypoint.sh">docker-entrypoint script</a> which is basically running confd and the newly generated file.</p> <pre class="z-code"><code><span class="z-text z-plain"> andrew@wipplerxps &gt; ~/git_repos/confd $ docker build -t blog-confd . </span><span class="z-text z-plain">Sending build context to Docker daemon 57.34 kB </span><span class="z-text z-plain">Step 1/9 : FROM centos:7.4.1708 </span><span class="z-text z-plain"> ---&gt; 5076a7d1a386 </span><span class="z-text z-plain">Step 2/9 : LABEL maintainer &quot;andrew.wippler@gmail.com&quot; </span><span class="z-text z-plain"> ---&gt; Using cache </span><span class="z-text z-plain"> ---&gt; d712b31f7449 </span><span class="z-text z-plain">Step 3/9 : RUN mkdir -p /etc/confd/{conf.d,templates} </span><span class="z-text z-plain"> ---&gt; Running in f340bdcdf973 </span><span class="z-text z-plain"> ---&gt; 1f0faa9b962f </span><span class="z-text z-plain">Removing intermediate container f340bdcdf973 </span><span class="z-text z-plain">Step 4/9 : COPY docker/confd/ /etc/confd/ </span><span class="z-text z-plain"> ---&gt; fb16dffc63ac </span><span class="z-text z-plain">Removing intermediate container 133128cb7fc1 </span><span class="z-text z-plain">Step 5/9 : ADD https://github.com/kelseyhightower/confd/releases/download/v0.14.0/confd-0.14.0-linux-amd64 /usr/local/bin/confd </span><span class="z-text z-plain">Downloading 17.61 MB/17.61 MB </span><span class="z-text z-plain"> ---&gt; a62b388274e6 </span><span class="z-text z-plain">Removing intermediate container 3f9ec343a5ab </span><span class="z-text z-plain">Step 6/9 : RUN chmod +x /usr/local/bin/confd </span><span class="z-text z-plain"> ---&gt; Running in 1489dd02ea45 </span><span class="z-text z-plain"> ---&gt; ab99a5fc5f95 </span><span class="z-text z-plain">Removing intermediate container 1489dd02ea45 </span><span class="z-text z-plain">Step 7/9 : COPY docker/docker-entrypoint.sh /var/local/ </span><span class="z-text z-plain"> ---&gt; 16906971c8ef </span><span class="z-text z-plain">Removing intermediate container 7a17a8e17e22 </span><span class="z-text z-plain">Step 8/9 : RUN chmod a+x /var/local/docker-entrypoint.sh </span><span class="z-text z-plain"> ---&gt; Running in 1562a6d06432 </span><span class="z-text z-plain"> ---&gt; f963372159b1 </span><span class="z-text z-plain">Removing intermediate container 1562a6d06432 </span><span class="z-text z-plain">Step 9/9 : ENTRYPOINT /var/local/docker-entrypoint.sh </span><span class="z-text z-plain"> ---&gt; Running in 1b7e12c38b4c </span><span class="z-text z-plain"> ---&gt; f7d260597e0a </span><span class="z-text z-plain">Removing intermediate container 1b7e12c38b4c </span><span class="z-text z-plain">Successfully built f7d260597e0a </span><span class="z-text z-plain"> andrew@wipplerxps &gt; ~/git_repos/confd $ docker run blog-confd </span><span class="z-text z-plain">2017-11-28T20:05:24Z 0931113b25f4 /usr/local/bin/confd[7]: INFO Backend set to env </span><span class="z-text z-plain">2017-11-28T20:05:24Z 0931113b25f4 /usr/local/bin/confd[7]: INFO Starting confd </span><span class="z-text z-plain">2017-11-28T20:05:24Z 0931113b25f4 /usr/local/bin/confd[7]: INFO Backend source(s) set to </span><span class="z-text z-plain">2017-11-28T20:05:24Z 0931113b25f4 /usr/local/bin/confd[7]: INFO Target config /echo out of sync </span><span class="z-text z-plain">2017-11-28T20:05:24Z 0931113b25f4 /usr/local/bin/confd[7]: INFO Target config /echo has been updated </span><span class="z-text z-plain">The current time is: Tue Nov 28 20:05:24 UTC 2017 </span><span class="z-text z-plain"> andrew@wipplerxps &gt; ~/git_repos/confd $ docker run -e NAME=&quot;Andrew Wippler&quot; blog-confd </span><span class="z-text z-plain">2017-11-28T20:05:52Z 223f28e8d18f /usr/local/bin/confd[7]: INFO Backend set to env </span><span class="z-text z-plain">2017-11-28T20:05:52Z 223f28e8d18f /usr/local/bin/confd[7]: INFO Starting confd </span><span class="z-text z-plain">2017-11-28T20:05:52Z 223f28e8d18f /usr/local/bin/confd[7]: INFO Backend source(s) set to </span><span class="z-text z-plain">2017-11-28T20:05:52Z 223f28e8d18f /usr/local/bin/confd[7]: INFO Target config /echo out of sync </span><span class="z-text z-plain">2017-11-28T20:05:52Z 223f28e8d18f /usr/local/bin/confd[7]: INFO Target config /echo has been updated </span><span class="z-text z-plain">Hello Andrew Wippler </span><span class="z-text z-plain">The current time is: Tue Nov 28 20:05:34 UTC 2017 </span><span class="z-text z-plain"> andrew@wipplerxps &gt; ~/git_repos/confd $ </span><span class="z-text z-plain"> </span></code></pre> <p>While it is fun to say hello to yourself once in a while, I am using confd to modify an nginx.conf. When I pass in the SSL environment variable, nginx will listen on port 443 with a self signed cert and forward all HTTP traffic to HTTPS. Obviously in production, I want to use a real SSL cert. Using confd allows me to have the same docker container in development and production - the only difference being a configuration change.</p> 2017-10-12T14:14:56+00:00 2017-10-12T14:14:56+00:00 Andrew Wippler /2017-10-12-old-glory/ <p>I was going through my articles I have collected over the years and found this little gem. The author is unknown.</p> <hr /> <p>I AM THE FLAG OF THE UNITED STATES OF AMERICA</p> <p>I am the flag of the United States of America. My name is Old Glory. I fly atop the world's tallest buildings. I stand watch in America's halls of justice. I fly majestically over institutions of learning. I stand guard with power in the world. Look up and see me.</p> <p>I stand for peace, honor, truth and justice. I stand for freedom. I am confident. I am arrogant. I am proud.</p> <p>When I am flown with my fellow banners, My head is a little higher, My colors a little truer.</p> <p>I bow to no one! I am recognized all over the world. I am worshipped - I am saluted. I am loved - I am revered. I am respected - and I am feared.</p> <p>I have fought in every battle of every war For more then 200 years. I was flown at Valley Forge, Gettysburg, Shiloh and Appomattox. I was there at San Juan Hill, The trenches of France, In the Argonne Forest, Anzio, Rome And the beaches of Normandy, Guam. Okinawa, Korea and KheSan, Saigon, Vietnam</p> <p>Know me, I was there. I led my troops, I was dirty, battle worn and tired, But my soldiers cheered me And I was proud. I have been burned, torn and trampled On the streets of countries I have helped set free. It does not hurt, for I am invincible.</p> <p>I have been soiled upon, burned, torn And trampled on the streets of my country. And when it's by those whom I've served in battle - it hurts. But I shall overcome - for I am strong.</p> <p>I have slipped the bonds of Earth And stood watch over the uncharted frontiers of space From my vantage point on the moon. I have borne silent witness To all of America's finest hours. But my finest hours are yet to come.</p> <p>When I am torn into strips And used as bandages For my wounded comrades on the battlefield, When I am flown at half-mast to honor my soldier, Or when I lie in the trembling arms Of a grieving parent At the grave of their fallen son or daughter, I am proud.</p> <p>MY NAME IS OLD GLORY LONG MAY I WAVE. DEAR GOD IN HEAVEN LONG MAY I WAVE.</p> 2017-09-14T14:06:31+00:00 2017-09-14T14:06:31+00:00 Andrew Wippler /2017-09-14-settling-in/ <p>It has been a month and a half since we moved, and we finally are on a set schedule. The girls have started school, all boxes are unpacked, our house in California closed escrow, and we have successfully adjusted to the CST time zone.</p> <p>It always amazes me how much God has blessed my family. We are all in good health, we are debt free, we have a roof over our head, and we have food to eat. I can attribute this all to God as I have no control over my health, I am horrible when it comes to big financial matters (such as retirement savings, stock trading, etc.), and I am not the best at selecting the best food choices for myself. It is only through God's providential guidance that I am in the state I am.</p> <p>I have been able to go fishing twice since arriving. As a result, I caught 2 fish. Neither were big enough to keep, but it was a great experience to enjoy. It seems the best fishing out here is on a lake. As a result, one needs a boat to get to the middle of the lake. This has caused me to research fishing kayaks. It is doubtful I will get one for the 2017 season, but if I save enough money, I can definitely get one for the 2018 season :)</p> <p>Being a bi-vocational Assistant Pastor is rather weird. It is a role I have not experienced for too long, but I am very excited for what God has in store. Since being here in Duluth, I have been able to share the gospel with several people and see one make a profession for Christ. It was neat to see the "lightbulb" appear when he understood that Jesus came to do all the work of salvation for us and that salvation is not dependent upon our good works or how we live. It is very sad that many people are trapped in the religion of Catholicism, Lutheranism, and Atheism that they fail to see who Jesus is, why he came, and how we can experience life through a relationship with Him.</p> <p>I am very thankful I can have a second job which is remote work and allows me to be in the tech industry. I like working with bleeding edge software such as Docker, Kubernetes, Puppet, and the like. It also allows me to scratch the itch I have with the nerdy side of tech - coding. I have been able to maintain a legacy PHP app while develop some in NodeJS and Go. Mostly I have been sharing cool things about Github, build pipelines, and the philosophy of "Let the robots do it."</p> <p>My coffee survival habit has been amplified by the purchase of a Ninja coffee maker last Amazon Prime day. I was not able to use it until we moved here and I am quite satisfied with how it makes iced coffee. It also gave me a recipe which I have been following for my daily iced coffee - it requires half and half with a few ounces of flavored syrup. I think this is the best approach for iced coffee.</p> 2017-08-01T20:46:34+00:00 2017-08-01T20:46:34+00:00 Andrew Wippler /2017-08-01-moving-adventures-part-2/ <p>(Note: This guest post is from my wife, Nicole. These are the events that happened July 25th, 2017.)</p> <p>After 6 hours of rest, we awakened rested (somewhat) and ready to resume our journey. Morning was fairly uneventful, and we were back on the road by 9. As we were fueling up, we realized that Clark's cup (which he went to bed with) was accidentally left somewhere amid the sheets despite going through the room 2-3 times. No worries! Remembered that were had brought 2 extra sippy cups ?</p> <p>As we merged on the I-76 we spotted what we believe to be our moving van. Too funny! The day before we'd seen the same truck as we left Barstow. At least we know our belongings should arrive by Friday, lol! An hour into our drive, all the kids except Mollie fell asleep.</p> <p>Thankfully, the next leg of our journey was fairly uneventful, and we were able to stop for lunch in Kearney by 2:45. Other then an icky diaper and ordering the wrong sandwich for Andrew, lunch was quite pleasant. In fact, Jake ate more than Clark or Meg! Thanks to everyone's prayers, the children were very well behaved as we made our way to the next stop--Des Moine.</p> <p>For the next 3.5 hours: played with toys, watched cartoons, and slept (praise the Lord!!). Seems whenever we're close to our destination one of the younger three decides they've had it and begins to fuss. Thankfully, Clark perks up with food or cars, and Jake loves snacks and playing with random items (wipes bucket, water bottle, thermos, favorite afghan etc.). As a reward, hoping to get a little pool time at the hotel. So thankful we're only driving 5 hours tomorrow and going to get a good 2 hour break at the Mall of America!</p> 2017-07-31T20:46:03+00:00 2017-07-31T20:46:03+00:00 Andrew Wippler /2017-07-31-moving-adventures-part-1/ <p>(Note: This guest post is from my wife, Nicole. These are the events that happened July 24th, 2017.)</p> <p>Well, after 4 hours of sleep, we woke and were on the road by 5. Forgot one little detail... taking girls to the restroom before we left. When we reached Adelanto, Mollie said she had to go the bathroom. Pulled in to the first gas station we saw and wouldn't you know it, the restrooms were both out of order ? Bought a potty seat for emergencies such as this.</p> <p>In the mean time, Meg decided she wanted to get dressed. Dressed the girls and was handing out the snack when Jake gagged himself and threw up the banana I just fed him! Cleaned him up, scrounged around to find the clothes I'd stuffed in our overloaded van. A 10 minute stop took 30 minutes ?</p> <p>Back on the road! Fortunately, despite a quick run through McDonald's, we reached St. George, Utah by noon. As we unloaded the car, we spent 10 minutes in 107° weather looking for Mollie's shoe and 3 elusive crayons. Finally decided to look when we returned from lunch and have Mollie ride in the shopping cart with one shoe.</p> <p>Took Jake out of the car only to discover he'd blown out his diaper! He didn't want to be changed because his poor rear is so irritated. Think the ladies in the Costco restroom thought I was crazy as I held down a squirmy, stinky baby. Once he was changed, I took the girls to the restroom and heard someone commenting on the smell in the bathroom! Way to go baby boy!!</p> <p>Returned to the van and spent another 10 minutes finding the lost flip flop and crayons. Between the puke and diaper blowout, we'd nearly used our stash of wipes. So had to run to Walmart of course! Back to the road!</p> <p>Thankfully the kids played quietly with their aqua doodle pads, and the girls fell asleep ? Just as Jake was starting to fuss, we passed through a rainstorm, and the boys stared out the window awestruck. Rain is discovered (by the way, the storm cleaned our windshield better than the Lancaster Cruz Thru)!</p> <p>Things went fairly well for the next few hours. Kids napped and ate dinner at Wendy's. About 20 minutes into the home stretch, I heard a noise any mother learns to dread--Clark was about to spew. Managed to get most of his dinner in the plastic bag I'd brought for such emergencies. After a quick clean up job, we were back in business. Five minutes later though, we had to stop again because we suspected Jake had dirtied his diaper. False alarm!</p> <p>Why is it the last 100 miles of any trip seems the longest. After hitting a few construction spots, we finally pulled into Denver at midnight. Sadly, kids who are awakened at midnight are not exactly pleasant. Mollie did okay, but Meg is a bear whenever her sleep's interrupted. Clark perked up a bit as we trekked across the parking lot. Once we reached the unfamiliar hotel room, however, he started crying that he wanted out of the room! Andrew left me with the three younger ones while he and Mollie retrieved our luggage. In the mean time, Jake's full diaper leaked out onto my shirt. Andrew hadn't returned so I quickly stripped Jake down and threw him into the tub. At which point Jake joined the crying chorus ? I half expected the manager to come throw us out any minute with all the ruckus we were causing.</p> <p>Andrew finally came with the luggage (except for the toiletries bag but that's another story). Prepared for bed and let the kids watch a little episode of Daniel Tiger's Neighborhood before settling in for a few hours of much needed rest!</p> 2017-07-24T15:00:00+00:00 2017-07-24T15:00:00+00:00 Andrew Wippler /2017-07-24-leaving-california/ <p>Today marks the first day in over 29 years where I am no longer a resident of the great state of California. No longer will iscaliforniaonfire.com be relevant to me or my family! With all changes to life there are some good things and bad things with every major life decision.</p> <p>From the move, I will miss the following:</p> <ul> <li>In-n-Out burgers</li> <li>Nearby family members</li> <li>Lancaster Baptist Church</li> </ul> <p>However, I will not miss the following:</p> <ul> <li>100 degree weather</li> <li>California driving</li> <li>Smog</li> <li>Time Warner Cable</li> </ul> <p>I am also super pumped about these:</p> <ul> <li>More fishing opportunities</li> <li>Snow</li> <li>A new ISP</li> <li>Dunkin donuts</li> </ul> 2017-06-30T16:06:26+00:00 2017-06-30T16:06:26+00:00 Andrew Wippler /2017-06-30-autosign-puppet-certificates-on-aws/ <p>Let's face it, Puppet's method of certificates is a pain and huge administration overkill if done manually. Thankfully, puppet has designed several methods of auto-signing certificates. One of which is via crafting a special certificate signing request and verifying the certificate signing request is genuine.</p> <h2 id="on-the-puppet-master">On the puppet master</h2> <p>Apply the following code on your puppet master. This will set up the autosign script which will verify your custom certificate signing request. If the CSR is genuine, the puppet master will sign the certificate.</p> <pre class="z-code"><code><span class="z-text z-plain"> service { &#39;puppetserver&#39;: </span><span class="z-text z-plain"> ensure =&gt; running, </span><span class="z-text z-plain"> enable =&gt; true, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># The file must have execute permissions </span><span class="z-text z-plain"># The master will trigger this as `/etc/puppetlabs/puppet/autosign.sh FQDN` </span><span class="z-text z-plain"> file { &#39;/etc/puppetlabs/puppet/autosign.sh&#39;: </span><span class="z-text z-plain"> ensure =&gt; file, </span><span class="z-text z-plain"> mode =&gt; &#39;0750&#39;, </span><span class="z-text z-plain"> owner =&gt; &#39;puppet&#39;, </span><span class="z-text z-plain"> group =&gt; &#39;puppet&#39;, </span><span class="z-text z-plain"> content =&gt; &#39;#!/bin/bash </span><span class="z-text z-plain">HOST=$1 </span><span class="z-text z-plain">openssl req -noout -text -in &quot;/etc/puppetlabs/puppet/ssl/ca/requests/$HOST.pem&quot; | grep pi0jzq9qmabtnTa8KfkBs2z5rQZ3vZsa&#39;, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># This sets up the required ini setting and restarts the puppet master service </span><span class="z-text z-plain"> ini_setting {&#39;autosign nodes&#39;: </span><span class="z-text z-plain"> ensure =&gt; present, </span><span class="z-text z-plain"> path =&gt; &#39;/etc/puppetlabs/puppet/puppet.conf&#39;, </span><span class="z-text z-plain"> section =&gt; &#39;master&#39;, </span><span class="z-text z-plain"> setting =&gt; &#39;autosign&#39;, </span><span class="z-text z-plain"> value =&gt; &#39;/etc/puppetlabs/puppet/autosign.sh&#39;, </span><span class="z-text z-plain"> notify =&gt; Service[&#39;puppetserver&#39;], </span><span class="z-text z-plain"> require =&gt; File[&#39;/etc/puppetlabs/puppet/autosign.sh&#39;] </span><span class="z-text z-plain"> } </span></code></pre> <h2 id="on-the-agents">On the agents</h2> <p>With our puppet master ready to go, we need to set up our agents to generate the custom certificate request. This can be done by editing <code>/etc/puppetlabs/puppet/csr_attributes.yaml</code> before running puppet with the following content:</p> <pre class="z-code"><code><span class="z-text z-plain">custom_attributes: </span><span class="z-text z-plain"> 1.2.840.113549.1.9.7: pi0jzq9qmabtnTa8KfkBs2z5rQZ3vZsa </span><span class="z-text z-plain">extension_requests: </span><span class="z-text z-plain"> pp_instance_id: $(curl -s http://169.254.169.254/latest/meta-data/instance-id) </span><span class="z-text z-plain"> pp_image_name: $(curl -s http://169.254.169.254/latest/meta-data/ami-id) </span><span class="z-text z-plain"> </span></code></pre> <p>Note: The <code>1.2.840.113549.1.9.7</code> value must match the item you are grepping for in the autosigning request. This specific value in the certificate is reserved for purposes such as this.</p> <h2 id="execution">Execution</h2> <p>With everything in place, the way to execute this successfully is to pass in the below as the userdata script when creating an EC2 instance:</p> <pre class="z-code"><code><span class="z-text z-plain">#!/bin/sh </span><span class="z-text z-plain">if [ ! -d /etc/puppetlabs/puppet ]; then </span><span class="z-text z-plain"> mkdir /etc/puppetlabs/puppet </span><span class="z-text z-plain">fi </span><span class="z-text z-plain">cat &gt; /etc/puppetlabs/puppet/csr_attributes.yaml &lt;&lt; YAML </span><span class="z-text z-plain">custom_attributes: </span><span class="z-text z-plain"> 1.2.840.113549.1.9.7: pi0jzq9qmabtnTa8KfkBs2z5rQZ3vZsa </span><span class="z-text z-plain">extension_requests: </span><span class="z-text z-plain"> pp_instance_id: $(curl -s http://169.254.169.254/latest/meta-data/instance-id) </span><span class="z-text z-plain"> pp_image_name: $(curl -s http://169.254.169.254/latest/meta-data/ami-id) </span><span class="z-text z-plain">YAML </span><span class="z-text z-plain"> </span></code></pre> <p>An alternative method is to create a custom AMI (especially for auto-scaling groups). I use the below puppet code to create my golden AMI.</p> <pre class="z-code"><code><span class="z-text z-plain"> cron { &#39;run aws_cert at reboot&#39;: </span><span class="z-text z-plain"> command =&gt; &#39;/aws_cert.sh&#39;, </span><span class="z-text z-plain"> user =&gt; &#39;root&#39;, </span><span class="z-text z-plain"> special =&gt; &#39;reboot&#39;, </span><span class="z-text z-plain"> require =&gt; File[&#39;/aws_cert.sh&#39;], </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> file { &#39;/aws_cert.sh&#39;: </span><span class="z-text z-plain"> ensure =&gt; file, </span><span class="z-text z-plain"> mode =&gt; &#39;0755&#39;, </span><span class="z-text z-plain"> content =&gt; &#39;#!/bin/sh </span><span class="z-text z-plain">if [ ! -d /etc/puppetlabs/puppet ]; then </span><span class="z-text z-plain"> mkdir /etc/puppetlabs/puppet </span><span class="z-text z-plain">fi </span><span class="z-text z-plain">cat &gt; /etc/puppetlabs/puppet/csr_attributes.yaml &lt;&lt; YAML </span><span class="z-text z-plain">custom_attributes: </span><span class="z-text z-plain"> 1.2.840.113549.1.9.7: pi0jzq9qmabtnTa8KfkBs2z5rQZ3vZsa </span><span class="z-text z-plain">extension_requests: </span><span class="z-text z-plain"> pp_instance_id: $(curl -s http://169.254.169.254/latest/meta-data/instance-id) </span><span class="z-text z-plain"> pp_image_name: $(curl -s http://169.254.169.254/latest/meta-data/ami-id) </span><span class="z-text z-plain">YAML </span><span class="z-text z-plain"> </span><span class="z-text z-plain">export CERTNAME=&quot;aws-node_name-`date +%s`&quot; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">/opt/puppetlabs/bin/puppet apply -e &quot;ini_setting {\&quot;certname\&quot;: \ ensure =&gt; present, \ </span><span class="z-text z-plain"> path =&gt; \&quot;/etc/puppetlabs/puppet/puppet.conf\&quot;, \ </span><span class="z-text z-plain"> section =&gt; \&quot;main\&quot;, \ </span><span class="z-text z-plain"> setting =&gt; \&quot;certname\&quot;, \ </span><span class="z-text z-plain"> value =&gt; $CERTNAME, \ </span><span class="z-text z-plain"> }&quot; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">/opt/puppetlabs/bin/puppet agent -t -w 5&#39;, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span></code></pre> 2017-06-09T13:00:00+00:00 2017-06-09T13:00:00+00:00 Andrew Wippler /2017-06-09-kindle-fire-7th-gen-review/ <p>My first tablet was an Acer A500 which ran Honeycomb (Android 3.0). I used that laptop for everything - reading, pictures, studying, and using it to project games in the children's class I taught at the time. It was used more than my laptop, phone, and desktop combined. It served its purpose until my wife accidentally knocked it off the kitchen counter (it was laying flat) and it got a huge dent. It never was the same after that incident. I eventually got rid of it after it no longer held a charge due to the damage it received. </p> <p>The next tablet I purchased was a Kindle fire 2nd gen which I gave to my wife and borrowed it when needed. Life was great. Then, as a reward for good behavior, we let our children play the games and apps we purchased on the Kindle. Our children are so well behaved (thanks to some awesome parentig tips we received in our Adult Bible Class at church) that my wife no longer had enough Kindle time to do her reading. This is when I bought her a 5th gen Kindle fire. The difference between versions impressed me. I liked the thinner design and the new UI was very intriguing. I made a determination if I ever wanted a new tablet I would get myself a Kindle fire. (I was not in the market for one as I was a happy 6 inch phablet user.)</p> <p>Recently, I have had a desire to reduce my reading list by actually reading the books. At first I tried reading from my phablet, but alas, a 6inch screen is not ideal for reading large amounts of text - even if you have a high DPI phone such as my Google Nexus 6. This has led me to purchase a Kindle fire 7th gen which was released on June 7th 2017.</p> <p>It has the same intriguing design as the 5th gen device, but has better battery life and more external storage capacity. When I first unboxed and turned on the device, I was happy at how little I had to do to get my new Kindle operational. After 10 minutes of using Kindle fire OS (which is just Android without Google), I quickly realized just how attached I am to Google services. Most of my daily use apps - such as Dropbox and JuiceSSH - were not available. Did I make a mistake buying this $70 device (+$30 case and $9 tax)? Thankfully, <a class="external" href="https://forum.xda-developers.com/amazon-fire/general/how-to-install-google-play-store-fire-t3486603">there is an alternative and it works quite well</a> - it doesn't even require rooting your device either!</p> <p>Wow, after installing the four apps, running a Google play services update, and downloading my needed apps, I am really enjoying my Kindle fire 7th gen! Everything is working as expected; albeit, I have to wait a few milliseconds longer over my phablet to do common tasks. The screen size is perfect, the weight and style is also perfect, and I was able to be different and get a yellow one. (My wife has blue, black is the color I usually get, and red seemed too plastic.)</p> 2017-04-14T14:00:00+00:00 2017-04-14T14:00:00+00:00 Andrew Wippler /2017-04-14-moving-to-desktop-gnulinux-from-windowsmac/ <p>There are many curious individuals who tinker with GNU/Linux as a Server OS and want to experience what it is like as a Desktop OS. The switch is often hindered by two obstacles:</p> <ol> <li>Some daily use programs are not available. (i.e. Photoshop, iTunes, etc.)</li> <li>The unknown of what to do if something goes wrong or what do I do to get my 3d graphics driver installed and working.</li> </ol> <p>While these are valid reasons and definitely show stoppers for some, others can safely migrate to GNU/Linux.</p> <h2 id="the-obstacle-of-programs">The obstacle of programs</h2> <p>I like Krita as an alternative to Photoshop. The menu options are nearly the same and I do not have to install a silly theme (like I have to do in Gimp) or re-learn photo editing just to recognize where everything is at. I have successfully installed Photoshop CS4 with wine without any issues, but Krita is more featured than CS4. Darktable is also a good alternative to Photoshop RAW/bridge.</p> <p>Rhythmbox connects to iPhones/iPods the same way as iTunes does, but without the store. iTunes does run on a recent version of wine quite well. Some might also want to check out <a class="external" href="https://www.clementine-player.org/">Clementine</a>.</p> <p>Most every program has an alternative. Alternatives can be found via <a class="external" href="http://alternativeto.net/">alternativeto.net</a> or software recommendations on StackExchange.</p> <h2 id="the-unknown-obstacles">The unknown obstacles</h2> <p>To use GNU/Linux successfully as the primary Desktop OS, in my opinion, one must have a desktop with worthy hardware. I consider myself an AMD guy. I like the price for performance and I rarely do CPU intensive tasks on my desktop. When AMD bought ATI, I was also happy as ATI was my favorite graphics card. Unfortunately, most Desktop GNU/Linux users are developers and need that extra performance. They have desktop workstations that have Nvidia graphics cards in them with Intel CPUs. You will often find that Desktop GNU/Linux performs better, is easier to use, and has more tutorials for Nvidia graphics cards and how to get them working.</p> 2017-04-07T15:00:10+00:00 2017-04-07T15:00:10+00:00 Andrew Wippler /2017-04-07-captive-portal-overview/ <p>I originally authored this on Aug 16, 2016 at <a class="external" href="http://unix.stackexchange.com/a/303807">http://unix.stackexchange.com</a>. Considering my tutorial did not include an overview, I thought I would re-post it on my blog.</p> <hr /> <p>To make a captive portal appear, you need to stop all internet traffic and provide a <code>302 redirect</code>to the client's browser. To do this, you need to have a firewall (like <code>iptables</code>) redirect all traffic to a webserver (like <code>nginx</code>, <code>apache</code>, etc) where the webserver responds with a <code>302 redirect</code> to the url of your login page.</p> <p>I have written a <a class="external" href="https://andrewwippler.com/wifi-captive-portal/">lengthy article</a> on how to do this with a Raspberry Pi. It basically boils down to the <strong>iptables block/redirect to webserver</strong>:</p> <pre class="z-code"><code><span class="z-text z-plain">iptables -t nat -A wlan0_Unknown -p tcp --dport 80 -j DNAT --to-destination 192.168.24.1 </span><span class="z-text z-plain"> </span></code></pre> <p>and then the webserver (<code>nginx</code>) redirecting to the login page:</p> <pre class="z-code"><code><span class="z-text z-plain"># For iOS </span><span class="z-text z-plain">if ($http_user_agent ~* (CaptiveNetworkSupport) ) { </span><span class="z-text z-plain"> return 302 http://hotspot.localnet/hotspot.html; </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># For others </span><span class="z-text z-plain">location / { </span><span class="z-text z-plain"> return 302 http://hotspot.localnet/; </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span></code></pre> <p>iOS has to be difficult in that it needs the WISP settings. <code>hotspot.html</code> contents are as follows:</p> <pre class="z-code"><code><span class="z-text z-plain">&lt;!-- </span><span class="z-text z-plain">&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt; </span><span class="z-text z-plain">&lt;WISPAccessGatewayParam xmlns:xsi=&quot;http://www.w3.org/2001/XMLSchema-instance&quot; xsi:noNamespaceSchemaLocation=&quot;http://www.wballiance.net/wispr_2_0.xsd&quot;&gt; </span><span class="z-text z-plain">&lt;Redirect&gt; </span><span class="z-text z-plain">&lt;MessageType&gt;100&lt;/MessageType&gt; </span><span class="z-text z-plain">&lt;ResponseCode&gt;0&lt;/ResponseCode&gt; </span><span class="z-text z-plain">&lt;VersionHigh&gt;2.0&lt;/VersionHigh&gt; </span><span class="z-text z-plain">&lt;VersionLow&gt;1.0&lt;/VersionLow&gt; </span><span class="z-text z-plain">&lt;AccessProcedure&gt;1.0&lt;/AccessProcedure&gt; </span><span class="z-text z-plain">&lt;AccessLocation&gt;Andrew Wippler is awesome&lt;/AccessLocation&gt; </span><span class="z-text z-plain">&lt;LocationName&gt;MyOpenAP&lt;/LocationName&gt; </span><span class="z-text z-plain">&lt;LoginURL&gt;http://hotspot.localnet/&lt;/LoginURL&gt; </span><span class="z-text z-plain">&lt;/Redirect&gt; </span><span class="z-text z-plain">&lt;/WISPAccessGatewayParam&gt; </span><span class="z-text z-plain">--&gt; </span></code></pre> 2017-04-01T08:01:51+00:00 2017-04-01T08:01:51+00:00 Andrew Wippler /2017-04-01-tupperware-announces-new-container-platform/ <p>Today, in a surprise move into technology, Tupperware has released a new container platform competing with Docker and rkt. Tupperware’s new platform - named Bowl - has been in alpha for the past 6 months, but now has achieved public beta status.</p> <p><a class="external" href="https://commons.wikimedia.org/wiki/File%3ATupperware_party.jpg"><img alt="Tupperware party" src="https://upload.wikimedia.org/wikipedia/commons/f/f9/Tupperware_party.jpg" height="370" width="491" /></a>An early photograph of a Tupperware party. This announcement was made at a similar one.</p> <p>What’s unique about Bowl is that it introduces a new concept to containers - Lid. A Lid goes neatly on top of the container and seals the contents from evildoers and prevents bad code from escaping. Bowls, due to their circular shape, require burping the attached Lid. This burping maneuver was demonstrated live to the audience and was described as a method to keep the containerized application fresh across hybrid clouds. With Burping, we no longer have to worry about our code going stale inside of the container.</p> <p>Unlike other containers, when done with a Bowl, they go through a cleaning cycle and are available for reuse immediately or stacked in a cupboard for later. Lids, associated with Bowls, are placed underneath to keep the associated roles in relative proximity. Unlike some deployments <a class="external" href="https://github.com/lhartikk/AstroBuild">which require planetary alignment</a>, Bowl comes in several predetermined sizes which negate this prerequisite. If for some reason your code does not fit in a Bowl size, multiple Bowls can be used. This feature instantly transforms your monolith application into a microservice architecture - all without refactoring your workflow!</p> <p>Bowl will be showcased at global parties as early as next week, but preview respondents have come across the following remarks about Bowl:</p> <blockquote> <p>It is so good that Tupperware has launched into the tech business. Tupperware already has such a good influence on minority groups and bringing an interest of tech to them is really a great idea.</p> <p>Joan P</p> </blockquote> <blockquote> <p>This isn’t your grandma’s container technology.</p> <p>Jon S</p> </blockquote> <blockquote> <p>I was surprised how well Bowl stacked up to the challenge.</p> <p>Andrew B</p> </blockquote> <blockquote> <p>And when you're done, it doubles as a barber aid!</p> <p>Rob N</p> </blockquote> <blockquote> <p>This is exactly the kind of container I was looking for - Lightweight, secure, reusable, and dishwasher safe.</p> <p>Chris B</p> </blockquote> <p>Bowl is expected to integrate nicely with the next version of Kubernetes, which is due out next year.</p> 2017-03-24T14:00:00+00:00 2017-03-24T14:00:00+00:00 Andrew Wippler /2017-03-24-captive-portal-restaurant-menu/ <p>I have been contacted several times in regards to my captive portal post. In India there seems to be a surge in popularity for restaurants to have an open WiFi that prompts a user to open up a menu/splash page. The caveat being the legal issues encountered when providing free, open wireless internet. In order to avoid legal issues, the device that broadcasts must be disconnected from the internet. Although I am curious if just blocking internet access for those connecting is enough. </p> <p>It seems like an interesting issue to tackle, but I think creating something out of a WiFi captive portal would be like hammering a square peg through a round hole. It might work (if given enough time and effort), but in the end, it is probably not the right tool for the job.</p> <p>While writing this post, I was reminded how Google appears to be tackling this problem. On my Android phone, I let the NSA spy on my whereabouts by enabling location services. It also lets my wife pinpoint where I am physically located. With it enabled, I can visit most shops in my area and get a Google maps prompt with the business information, reviews, and a few pictures. (Side note: if you appear in court over a childish/dumb action, you validate the judge's decision when you post a negative review of the court house. Also please do not butcher the English language when trying to review places.)</p> <p>Utilizing GPS location as well as having an app that provides the information seems like the best route to go in this circumstance. An alternative would be to have an app with WiFi credentials hardcoded in, listen for when a WiFi connection is made, check to see if it matches a predefined SSID, and attempt to communicate with a local app server to process data. Of course doing something like that is outside the scope of my tutorials.</p> 2017-03-17T15:00:37+00:00 2017-03-17T15:00:37+00:00 Andrew Wippler /2017-03-17-jumping-the-ship-on-evernote/ <p>I am a long time user of Evernote. Currently it has the best browser extensions, a wide range of supported operating systems, and it has a free tier; however, I am getting frustrated with it. In the past year, they have changed plans twice - now the free tier is only supported on 2 platforms. This has cost me to re-evaluate my use of Evernote. Lately all I have been using Evernote for is to sync a grocery list between devices and keeping my children's memories in one location - their sayings, artwork, etc. In the past I also used it for note taking, article saving, and inputting ideas. I have also seriously considered buying a subscription just so I can continue uninterrupted.</p> <p>While this may be a rant about a free user using a free service, I contribute to the monitization of their service by the viewing of advertisements. The free tier limits (except for maximum devices) are adequate for my occasional use and probably have cost Evernote around $3 total in the past several years. The valuation Evernote has placed on their second-level tier ($35/year) is much higher than I value it (~$12/year). While I may not be able to set the price on what Evernote costs, I can put a price on what I am willing to pay for a simple note service.</p> <p>A <a class="external" href="https://opensource.com/alternatives/evernote">recent article</a> on opensource.com opened my eyes to looking at note taking alternatives. I was surprised at how mature Paperwork was; however, it contained one simple flaw that throws my grocery list experience out the window - no checkbox option. This caused me to evaluate Google Keep - yes, has check boxes, but functions more like sticky notes. Then I remembered Atlassian's confluence has checkboxes. Their paid version is $10 for up to ten users (per year if it self hosted, monthly if in the cloud). This fits my budget, I can create grocery lists, take notes, and create notebooks/spaces. While I have not switched away yet, confluence seems like a viable option as I already have an always-on home server.</p> 2017-02-24T14:00:00+00:00 2017-02-24T14:00:00+00:00 Andrew Wippler /2017-02-24-i-do-not-use-the-kuerig-here-is-why/ <p>The kuerig device is a visually pleasing design. It appears to belong in the modern kitchen. A few months ago, I was given a kuerig first generation with a reusable filter and used it as my primary coffee consumption device. It gave me a sense of faster coffee delivery in the morning - I was happy until I discovered these flaws:</p> <p>Flaw #1 - I spent more time making coffee than with a drip machine.</p> <p>While it had a reservoir of water, that only lasted for about 6 tall glasses of coffee. I would have to switch out the K cup if I wanted a cup in the morning and one to take with - very common thing for me to do. This led me to another flaw.</p> <p>Flaw #2 - the kuerig is designed for casual coffee drinkers.</p> <p>By casual I mean 3-6 cups a month. Even with a refillable K cup, I was spending twice the amount on coffee and found myself adding 5 minutes to my normal routine just for use of the kuerig.</p> <p>Flaw #3 - coffee dust</p> <p>The coffee ground too much in store bought K cups and my refillable K cup often found itself in the bottom of my glass. This was disgusting and I could not stand throwing away the last sip of coffee because it had coffee dust at the bottom. To combat this, I had to cut filters in the shape of my K cup.</p> <p>After 2 months of trouble with the kuerig, I got frustrated with drinking coffee. What was designed to be a pleasant, easy experience in making coffee turned out to be painful, time consuming, and more expensive. I evaluated my habit with the kuerig and found I was doing the same exact items with my old drip system, but spent more time affixing it to the kuerig. Once I realized that, I switched back to my old ways, sold the kuerig and bought more coffee with the money.</p> 2017-02-03T14:00:58+00:00 2017-02-03T14:00:58+00:00 Andrew Wippler /2017-02-03-debugging-php-web-applications/ <p>In 2017, this topic seems a little dated and will probably not get me an opportunity to speak at a conference. While all of the elite programmers, cool kids, and CS grads are talking languages such as Go and Erlang - how to do tracing, performance testing, and the like - it seems very juvenile for me to write about PHP.</p> <p>PHP is a language made specifically for the web. It is the first web language I learned after HTML 4/CSS. I learned it because it was easy. The syntax was easy, the variables - easy, running it - easy; however, when something broke, it was difficult as a beginner to troubleshoot. I would spend several hours looking at the code I just wrote only to find out I missed a semicolon or quote. This post is several things I wish I knew when I started with PHP.</p> <h2 id="white-pages">White Pages</h2> <p>When coding in PHP, you will often find a blank white page with nothing printed on it. This means PHP was unable to complete the page construction due to an error in the code.</p> <p>In the early days, PHP had error reporting on by default. Rather than being greeted with a white page on error, you would have the error code presented to you - making it very obvious where the issue is located. Due to novice SysAdmins/Devs who would leave error reporting on in production, PHP maintainers switched this default behavior to off.</p> <p>I find it easier to debug code when the process goes like:</p> <ol> <li>Write code</li> <li>Load page in browser</li> <li>See error message</li> <li>Fix code</li> <li>Repeat</li> </ol> <p>With current defaults, the workflow is as follows:</p> <ol> <li>Write code</li> <li>Load page in browser</li> <li>Open terminal</li> <li>Tail log file</li> <li>See error message</li> <li>Fix code</li> <li>Repeat</li> </ol> <p>While it is only 2 steps more, consider the time wasted trying to find the correct path to the log file. Would it be in nginx's error log file or would it be in the www fpm pool's www-error.log?</p> <h2 id="application-deployment">Application deployment</h2> <p>It is 2017, if you have not tried nginx as your webserver, you are missing out. I have wrote an article on<a class="external" href="http://andrewwippler.com/2016/04/26/linux-nginx-mysql-5-7-and-php-7-lemp-on-aws-with-free-ssl/"> how to deploy a LEMP stack</a> which you should read. Not only is nginx syntax easier to read, it is much easier to tune, and it forces you to use PHP-FPM which is currently the best way to run PHP applications. In the early days, PHP was run as a process of the apache web server. This made applications spawn a new apache worker to run simple PHP code.</p> <p>If your application code and web server reside on the same server, make sure PHP is listening as a unix socket. Why should the flow of bits go through the network stack back to the same machine? This is inefficient.</p> <h3 id="setting-up-php-fpm">Setting up PHP-FPM</h3> <p>On RHEL/Fedora/CentOS PHP-FPM settings are in <code>/etc/php-fpm.d/&lt;pool name&gt;.conf</code> To set up a unix socket, find the listen directive and change it to a file path - such as /var/run/php.sock. You will then have to alter the listen.user, listen.group, and listen.mode settings. These three settings determine which level of access your user will have to the PHP application socket. For instance if the listen.user is andrew, your web server will have to be running as andrew. The andrew user would also need access to the directory on your system with the application code (typically <code>/var/www/html/&lt;application name&gt;/</code>).</p> <p>In the old days before git, many web developers ssh'ed into a box and edited the same code base. The same group would be applied to all users ssh'ing in and the application directory would have the group own the folder like the example below.</p> <pre class="z-code"><code><span class="z-text z-plain">drwxrws---. 2 nginx webadmins 4096 Dec 22 07:38 /var/www/html </span></code></pre> <p>Users would then have to be the nginx user or a member of the webadmins group to access this folder - all other access was prohibited. Before cloud computing, many people shared the same server and groups would differentiate who had access to what.</p> <p>The listen.group directive in the PHP-FPM pool is which group you want to be able to access the socket. The listen.mode determines which access the user, group, and other have to this socket. Permissions of 0444 would prevent anything being written to the PHP socket.</p> <h2 id="know-thy-logs">Know thy logs</h2> <p>Production machines should not be writing logs to disks that are local. Production machines should have a separate NIC that is connected to an internal network - over which logs should be sent. The separate NIC is there to ensure your logs are not interfering with web traffic. Below are the 4 logs of PHP applications.</p> <h3 id="nginx-apache-access-log">nginx/apache access.log</h3> <p>The access log shows what people are trying to access on your server. Log formats can be adjusted, but I have found the default works quite well. The default format shows the originating IP, the HTTP status code, time accessed, the URI being accessed, and other useful information. The access log is not generally used in debugging, but it does give some great insights as to who is visiting your application.</p> <h3 id="nginx-apache-error-log">nginx/apache error.log</h3> <p>The error log contains the errors your application presents to your web server. If your application produces a T_STRING php error, the line will show up here. This log is your friend. You must understand everything he says and fix it. :)</p> <h3 id="php-fpm-pool-error-log">&lt;php-fpm pool&gt;-error.log</h3> <p>This log informs you about the stability of your process workers. If you restart them, it logs that action here. If there is something wrong with your compiled version of PHP, it will show up here.</p> <h3 id="php-fpm-pool-slow-log">&lt;php-fpm pool&gt;-slow.log</h3> <p>The slow log is also your friend, but it has to be enabled and configured first. The slow log is set by enabling it in the PHP-FPM pool (<code>slowlog = /path/to/$pool-slow.log</code>) and configuring a threshold of when it should begin logging (<code>request_slowlog_timeout = 0</code>). Any PHP script that runs longer than the threshold will have the stack trace written to the slow log.</p> <p>In one instance when the slow log was very useful, I was asked to investigate why the <code>admin-ajax.php</code> of a wordpress multisite was performing poorly. When I turned on the slow log, I saw the below output.</p> <pre class="z-code"><code><span class="z-text z-plain">[19-Jan-2017 19:46:02] [pool www] pid 9705 </span><span class="z-text z-plain">script_filename = /var/www/html/wordpress/wp-admin/admin-ajax.php </span><span class="z-text z-plain">[0x00007f1f7a5e1e88] curl_exec() /var/www/html/wordpress/wp-includes/Requests/Transport/cURL.php:162 </span><span class="z-text z-plain">[0x00007f1f7a5e14c8] request() /var/www/html/wordpress/wp-includes/class-requests.php:379 </span><span class="z-text z-plain">[0x00007f1f7a5e0dd0] request() /var/www/html/wordpress/wp-includes/class-http.php:366 </span><span class="z-text z-plain">[0x00007f1f7a5df2d0] request() /var/www/html/wordpress/wp-includes/class-http.php:593 </span><span class="z-text z-plain">[0x00007f1f7a5df120] get() /var/www/html/wordpress/wp-includes/http.php:170 </span><span class="z-text z-plain">[0x00007f1f7a5def98] wp_remote_get() /var/www/html/wordpress/wp-content/plugins/nginx-helper/purger.php:304 </span><span class="z-text z-plain">[0x00007f1f7a5dea90] _do_remote_get() /var/www/html/wordpress/wp-content/plugins/nginx-helper/purger.php:242 </span><span class="z-text z-plain">[0x00007f1f7a5de120] purgeUrl() /var/www/html/wordpress/wp-content/plugins/nginx-helper/purger.php:394 </span><span class="z-text z-plain">[0x00007ffd2e85c9e0] purgeImageOnEdit() unknown:0 </span><span class="z-text z-plain">[0x00007f1f7a5ddbd0] call_user_func_array() /var/www/html/wordpress/wp-includes/class-wp-hook.php:298 </span><span class="z-text z-plain">[0x00007f1f7a5dd420] apply_filters() /var/www/html/wordpress/wp-includes/class-wp-hook.php:323 </span><span class="z-text z-plain">[0x00007f1f7a5dd218] do_action() /var/www/html/wordpress/wp-includes/plugin.php:453 </span><span class="z-text z-plain">[0x00007f1f7a5dc798] do_action() /var/www/html/wordpress/wp-includes/post.php:3430 </span><span class="z-text z-plain">[0x00007f1f7a5d8ff8] wp_insert_post() /var/www/html/wordpress/wp-includes/post.php:4836 </span><span class="z-text z-plain">[0x00007f1f7a5d8d70] wp_insert_attachment() /var/www/html/wordpress/wp-includes/post.php:3576 </span><span class="z-text z-plain">[0x00007f1f7a5d8638] wp_update_post() /var/www/html/wordpress/wp-admin/includes/ajax-actions.php:2497 </span><span class="z-text z-plain">[0x00007ffd2e85d630] wp_ajax_save_attachment() unknown:0 </span><span class="z-text z-plain">[0x00007f1f7a5d79a8] call_user_func_array() /var/www/html/wordpress/wp-includes/class-wp-hook.php:298 </span><span class="z-text z-plain">[0x00007f1f7a5d71f8] apply_filters() /var/www/html/wordpress/wp-includes/class-wp-hook.php:323 </span><span class="z-text z-plain">[0x00007f1f7a5d6ff0] do_action() /var/www/html/wordpress/wp-includes/plugin.php:453 </span><span class="z-text z-plain"> </span></code></pre> <p>The slow log first showed the script filename of which met the threshold of taking too long to execute and then shows a stack trace of what PHP methods were called in order to get to this location. The more I work with wordpress, the more I understand the issues with wordpress are not from core, but stem from the plugins a user adds to their website. In this case the issue stemmed from the <code>nginx-helper</code> plugin. I had manually set the two multisite settings in the nginx configuration and no longer needed this helper plugin. Unknowingly, an infinite loop was happening. Once the plugin was disabled, the infinite loop ended, and the customer was happy with the results.</p> <h2 id="final-thoughts">Final thoughts</h2> <p>I did not cover everything there is to debugging PHP applications. Most find it helpful to use syntax highlighting (something I was not aware of when I first started) as well as an IDE that has PHP linting, code completion, and other features built-in. You may also want to look into using <code>pm = static</code> and manually determining how many child workers FPM should have. Another option is to enable the <code>/status</code> page and configuring your monitoring application to poll that URL. All of these settings are found and set in the PHP pool's config file.</p> 2017-01-28T15:00:52+00:00 2017-01-28T15:00:52+00:00 Andrew Wippler /2017-01-28-few-posts-in-the-works/ <p>I have not posted in a few weeks. This was mainly due to getting a rest from posting every week of 2016! I have a few posts coming in the next few weeks. The first one will be about debugging PHP applications. The second one will be deploying a high availability MySQL cluster - what it looked like 10 years ago, and what it will look like 10 years from now. (HINT: Kubernetes + GlusterFS ;) )</p> 2016-12-30T14:00:00+00:00 2016-12-30T14:00:00+00:00 Andrew Wippler /2016-12-30-2016-behind-2017-forward/ <p>With a year drawing to a close, I have a habit of looking back at my goals I set for myself, see how I have done, and set goals for the new year. My new year's resolution for 2017 will be 1920x1080 (same as last year). I wish I could upgrade it to 5k, but it will have to do for now.</p> <p>In 2016, I set a goal to post to my blog every week - I met that goal. I also planned to get more certs - of which I achieved my LFCE, COA, and Puppet Certified Professional. I also sharpened my ruby skills.</p> <p>For 2017, I am not going to write on my blog every week. Instead I will write more lengthy blog posts and tutorials.</p> <p>In 2016 we saw the Cubs win the world series, Microsoft join the Linux foundation, Google join the ASP.net foundation, and pigs actually flew. I can only imagine what 2017 will hold.</p> 2016-12-23T14:00:27+00:00 2016-12-23T14:00:27+00:00 Andrew Wippler /2016-12-23-easy-unix-epoch-timestamps-from-cli/ <p>While working on various projects and ultimately the need for a Unix timestamp for expiring swift objects in OpenStack, I needed a quick way to convert past, present, and future timestamps to the Unix epoch. Traditionally, I went to google, searched for a Unix timestamp converter, and retrieved my seconds that way. Unfortunately in exams, you are not allowed to visit external websites.</p> <p>If you know how to read documentation, you will already know that the <code>date</code> command has this feature already built in. An excerpt from the docs is as follows:</p> <pre class="z-code"><code><span class="z-text z-plain"> ... </span><span class="z-text z-plain"> Show the local time for 9AM next Friday on the west coast of the US </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> $ date --date=&#39;TZ=&quot;America/Los_Angeles&quot; 09:00 next Fri&#39; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">DATE STRING </span><span class="z-text z-plain"> The --date=STRING is a mostly free format human readable date string </span><span class="z-text z-plain"> such as &quot;Sun, 29 Feb 2004 16:21:42 -0800&quot; or &quot;2004-02-29 16:21:42&quot; or </span><span class="z-text z-plain"> even &quot;next Thursday&quot;. A date string may contain items indicating cal‐ </span><span class="z-text z-plain"> endar date, time of day, time zone, day of week, relative time, rela‐ </span><span class="z-text z-plain"> tive date, and numbers. An empty string indicates the beginning of the </span><span class="z-text z-plain"> day. The date string format is more complex than is easily documented </span><span class="z-text z-plain"> here but is fully described in the info documentation. </span><span class="z-text z-plain">... </span></code></pre> <p>Further reading of the docs will point you in specifically formatting a return string by doing a <code>date +%s</code>. So when the time comes to expire an object from swift at 17:00 next Friday, you can do something like:</p> <p><code>swift post container file -H 'X-Delete-On: </code>date +%s --date="17:00 next Friday"<code>'</code></p> 2016-12-16T14:00:27+00:00 2016-12-16T14:00:27+00:00 Andrew Wippler /2016-12-16-openstack-ps1-snippet/ <p>I have been studying for my OpenStack certification test (the COA) which is scheduled next week. One thing that was painful to keep track of was the user I was using to interface with OpenStack as the rc file you download from OpenStack does not update your PS1 prompt. I came up with the following solution and placed it in my <code>~/.bashrc</code>:</p> <pre class="z-code"><code><span class="z-text z-plain"> </span><span class="z-text z-plain">function parse_os_user() { </span><span class="z-text z-plain"> if [ ! &quot;${OS_USERNAME}&quot; == &quot;&quot; ] </span><span class="z-text z-plain"> then </span><span class="z-text z-plain"> echo &quot;(${OS_USERNAME})&quot; </span><span class="z-text z-plain"> else </span><span class="z-text z-plain"> echo &quot;&quot; </span><span class="z-text z-plain"> fi </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">PS1=&#39;\u@\h \w `parse_os_user` \$ &#39; </span><span class="z-text z-plain"> </span></code></pre> 2016-12-09T14:00:00+00:00 2016-12-09T14:00:00+00:00 Andrew Wippler /2016-12-09-openstack-certification/ <p>On Dec 20th, I am scheduled to take my COA exam. <a class="external" href="http://www.openstack.org/coa/requirements">From the exam requirements page</a>, it appears to be a somewhat moderately difficult exam. The few points I need work on are heat templates and swift object administration. A few things I know about the exam are what are <a class="external" href="https://www.youtube.com/results?search_query=pass+openstack+COA">publicly available via YouTube videos</a> of the OpenStack summit sessions.</p> <p>One of my troubles of studying for exams is creating content to test myself on the objectives of the exam. I look at the requirements and say to myself, "I know that," and nothing gets written for that aspect. One thing I have done in the past is to search Github for exam prep questions. One I have found for OpenStack is <a class="external" href="https://github.com/AJNOURI/COA">AJNOURI/COA</a>. He also made a nifty <a class="external" href="https://ajnouri.github.io/coa/">website</a> for his test prep questions.</p> <p>A key aspect that has helped me pass all of my open book exams is to recall the locations of my troubled areas. Looking at the docs/reading the manual has often come a best practice of mine. Most of the time, exam questions are covered in the docs as the exams expect you to have read them.</p> 2016-12-02T14:00:44+00:00 2016-12-02T14:00:44+00:00 Andrew Wippler /2016-12-02-docker-is-not-a-source-to-blame/ <p>I have been reading a few articles that have been published recently regarding the use of docker in production. Of the articles I read, all seem to complain about the instability of docker, the docker ecosystem, and they lament persistent storage. While I have not run docker in production for a lengthy amount of time, I can determine these issues are from operator error and are not entirely docker's fault.</p> <p>One article I read came out and boldly said that docker created a new file system in one year and it is not humanly possible to have created one in such a short amount of time. I think this article writer has never heard of the DevOps philosophy nor the minimum viability product (MVP). Basically, you do not need 100% of the features to have a working product. This makes it clearly possible to build a single file system - though not have all of the features - within a short time frame. It is also noted that a year in this development process, a second file system was created. Just like in real life, if you wait to ship a product with 100% of the features, you will never ship the product.</p> <p>If you are losing data due to not properly mounting the volumes to a HA storage network (such as GlusterFS or DRBD) - you deserve to have lost the data. I know what it is like to lose 50TB of unique data due to a failed storage device, no current backups, and the shame and cost of having to send it over to DriveSavers (which they are!) for recovery. That is a painful experience and not worth repeating. If you do the same thing and expect different results, the issue lies with the operator and not the tool. Drastic changes were made when loss occurred including developing a new backup solution and having 1-to-1 replication of the data. It has also fine grained a permanent memory in my subsystem to not let that happen ever again.</p> <p>Personally, I think running docker in a public cloud is a waste of company resources - there is no price difference between a VM and 1 docker image on AWS' EC2 container platform of the same capacity. Even if you spun up an Atomic Host or similar, you still have to deal with networking constraints for your file storage. This is something best handled in house as you can scale your network infrastructure to match your workload.</p> <p>The most important factor in all of this fuss about docker is that it is open source software. If you do not have the capacity to find flaws, make patches, and submit those patches for review to upstream, you are better off using a proprietary product that does not have such needs. Again, the issue lies in the operators and not the tools.</p> 2016-11-25T14:00:00+00:00 2016-11-25T14:00:00+00:00 Andrew Wippler /2016-11-25-day-after-thanksgiving-ritual/ <p>My wife and I adopted a tradition on the day after Thanksgiving - after a full night's sleep - we visit stores and go shopping around 10am. Yes, the lines are still crazy, but the people who woke up at 5am to wait in line are already gone. With grandparents watching our children, it is one of our best stress-free shopping experiences. No doubt - we are doing it again today.</p> 2016-11-18T14:00:46+00:00 2016-11-18T14:00:46+00:00 Andrew Wippler /2016-11-18-using-puppet-to-host-a-private-rpm-repository/ <p>A repository is a place where files are stored, indexed, and available through a package manager to anyone who has the repository information. With <code>rpm</code> based systems, a repository is created with a tool called <code>createrepo</code>. Most of the time, publicly available repositories already offer the packages your server needs. When you have a custom application you want to deploy (or even rebuild an existing application with your patches), it is best to distribute that package with a repository rather than a file share or some other means. Often a folder structure is created so that differing client OS versions can connect to the same repository and access versions compiled to that specific release. In my example below, I am not creating this folder structure as I am only serving one major release - Centos 7 - and the packages I am generating are website directories which are just a collection of portable code.</p> <p>A private repository is not a tricky feat - all you have to do is serve the repository via https and require http basic authentication. You then configure the clients to connect to the repository with the basic authentication in the URL string (i.e. <code>baseurl=https://user:pass@repo.example.com/</code>). The HTTPS protocol is not required to serve a repository, but it does prevent network snoopers from seeing your repository credentials.</p> <p>Now that we know what is needed for a private repository, we can then define it in our puppet code.</p> <pre class="z-code"><code><span class="z-text z-plain">node &#39;repo.example.com&#39; { </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> file { &#39;/var/yumrepos&#39;: </span><span class="z-text z-plain"> ensure =&gt; directory, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> createrepo { &#39;yumrepo&#39;: </span><span class="z-text z-plain"> repository_dir =&gt; &#39;/var/yumrepos/yumrepo&#39;, </span><span class="z-text z-plain"> repo_cache_dir =&gt; &#39;/var/cache/yumrepos/yumrepo&#39;, </span><span class="z-text z-plain"> enable_cron =&gt; false, #optional cron job to generate new rpms every 10 minutes </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> package { &#39;httpd&#39;: </span><span class="z-text z-plain"> ensure =&gt; installed, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> httpauth { &#39;repouser&#39;: </span><span class="z-text z-plain"> ensure =&gt; present, </span><span class="z-text z-plain"> file =&gt; &#39;/usr/local/nagios/etc/htpasswd.users&#39;, </span><span class="z-text z-plain"> password =&gt; &#39;some-long-password&#39;, </span><span class="z-text z-plain"> mechanism =&gt; basic, </span><span class="z-text z-plain"> require =&gt; Package[&#39;httpd&#39;], </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> file { &#39;/usr/local/nagios/etc/htpasswd.users&#39;: </span><span class="z-text z-plain"> ensure =&gt; file, </span><span class="z-text z-plain"> owner =&gt; &#39;nginx&#39;, </span><span class="z-text z-plain"> mode =&gt; &#39;0644&#39;, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> class{&#39;nginx&#39;: </span><span class="z-text z-plain"> manage_repo =&gt; true, </span><span class="z-text z-plain"> package_source =&gt; &#39;nginx-mainline&#39;, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> nginx::resource::vhost{&quot;$::fqdn&quot;: </span><span class="z-text z-plain"> www_root =&gt; &#39;/var/yumrepos/yumrepo&#39;, </span><span class="z-text z-plain"> index_files =&gt; [], </span><span class="z-text z-plain"> autoindex =&gt; &#39;on&#39;, </span><span class="z-text z-plain"> rewrite_to_https =&gt; true, </span><span class="z-text z-plain"> ssl =&gt; true, </span><span class="z-text z-plain"> auth_basic =&gt; &#39;true&#39;, </span><span class="z-text z-plain"> auth_basic_user_file =&gt; &#39;/usr/local/nagios/etc/htpasswd.users&#39;, </span><span class="z-text z-plain"> ssl_cert =&gt; &quot;/etc/puppetlabs/puppet/ssl/public_keys/$::fqdn.pem&quot;, </span><span class="z-text z-plain"> ssl_key =&gt; &quot;/etc/puppetlabs/puppet/ssl/private_keys/$::fqdn.pem&quot;, </span><span class="z-text z-plain"> vhost_cfg_prepend =&gt; { </span><span class="z-text z-plain"> &#39;default_type&#39; =&gt; &#39;text/html&#39;, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain">} </span></code></pre> <p>For the above code to work, we need the required modules:</p> <pre class="z-code"><code><span class="z-text z-plain">mod &#39;palli/createrepo&#39;, &#39;1.1.0&#39; </span><span class="z-text z-plain">mod &quot;puppet/nginx&quot;, &quot;0.4.0&quot; </span><span class="z-text z-plain">mod &quot;jamtur01/httpauth&quot;, &quot;0.0.3&quot; </span></code></pre> <p>We can then use the following declaration on our nodes to use this repository.</p> <pre class="z-code"><code><span class="z-text z-plain">yumrepo {&#39;private-repo&#39;: </span><span class="z-text z-plain"> descr =&gt; &#39;My Private Repo - x86_64&#39;, </span><span class="z-text z-plain"> baseurl =&gt; &#39;https://repouser:some-long-password@repo.example.com/&#39;, </span><span class="z-text z-plain"> enabled =&gt; &#39;true&#39;, </span><span class="z-text z-plain"> gpgcheck =&gt; &#39;false&#39;, </span><span class="z-text z-plain"> metadata_expire =&gt; &#39;1&#39;, </span><span class="z-text z-plain">} </span></code></pre> <p>You now have a fully functional private repository - deploy your awesome software.</p> 2016-11-11T14:00:00+00:00 2016-11-11T14:00:00+00:00 Andrew Wippler /2016-11-11-website-protection/ <p>There are several factors that go into securing a web application. Most are second nature to seasoned system administrators, but it is still too common to talk to someone who does not know how to properly secure a web application. Here is the common checklist I go through when I determine if a website is secured.</p> <ul> <li>Is it using a firewall?</li> <li>Am I using unique passwords that are over 20 characters?</li> <li>Are passwords required to alter data?</li> <li>Is my codebase up to date?</li> <li>Are the only public facing ports HTTP and HTTPS?</li> <li>Do I protect data in transit from the user to my site by enforcing HTTPS?</li> <li>Do I protect data from my website to the database with SSL?</li> <li>Is my database only accessible to my application?</li> <li>Do I have my database and application on different servers?</li> <li>Can a malicious user drop/delete/alter data from my database from a form/switch/button that is publicly accessible on my website or do they need to login to perform that operation?</li> <li>Do I have separate connections and users to the database for writing and reading data?</li> <li>Do I rate limit connections via web application firewall or utility like fail2ban?</li> <li>Am I reading and blocking malicious inputs via web application firewall or mod_security?</li> <li>Can anyone brute force a login or am I blocking it after 5 tries?</li> </ul> 2016-11-09T15:00:00+00:00 2016-11-09T15:00:00+00:00 Andrew Wippler /2016-11-09-so-the-cubs-won-the-world-series/ <p>I am still in shock that the Chicago Cubs won the World Series in Baseball which ended their 108 year drought. Last time the Cubs won the world series, they won it back-to-back. I can expect nothing less this time around. ?</p> 2016-11-04T13:00:00+00:00 2016-11-04T13:00:00+00:00 Andrew Wippler /2016-11-04-glusterfs-overview/ <p>GlusterFS is a distributed file system. Think of it as a replacement of traditional file storage (a single NFS/samba server), an alternative to Microsoft's DFS, or a modern implementation of SAN. It really shines when you have multiple locations and need a file server which must have the same data and be continually in sync. It is also superb for virtual machine disks as they will then become highly available.</p> <p>You can use GlusterFS in a replica, distributed, and distributed-replica models. Replica is where a copy of file a is located on all GlusterFS hosts. Distributed is where file a is on some hosts and file b is on the other hosts. Distributed-replica is a combination of both - in other words a subset of two distributed hosts in a parent of replicas.</p> <p>To get started with GlusterFS, all you need is commodity hardware. Nothing has to match - not even the harddrive space. GlusterFS will configure the storage allocation pool automatically. I do recommend at least a 1GB NIC connection and a large internet pipe between locations. Partitioning your system appropriately must also be considered - have a separate mount for <code>/var/log</code> and <code>/data</code>. Keeping <code>/data</code> as the location of your shares makes adding and removing nodes consistent with the documentation.</p> <p>You need at least a multiple of 2 GlusterFS hosts to experience replica, distributed (minimum of 2 hosts), and (minimum of 4) distributed-replica. If you plan on serving Virtual machines off of the GlusterFS volume, multiples of 3 are recommended. Clusters can also be geographically bound so that if one node fails, your clients will connect to another gluster server in that region rather than just any gluster node.</p> <p>The <a class="external" href="http://gluster.readthedocs.io/en/latest/Quick-Start-Guide/Quickstart/">quick start documentation</a> goes over setting up two nodes, pairing them together, connecting via the GlusterFS protocol on your client, and creating 100 files. In total, this is about 6 commands.</p> <p>For managing a large cluster of GlusterFS servers, one may want to take a look at <a class="external" href="https://github.com/heketi/heketi">heketi</a> which manages the lifecycle of GlusterFS. Facebook also developed a tool called AntFarm, but it is currently closed source.</p> 2016-10-28T13:00:00+00:00 2016-10-28T13:00:00+00:00 Andrew Wippler /2016-10-28-a-journey-to-lfce/ <p>I began my Linux hobby in 1999. I was given a CD of RedHat Linux which I installed on an old computer. At first use, it was slow and buggy and uninstalled in favor of Windows 98. I installed Debian a few months later and discovered I could install a different desktop environment - KDE which looked like Windows, but was different. After playing with it for a few weeks, I discovered Knoppix - a live CD that didn't overwrite my hard drive and let me play around without grave consequences. A friend then introduced me to Gentoo which allowed for complete customization for my 1ghz single core processor. After a few failed misconfigurations and a desire to get back to binary installs, I switched to Fedora Core 1 and used it on my desktop. Another friend showed me a new distribution called Ubuntu - similar to Debian, but more up to date. This was then installed on my laptop that I used for college. I switched completely to Ubuntu after the release of Fedora core 4 as I got frustrated with yum.</p> <p>After college, I started working in a help desk position. It was mainly servicing Windows desktops and a few OSX machines. I then received a task from my boss to create a simple lookup website. I got to choose the server OS, create the VM on a Hyper-V host, and use any tools I could muster to perform this simple task. The project was a success and I received another - parse a text file and output it to a standard CSV. At the time, I only knew PHP and none of the cool features of sed and awk. PHP turned out to be a good choice for this project as I was later informed a user would use my creation every day to convert a text file to this new format. I simply had to create a web front end, parse the uploaded file, and give the user an option to download this file.</p> <p>I began to develop more skills in Linux as my various work tasks involved more and more Enterprise level responsibility - such as LDAP authentication for websites, Active Directory maintenance, converting databases from Access to MySQL with a front end, Migration of Exchange 2003 to 2007, and introducing Google Apps for Education to about 700 students. </p> <p>When my boss left the organization, I assumed his role and provided oversight for network connectivity (switch/router config), overseeing two, 6 figure technology budgets, and also my regular responsibilities. I was able to attend training events as well as attend online courses regarding Linux. At that time, I began reading more books on tech practices, management, and Linux. I felt I learned enough to prove my skills with certification - even though I was doing the work successfully without being certified. The Linux Foundation released their equivalent to Red Hat's RHCSA - the Linux Foundation Certified SysAdmin (LFCS). The domains and competencies covered described all the tasks I have done since setting up my first Linux box - create users, partitions, edit text files, etc. I took the introduction to Linux course offered by the Linux Foundation on edx, and scheduled an exam for my LFCS. On my first try, I misconfigured RAID, and rebooted the server. (Whoops!) The Linux Foundation was gracious to allow a free retake which I passed. I kept going around to my co-workers (after being certified) and quoting my favorite Dilbert comic: "Step away from that network server... I AM CERTIFIED!"</p> <p>At this time, my skilled co-workers left (not all at once) and my team turned out to be just me for a period of eight months to cover 1,100 network attached devices and 1,300 users. It was about this time I researched CMEs (Chef, CFEngine, and Puppet) to help do tasks. I eventually picked puppet and successfully deployed RPi-wayfinding with it. A year and a half later, I passed the Puppet Certified Professional exam. With that out of the way, I turned my attention to the LFCE - especially since the Linux Foundation had a sale on the course and test for less than the test amount. </p> <p>The LFCE was the easiest certification test of all the ones I took. I scored an 88 out of 100, and I think the things I missed were saving the iptables rules :/</p> <p>My next step is to take an AWS certificate test as I have been using AWS for nearly 2 years, but I will probably take an OpenStack cert first as I was given a discounted rate for the cert + course from the Linux Foundation.</p> 2016-10-21T14:00:00+00:00 2016-10-21T14:00:00+00:00 Andrew Wippler /2016-10-21-deploying-puppet-open-source/ <p><strong>Update: (5/28/17)</strong> yes, there is the puppet/r10k which supercedes the zack/r10k. While you are free to deviate from the article in your own environment, the below steps still work as intended. I will have to update this article as well as explain why having r10k and dynamic environments is a good idea.</p> <p>In this guide we will go over best practices to deploy Puppet Open Source using the recommended workflow (r10k), PuppetDB, and the foreman. You can deploy Puppet server on any of their supported *nix distributions. In this tutorial we will assume it to be on CentOS 7 as this seems to have the best support.</p> <p>The overall scope of this tutorial is as follows:</p> <ol> <li>Set up foreman</li> <li>Set up a control repo</li> <li>Download r10k module</li> <li>Run puppet apply on r10k.pp (with web hook)</li> <li>Set up PuppetDB</li> </ol> <p>Foreman installation is the easiest. Just head over to <a class="external" href="https://www.theforeman.org/manuals/1.12/index.html#2.1Installation">https://www.theforeman.org/manuals/1.12/index.html#2.1Installation</a>, select CentOS 7 and follow the 5 easy steps. The defaults are fine, but if you want to provision hosts on Digital Ocean or Amazon Web Services, be sure to use interactive mode (the <code>-i</code> switch on <code>foreman-installer</code>) and configure those settings. You can also re-run the installer as it will remember previous settings. Since the foreman installer is built with puppet, it will not override any settings - just enforce them. This allows running the <code>foreman-installer</code> on an already provisioned <code>puppetserver</code> non-destructive.</p> <p>The control repo is the next step and is also very easy to perform. Just fork the <a class="external" href="https://github.com/puppetlabs/control-repo">Puppet control-repo</a> to a local git repository or private git location. Instructions are included in the repo on how to set it up on a gitlab server.</p> <p>Once <code>foreman</code> has installed completely, install the <code>zack/r10k</code> module to manage r10k by running <code>puppet module install zack-r10k</code>. This downloads all prerequisites for managing r10k and getting the ball rolling on a great DevOps practice. You will then need to apply a new puppet manifest to manage r10k's installation and configuration. You can do that by creating <code>r10k-install.pp</code> with the following contents:</p> <pre class="z-code"><code><span class="z-text z-plain">#Fixes Puppet 4 path for webhook </span><span class="z-text z-plain">file {&#39;/usr/local/bin/puppet&#39;: </span><span class="z-text z-plain"> ensure =&gt; link, </span><span class="z-text z-plain"> target =&gt; &#39;/opt/puppetlabs/bin/puppet&#39;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">class { &#39;r10k&#39;: </span><span class="z-text z-plain"> # Point this to your forked control-repo </span><span class="z-text z-plain"> remote =&gt; &#39;git@localgitrepo:puppet/control-repo.git&#39;, </span><span class="z-text z-plain"> # You will need to create this ssh-key pair </span><span class="z-text z-plain"> git_settings =&gt; { </span><span class="z-text z-plain"> &#39;private_key&#39; =&gt; &#39;/etc/puppetlabs/puppetserver/r10k&#39;, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Instead of running via mco, run r10k directly </span><span class="z-text z-plain">class {&#39;r10k::webhook::config&#39;: </span><span class="z-text z-plain"> use_mcollective =&gt; false, </span><span class="z-text z-plain"> # replace the file names with the correct cert names </span><span class="z-text z-plain"> public_key_path =&gt; &#39;/etc/puppetlabs/puppet/ssl/certs/puppet.example.org.pem&#39;, </span><span class="z-text z-plain"> private_key_path =&gt; &#39;/etc/puppetlabs/puppet/ssl/private_keys/puppet.example.org.pem&#39;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># this exposes https://0.0.0.0:8088/payload for git webhooks </span><span class="z-text z-plain">class {&#39;r10k::webhook&#39;: </span><span class="z-text z-plain"> use_mcollective =&gt; false, </span><span class="z-text z-plain"> user =&gt; &#39;root&#39;, </span><span class="z-text z-plain"> group =&gt; &#39;0&#39;, </span><span class="z-text z-plain"> require =&gt; Class[&#39;r10k::webhook::config&#39;], </span><span class="z-text z-plain">} </span></code></pre> <p>With that file saved, run <code>puppet apply r10k.pp</code>. This will enforce and set up r10k.</p> <p>One of the last things I do on a new Puppet 4 installation is set up PuppetDB. PuppetDB is used to collect exported resources and return them to nodes that want them (i.e. the built-in nagios plugin). By now you should already have puppet installed and working without error. To add PuppetDB into the environment, it is as simple as editing the <code>Puppetfile</code> in your control repo to have <code>mod 'puppetlabs/puppetdb'</code> and <a class="external" href="https://forge.puppet.com/puppetlabs/puppetdb/dependencies">matching the dependencies for the PuppetDB module</a>. Next edit your <code>site.pp</code> manifest to include the following:</p> <pre class="z-code"><code><span class="z-text z-plain">node &#39;puppet&#39; { </span><span class="z-text z-plain"> # Configure puppetdb and its underlying database </span><span class="z-text z-plain"> class { &#39;puppetdb&#39;: } </span><span class="z-text z-plain"> # Configure the Puppet master to use puppetdb </span><span class="z-text z-plain"> class { &#39;puppetdb::master::config&#39;: } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> # ... r10k stuff should go here. Make sure to add the module and its dependencies to the Puppetfile! </span><span class="z-text z-plain">} </span></code></pre> <p>On the next puppet run, you should have a solid Puppet environment. Your next step would be to set up the git webhook. This is so that every time you push changes to the repo, r10k updates them on your puppet master. Welcome to the club :)</p> 2016-10-14T13:00:00+00:00 2016-10-14T13:00:00+00:00 Andrew Wippler /2016-10-14-hobby-vs-responsibility/ <p>One of my hobbies is video gaming. In my teen years, I would spend on average of 60-80 hours a week playing either Counter Strike, Team Fortress 2, or any other Valve software title. It was not until I went to college and got a job when my average went to 30-40 hours a week. After being married and having children, my average is now down to 8-12 hours a week. As my responsibilities increased, my hobby time decreased. I would consider myself addicted to video games (i.e. I cannot stop playing them); however, I do not feel like I am missing out from partaking in my hobby. Here is what I have done to lower my addiction to video games:</p> <ol> <li>I stopped playing multiplayer FPS</li> <li>I only buy video games that run on Linux</li> <li>I play during specific time frames only</li> </ol> <p>My current favorite game is Factorio - you crash landed on a distant planet and have to build a rocket to escape.</p> 2016-10-07T13:00:00+00:00 2016-10-07T13:00:00+00:00 Andrew Wippler /2016-10-07-repercussions-from-a-1-1-tbsp-ddos/ <p>In case you missed it, <a class="external" href="https://www.google.com/search?q=1.1+Tbps+ddos">the largest recorded Direct Denial of Service (DDoS) occurred</a>. While under DDoS, a victim's server (or servers) is under high load and cannot complete all requests that are requested by it. Basically, a DDoS victim is someone the attacker wants silenced on the internet. In order to send a DDoS of that magnitude, the attacker has to have control over many computers - a botnet. It is believed that this attack originated from over 150,000 computers in the IoT category (smart TVs, refrigerators, thermostats, etc.). Due to their poor default security, the IoT devices are easy targets for hackers who intend on adding them to their botnets. <a class="external" href="http://arstechnica.com/security/2016/09/linux-kernel-security-needs-fixing/">A recent article on Ars Technica points out the current issues with IoT and Linux kernel security</a>, but with most articles of this nature, provides no clear cut solution to the problem we are experiencing. Below are my thoughts to this current situation and how it may be resolved.</p> <p>We need a governing body to issue a seal of approval for IoT and anything that is compiled with the Linux kernel. Then we, as consumers, must use, buy, and encourage others to buy from the companies that have this seal. The governing body should ensure each company seeking the seal comply with the following criteria:</p> <ol> <li>Every new device created and sent to market has a minimum of 5 years worth of bi-monthly security patches and updates since the day of release to the public.</li> <li>In the event the company goes bankrupt, dissolves, or cannot support any older product they have released in the past 5 years, the company must provide schematics, instructions, or software that open source enthusiasts can recreate, patch, or upgrade the legacy product.</li> <li>No known vulnerability must be willingly left unpatched.</li> <li>When a CVE is identified on a company's product, a test case must be created and run on that code base for every future release.</li> <li>A notification service must be in place when new updates are released and must be available in RSS or email form.</li> <li>Automatic updates should occur over HTTPS</li> <li>Backdoors, admin terminals, etc. should require a physical connector be applied on the device in order to grant access.</li> </ol> <p>For a potential company to get this approval, it may seem like an arduous task to get all the controls in place; however, by applying DevOps methodologies, these tasks can be a simple feat. This would require the governing body to not only enforce the list, but also have the training available to comply to this list. For this reason, I suggest the Linux Foundation to become this governing body and issue out seals of approval.</p> 2016-09-30T13:00:00+00:00 2016-09-30T13:00:00+00:00 Andrew Wippler /2016-09-30-first-puppet-module-published/ <p>I completed my first public module for puppet and submitted it to the puppet forge. It seems too simple to compile into a build and submit it to the forge; however, I made it public for these reasons:</p> <ol> <li>I needed experience with puppet code testing. This helped me at the most basic level.</li> <li>I felt like someone else could benefit from the code - even if it is one person.</li> <li>I wanted to do it.</li> </ol> <p>Still, the code seems too juvenile to be submitted to the forge. All it does is take the hostname of a Digital Ocean droplet and submit its IP address as a new DNS record inside of Digital Ocean DNS. The code is <a class="external" href="https://github.com/andrewwippler/do_dns">located here</a>.</p> <p>I almost want to follow up with this and develop my duplicity module into reusable code for the community.</p> 2016-09-23T08:01:47+00:00 2016-09-23T08:01:47+00:00 Andrew Wippler /2016-09-23-signs-you-are-doing-it-wrong/ <ol> <li>You still use FTP</li> <li>You use SFTP</li> <li>You have a single server hosting 1 website, MySQL, and PHP. It has 4+ GB of RAM and you only have ~2,000 visitors a day.</li> <li>You login via root</li> <li>You don't use version control</li> <li>You use a control panel for servers which you have SSH access.</li> <li>It takes you over an hour to migrate 1 website</li> <li>Your DNS TTL records are over 10 minutes</li> <li>Your SQL server is not accessible over SSL/TLS</li> <li>You use mod_php instead of reverse proxying to php-fpm</li> <li>You develop for the web on Windows</li> <li>You chmod 777</li> <li>You use modules/plugins that require chmod 777</li> <li>You have no backups</li> <li>You host multiple websites on one server (internal-only websites excluded)</li> <li>You SSH with passwords</li> <li>You reuse passwords</li> <li>You don't read books</li> <li>You don't attend conferences</li> <li>You attend more than 6 conferences a year</li> <li>You use skype for communication</li> <li>You make a separate mobile site</li> <li>You add more RAM to fix your memory leaks</li> </ol> 2016-09-16T13:00:00+00:00 2016-09-16T13:00:00+00:00 Andrew Wippler /2016-09-16-iced-coffee-is-the-best/ <p>I am not a very big fan of hot drinks, but I enjoy drinking a cup/glass/thermos/pot/gallon of coffee. I especially drink it more when my taste buds dance around and say, "Wow! That was some good, quality coffee!" A few weeks ago I set out to find a better way to make my favorite drink - iced coffee. In my opinion, the best method of procuring coffee is in whole bean form. I tend to buy a brand that is roasted in my region - supporting the local economy - that also tastes good. I store the whole bean bag in my freezer and the grounded bean in a small coffee can in my refrigerator.</p> <p>At first, I tried pouring hot coffee over Frozen coffee cubes, then added my refrigerated creamer. This lasted for a few weeks, but I couldn't notice a huge difference in taste between water iced cubes and coffee iced cubes.</p> <p>Secondly, I tried cold brewing coffee - placing ground coffee beans in cold water into the refrigerator overnight. This only resulted in weak, flavorless coffee.</p> <p>Next, I tried hot brewing coffee, pouring it into a container, and letting it sit in the refrigerator overnight. This seems to be the best option so far. I still get to keep my 1.5 tbsp ratio for coffee beans and resulting liquid. The iced cubes do not melt when the coffee is poured over them. I think I will stick to this option for now.</p> 2016-09-09T13:00:00+00:00 2016-09-09T13:00:00+00:00 Andrew Wippler /2016-09-09-my-iot-device-history/ <p>The internet of things (IoT) is getting pretty saturated with devices most of which are either smart watches or activity trackers. Smart watches do not appeal to me as I have a very nasty habit of destroying the clock face of my watches. Last November, I was able to get a Vivosmart from Garmin for $60 plus tax and shipping. It was great - did step tracking, allowed for notifications, allowed me to dismiss calls and see texts. My brother-in-law also received one as a gift a few months later (he preferred it over the Fitbit which did less and cost more).</p> <p>A month ago we both noticed the pixels disappearing on the Garmin Vivosmart display. I was able to submit a warranty request through their website quite painlessly, and the offered to upgrade me to a Garmin Vivosmart HR! Of course I took the upgrade offer and paid the shipping for the old device to be sent back. My brother-in-law had a complete different experience. The website at first said his Garmin Vivosmart was out of warranty (even though it was newer than mine) then it eventually - a day later - said it was in warranty. He was given the option to replace the Garmin Vivosmart with a non-HR model, but they gave him a shipping label. It is quite odd that we both had different experiences within a few days of submitting our warranty requests.</p> <p>I recently received the newer model after waiting the RMA process and I am quite impressed. At first, the font was too skinny and hard to read, but all I had to do was upgrade to the latest firmware and it was fixed. One neat feature that was added (besides the obvious HR function) was the ability to see the weather - up to a 4 day forecast. Two new goal trackers were also added - a stair counter and strenuous activity counter. The plain Garmin Vivosmart's battery lasted over a week. I haven't depleted the new model all the way, but I am assuming it will last 4-5 days depending on my use.</p> 2016-09-02T14:00:00+00:00 2016-09-02T14:00:00+00:00 Andrew Wippler /2016-09-02-provisioning-vms-with-cloud-init/ <p>One of the easiest ways to deploy a virtual machine in oVirt is first to install the OS then turn it into a template. This will allow you to copy that template to deploy new instances. One mundane task after a new template is copied to a new instance is logging in, changing the IP, setting the hostname, setting up Puppet, running puppet, etc. <code>cloud-init</code> is the tool designed to fix that mundane task process by allowing those steps to be automated. oVirt/RHEV (as well as OpenStack, AWS, and others) allow you to pass in user data which is then supplied to <code>cloud-init</code> after the template is copied over and turned on. This allows for scripting on the new VM - easing deployment.</p> <p>For my environment, I wanted a CentOS 7 template. To have that, I must first install CentOS on a new VM and seal it (Windows calls this Sysprep). Before I seal it, I must install <code>cloud-init</code> and any other tools I might use for deployment - such as <code>puppet</code>. Here are the steps to obtain just that:</p> <p>* Install CentOS 7.2 Minimal on any new VM. Ensure to have LVM partitioning as you may want to extend the disk later. I have found that 10 GB is a good starting size.</p> <p>* Install your base files - things you cannot live without (i.e. <code>vim</code>,<code>puppet</code>, etc).</p> <p>* Seal the VM <a class="external" href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.5/html/Administration_Guide/sect-Sealing_Virtual_Machines_in_Preparation_for_Deployment_as_Templates.html#sect-Sealing_a_Linux_Virtual_Machine_for_Deployment_as_a_Template">per RedHat instructions</a>. I suggest following the instructions for sysunconfig:</p> <ol> <li> <p>Log in to the virtual machine.</p> </li> <li> <p>Remove ssh host keys:</p> <pre class="z-code"><code><span class="z-text z-plain"># rm -rf /etc/ssh/ssh_host_* </span></code></pre> </li> <li> <p>Set <code>HOSTNAME=localhost.localdomain</code> in <code>/etc/sysconfig/network</code> for Red Hat Enterprise Linux 6/CentOS 6 or <code>/etc/hostname</code> for Red Hat Enterprise Linux 7/CentOS 7.</p> </li> <li> <p>Remove the <code>HWADDR</code> line and <code>UUID</code> line from <code>/etc/sysconfig/network-scripts/ifcfg-eth*</code>.</p> </li> <li> <p>Optionally, delete all the logs from <code>/var/log</code> and build logs from <code>/root</code>.</p> </li> <li> <p>Run <code>sys-unconfig</code></p> </li> </ol> <p><code>sys-unconfig</code> will turn off the VM when it is completed. When it is turned off, right click the VM and select copy to template.</p> 2016-08-26T14:49:51+00:00 2016-08-26T14:49:51+00:00 Andrew Wippler /2016-08-26-securing-pwm/ <p>In <a class="external" href="http://andrewwippler.com/2016/08/19/password-management-portal-for-end-users/">last week's post</a> we set up PWM insecurely. In this post, we are going to secure it down and install mysql to store the reset questions. This guide assumes you have this CentOS 7 server publicly accessible with ports 80 and 443 available to the entire world. First, we will need to install mysql, set up a database, and add a user to that database. To do that, we need to edit our <code>manifest.pp</code> and append the following:</p> <pre class="z-code"><code><span class="z-text z-plain"> class { &#39;::mysql::server&#39;: </span><span class="z-text z-plain"> root_password =&gt; &#39;My4cc0unt$$password!&#39;, </span><span class="z-text z-plain"> remove_default_accounts =&gt; true, </span><span class="z-text z-plain"> package_name =&gt; &#39;mariadb-server&#39;, </span><span class="z-text z-plain"> package_ensure =&gt; &#39;installed&#39;, </span><span class="z-text z-plain"> service_name =&gt; &#39;mariadb&#39;, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> mysql::db { &#39;pwm&#39;: </span><span class="z-text z-plain"> user =&gt; &#39;pwm&#39;, </span><span class="z-text z-plain"> password =&gt; &#39;pwm_passworD2!&#39;, # Can&#39;t do a password hash here :( </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> class { &#39;mysql::bindings&#39;: </span><span class="z-text z-plain"> java_enable =&gt; true, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain">file { &#39;/opt/tomcat8/pwm/lib/mysql-connector-java.jar&#39;: </span><span class="z-text z-plain"> ensure =&gt; link, </span><span class="z-text z-plain"> target =&gt; &#39;/usr/share/java/mysql-connector-java.jar&#39;, </span><span class="z-text z-plain"> require =&gt; Class[&#39;mysql::bindings&#39;] </span><span class="z-text z-plain">} </span></code></pre> <p>We will also need to install additional modules:</p> <pre class="z-code"><code><span class="z-text z-plain">puppet module install puppetlabs-firewall </span><span class="z-text z-plain">puppet module install jfryman-nginx </span><span class="z-text z-plain">puppet module install jfryman-selinux </span><span class="z-text z-plain">puppet module install danzilio-letsencrypt </span></code></pre> <p>Now we can set up our web server and directories by appending the following:</p> <pre class="z-code"><code><span class="z-text z-plain">file {&quot;/var/www/${::hostname}&quot;: </span><span class="z-text z-plain"> ensure =&gt; &#39;directory&#39;, </span><span class="z-text z-plain"> owner =&gt; &#39;nginx&#39;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">file {&quot;/var/www/${::hostname}/index.html&quot;: </span><span class="z-text z-plain"> ensure =&gt; &#39;file&#39;, </span><span class="z-text z-plain"> owner =&gt; &#39;nginx&#39;, </span><span class="z-text z-plain"> content =&gt; &#39;&lt;html&gt;&lt;head&gt;&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0;URL=/pwm&quot; /&gt;&lt;/head&gt;&lt;/html&gt;&#39;, </span><span class="z-text z-plain"> require =&gt; File[&quot;/var/www/${::hostname}&quot;], </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">firewall { &#39;100 allow http, https access&#39;: </span><span class="z-text z-plain"> dport =&gt; [80, 443], </span><span class="z-text z-plain"> proto =&gt; tcp, </span><span class="z-text z-plain"> action =&gt; accept, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">selinux::fcontext {&#39;set-httpd-context&#39;: </span><span class="z-text z-plain"> context =&gt; &quot;httpd_sys_content_t&quot;, </span><span class="z-text z-plain"> pathname =&gt; &quot;/var/www(/.*)?&quot;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">selinux::boolean {&#39;httpd_can_network_connect&#39;: } </span><span class="z-text z-plain"> </span><span class="z-text z-plain">class { &#39;nginx&#39;: } </span><span class="z-text z-plain"> </span><span class="z-text z-plain">nginx::resource::upstream { &#39;pwm&#39;: </span><span class="z-text z-plain"> members =&gt; [ &#39;localhost:8080&#39; ], </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">nginx::resource::vhost { &quot;${::hostname}.${::domain}&quot;: </span><span class="z-text z-plain"> ensure =&gt; present, </span><span class="z-text z-plain"> www_root =&gt; &quot;/var/www/${::hostname}/&quot;, </span><span class="z-text z-plain"> #ssl =&gt; true, </span><span class="z-text z-plain">     index_files      =&gt; [], </span><span class="z-text z-plain">     try_files        =&gt; [&#39;$uri&#39;,&#39;$uri/index.html&#39;,&#39;@pwm&#39;], </span><span class="z-text z-plain"> #rewrite_to_https =&gt; true, </span><span class="z-text z-plain"> #ssl_cert =&gt; &quot;/etc/letsencrypt/live/${::fqdn}/fullchain.pem&quot;, </span><span class="z-text z-plain"> #ssl_key =&gt; &quot;/etc/letsencrypt/live/${::fqdn}/privkey.pem&quot;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">nginx::resource::location{&#39;@pwm&#39;: </span><span class="z-text z-plain"> proxy =&gt; &#39;http://pwm&#39;, </span><span class="z-text z-plain"> vhost =&gt; &quot;${::hostname}.${::domain}&quot;, </span><span class="z-text z-plain"> ssl =&gt; true, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span></code></pre> <p><code>``` Leave the ssl options commented out for now. We need the web server set up before running letsencrypt. After we save the file and run another</code>puppet apply manifest.pp` we can add the letsencrypt information and uncomment the ssl information.</p> <pre class="z-code"><code><span class="z-text z-plain">class { ::letsencrypt: </span><span class="z-text z-plain"> email =&gt; &#39;andrew.wippler@example.com&#39;, </span><span class="z-text z-plain"> require =&gt; Class[&#39;nginx&#39;], </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">letsencrypt::certonly { &#39;pwm cert&#39;: </span><span class="z-text z-plain"> domains =&gt; [&quot;${::fqdn}&quot;], </span><span class="z-text z-plain"> plugin =&gt; &#39;webroot&#39;, </span><span class="z-text z-plain"> webroot_paths =&gt; [&quot;/var/www/${::hostname}&quot;], </span><span class="z-text z-plain"> manage_cron =&gt; true, </span><span class="z-text z-plain"> } </span></code></pre> <p>Apply the manifest one more time and enjoy your new instance of PWM. As a reference, my entire manifest can be seen below:</p> <pre class="z-code"><code><span class="z-text z-plain">include git </span><span class="z-text z-plain">include java </span><span class="z-text z-plain"> </span><span class="z-text z-plain">tomcat::install { &#39;/opt/tomcat8&#39;: </span><span class="z-text z-plain"> source_url =&gt; &#39;https://www.apache.org/dist/tomcat/tomcat-8/v8.5.3/bin/apache-tomcat-8.5.3.tar.gz&#39; </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">tomcat::instance { &#39;tomcat8-pwm&#39;: </span><span class="z-text z-plain"> catalina_home =&gt; &#39;/opt/tomcat8&#39;, </span><span class="z-text z-plain"> catalina_base =&gt; &#39;/opt/tomcat8/pwm&#39;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">tomcat::war { &#39;pwm.war&#39;: </span><span class="z-text z-plain"> catalina_base =&gt; &#39;/opt/tomcat8/pwm&#39;, </span><span class="z-text z-plain"> war_source =&gt; &#39;/path/to/pwm.war&#39;, # or http://domain.tld/pwm.war </span><span class="z-text z-plain"> before =&gt; File[&#39;/opt/tomcat8/pwm/lib/mysql-connector-java.jar&#39;], </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">augeas { &#39;web.xml&#39;: </span><span class="z-text z-plain"> incl =&gt; &#39;/opt/tomcat8/pwm/webapps/pwm/WEB-INF/web.xml&#39;, </span><span class="z-text z-plain"> context =&gt; &#39;/files/opt/tomcat8/pwm/webapps/pwm/WEB-INF/web.xml/web-app&#39;, </span><span class="z-text z-plain"> lens =&gt; &#39;Xml.lns&#39;, </span><span class="z-text z-plain"> changes =&gt; &#39;set context-param[1]/param-value/#text /opt/tomcat8/pwm/webapps/pwm/WEB-INF&#39;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">class { &#39;::mysql::server&#39;: </span><span class="z-text z-plain"> root_password =&gt; &#39;My4cc0unt$$password!&#39;, </span><span class="z-text z-plain"> remove_default_accounts =&gt; true, </span><span class="z-text z-plain"> package_name =&gt; &#39;mariadb-server&#39;, </span><span class="z-text z-plain"> package_ensure =&gt; &#39;installed&#39;, </span><span class="z-text z-plain"> service_name =&gt; &#39;mariadb&#39;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">mysql::db { &#39;pwm&#39;: </span><span class="z-text z-plain"> user =&gt; &#39;pwm&#39;, </span><span class="z-text z-plain"> password =&gt; &#39;pwm_passworD2!&#39;, # Can&#39;t do a password hash here :( </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">class { &#39;mysql::bindings&#39;: </span><span class="z-text z-plain"> java_enable =&gt; true, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">file { &#39;/opt/tomcat8/pwm/lib/mysql-connector-java.jar&#39;: </span><span class="z-text z-plain"> ensure =&gt; link, </span><span class="z-text z-plain"> target =&gt; &#39;/usr/share/java/mysql-connector-java.jar&#39;, </span><span class="z-text z-plain"> require =&gt; Class[&#39;mysql::bindings&#39;] </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">file {&quot;/var/www/${::hostname}&quot;: </span><span class="z-text z-plain"> ensure =&gt; &#39;directory&#39;, </span><span class="z-text z-plain"> owner =&gt; &#39;nginx&#39;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">file {&quot;/var/www/${::hostname}/index.html&quot;: </span><span class="z-text z-plain"> ensure =&gt; &#39;file&#39;, </span><span class="z-text z-plain"> owner =&gt; &#39;nginx&#39;, </span><span class="z-text z-plain"> content =&gt; &#39;&lt;html&gt;&lt;head&gt;&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0;URL=/pwm&quot; /&gt;&lt;/head&gt;&lt;/html&gt;&#39;, </span><span class="z-text z-plain"> require =&gt; File[&quot;/var/www/${::hostname}&quot;], </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">firewall { &#39;100 allow http, https access&#39;: </span><span class="z-text z-plain"> dport =&gt; [80, 443], </span><span class="z-text z-plain"> proto =&gt; tcp, </span><span class="z-text z-plain"> action =&gt; accept, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain">selinux::fcontext {&#39;set-httpd-context&#39;: </span><span class="z-text z-plain"> context =&gt; &quot;httpd_sys_content_t&quot;, </span><span class="z-text z-plain"> pathname =&gt; &quot;/var/www(/.*)?&quot;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">selinux::boolean {&#39;httpd_can_network_connect&#39;: } </span><span class="z-text z-plain"> </span><span class="z-text z-plain">class { &#39;nginx&#39;: } </span><span class="z-text z-plain"> </span><span class="z-text z-plain">nginx::resource::upstream { &#39;pwm&#39;: </span><span class="z-text z-plain"> members =&gt; [ &#39;localhost:8080&#39; ], </span><span class="z-text z-plain">} </span></code></pre> <pre class="z-code"><code><span class="z-text z-plain">nginx::resource::vhost { &quot;${::hostname}.${::domain}&quot;: </span><span class="z-text z-plain"> ensure =&gt; present, </span><span class="z-text z-plain"> index_files =&gt; [], </span><span class="z-text z-plain"> www_root =&gt; &quot;/var/www/${::hostname}/&quot;, </span><span class="z-text z-plain"> ssl =&gt; true, </span><span class="z-text z-plain"> try_files =&gt; [&#39;$uri&#39;, &#39;$uri/index.html&#39;, &#39;@pwm&#39;], </span><span class="z-text z-plain"> rewrite_to_https =&gt; true, </span><span class="z-text z-plain"> ssl_cert =&gt; &quot;/etc/letsencrypt/live/${::fqdn}/fullchain.pem&quot;, </span><span class="z-text z-plain"> ssl_key =&gt; &quot;/etc/letsencrypt/live/${::fqdn}/privkey.pem&quot;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">nginx::resource::location{&#39;@pwm&#39;: </span><span class="z-text z-plain"> proxy =&gt; &#39;http://pwm&#39;, </span><span class="z-text z-plain"> vhost =&gt; &quot;${::hostname}.${::domain}&quot;, </span><span class="z-text z-plain"> ssl =&gt; true, </span><span class="z-text z-plain">} </span></code></pre> <pre class="z-code"><code><span class="z-text z-plain">class { ::letsencrypt: </span><span class="z-text z-plain"> email =&gt; &#39;andrew.wippler@example.com&#39;, </span><span class="z-text z-plain"> require =&gt; Class[&#39;nginx&#39;], </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">letsencrypt::certonly { &#39;pwm cert&#39;: </span><span class="z-text z-plain"> domains =&gt; [&quot;${::fqdn}&quot;], </span><span class="z-text z-plain"> plugin =&gt; &#39;webroot&#39;, </span><span class="z-text z-plain"> webroot_paths =&gt; [&quot;/var/www/${::hostname}&quot;], </span><span class="z-text z-plain"> manage_cron =&gt; true, </span><span class="z-text z-plain">} </span></code></pre> 2016-08-19T14:00:00+00:00 2016-08-19T14:00:00+00:00 Andrew Wippler /2016-08-19-password-management-portal-for-end-users/ <p>We in IT have heard it often, the #1 request coming into help desk ticket systems is password resets, account lockouts, and the like. PWM is a password reset web application written in Java for use with LDAP directories. You can configure it to work with Active Directory, OpenLDAP, FreeIPA, and others. There are already a handful of good tutorials on how to set up PWM (<a class="external" href="http://www.serveradventures.com/the-adventures/installing-pwm-open-source-password-self-service-for-ldap">I think of this one in particular</a>); however, I want to demonstrate the <code>puppet apply</code> command in this tutorial.</p> <h3 id="prerequisites">Prerequisites</h3> <p>This guide assumes you have an Active Directory server with TLS set up (to change passwords) which is beyond the scope of this post. It also assumes you have a CentOS 7 instance which can communicate to the Active Directory server. It also assumes this is in an environment without a puppet master/server. The end manifest can be uploaded to a master and used that way.</p> <h3 id="obtaining-pwm">Obtaining PWM</h3> <p>PWM is available in zip format <a class="external" href="http://www.pwm-project.org/artifacts/pwm/">on their website</a> or in source format <a class="external" href="https://github.com/pwm-project/pwm">on GitHub</a>. We are going to use the war file so grab the zip from off of their website, extract it, and place it on a webserver or locally on the server.</p> <pre class="z-code"><code><span class="z-text z-plain">yum install wget unzip -y </span><span class="z-text z-plain">wget http://www.pwm-project.org/artifacts/pwm/pwm-1.8.0-SNAPSHOT-2016-05-23T22%3A36%3A58Z-pwm-bundle.zip </span><span class="z-text z-plain">unzip pwm*.zip </span></code></pre> <h3 id="installing-puppet-and-puppet-modules">Installing puppet and puppet modules</h3> <p>Our next step is to get puppet and relevant puppet modules</p> <pre class="z-code"><code><span class="z-text z-plain">rpm -ivh http://yum.puppetlabs.com/puppetlabs-release-pc1-el-7.noarch.rpm </span><span class="z-text z-plain">yum install puppet -y </span><span class="z-text z-plain">source /etc/profile </span><span class="z-text z-plain">puppet module install puppetlabs-mysql </span><span class="z-text z-plain">puppet module install puppetlabs-java </span><span class="z-text z-plain">puppet module install puppetlabs-git </span><span class="z-text z-plain">puppet module install puppetlabs-concat </span><span class="z-text z-plain">puppet module install puppetlabs-tomcat --ignore-dependencies </span><span class="z-text z-plain"> </span></code></pre> <p>We are <code>--ignore-dependencies</code> because there is a conflicting staging module that the <code>mysql</code> module already installed.</p> <pre class="z-code"><code><span class="z-text z-plain">vim manifest.pp </span></code></pre> <p>The contents of this file are as below:</p> <pre class="z-code"><code><span class="z-text z-plain">include git </span><span class="z-text z-plain">include java </span><span class="z-text z-plain"> </span><span class="z-text z-plain">tomcat::install { &#39;/opt/tomcat8&#39;: </span><span class="z-text z-plain"> source_url =&gt; &#39;https://www.apache.org/dist/tomcat/tomcat-8/v8.5.3/bin/apache-tomcat-8.5.3.tar.gz&#39; </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">tomcat::instance { &#39;tomcat8-pwm&#39;: </span><span class="z-text z-plain"> catalina_home =&gt; &#39;/opt/tomcat8&#39;, </span><span class="z-text z-plain"> catalina_base =&gt; &#39;/opt/tomcat8/pwm&#39;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">tomcat::war { &#39;pwm.war&#39;: </span><span class="z-text z-plain"> catalina_base =&gt; &#39;/opt/tomcat8/pwm&#39;, </span><span class="z-text z-plain"> war_source =&gt; &#39;/path/to/pwm.war&#39;, # or http://domain.tld/pwm.war </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">augeas {&#39;web.xml&#39;: </span><span class="z-text z-plain"> incl =&gt; &#39;/opt/tomcat8/pwm/webapps/pwm/WEB-INF/web.xml&#39;, </span><span class="z-text z-plain"> context =&gt; &#39;/files/opt/tomcat8/pwm/webapps/pwm/WEB-INF/web.xml/web-app&#39;, </span><span class="z-text z-plain"> lens =&gt; &#39;Xml.lns&#39;, </span><span class="z-text z-plain"> changes =&gt; &#39;set context-param[1]/param-value/#text /opt/tomcat8/pwm/webapps/pwm/WEB-INF&#39;, </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span></code></pre> <p>We can now enforce the environment by issuing a <code>puppet apply manifest.pp</code>. This will install PWM (insecurely), java, git, and tomcat. PWM is insecure in this state as passwords can be intercepted before they hit the web server. <a class="external" href="http://andrewwippler.com/2016/08/26/securing-pwm/">In a follow-up tutorial next week</a>, I will explain how to install mysql (to store the password reset questions) as well as placing nginx in front of tomcat to offer SSL and http to https redirection.</p> 2016-08-12T15:00:18+00:00 2016-08-12T15:00:18+00:00 Andrew Wippler /2016-08-12-avoiding-catastrophic-failure/ <p>You may have already heard the news about <a class="external" href="http://www.nbcnews.com/news/us-news/delta-system-outage-triggers-delays-worldwide-n625141">Delta Airlines catastrophic failure</a>. <a class="external" href="http://arstechnica.com/business/2016/08/data-center-disaster-disrupts-delta-airlines/">Ars Technica reports</a> the true cause of the failure - <a class="external" href="http://www.flyertalk.com/forum/27032000-post135.html">routine maintenance of the power generators</a>. While it may be a little presumptuous or high on the bragging scale to have only one datacenter to house your entire infrastructure - this is not the best method. The blame is often placed on the IT personnel when computer systems go down, but in this case the error is shared. There was a maintenance individual who did not spot the potential of a fire, there is the building planning committee that placed the power sources too close together, there is the IT budgeting team that did not have an off-site solution, and there is the CTO misinformed on the infrastructure needs of a worldwide company. A catastrophic failure is anything that damages a company's reputation.</p> <p>I can understand the single point of failure - it is often found in SMB/non-profit environments. The single point of failure happening is marginal at best. This causes it to be overlooked many times over as some will hope it never comes to encountering that scenario. Budgetary constraints are often the first road block, the second being time to implement, the third being the internal security practices of customer data, and the fourth being the time to restore after a catastrophic failure is less than 24 hours - these also minimizes the single point of failure in our minds. We so often minimize the single point of failure to where it loses its place as #1 concern to #100 on "do someday task."</p> <p>We live in the best computer age right now. Catastrophic failures can be avoided. Here are a few ways to prevent catastrophic failures.</p> <ol> <li>Keep up-to-date on current software trends/best practices.</li> <li>Don't keep all of your eggs in one basket. Keep your services separated.</li> <li>Research and obtain certifications relevant to IT, but not necessarily directly related to your field of work. For instance, a network engineer achieving a Linux certification or a SysAdmin getting a CCNA.</li> <li>Get IT audited. If the audit returns no suggestions, get audited by another company within 3 months.</li> <li>Simulate all the disaster recovery scenarios twice every 5 years. Have different managers perform the restore, meet with their findings (how long it takes, what is needed, budget), and record it in documentation.</li> <li>Ease the restore time by having everything in a configuration management engine (Like Puppet, Chef, Anisble, Salt, and others)</li> <li>Reward IT employees if there have been no service disruptions in the past month. Yes, do it regularly. It can be as simple as a thank-you card, gift card, or the ability to leave early one day in the next week.</li> </ol> <p>I do not know Delta Airlines' software/hardware stack, but I would estimate that they have at least a database and a front end that communicates with the database. With that estimation, it would be easy to set up an AWS environment where an auto scaling group contained a replica of the datacenter database. Even if it required a manual switch from on-premise to the cloud database, the total downtime would have been less than 20 minutes (10-15 minutes for the IT manager to find the wiki entry and delegate the task to the right guy, 5 minutes for DNS propagation). Maintaining something like this would be around $500/month for the AWS VPN connection and database servers. If they go this route or not time will only tell. One thing is certain, change is going to be made to their infrastructure.</p> 2016-08-05T14:00:00+00:00 2016-08-05T14:00:00+00:00 Andrew Wippler /2016-08-05-common-problems-with-web-developers-configuring-lamplemp/ <p>I am a SysAdmin who likes to code. I would say I know a fair amount of web developing, but do not understand it like a web developer uunderstands it. I think the reverse is true as well - web developers know how to set up a LAMP/LAMP stack, but they do not understand it as well as SysAdmin might understand it.</p> <p>To be a successful SysAdmin, you need to relearn your field every 3-5 years. New versions of software come out, new OSes, new features, new methods, and new ideas come out every several months. It takes somebody dedicated to read news blogs, mailing lists, and following the appropriate people on social media to keep up with the rapid trends. Web developers do not have that time to dedicate to operations work. They only need infrastructure to work for their project and it doesn't matter how well tuned the software is - if it works, that is all they need. Below are some common pitfalls I see with web developers.</p> <ol> <li>Using Apache with mod_fastcgi</li> </ol> <p>While this is the only option for php-fpm in Apache 2.2, Apache 2.4 brings along the better, high performing mod_proxy_fcgi. This method should be the standard in deploying an application in Apache. Using nginx with reverse proxy is also an alternative.</p> <ol start="2"> <li>Not befriending a SysAdmin.</li> </ol> <p>Contrary to popular belief, SysAdmins are not the preventers of productivity. Some Web Developers would benefit from being nice to a SysAdmin, speaking to them, and interacting more often. SysAdmins like to tell their "server stories" of how their application, server, or network equipment is actually performing in production.</p> <ol start="3"> <li>Using maximum power on their dev machine's VM</li> </ol> <p>Most dev VMs I see are over 2 vCPU and 4GB RAM. This brings an unreliable view of how the application will perform in production. A better way would be to create a 1 vCPU with 512 RAM and test on that. The smaller server footprint your application needs, the easier, faster, and cheaper we can scale it.</p> 2016-07-29T14:00:00+00:00 2016-07-29T14:00:00+00:00 Andrew Wippler /2016-07-29-the-future-without-microsoft-office-products/ <p>I recently submitted a proposal to remove Microsoft Office from off my network and switch to Google Apps for Work and LibreOffice. This would incur a cost savings of ~$17.50 per user per month (GAFW $5 plan versus Office 2016 Professional Plus, Corporate, Open License, License Only). Some may argue that there are better license options with Microsoft and the $508 per user per 2 years (with the open license; source: http://mla.microsoft.com) is not a fair estimation, however, it is not fair to compare a stagnant version of Office versus the always updated version of GAFW or LibreOffice.</p> <p>With LibreOffice, I can contribute a patch, submit it upstream, get it reviewed, and have it accepted into main stream. If I couldn't wait for it to get to upstream, I could recompile with my patch and get it deployed in a matter of hours. This is the power and strength of open source software. Even with Google Apps, I submit a feature request, wait for it, and get the updated version when it arrives - I don't have to buy a new version to get this new feature. This is the power of SaaS. Word processing is also not proprietary. What you see on the screen in Microsoft Office, Google Apps, or LibreOffice will be what you get when you print it out or email it. LibreOffice and Microsoft Office save in formats that are compatible with each other. LibreOffice reads and writes docx and xlsx, and Microsoft Office reads and writes odf and ods.</p> <p>The biggest hurdle to switch is that Microsoft Office included odbc connectors in a spreadsheet program (Excel) instead of directing users to a database program (access). LibreOffice did it right by making a spreadsheet program (calc) do spreadsheet things only and their database (base) connect via odbc to other databases. LibreOffice has Microsoft beat in that you can open more odbc types such as a MySQL database.</p> <p>Before marrying me, my wife was a secretary for 5 years. All she used was Microsoft Office products until she used my computer to type a recipe document. Her response was, "this is different." She told me later that she had to look for her formatting tools, but when she found them there was no difference except the tools she used were in different places than where they were in Microsoft Office. This is by far the best reason to use LibreOffice and Google Apps - you can save money and lose none of the features.</p> 2016-07-22T14:00:45+00:00 2016-07-22T14:00:45+00:00 Andrew Wippler /2016-07-22-refreshing-ruby-knowledge/ <p>I see a trend in system administration tasks moving toward the Ruby programming language. Yes, you can still code in Perl, Python, Shell, etc., but Ruby seems to be growing in popularity as a choice in scripting language. It should be - it is certainly easier to type and it has a big community to go with it. I was first introduced to Ruby in 2009 and immediately after learning Ruby, I learned Ruby on Rails. At the time, Rails and the MVC model was too advanced for me and so I never used my knowledge. Mostly because Rails had many "does this automatically so you do not need to include it in your code" so it was difficult for a beginner.</p> <p>Now nearly 7 years later, I am taking Ruby off my virtual bookshelf and blowing the bugs off of it and refreshing my knowledge - this time leaving Rails out of the picture. So far I am liking plain Ruby. Below are some resources I have used to sharpen my Ruby skills.</p> <p>https://rubymonk.com/</p> <p>http://rubykoans.com/</p> <p>http://exercism.io/</p> <h3 id="bonus-setting-up-the-exercism-client-on-fedora-24">Bonus: Setting up the exercism client on Fedora 24</h3> <p>The exercism client is written in Go. Go can fetch and install other Go programs as long as you have a Go workspace set up. To do that we will issue the following commands:</p> <pre class="z-code"><code><span class="z-text z-plain"># To install go </span><span class="z-text z-plain">sudo dnf install golang </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># To set up the workspace </span><span class="z-text z-plain">mkdir -p ~/gocode/{bin,src,pkg} </span><span class="z-text z-plain">echo &#39;export GOPATH=$HOME/gocode&#39; &gt;&gt; ~/.profile </span><span class="z-text z-plain">echo &#39;export export PATH=$PATH:$GOROOT/bin:$GOPATH/bin&#39; &gt;&gt; ~/.profile </span><span class="z-text z-plain">source ~/.profile </span></code></pre> <p>Those commands will set up the Go workspace and allow you to issue the next command: <code>go get -u github.com/exercism/cli/exercism</code></p> 2016-07-21T12:40:19+00:00 2016-07-21T12:40:19+00:00 Andrew Wippler /2016-07-21-linux-training-on-sale-until-73116/ <p>The Linux Foundation is offering select courses at a discount until 7/31/16. Some offers are up to 55% off. You can also get an additional 10% off in check-out by using the code <code>GSHOP</code>. That brings the prices down to:</p> <p>$180 - For <a class="external" href="https://training.linuxfoundation.org/linux-courses/system-administration-training/essentials-of-system-administration">Essentials of System Administration (LFS201)</a> or <a class="external" href="https://training.linuxfoundation.org/linux-courses/system-administration-training/linux-networking-and-administration">Linux Networking and Administration (LFS211)</a></p> <p>$315 - <a class="external" href="https://training.linuxfoundation.org/linux-courses/system-administration-training/essentials-of-system-administration">Essentials of System Administration</a> <strong>AND</strong> <a class="external" href="https://training.linuxfoundation.org/linux-courses/system-administration-training/linux-networking-and-administration">Linux Networking and Administration</a></p> <p>$269.10 - Certified Linux SysAdmin or Certified Linux Engineer</p> <p>$495 - Certified Linux Rockstar</p> <p>You can find these prices by using their special <a class="external" href="http://go.linuxfoundation.org/sysadminday2016">system administrator appreciation sale page</a> and using the checkout code <code>GSHOP</code>. If you were looking for a time to level up your Linux knowledge, now is the time to do it.</p> 2016-07-15T14:00:34+00:00 2016-07-15T14:00:34+00:00 Andrew Wippler /2016-07-15-openwrt-captive-portal/ <p><a class="external" href="http://andrewwippler.com/2016/03/11/wifi-captive-portal/">In a previous post</a>, I explained how to set up a captive portal on a Raspberry Pi which was running Raspbian (Debian). If you read that article, you can skip the next paragraph.</p> <p>A captive portal is a piece of software that prompts for user interaction before allowing the client to access the internet or other resources on the network. It is a combination of a firewall and a webserver. In this tutorial, I will explain how to create an open WiFi network on OpenWRT firmware. Before deploying an open WiFi network, you may want to consult a lawyer of the legality and restrictions for having one. You can also review what has been said by lawyers <a class="external" href="http://www.mbm-law.net/newsletter-articles/wi-fi-hotspots-and-liability-concerns/1229/">here</a> and <a class="external" href="https://openwireless.org/">here</a>.</p> <p>To set up a captive portal on a wireless access point (WAP), you will need to have the OpenWRT firmware installed and have at least 5mb of free space. My <a class="external" href="http://amzn.to/29fnwFa">TP-Link 1043ND</a> had enough space and this article was tested against it. This article assumes you have OpenWRT installed without any additional addons and have plenty of space to spare.</p> <p>Before you run any command on your device, be sure to check syntax and my comments of what the code does. You have the possibility of placing your WAP into a hard-to-recover state. At one point I placed my access point into a solid firewall that did not allow any traffic in or out! If you encounter this same scenario: stop, take a deep breath, and do a <a class="external" href="https://wiki.openwrt.org/doc/howto/generic.failsafe">factory reset</a> from failsafe mode. In my particular model, I have the broadcast packet which made it easier to reset. It is not my intention with this article to brick your device. By following this article you acknowledge that I am not liable for any damages you may encounter and will not hold me responsible for the outcome on the device.</p> <h3 id="setting-up-the-router">Setting up the router</h3> <p>There is not much software needed after a fresh install of OpenWRT. It comes with all the bells and whistles and basically turns your $100 router into a $1,000 router. Since the commands need to run on the device, you will need to login via SSH or Telnet. You can enable SSH on the <em>System &gt; Administration</em> page. Once connected, you will need to run the following 3 commands and keep the information safe. You will need these to revert back to using the LuCI admin interface.</p> <pre class="z-code"><code><span class="z-text z-plain">uci get uhttpd.main.index_file </span><span class="z-text z-plain">uci get uhttpd.main.index_page </span><span class="z-text z-plain">uci get uhttpd.main.cgi_prefix </span><span class="z-text z-plain">uci get uhttpd.main.home </span><span class="z-text z-plain"> </span></code></pre> <p><code>uci</code> is the program that interfaces with OpenWRT settings. We could manually edit the config files, but using this program makes life easier.</p> <p>Next we need to install the two packages we need:</p> <pre class="z-code"><code><span class="z-text z-plain">opkg update </span><span class="z-text z-plain">opkg install nginx iptables-mod-ipopt </span><span class="z-text z-plain"> </span></code></pre> <p>Now we are ready to configure our hotspot.</p> <h3 id="setting-up-the-webserver">Setting up the webserver</h3> <p>The web server was the trickiest part in all of this. On one hand, you need to execute a scripting language and on the other hand, you had limited space so scripting languages were difficult to install. The micro httpd server which shipped with OpenWRT was sufficient to run the scripts needed, but I was unable to get the magic packet to work properly. My solution was to install <code>nginx</code> and have it listen on port 81.</p> <pre class="z-code"><code><span class="z-text z-plain"># Set up nginx.conf </span><span class="z-text z-plain">cat &lt;&lt; EOF &gt; /etc/nginx/nginx.conf </span><span class="z-text z-plain">user nobody nogroup; </span><span class="z-text z-plain">worker_processes 1; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">events { </span><span class="z-text z-plain"> worker_connections 2048; </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">http { </span><span class="z-text z-plain"> include mime.types; </span><span class="z-text z-plain"> sendfile on; </span><span class="z-text z-plain"> keepalive_timeout 65; </span><span class="z-text z-plain"> server { </span><span class="z-text z-plain"> listen 81 default_server; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> location / { </span><span class="z-text z-plain"> root html; </span><span class="z-text z-plain"> index index.html index.htm; </span><span class="z-text z-plain"> return 302 http://hotspot.localnet/hotspot; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> } </span><span class="z-text z-plain">} </span><span class="z-text z-plain">EOF </span><span class="z-text z-plain"> </span></code></pre> <h3 id="setting-up-the-redirection">Setting up the redirection</h3> <p>I had to change the form method from a POST to a GET. This puts my passphrase (so I know they read and acknowledged the TOS) in the URL. There might be a better way to do this. This line of code will set up the hotspot file that will serve my content.</p> <pre class="z-code"><code><span class="z-text z-plain">cat &lt;&lt; EOF &gt; /www/cgi-bin/hotspot </span><span class="z-text z-plain"> </span><span class="z-text z-plain">#!/bin/sh </span><span class="z-text z-plain">echo &quot;Content-type: text/html&quot; </span><span class="z-text z-plain">echo &quot;&quot; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">if [ &quot;$QUERY_STRING&quot; = &quot;&quot; ]; then </span><span class="z-text z-plain">#Do captive portal detection </span><span class="z-text z-plain"> CNS=$(echo &quot;$HTTP_USER_AGENT&quot; | grep -o CaptiveNetworkSupport) </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> if [ &quot;$CNS&quot; = &quot;CaptiveNetworkSupport&quot; ]; then </span><span class="z-text z-plain"> echo &quot;&lt;html&gt; </span><span class="z-text z-plain"> &lt;!-- </span><span class="z-text z-plain"> &lt;?xml version=\&quot;1.0\&quot; encoding=\&quot;UTF-8\&quot;?&gt; </span><span class="z-text z-plain"> &lt;WISPAccessGatewayParam xmlns:xsi=&quot;http://www.w3.org/2001/XMLSchema-instance&quot; xsi:noNamespaceSchemaLocation=&quot;http://www.wballiance.net/wispr_2_0.xsd&quot;&gt; </span><span class="z-text z-plain">&lt;Redirect&gt; </span><span class="z-text z-plain">&lt;MessageType&gt;100&lt;/MessageType&gt; </span><span class="z-text z-plain">&lt;ResponseCode&gt;0&lt;/ResponseCode&gt; </span><span class="z-text z-plain">&lt;VersionHigh&gt;2.0&lt;/VersionHigh&gt; </span><span class="z-text z-plain">&lt;VersionLow&gt;1.0&lt;/VersionLow&gt; </span><span class="z-text z-plain">&lt;AccessProcedure&gt;1.0&lt;/AccessProcedure&gt; </span><span class="z-text z-plain">&lt;AccessLocation&gt;Andrew Wippler is awesome&lt;/AccessLocation&gt; </span><span class="z-text z-plain">&lt;LocationName&gt;MyOpenAP&lt;/LocationName&gt; </span><span class="z-text z-plain">&lt;LoginURL&gt;http://hotspot.localnet/?r=1&lt;/LoginURL&gt; </span><span class="z-text z-plain">&lt;/Redirect&gt; </span><span class="z-text z-plain">&lt;/WISPAccessGatewayParam&gt; </span><span class="z-text z-plain"> --&gt;&lt;/html&gt;&quot; </span><span class="z-text z-plain"> else </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> echo &quot;&lt;html&gt; </span><span class="z-text z-plain"> &lt;head&gt; </span><span class="z-text z-plain"> &lt;title&gt;Redirecting&lt;/title&gt; </span><span class="z-text z-plain"> &lt;META http-equiv=\&quot;refresh\&quot; content=\&quot;0;URL=http://hotspot.localnet/hotspot?r=1\&quot;&gt; </span><span class="z-text z-plain"> &lt;/head&gt; &lt;body&gt;&lt;/body&gt;&lt;/html&gt;&quot; </span><span class="z-text z-plain"> fi </span><span class="z-text z-plain"> </span><span class="z-text z-plain">else </span><span class="z-text z-plain"># After captive portal redirection </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Check to see if accepted TOS </span><span class="z-text z-plain">PASSPHRASE=$(echo &quot;$QUERY_STRING&quot; | grep -o andrew-wippler-is-cool ) </span><span class="z-text z-plain">if [ &quot;$PASSPHRASE&quot; != &quot;andrew-wippler-is-cool&quot; ]; then </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> echo &quot;&lt;html&gt; </span><span class="z-text z-plain"> &lt;head&gt; </span><span class="z-text z-plain"> &lt;title&gt;&lt;/title&gt; </span><span class="z-text z-plain"> &lt;/head&gt; </span><span class="z-text z-plain"> &lt;body&gt; </span><span class="z-text z-plain"> &lt;h1&gt;Authorization Required&lt;/h1&gt; </span><span class="z-text z-plain"> &lt;p&gt;Before continuing, you must first agree to the &lt;a href=&quot;#&quot;&gt;Terms of Service&lt;/a&gt; and be of the legal age to do that in your selective country or have Parental Consent. </span><span class="z-text z-plain"> &lt;/p&gt; </span><span class="z-text z-plain"> &lt;form method=&#39;GET&#39; action=&#39;/hotspot&#39;&gt; </span><span class="z-text z-plain"> &lt;input type=&#39;hidden&#39; name=&#39;security_code&#39; value=&#39;andrew-wippler-is-cool&#39; /&gt; </span><span class="z-text z-plain"> &lt;input type=&#39;checkbox&#39; name=&#39;checkbox1&#39; CHECKED /&gt;&lt;label for=&#39;checkbox1&#39;&gt;I Agree to the terms&lt;/label&gt;&lt;br /&gt; </span><span class="z-text z-plain"> &lt;input type=&#39;submit&#39; value=&#39;Connect&#39; /&gt; </span><span class="z-text z-plain"> &lt;/form&gt; </span><span class="z-text z-plain"> &lt;/body&gt; </span><span class="z-text z-plain"> &lt;/html&gt;&quot; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> # User accepted TOS </span><span class="z-text z-plain"> else </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> # Grab the MAC address </span><span class="z-text z-plain"> MAC_ADDRESS=$(cat /proc/net/arp | grep $REMOTE_ADDR | awk {&#39;print $4&#39;}) </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> # Add device to the firewall </span><span class="z-text z-plain"> iptables -t mangle -A wlan0_Outgoing -m mac --mac-source &quot;$MAC_ADDRESS&quot; -j MARK --set-mark 2 </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> sleep 5 </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> echo &quot;&lt;html&gt; </span><span class="z-text z-plain"> &lt;head&gt; </span><span class="z-text z-plain"> &lt;title&gt;&lt;/title&gt; </span><span class="z-text z-plain"> &lt;/head&gt; </span><span class="z-text z-plain"> &lt;body&gt; </span><span class="z-text z-plain"> &lt;h1&gt;You are now free to browse the internet.&lt;/h1&gt; </span><span class="z-text z-plain"> &lt;/body&gt; </span><span class="z-text z-plain"> &lt;/html&gt;&quot; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> fi </span><span class="z-text z-plain"> </span><span class="z-text z-plain">fi </span><span class="z-text z-plain">EOF </span><span class="z-text z-plain"> </span></code></pre> <h3 id="setting-up-the-firewall">Setting up the firewall</h3> <p>The following commands will set up the firewall to be just like the one in my other post. The difference here is that we are adding them to our custom firewall file which is preserved through reboots.</p> <pre class="z-code"><code><span class="z-text z-plain">cat &lt;&lt; EOF &gt;&gt; /etc/firewall.user </span><span class="z-text z-plain">iptables -t mangle -N wlan0_Trusted </span><span class="z-text z-plain">iptables -t mangle -N wlan0_Outgoing </span><span class="z-text z-plain">iptables -t mangle -N wlan0_Incoming </span><span class="z-text z-plain">iptables -t mangle -I PREROUTING 1 -i br-lan -j wlan0_Outgoing </span><span class="z-text z-plain">iptables -t mangle -I PREROUTING 1 -i br-lan -j wlan0_Trusted </span><span class="z-text z-plain">iptables -t mangle -I POSTROUTING 1 -o br-lan -j wlan0_Incoming </span><span class="z-text z-plain">iptables -t nat -N wlan0_Outgoing </span><span class="z-text z-plain">iptables -t nat -N wlan0_Router </span><span class="z-text z-plain">iptables -t nat -N wlan0_Internet </span><span class="z-text z-plain">iptables -t nat -N wlan0_Global </span><span class="z-text z-plain">iptables -t nat -N wlan0_Unknown </span><span class="z-text z-plain">iptables -t nat -N wlan0_AuthServers </span><span class="z-text z-plain">iptables -t nat -A PREROUTING -i br-lan -j wlan0_Outgoing </span><span class="z-text z-plain">iptables -t nat -A wlan0_Outgoing -d 192.168.24.1 -j wlan0_Router </span><span class="z-text z-plain">iptables -t nat -A wlan0_Router -j ACCEPT </span><span class="z-text z-plain">iptables -t nat -A wlan0_Outgoing -j wlan0_Internet </span><span class="z-text z-plain">iptables -t nat -A wlan0_Internet -m mark --mark 0x2 -j ACCEPT </span><span class="z-text z-plain">iptables -t nat -A wlan0_Internet -j wlan0_Unknown </span><span class="z-text z-plain">iptables -t nat -A wlan0_Unknown -j wlan0_AuthServers </span><span class="z-text z-plain">iptables -t nat -A wlan0_Unknown -j wlan0_Global </span><span class="z-text z-plain">iptables -t nat -A wlan0_Unknown -p tcp --dport 80 -j DNAT --to-destination 192.168.24.1:81 </span><span class="z-text z-plain">iptables -t filter -N wlan0_Internet </span><span class="z-text z-plain">iptables -t filter -N wlan0_AuthServers </span><span class="z-text z-plain">iptables -t filter -N wlan0_Global </span><span class="z-text z-plain">iptables -t filter -N wlan0_Known </span><span class="z-text z-plain">iptables -t filter -N wlan0_Unknown </span><span class="z-text z-plain">iptables -t filter -I FORWARD -i br-lan -j wlan0_Internet </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -m state --state INVALID -j DROP </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -o eth0.2 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -j wlan0_AuthServers </span><span class="z-text z-plain">iptables -t filter -A wlan0_AuthServers -d 192.168.24.1 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -j wlan0_Global </span><span class="z-text z-plain">iptables -t filter -A wlan0_Global -d andrewwippler.com -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -m mark --mark 0x2 -j wlan0_Known </span><span class="z-text z-plain">iptables -t filter -A wlan0_Known -d 0.0.0.0/0 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -j wlan0_Unknown </span><span class="z-text z-plain">iptables -t filter -A wlan0_Unknown -d 0.0.0.0/0 -p udp --dport 53 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Unknown -d 0.0.0.0/0 -p tcp --dport 53 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Unknown -d 0.0.0.0/0 -p udp --dport 67 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Unknown -d 0.0.0.0/0 -p tcp --dport 67 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Unknown -j REJECT --reject-with icmp-port-unreachable </span><span class="z-text z-plain">iptables -t nat -A POSTROUTING -o eth0.2 -j MASQUERADE </span><span class="z-text z-plain">EOF </span><span class="z-text z-plain"> </span></code></pre> <h3 id="final-steps">Final steps</h3> <p>Now that we are done with the preliminary work, we are ready to switch from the LuCI admin website to our own captive portal solution. The below commands will get you in that state. Once you do these commands, the admin section will be disabled (unless you reverse the four commands I told you to write down the values for).</p> <pre class="z-code"><code><span class="z-text z-plain"># Set up dnsmasq </span><span class="z-text z-plain">uci set dhcp.lan.start=&#39;3&#39; </span><span class="z-text z-plain">uci set dhcp.lan.limit=&#39;254&#39; </span><span class="z-text z-plain">uci set dhcp.lan.leasetime=&#39;1h&#39; </span><span class="z-text z-plain">uci set network.lan.ipaddr=&#39;192.168.24.1&#39; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># set up static DNS entry </span><span class="z-text z-plain">uci add dhcp domain </span><span class="z-text z-plain">uci add_list dhcp.@domain[0].ip=192.168.24.1 </span><span class="z-text z-plain">uci add_list dhcp.@domain[0].name=hotspot.localnet </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Set dns servers to be the router </span><span class="z-text z-plain">uci set dhcp.lan.dhcp_option=&#39;6,192.168.24.1&#39; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Set WAP Name </span><span class="z-text z-plain">uci set wireless.@wifi-iface[0].ssid=MyOpenAP </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Point uhttpd to our new document root </span><span class="z-text z-plain">uci set uhttpd.main.index_file=&#39;hotspot&#39; </span><span class="z-text z-plain">uci set uhttpd.main.index_page=&#39;hotspot&#39; </span><span class="z-text z-plain">uci set uhttpd.main.cgi_prefix=&#39;/&#39; </span><span class="z-text z-plain">uci set uhttpd.main.home=&#39;/www/cgi-bin/&#39; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Save to NVRAM </span><span class="z-text z-plain">uci commit </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Turn on our work </span><span class="z-text z-plain">/etc/init.d/nginx start </span><span class="z-text z-plain">/etc/init.d/uhttpd restart </span><span class="z-text z-plain">/etc/init.d/firewall restart </span><span class="z-text z-plain"> </span></code></pre> <p>If all went well, you should be prompted with a captive portal alert on your device.</p> 2016-07-08T14:00:00+00:00 2016-07-08T14:00:00+00:00 Andrew Wippler /2016-07-08-puppet-with-mac-and-gnulinux/ <p>Puppet on Mac is a mixture of Puppet on Linux and Windows. Registry settings are called "secrets" and to make things easier, you need to install homebrew.</p> <p>Enforcing a local admin is a little bit tedious. In the past few OSX releases, the have changed their password hashing algorithm several times. This causes a few case statements based on release version in order to set up one single local admin.</p> <p>Secret management is a little more complicated than Windows registry management. First, you need to find your secret decoder website (<a class="external" href="https://web.archive.org/web/20150409073759/http://secrets.blacktree.com/">which is now only available in the archive</a>), next you need to<a class="external" href="https://github.com/halyard/puppet-boxen/blob/master/manifests/osx_defaults.pp"> rip out the puppet code to manage secrets</a> (because nobody thought it wise to follow Puppet best practice and make a module do only one thing) and make your own personal company module, and finally you are ready to define an OSX secret. I use <code>boxen::osx_defaults</code> to set up the Mac equivalent of legalNoticeText with this code:</p> <pre class="z-code"><code><span class="z-text z-plain"> boxen::osx_defaults { &quot;loginwindowtext&quot; : </span><span class="z-text z-plain"> domain =&gt; &#39;/Library/Preferences/com.apple.loginwindow.plist&#39;, </span><span class="z-text z-plain"> key =&gt; &#39;LoginwindowText&#39;, </span><span class="z-text z-plain"> value =&gt; &quot;This computer system is the property of ....&quot;, </span><span class="z-text z-plain"> } </span></code></pre> <p>Managing a GNU/Linux workstation is similar to OSX and Windows only you know what you are doing and everything makes sense because smart people write and manage the software. I choose to use KDM as the greeter is easier to customize and make the default Desktop Environment to be GNOME. On my greeter background, I have the legalNoticeText properly formatted to my liking and saved in the background image. So far I am the only GNU/Linux workstation on Puppet so I haven't configured it to a great extent. It does help between re-installs though :)</p> 2016-07-01T14:00:00+00:00 2016-07-01T14:00:00+00:00 Andrew Wippler /2016-07-01-puppet-with-windows/ <p>Using Puppet on Windows workstations can be a challenge. The different architectures (x86 and x86_64) can have an impact on declaring packages. I have decided to ignore 32 bit systems and treat all as 64 bit - after all, it is 2016 and 32 bit should not be deployed.</p> <p>Since everything is stored in the registry (and I am no registry expert), I find myself first making a change in the GPO, searching for the change in the registry, and converting what I found to Puppet manifests. There are a few modules that also help with local policy settings.</p> <p>I have my Windows workstations checking in to Puppet every hour as it is not critical for them to be in-sync as often as multi-user servers.</p> <p>I have found PuppetDB to be a great alternative to inventory software. The modules to get it in that state are:</p> <p><a class="external" href="https://github.com/andrewwippler/ody-pkginventory">ody/pkginventory</a> (using my pull request for Windows support)<a class="external" href="https://github.com/jhaals/jhaals-warranty">jhaals/warranty</a></p> <p>Several other modules help Windows become easier to manage - they are:</p> <p><a class="external" href="https://forge.puppet.com/puppetlabs/registry">puppetlabs/registry</a><a class="external" href="https://forge.puppet.com/chocolatey/chocolatey">chocolatey/chocolatey</a><a class="external" href="https://forge.puppet.com/puppetlabs/powershell">puppetlabs/powershell</a><a class="external" href="https://forge.puppet.com/ayohrling/local_security_policy">ayohrling/local_security_policy</a><a class="external" href="https://github.com/Puppet-Finland/local_group_policy">https://github.com/Puppet-Finland/local_group_policy</a></p> <p>My roles::workstation manifest includes the base profile, an anti-virus software install, company-wide fonts, and a few key utilities I like to use on customer computers - Defraggler, LibreOffice, and <a class="external" href="https://helgeklein.com/free-tools/delprof2-user-profile-deletion-tool/">DelProf2</a>. Being that it is Puppet, I can deploy either exe, msi, or Chocolatey packages to computers.</p> 2016-06-24T14:00:00+00:00 2016-06-24T14:00:00+00:00 Andrew Wippler /2016-06-24-puppet-as-a-gpo-replacement/ <p>When you have a mixed client workstation environment (Windows, Linux, Mac) using GPOs only covers a portion of the environment. Sure, there are some AD plugins for Mac and Linux to let them read and apply those settings, however, those tools cost an exuberant amount of money compared to the open source version Puppet.</p> <p>I haven't scratched the surface of totally replacing GPO. I still have to push out the puppet client using GPO, but my goal is to be solely dependent upon puppet.</p> <p>In the upcoming weeks, I am going to post a few articles regarding the idiosyncrasies of the different OSes. For now, here are a few generic tips:</p> <ol> <li>Use Roles and Profiles</li> <li>Set the default node to have roles:: workstation 3. Use kernel case statements in roles:: workstation, profiles::base, and modules only.</li> <li>Write Puppet modules with all workstations in mind.</li> </ol> 2016-06-17T14:00:00+00:00 2016-06-17T14:00:00+00:00 Andrew Wippler /2016-06-17-why-i-went-with-puppet-over-other-cmes/ <p>Configuration management engines (CME) have increased in popularity over the past several years. When I evaluated all the potential options, I needed one to be free in cost, work on Mac and Windows, and be easy to set up and use. At the time, only Chef, CFEngine, and Puppet had Windows clients so I tested them all out. Puppet came the victor for several reasons:</p> <p>The open source version had a windows client. Chef' and CFEngine's windows client was available if you paid. There is nothing wrong with this approach, but if your main goal was to run it on Windows workstations (not servers), $120/seat seemed too much.</p> <p>Puppet code was easy to read - especially for a beginner. Whereas others could mix in other languages in their declaration manifests. This made me feel like there wasn't a clear standard on how to write code for that platform. I tend to stay away from projects where anyone can do anything.</p> <p>I was given a free book on Puppet and it was easy to read. Simple to read and understand means someone else with limited knowledge in technology would be able to read and understand it. This also makes it easier for that person to pick up where I leave off.</p> <p>With Puppet, clients call home (even when out of network) instead of having to wait for them to be on network to receive updates.</p> <p>These few reasons made me invest my time and effort into a Puppet infrastructure. I have it on my workstations and servers. If only I had switches that supported Puppet.</p> 2016-06-10T14:00:00+00:00 2016-06-10T14:00:00+00:00 Andrew Wippler /2016-06-10-learn-gnulinux-the-easy-way/ <p>Let's face it, Linux is a kernel and no matter what distribution you use, it is all the same. You have a repository of packages, you get a package manager to manage your packages, you get a desktop environment, and you get freedom to tinker down to the lowest level of the kernel to configure things like IP routing and forwarding.</p> <p>Differences lie in the release cycle of the distribution, package names, and the default desktop environment - though you can find spins to even change that part. Each are trying to tackle a specific problem and come with a solution. It may be security, research, UI, stability, or even high performance computing.</p> <p>If starting out, pick a user friendly distribution like Ubuntu or Debian. Use it with the defaults for 6 months while trying to learn as much as you can. Then move onto the specific use cases for Enterprise, you can use CentOS, RedHat, Ubuntu, or SUSE (you will get the best hardware/software support if you go that route) for home use, you may want to go with Debian, Ubuntu, Arch, Gentoo, Fedora or anything you want to use; for embedded, you may go with Debian, Yocto, Gentoo, OpenEmbedded, OpenWRT, and others; for stability and security, you may want to go with Debian or one of the Enterprise distributions.</p> <p>At the end of the day, it is all built upon the Linux kernel - unless you are using the Debian BSD fork.</p> 2016-06-03T15:00:42+00:00 2016-06-03T15:00:42+00:00 Andrew Wippler /2016-06-03-why-i-cant-use-ubuntu-on-production-servers/ <p>Do not get me wrong - I use Ubuntu and try to contribute to bugs (making and fixing). In fact, I am testing out 16.04 on my Chromebook and work computer right now (Fedora 23 is on my Home Desktop). However, I can't find myself placing an Ubuntu server in production for one simple reason:</p> <p>Security</p> <p>While Ubuntu has a good security team, I can't recall in previous years a security patch introduced because an Ubuntu security individual found it. I do read about RedHat, SUSE, and Debian teams finding and submitting CVEs and patches; however it raises several questions as to why Ubuntu is not more seen in the discovery side.</p> <p><em>Is it because Ubuntu relies heavily upon upstream security?</em> That's not a bad thing. It just needs to be more transparent if it is.</p> <p><em>Is it because Ubuntu security team members label themselves as Debian security team?</em> That's not a huge problem - it just means their loyalty lies with upstream and not the current working branch.</p> <p><em>Is it because Ubuntu makes backdoors?</em> I hope not!</p> <p>The absence in this particular area just makes me wonder if Security is top priority in Canonical or if it is an afterthought. This feeling is enough to keep me from deploying Ubuntu in production. I would rather use and support distributions that make a high priority on security patches as they are on my side to keep unauthorized access of my servers to zero.</p> 2016-05-24T14:10:50+00:00 2016-05-24T14:10:50+00:00 Andrew Wippler /2016-05-24-access-samba-shares-from-chromebook/ <p>Chromebooks are cloud focused. Many Chromebooks come with very limited storage in hopes you would be storing everything in the cloud. While this is a great habit to practice, in all reality, how likely are you to store 2tb of data in the cloud? Not many cloud providers even offer plans for that much storage.</p> <p>Today marks a milestone - <a class="external" href="https://chrome.google.com/webstore/detail/network-file-share-for-ch/ndjpildffkeodjdaeebdhnncfhopkajk">Google has released an extension to the Chromebook file app to access Samba shares</a>.</p> <p>Samba is the implementation in which Windows file shares are broadcasted across the network. There is also an open source version of the implementation known by the name of Samba which is found on most Linux distributions as well as at <a class="external" href="http://samba.org">http://Samba.org</a>.</p> <p>Enjoy accessing your network shares on ChromeOS, and don't forget to <a class="external" href="https://github.com/GoogleChrome/chromeos_network_file_share/issues">file bug reports</a>.</p> 2016-05-20T14:00:00+00:00 2016-05-20T14:00:00+00:00 Andrew Wippler /2016-05-20-cloud-computing-cost-analysis/ <p>Having a server in the cloud scared me at first. It wasn't the fact that being in a multi-tenant environment posed the possibility of others gaining access to my code/files - it was the cost that scared me. Not knowing if I was getting the best deal always plagued my mind. Especially since electricity, a/c, and hardware maintenance were never factored into my budgets it made it hard to justify a server in the cloud when on-premise appeared to be so cheap.</p> <p>Before I give the table of cost comparisons, I would like to point out that it is 2016. The past several years have seen a stabling of CPU power on the x86 architecture. The benchmarks have been leveling out and the CPU cycles are not really noticeable in a standard web app. I know different cloud providers have different versions of Xeon processors, but for this table, I am just going to label them as a CPU - even if they are vCPUs.</p> <p>All these prices assume that there is at least 1 TB of transfer a month and 20 GB SSD storage. I found the closest and cheapest solution to the below labels. For the AWS Reserved instances, it is assumed a 1 year full upfront payment.</p> <p><strong>1 CPU, 512 RAM</strong></p> <table><thead><tr><th>Host</th><th>Cost</th></tr></thead><tbody> <tr><td>AWS On-Demand</td><td><a class="external" href="https://calculator.s3.amazonaws.com/index.html#r=IAD&amp;s=EC2&amp;key=calc-F16F9CDC-9F9A-40B6-925D-9025995C1019">$98.83</a></td></tr> <tr><td>AWS Reserved</td><td>$97.23</td></tr> <tr><td>Digital Ocean</td><td>$5</td></tr> <tr><td>Linode</td><td>N/A</td></tr> <tr><td>Rackspace</td><td>N/A</td></tr> <tr><td>GoDaddy</td><td>N/A</td></tr> <tr><td>Media Temple</td><td>N/A</td></tr> <tr><td><strong>1 CPU, 1024 RAM</strong></td><td></td></tr> </tbody></table> <table><thead><tr><th>Host</th><th>Cost</th></tr></thead><tbody> <tr><td>AWS On-Demand</td><td><a class="external" href="https://calculator.s3.amazonaws.com/index.html#r=IAD&amp;s=EC2&amp;key=calc-8C247408-5FEC-48C9-8DC9-A8AD6C4C9EBA">$103.59</a></td></tr> <tr><td>AWS Reserved</td><td>$100.32</td></tr> <tr><td>Digital Ocean</td><td>$10</td></tr> <tr><td>Linode</td><td>$10</td></tr> <tr><td>Rackspace</td><td>$193.36</td></tr> <tr><td>GoDaddy</td><td>$24.99</td></tr> <tr><td>Media Temple</td><td>N/A</td></tr> <tr><td><strong>1 CPU, 2048 RAM</strong></td><td></td></tr> </tbody></table> <table><thead><tr><th>Host</th><th>Cost</th></tr></thead><tbody> <tr><td>AWS On-Demand</td><td><a class="external" href="https://calculator.s3.amazonaws.com/index.html#r=IAD&amp;s=EC2&amp;key=calc-CE8CDA0D-495C-4B96-9BFE-CE37674207CA">$113.11</a></td></tr> <tr><td>AWS Reserved</td><td>$106.65</td></tr> <tr><td>Digital Ocean</td><td>$20</td></tr> <tr><td>Linode</td><td>$20</td></tr> <tr><td>Rackspace</td><td>$216.72</td></tr> <tr><td>GoDaddy</td><td>$29.99</td></tr> <tr><td>Media Temple</td><td>$30</td></tr> <tr><td><strong>1 CPU, 4096 RAM</strong></td><td></td></tr> </tbody></table> <table><thead><tr><th>Host</th><th>Cost</th></tr></thead><tbody> <tr><td>AWS On-Demand</td><td><a class="external" href="https://calculator.s3.amazonaws.com/index.html#r=IAD&amp;s=EC2&amp;key=calc-C36233DE-8FAF-4782-82E5-A31AA73148A9">$132.14</a></td></tr> <tr><td>AWS Reserved</td><td>$119.24</td></tr> <tr><td>Digital Ocean</td><td>$40</td></tr> <tr><td>Linode</td><td>$40</td></tr> <tr><td>Rackspace</td><td>$263.44</td></tr> <tr><td>GoDaddy</td><td>$49.99</td></tr> <tr><td>Media Temple</td><td>$50</td></tr> <tr><td><strong>2 CPU, 2048 RAM</strong></td><td></td></tr> </tbody></table> <table><thead><tr><th>Host</th><th>Cost</th></tr></thead><tbody> <tr><td>AWS On-Demand</td><td><a class="external" href="https://calculator.s3.amazonaws.com/index.html#r=IAD&amp;s=EC2&amp;key=calc-07662374-6DAB-445D-BBBC-D1CF3E47B784">$170.93</a></td></tr> <tr><td>AWS Reserved</td><td>$139.23</td></tr> <tr><td>Digital Ocean</td><td>$20</td></tr> <tr><td>Linode</td><td>$20</td></tr> <tr><td>Rackspace</td><td>$216.72</td></tr> <tr><td>GoDaddy</td><td>$29.99</td></tr> <tr><td>Media Temple</td><td>$30</td></tr> <tr><td><strong>2 CPU, 4096 RAM</strong></td><td></td></tr> </tbody></table> <table><thead><tr><th>Host</th><th>Cost</th></tr></thead><tbody> <tr><td>AWS On-Demand</td><td><a class="external" href="https://calculator.s3.amazonaws.com/index.html#r=IAD&amp;s=EC2&amp;key=calc-C36233DE-8FAF-4782-82E5-A31AA73148A9">$132.14</a></td></tr> <tr><td>AWS Reserved</td><td>$119.24</td></tr> <tr><td>Digital Ocean</td><td>$40</td></tr> <tr><td>Linode</td><td>$40</td></tr> <tr><td>Rackspace</td><td>$263.44</td></tr> <tr><td>GoDaddy</td><td>$49.99</td></tr> <tr><td>Media Temple</td><td>$50</td></tr> <tr><td><strong>4 CPU, 8096 RAM</strong></td><td></td></tr> </tbody></table> <table><thead><tr><th>Host</th><th>Cost</th></tr></thead><tbody> <tr><td>AWS On-Demand</td><td><a class="external" href="https://calculator.s3.amazonaws.com/index.html#r=IAD&amp;s=EC2&amp;key=calc-EB336CBC-E414-447B-846D-A417A129BB6B">$247.06</a></td></tr> <tr><td>AWS Reserved</td><td>$189.98</td></tr> <tr><td>Digital Ocean</td><td>$80</td></tr> <tr><td>Linode</td><td>$80</td></tr> <tr><td>Rackspace</td><td>$356.88</td></tr> <tr><td>GoDaddy</td><td>$99.99</td></tr> <tr><td>Media Temple</td><td>$100</td></tr> <tr><td>While some may think - why ever go with AWS when it costs $113.11 for 1 CPU and 2 GB of RAM. Most of the cost is with the 1TB transfer limit. In fact, $92.07 of the cost of every AWS quote is bandwidth and $2 for the storage. In all reality, you will never transfer 1TB from an EC2 instance - you would do it from an S3 bucket (which would be $92.67 - a savings of $1.40). However, if you have less than 6,100,000 requests to your website per month and you are not hosting files over 7mb, then the cost of AWS would be less than $20 - making it the cheapest option.</td><td></td></tr> </tbody></table> <p>So the moral of the cloud hosting story is find a host which caters to your biggest need - Bandwidth or compute resources. Once you know that answer, picking an option is easy.</p> <h3 id="sources">Sources:</h3> <p><a class="external" href="https://mediatemple.net/webhosting/vps/developer/">https://mediatemple.net/webhosting/vps/developer/</a><a class="external" href="https://www.godaddy.com/pro/managed-vps">https://www.godaddy.com/pro/managed-vps</a><a class="external" href="https://www.rackspace.com/en-us/calculator">https://www.rackspace.com/en-us/calculator</a><a class="external" href="https://webcache.googleusercontent.com/search?q=cache:GXODedVaOvoJ:https://www.linode.com/pricing+&amp;cd=1&amp;hl=en&amp;ct=clnk&amp;gl=us&amp;client=ubuntu">https://webcache.googleusercontent.com/search?q=cache:GXODedVaOvoJ:https://www.linode.com/pricing+&amp;cd=1&amp;hl=en&amp;ct=clnk&amp;gl=us&amp;client=ubuntu</a> (linode was down at the time of the writing)<a class="external" href="https://www.digitalocean.com/pricing/">https://www.digitalocean.com/pricing/</a><a class="external" href="https://calculator.s3.amazonaws.com/index.html">https://calculator.s3.amazonaws.com/index.html</a></p> <p><a class="external" href="https://technet.microsoft.com/en-us/library/cc785130%28v=ws.10%29.aspx">https://technet.microsoft.com/en-us/library/cc785130%28v=ws.10%29.aspx</a><a class="external" href="http://www.free-webhosts.com/bandwidth-calculator.php">http://www.free-webhosts.com/bandwidth-calculator.php</a><a class="external" href="http://webmasters.stackexchange.com/a/19179">http://webmasters.stackexchange.com/a/19179</a></p> 2016-05-13T14:00:00+00:00 2016-05-13T14:00:00+00:00 Andrew Wippler /2016-05-13-wayfinding-with-rpi/ <p>A few years ago I was tasked at looking at solutions for digital, static wayfinding. While there are some cool solutions available now for free with minimum setup, none of these were available to me. We currently were locked in with a digital signage company that charged $7,000/year for generating 640x480 graphics with events that showed up in our Exchange 2007 calendar.</p> <p>The jump to Exchange 2010/2013 was dependant upon our vendor to upgrade their software to support the new EWS protocol over the older protocols. This was a classic case of vendor lock-in which is a horrible state to be in. Maintaining legacy software to keep an outdated system running should be avoided like the plague.</p> <p>After taking a trip to Google HQ in mountain view, CA (back when they did tours), I was encouraged by the motto they plastered all over the buildings: "the most complex problems are rarely solved with blunt force objects." What also intrigued me was their form of digital wayfinding. It was an e-ink display with a wireless antenna which showed all of its circuitry - definitely made in house. This allowed me to formulate my own configuration after seeing the release of the Raspberry Pi.</p> <p>After about a week of coding, I was able to make <a class="external" href="https://github.com/andrewwippler/rpi-wayfinding">RPi-wayfinding</a>. It is a simple PHP website that pulls in information from Exchange 2007+ (using EWS), a Google Calendar, or Planning Center Online Resources and displays it on a 1920x1080 resolution. This setup has been running smoothly for close to 3 years.</p> 2016-05-06T14:00:00+00:00 2016-05-06T14:00:00+00:00 Andrew Wippler /2016-05-06-5-things-to-do-after-installing-x/ <p>Congratulations, you have installed X! Here are 5 things to do right now:</p> <ol> <li>Change your background</li> <li>Install needless software</li> <li>Customize your font size</li> <li>Take a screenshot</li> <li>Share about your experience on social media!</li> </ol> <p>This post is mainly a response to all of those 10 things to do after installing Ubuntu 16.04 blog posts.</p> 2016-04-29T14:00:00+00:00 2016-04-29T14:00:00+00:00 Andrew Wippler /2016-04-29-post-this-week/ <p>I messed up on the post this week. It had a previous date when I clicked submit. I wrote an article on the next generation web stack (LEMP) with SSL. To view that article click <a class="external" href="https://andrewwippler.com/linux-nginx-mysql-5-7-and-php-7-lemp-on-aws-with-free-ssl/">here</a>.</p> 2016-04-26T13:01:00+00:00 2016-04-26T13:01:00+00:00 Andrew Wippler /2016-04-26-linux-nginx-mysql-5-7-and-php-7-lemp-on-aws-with-free-ssl/ <p>A stack is a group of software that creates a foundation to build upon. The LEMP stack is a web software stack which allows for delivering web applications. It is one of the most common of the web stacks to deliver a PHP application. LEMP uses a Linux kernel, Nginx for the webserver, MySQL or MariaDB for the database, and PHP for the scripting language.</p> <p>Nearly all distributions of GNU/Linux will have the same instructions to install the required packages. There is also little change between versions of Ubuntu to warrant a special blog post entitled "LEMP on Ubuntu 14.04" and "LEMP on Ubuntu 16.04" as they will contain the same exact instructions. There are a few oddities on the Amazon Linux AMI to get Let's Encrypt working on the t2.nano (1 CPU, 512 RAM) instance which I will cover here.</p> <p>Once you launch your instance, the packages you need to install are:</p> <pre class="z-code"><code><span class="z-text z-plain">sudo yum localinstall http://rpms.famillecollet.com/enterprise/remi-release-6.rpm </span><span class="z-text z-plain">sudo yum localinstall https://dev.mysql.com/get/mysql57-community-release-el6-8.noarch.rpm </span><span class="z-text z-plain">sudo yum install nginx.x86_64 php70-php-fpm php70-php-cli php70-php-mysqlnd mysql-community-server --enablerepo=epel </span></code></pre> <p>Now enable the services to run at boot:</p> <pre class="z-code"><code><span class="z-text z-plain">sudo chkconfig nginx on </span><span class="z-text z-plain">sudo chkconfig mysqld on </span><span class="z-text z-plain">sudo chkconfig php70-php-fpm on </span><span class="z-text z-plain">sudo service nginx start </span><span class="z-text z-plain">sudo service mysqld start </span><span class="z-text z-plain">sudo service php70-php-fpm start </span></code></pre> <p>Congratulations, you installed a LEMP stack! Now let us go a step further and set up SSL and a WordPress website. Type the following commands to set up our document root and create our virtual host:</p> <pre class="z-code"><code><span class="z-text z-plain">sudo -i </span><span class="z-text z-plain">cat &lt;&lt; EOF &gt; /etc/nginx/conf.d/wordpress.conf </span><span class="z-text z-plain"># Upstream to abstract backend connection(s) for php </span><span class="z-text z-plain">upstream php { </span><span class="z-text z-plain"> server unix:/tmp/php-cgi.socket; </span><span class="z-text z-plain"> server 127.0.0.1:9000 backup; </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># comment the below if not using SSL </span><span class="z-text z-plain">server { </span><span class="z-text z-plain"> listen 80 default_server; </span><span class="z-text z-plain"> listen [::]:80 default_server; </span><span class="z-text z-plain"> server_name _; </span><span class="z-text z-plain"> return 301 https://$host$request_uri; </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">server { </span><span class="z-text z-plain"> # comment the next line when not using SSL. Don&#39;t forget to comment out the above server block and uncomment the listen 80 line below. </span><span class="z-text z-plain"> listen 443 ssl default_server; </span><span class="z-text z-plain"> #listen 80 default_server; </span><span class="z-text z-plain"> server_name example.com www.example.com; </span><span class="z-text z-plain"> ## Your only path reference. </span><span class="z-text z-plain"> root /var/www/html/wordpress/; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> # comment if not using SSL </span><span class="z-text z-plain"> ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem; </span><span class="z-text z-plain"> ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> index maint.php index.php; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> # Disables serving gzip content to IE 6 or below </span><span class="z-text z-plain"> gzip_disable &quot;MSIE [1-6]\.&quot;; </span><span class="z-text z-plain"> gzip_static on; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> # Sets the default type to text/html so that gzipped content is served </span><span class="z-text z-plain"> # as html, instead of raw uninterpreted data. </span><span class="z-text z-plain"> default_type text/html; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> location /.well-known/acme-challenge { </span><span class="z-text z-plain"> root /var/www/html/letsencrypt/wordpress/; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> location = /favicon.ico { </span><span class="z-text z-plain"> log_not_found off; </span><span class="z-text z-plain"> access_log off; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> location = /robots.txt { </span><span class="z-text z-plain"> allow all; </span><span class="z-text z-plain"> log_not_found off; </span><span class="z-text z-plain"> access_log off; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> # Use cached or actual file if they exists, otherwise pass request to WordPress </span><span class="z-text z-plain"> location / { </span><span class="z-text z-plain"> try_files \$uri \$uri/ /index.php?\$args ; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> location ~ \.php$ { </span><span class="z-text z-plain"> #NOTE: You should have &quot;cgi.fix_pathinfo = 0;&quot; in php.ini </span><span class="z-text z-plain"> include fastcgi.conf; </span><span class="z-text z-plain"> fastcgi_intercept_errors on; </span><span class="z-text z-plain"> fastcgi_pass php; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> location ~* \.(ico|jpg|webp|jpeg|gif|css|png|js|ico|bmp|zip|woff|woff2)$ { </span><span class="z-text z-plain"> access_log off; </span><span class="z-text z-plain"> log_not_found off; </span><span class="z-text z-plain"> add_header Pragma public; </span><span class="z-text z-plain"> add_header Cache-Control &quot;public&quot;; </span><span class="z-text z-plain"> expires max; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> location ~* \.(php|html)$ { </span><span class="z-text z-plain"> access_log on; </span><span class="z-text z-plain"> log_not_found on; </span><span class="z-text z-plain"> add_header Pragma public; </span><span class="z-text z-plain"> add_header Cache-Control &quot;public&quot;; </span><span class="z-text z-plain"> expires 3d; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain">#including this file which some caching plugins use </span><span class="z-text z-plain">include /var/www/html/wordpress/nginx.conf; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># We don&#39;t want to allow the browsers to see .hidden linux/unix files or our own custom file </span><span class="z-text z-plain">location ~ /\.ht { deny all; access_log off; log_not_found off; } </span><span class="z-text z-plain">location ~ /nginx.conf { deny all; } </span><span class="z-text z-plain"> </span><span class="z-text z-plain">} </span><span class="z-text z-plain">EOF </span></code></pre> <p>The above commands are intended to be copied and pasted into a terminal. If you edited the file and pasted the contents in, remove the backslashes ( <code>\</code> ) from the <code>try_files</code> line. Next let's verify our php-fpm configuration to see how it is listening for requests.<code>sudo grep -in ^listen /etc/opt/remi/php70/php-fpm.d/www.conf</code></p> <p>We can either edit the listen directive in <code>/etc/opt/remi/php70/php-fpm.d/www.conf</code> to match our unix socket in our <code>wordpress.conf</code> nginx virtual host file or leave it as is. We have already made nginx look at the unix socket first (which is faster) and revert to the IP address as a backup option.</p> <p>Now let's make our document root, download WordPress, and extract it to our specified directory.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo mkdir -p /var/www/html/ </span><span class="z-text z-plain">cd /var/www/html </span><span class="z-text z-plain">wget https://wordpress.org/latest.tar.gz </span><span class="z-text z-plain">tar xvf latest.tar.gz </span><span class="z-text z-plain"> </span></code></pre> <p>Our next step is to set the appropriate permissions on the files and directories.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo chown nginx:apache -R /var/www/html/wordpress </span><span class="z-text z-plain">sudo find /var/www/html/wordpress -type d -exec chmod 755 {} \; </span><span class="z-text z-plain">sudo find /var/www/html/wordpress -type f -exec chmod 644 {} \; </span></code></pre> <p>Now let's create a database user and secure our database. If you <a class="external" href="http://andrewwippler.com/2016/04/15/secure-mysql-5-7-installation/">remember from a previous post</a> mysql generates a temporary password. Let us grab that and run <code>mysql_secure_installation</code>. Answer all questions and provide a secure root password.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo grep &#39;temporary password&#39; /var/log/mysqld.log </span><span class="z-text z-plain">sudo mysql_secure_installation </span></code></pre> <p>New we need to set up a database for WordPress.</p> <pre class="z-code"><code><span class="z-text z-plain">mysql -u root -p </span><span class="z-text z-plain">mysql&gt; CREATE DATABASE word_press; </span><span class="z-text z-plain">mysql&gt; GRANT ALL PRIVILEGES ON word_press.* TO &quot;word_press_user&quot;@&quot;localhost&quot; IDENTIFIED BY &quot;S3cur3_WordPress_DB!Password&quot;; </span><span class="z-text z-plain">mysql&gt; FLUSH PRIVILEGES; </span><span class="z-text z-plain">mysql&gt; EXIT; </span></code></pre> <p>Now let's set up our SSL certificate with Let's Encrypt. To install the client, we need additional software and a swap file.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo yum install make automake gcc gcc-c++ kernel-devel git-core python27-devel </span><span class="z-text z-plain"># change to python 2.7 if you have an old Amazon AMI </span><span class="z-text z-plain">sudo alternatives --config python </span><span class="z-text z-plain">sudo easy_install pip </span><span class="z-text z-plain">sudo pip install pip virtualenv --upgrade </span><span class="z-text z-plain">git clone https://github.com/letsencrypt/letsencrypt /home/ec2-user/letsencrypt </span><span class="z-text z-plain">cd /home/ec2-user/letsencrypt </span><span class="z-text z-plain"># create a 2GB RAM swap for machines with less than 2GB RAM </span><span class="z-text z-plain">sudo dd if=/dev/zero of=/swapfile bs=16M count=128 </span><span class="z-text z-plain">sudo mkswap /swapfile </span><span class="z-text z-plain">sudo chmod 0600 /swapfile </span><span class="z-text z-plain">sudo swapon /swapfile </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># now to build letsencrypt </span><span class="z-text z-plain">./letsencrypt-auto --help --debug </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Optional: Disable swapfile </span><span class="z-text z-plain">sudo swapoff /swapfile </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Request certificates </span><span class="z-text z-plain">sudo mkdir -p /var/www/html/letsencrypt/wordpress/ </span><span class="z-text z-plain">sudo chown apache:nginx /var/www/html/letsencrypt/wordpress/ </span><span class="z-text z-plain">sudo service nginx reload </span><span class="z-text z-plain">./letsencrypt-auto certonly --webroot -w /var/www/html/letsencrypt/wordpress/ -d example.com -d www.example.com </span></code></pre> <p>Fill out the prompted information to get a certificate (we have already filled out the pertinent information in our nginx conf). All that is left to do is to make sure we get automatic renewals. To do that set up your crontab (<code>sudo crontab -e</code>) to include this line:</p> <pre class="z-code"><code><span class="z-text z-plain">@monthly /home/ec2-user/letsencrypt/letsencrypt-auto renew &amp;&amp; /sbin/service nginx reload </span></code></pre> <p>We are now all set to continue with the installation of WordPress using the built in installer. This can be accessed by visiting your website at https://example.com/</p> <p>After installing WordPress, I recommend installing the jetpack module. Not only does it allow for posting to social media, but it has a setting to keep your WordPress installation on the latest version (a huge security plus).</p> 2016-04-22T14:05:00+00:00 2016-04-22T14:05:00+00:00 Andrew Wippler /2016-04-22-ovirt-mobile/ <p>I particularly enjoy using a web browser to administer GUI appliances. In the case of oVirt, it does become a little painful to do the Chrome-zoom-click on my massive 4k Android phone. It appears the oVirt devs have also seen this pain point and have released an Android app to make adminstration easier on Android.</p> <p><a class="external" href="https://play.google.com/store/apps/details?id=org.ovirt.mobile.movirt">moVirt</a> (mobile oVirt) makes common administrative tasks easier - migrating VMs, spinning down servers, spinning up stopped servers, etc.</p> <p>moVirt has become an essential tool that I use on an infrequent basis. Now, if I can only figure out how to spin up VMs with Puppet.</p> 2016-04-15T15:00:52+00:00 2016-04-15T15:00:52+00:00 Andrew Wippler /2016-04-15-secure-mysql-5-7-installation/ <p>With the release of MySQL 5.7, I was pleasantly surprised to see the install generated a random, secure password. This prevented me from going through the normal step of running <code>mysql_secure_installation</code> after starting and enabling services. To find the generated password, issue one of the commands below:</p> <h3 id="on-rhel-centos-fedora">On RHEL/CentOS/Fedora</h3> <pre class="z-code"><code><span class="z-text z-plain">grep &#39;temporary password&#39; /var/log/mysqld.log </span></code></pre> <h3 id="on-sles">On SLES</h3> <pre class="z-code"><code><span class="z-text z-plain">grep &#39;temporary password&#39; /var/log/mysql/mysqld.log </span></code></pre> <p>After issuing one of these commands, I was able to resume running the <code>mysql_secure_installation</code>.</p> 2016-04-08T15:00:18+00:00 2016-04-08T15:00:18+00:00 Andrew Wippler /2016-04-08-the-linux-academy-review/ <p>I recently received a subscription to <a class="external" href="https://linuxacademy.com/">Linux Academy</a>. Linux Academy has courses in Linux, AWS, DevOps, and OpenStack to help users achieve professional certificates such as the LFCS, LFCE, RHSCA, RHCE, and others. Since my LFCS is expiring this year (and I hope to achieve a RHCE), Linux Academy seemed like a place to help me achieve that goal.</p> <p>The first thing I noticed is that the Introduction to Linux Academy videos were current. The content was exactly how I saw it, and I did not have to alter the steps in anyway to follow the videos. The videos even described how to switch from Flash to HTML5 so that you could use the playback speed controls. This appealed to me as I like listening to videos in 2.0x speed (especially if the instructor is a slow talker). Keeping videos current in a rapidly changing environment speaks volumes of how dedicated these instructors are at teaching me the latest material. So far they have proven to be on top of things.</p> <p>One of the neat features I found is what they call a learning plan. This is a tool that you use to input your free time to learn material (in increments of half hours) and it calculates what videos to watch on particular days by setting due dates. You can then set reminders to be notified before your free time so that you can achieve course completion.</p> <p>The instructors speak at a good pace so you can type along as you watch the videos - even at 2x speed.</p> <p>The Linux Academy aims to be your single resource for learning and achieving certifications. There is no extra cost in purchasing additional resources to read or view. Everything is included in the subscription price. I would recommend the Linux Academy for anyone who wants to know GNU/Linux. At the time of this writing; however, there is one issue I have found. They encourage you to take the quiz at the end to test your knowledge, but doing so only moves the progress bar of completion by 1%. It should at least move to 100% and give a message of quizzed-out. :)</p> 2016-04-01T08:01:46+00:00 2016-04-01T08:01:46+00:00 Andrew Wippler /2016-04-01-blame-as-a-service-blaas/ <p>Today I am pleased to announce a new offering - Blame as a Service (BlaaS).</p> <p>With the ever increase of SaaS offerings and cloud providers with high resiliency and low downtime, there will be the inevitable glitch or hiccup whenever a CEO views your team's area of responsibility. With the recent passing of Murphy's Law in IEEE this has become more frequent in day-to-day operations.</p> <p>BlaaS helps you by receiving the blame for your incompetence by providing you with simple, easy-to-use templates that you can share with your CEO. These templates shift the blame from your SaaS choosing and put it on your BlaaS application making you the hero and us the bad guy.</p> <p>BlaaS has already saved several Developers from embarrassment and System Administrators from potential job loss and it can help you too!</p> <blockquote> <p>BlaaS saved my job after the datacenter burned down. I just pulled out one of BlaaS' pre-made templates, edited a few words and sent it off to my boss!</p> <p>Simon Sysmin</p> </blockquote> <blockquote> <p>With BlaaS' CI plugin, I was able to automate failures with reasons why it didn't work. This saved me a ton of time with email correspondence.</p> <p>Joe Jenkins</p> </blockquote> <blockquote> <p>Thanks to BlaaS, I can keep on claiming to be the brains behind the fastest latency-free network around.</p> <p>Ned Nederlander</p> </blockquote> <h3 id="pricing">Pricing</h3> <p>BlaaS pricing is very simple and to understand!</p> <table><thead><tr><th>Pricing (Monthly)</th><th>Basic</th><th>Professional</th><th>Enterprise</th><th>Super Admin</th></tr></thead><tbody> <tr><td>Price per device</td><td>$0.05</td><td>$0.07</td><td>$0.10</td><td>Call *</td></tr> <tr><td>Max devices</td><td>1000</td><td>2000</td><td>5000</td><td>Unlimited</td></tr> <tr><td>Unique templates</td><td>1</td><td>5</td><td>10</td><td>Unlimited</td></tr> <tr><td>Lawsuits</td><td>0</td><td>0</td><td>1</td><td>Unlimited</td></tr> <tr><td>Network Cabling Coverage</td><td>5ft</td><td>20ft</td><td>50ft</td><td>Unlimited</td></tr> <tr><td>Plugins</td><td>1</td><td>5</td><td>10</td><td>Unlimited</td></tr> <tr><td>Slack Integration</td><td>No</td><td>No</td><td>Yes</td><td>Yes</td></tr> <tr><td>* Call so we may throw a party based upon how much we will charge and receive from you monthly.</td><td></td><td></td><td></td><td></td></tr> </tbody></table> <p>April fools!</p> 2016-03-25T14:51:33+00:00 2016-03-25T14:51:33+00:00 Andrew Wippler /2016-03-25-the-greatest-story-ever-told/ <p>The greatest story ever told is how an Almighty God came down to earth, lived a perfect life, and offered Himself as a sacrifice for the sins of the whole world (past, present, and future). This is what the Easter weekend represents. There is a penalty for sin which must be paid. Jesus paid that penalty with his life. Those that confess that Jesus took their place and put their trust in Him will receive a pardon from sin, peace with God, and a prepared home in heaven.</p> <p>Because God is so righteous, He cannot have unrighteousness near Him.</p> <p>Because God is so holy, sin cannot come before Him.</p> <p>Because I can be biased, I am unrighteous.</p> <p>Because I am human, I have sinned.</p> <p>Because God is so merciful, He provided a scapegoat to take my place.</p> <p>Because God is loving, He placed my unrighteousness and sin upon Himself and died on the cross.</p> <p>Because God is gracious, He offers a pardon to all those who trust in Him.</p> 2016-03-20T22:02:51+00:00 2016-03-20T22:02:51+00:00 Andrew Wippler /2016-03-20-sunday-is-awesome/ <p>Sunday is so awesome that cron repeats it! (0,7)</p> 2016-03-18T15:00:07+00:00 2016-03-18T15:00:07+00:00 Andrew Wippler /2016-03-18-atom-editor-on-fedora/ <p>The atom editor has quickly become my favorite IDE for working with web projects. I still use Vi/Vim for CLI stuff, but atom is the icon I click when I want a GUI program.</p> <p>It was becoming a little mundane to go to the atom website and download the new version to install. This is why package managers exist - so users don't have to visit your website to download a new update. A quick search at <a class="external" href="https://copr.fedorainfracloud.org/coprs/">copr</a> yielded mosquito's repo of atom - success! Below is how to add the repo and keep atom updated for Fedora.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo dnf install dnf-plugins-core </span><span class="z-text z-plain">sudo dnf copr enable mosquito/atom </span><span class="z-text z-plain">sudo dnf install atom </span><span class="z-text z-plain"> </span></code></pre> 2016-03-11T14:00:06+00:00 2016-03-11T14:00:06+00:00 Andrew Wippler /2016-03-11-wifi-captive-portal/ <p>A captive portal is a piece of software that prompts for user interaction before allowing the client to access the internet or other resources on the network. It is a combination of a firewall and a webserver. In this tutorial, I will explain how to create an open WiFi network. Before deploying an open WiFi network, you may want to consult a lawyer of the legality and restrictions for having one. You can also review what has been said by lawyers <a class="external" href="http://www.mbm-law.net/newsletter-articles/wi-fi-hotspots-and-liability-concerns/1229/">here</a> and <a class="external" href="https://openwireless.org/">here</a>.</p> <p>When a device first connects to any network, it sends out a HTTP request and expects an HTTP status code of 200. If the device receives a HTTP 200 status code, it assumes it has unlimited internet access. Captive portal prompts are displayed when you are able to manipulate this first HTTP message to return a HTTP status code of 302 (redirect) to the captive portal of your choice.</p> <p>To set up a captive portal on a Raspberry Pi, you will need a wired network (I will refer to this as WAN or uplink) and a wireless network (such as the <a class="external" href="http://www.amazon.com/gp/product/B00P5UNKZW/ref=as_li_tl?ie=UTF8&amp;camp=1789&amp;creative=390957&amp;creativeASIN=B00P5UNKZW&amp;linkCode=as2&amp;tag=personal0964-20&amp;linkId=VP3IYQ4U57L2RQ6L">Ralink RT5372</a> or the <a class="external" href="http://www.amazon.com/gp/product/B00ABD6IKC/ref=as_li_tl?ie=UTF8&amp;camp=1789&amp;creative=390957&amp;creativeASIN=B00ABD6IKC&amp;linkCode=as2&amp;tag=personal0964-20&amp;linkId=7DO6IU2JNGHN2QRD">Ralink RT5370</a>) which you can set into AP mode. A server with 2 NICs would also suffice if you want to perform this on a wired LAN instead.</p> <p><strong>UPDATE 2/15/2017:</strong> If you get the too many redirects error, look at the <code>hotspot.localnet</code> nginx configuration. It could be that the dollar signs <code>$</code> are not present. The below block is what the location / block should look like in the <code>hotspot.localnet</code> virtual host.</p> <pre class="z-code"><code><span class="z-text z-plain"> location / { </span><span class="z-text z-plain"> try_files $uri $uri/ index.php; </span><span class="z-text z-plain"> } </span></code></pre> <h3 id="operating-system">Operating System</h3> <p>The operating system assumed will be Rapsbian Jessie. You can also follow this tutorial with a Debian server with two NICs - as long as one is dedicated to the WAN and the other to the LAN. It is also possible to use another Linux Distribution, but converting the commands will be up to you. In a later article, I will describe how to perform the steps on OpenWRT.</p> <h3 id="required-packages">Required Packages</h3> <pre class="z-code"><code><span class="z-text z-plain">sudo apt-get install iptables-persistent conntrack dnsmasq nginx php5 php5-common php5-fpm hostapd </span></code></pre> <h3 id="configuring-dnsmasq">Configuring dnsmasq</h3> <p>You can certainly use other DNS and DHCP servers, but I like to use <code>dnsmasq</code> as it is lightweight and found on many routers already. This indicates to me that <code>dnsmasq</code> is pretty stable and able to perform in the enterprise.</p> <p>The contents of my <code>dnsmasq.conf</code> are as follows:</p> <pre class="z-code"><code><span class="z-text z-plain"># Never forward addresses in the non-routed address spaces. </span><span class="z-text z-plain">bogus-priv </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Add other name servers here, with domain specs if they are for </span><span class="z-text z-plain"># non-public domains. </span><span class="z-text z-plain">server=/localnet/192.168.24.1 </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Add local-only domains here, queries in these domains are answered </span><span class="z-text z-plain"># from /etc/hosts or DHCP only. </span><span class="z-text z-plain">local=/localnet/ </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># If you want dnsmasq to listen for DHCP and DNS requests only on </span><span class="z-text z-plain"># specified interfaces (and the loopback) give the name of the </span><span class="z-text z-plain"># interface (eg eth0) here. </span><span class="z-text z-plain"># Repeat the line for more than one interface. </span><span class="z-text z-plain">interface=wlan0 </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Set the domain for dnsmasq. this is optional, but if it is set, it </span><span class="z-text z-plain"># does the following things. </span><span class="z-text z-plain"># 1) Allows DHCP hosts to have fully qualified domain names, as long </span><span class="z-text z-plain"># as the domain part matches this setting. </span><span class="z-text z-plain"># 2) Sets the &quot;domain&quot; DHCP option thereby potentially setting the </span><span class="z-text z-plain"># domain of all systems configured by DHCP </span><span class="z-text z-plain"># 3) Provides the domain part for &quot;expand-hosts&quot; </span><span class="z-text z-plain">domain=localnet </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Uncomment this to enable the integrated DHCP server, you need </span><span class="z-text z-plain"># to supply the range of addresses available for lease and optionally </span><span class="z-text z-plain"># a lease time. If you have more than one network, you will need to </span><span class="z-text z-plain"># repeat this for each network on which you want to supply DHCP </span><span class="z-text z-plain"># service. </span><span class="z-text z-plain">dhcp-range=192.168.24.50,192.168.24.250,2h </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Override the default route supplied by dnsmasq, which assumes the </span><span class="z-text z-plain"># router is the same machine as the one running dnsmasq. </span><span class="z-text z-plain">dhcp-option=3,192.168.24.1 </span><span class="z-text z-plain"> </span><span class="z-text z-plain">#DNS Server </span><span class="z-text z-plain">dhcp-option=6,192.168.24.1 </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Set the DHCP server to authoritative mode. In this mode it will barge in </span><span class="z-text z-plain"># and take over the lease for any client which broadcasts on the network, </span><span class="z-text z-plain"># whether it has a record of the lease or not. This avoids long timeouts </span><span class="z-text z-plain"># when a machine wakes up on a new network. DO NOT enable this if there&#39;s </span><span class="z-text z-plain"># the slightest chance that you might end up accidentally configuring a DHCP </span><span class="z-text z-plain"># server for your campus/company accidentally. The ISC server uses </span><span class="z-text z-plain"># the same option, and this URL provides more information: </span><span class="z-text z-plain"># http://www.isc.org/files/auth.html </span><span class="z-text z-plain">dhcp-authoritative </span><span class="z-text z-plain"> </span></code></pre> <p><code>dnsmasq</code> also reads in the <code>/etc/hosts</code> file and adds that information into the dns. Since we want to use pretty hostnames in our captive portal urls, we need to add a few entries to our hosts file.</p> <pre class="z-code"><code><span class="z-text z-plain"># Contents of /etc/hosts </span><span class="z-text z-plain">127.0.0.1 localhost </span><span class="z-text z-plain">192.168.24.1 hotspot.localnet </span><span class="z-text z-plain">::1 localhost ip6-localhost ip6-loopback </span><span class="z-text z-plain">fe00::0 ip6-localnet </span><span class="z-text z-plain">ff00::0 ip6-mcastprefix </span><span class="z-text z-plain">ff02::1 ip6-allnodes </span><span class="z-text z-plain">ff02::2 ip6-allrouters </span></code></pre> <h3 id="network">Network</h3> <p>Now that we have DNS and DHCP set up, we need to set up the interfaces. Edit <code>/etc/network/interfaces</code> and place in the following information:</p> <pre class="z-code"><code><span class="z-text z-plain"># The loopback network interface </span><span class="z-text z-plain">auto lo eth0 </span><span class="z-text z-plain">iface lo inet loopback </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># The &quot;wan&quot; network interface </span><span class="z-text z-plain">iface eth0 inet dhcp </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># The &quot;lan&quot; network interface </span><span class="z-text z-plain">iface wlan0 inet static </span><span class="z-text z-plain"> address 192.168.24.1 </span><span class="z-text z-plain"> netmask 255.255.255.0 </span></code></pre> <p>We also need to tell the kernel to forward IP packets between interfaces. To do that, enter the following command</p> <pre class="z-code"><code><span class="z-text z-plain">echo &quot;net.ipv4.ip_forward=1&quot; &gt;&gt; /etc/sysctl.conf </span></code></pre> <p>You will need to reboot in order for that change to take effect, but do not do that quite yet.</p> <h3 id="hostapd">Hostapd</h3> <p><code>hostapd</code> will be the service that sets up the SSID and ensures it is broadcasting over the wireless card. If you are setting up the captive portal on a server with 2 NICs you can skip to the next section.</p> <p>While you may certainly set up <code>hostapd</code> in WPA2 mode, I am assuming that because we are setting up a captive portal, this will be our authentication method rather than the encryption setting on the access point. To set up an open WiFi network, edit <code>/etc/hostapd/hostapd.conf</code> with the following information</p> <pre class="z-code"><code><span class="z-text z-plain">interface=wlan0 </span><span class="z-text z-plain">ssid=MyOpenAP # name of the WiFi access point </span><span class="z-text z-plain">hw_mode=g </span><span class="z-text z-plain">channel=6 #use 1, 6, or 11 </span><span class="z-text z-plain">auth_algs=1 </span><span class="z-text z-plain">wmm_enabled=0 </span></code></pre> <p>You will now have to set up the daemon by editing the contents of <code>/etc/default/hostapd</code> and change the line:</p> <pre class="z-code"><code><span class="z-text z-plain">#DAEMON_CONF=&quot;&quot; </span></code></pre> <p>to:</p> <pre class="z-code"><code><span class="z-text z-plain">DAEMON_CONF=&quot;/etc/hostapd/hostapd.conf&quot; </span></code></pre> <h3 id="iptables">Iptables</h3> <p><code>iptables</code> is our firewall. This is how we are going to block all connections that we have not authorized. Below are the commands to set up the firewall:</p> <pre class="z-code"><code><span class="z-text z-plain"># Turn into root </span><span class="z-text z-plain">sudo -i </span><span class="z-text z-plain"># Flush all connections in the firewall </span><span class="z-text z-plain">iptables -F </span><span class="z-text z-plain"># Delete all chains in iptables </span><span class="z-text z-plain">iptables -X </span><span class="z-text z-plain"># wlan0 is our wireless card. Replace with your second NIC if doing it from a server. </span><span class="z-text z-plain"># This will set up our structure </span><span class="z-text z-plain">iptables -t mangle -N wlan0_Trusted </span><span class="z-text z-plain">iptables -t mangle -N wlan0_Outgoing </span><span class="z-text z-plain">iptables -t mangle -N wlan0_Incoming </span><span class="z-text z-plain">iptables -t mangle -I PREROUTING 1 -i wlan0 -j wlan0_Outgoing </span><span class="z-text z-plain">iptables -t mangle -I PREROUTING 1 -i wlan0 -j wlan0_Trusted </span><span class="z-text z-plain">iptables -t mangle -I POSTROUTING 1 -o wlan0 -j wlan0_Incoming </span><span class="z-text z-plain">iptables -t nat -N wlan0_Outgoing </span><span class="z-text z-plain">iptables -t nat -N wlan0_Router </span><span class="z-text z-plain">iptables -t nat -N wlan0_Internet </span><span class="z-text z-plain">iptables -t nat -N wlan0_Global </span><span class="z-text z-plain">iptables -t nat -N wlan0_Unknown </span><span class="z-text z-plain">iptables -t nat -N wlan0_AuthServers </span><span class="z-text z-plain">iptables -t nat -N wlan0_temp </span><span class="z-text z-plain">iptables -t nat -A PREROUTING -i wlan0 -j wlan0_Outgoing </span><span class="z-text z-plain">iptables -t nat -A wlan0_Outgoing -d 192.168.24.1 -j wlan0_Router </span><span class="z-text z-plain">iptables -t nat -A wlan0_Router -j ACCEPT </span><span class="z-text z-plain">iptables -t nat -A wlan0_Outgoing -j wlan0_Internet </span><span class="z-text z-plain">iptables -t nat -A wlan0_Internet -m mark --mark 0x2 -j ACCEPT </span><span class="z-text z-plain">iptables -t nat -A wlan0_Internet -j wlan0_Unknown </span><span class="z-text z-plain">iptables -t nat -A wlan0_Unknown -j wlan0_AuthServers </span><span class="z-text z-plain">iptables -t nat -A wlan0_Unknown -j wlan0_Global </span><span class="z-text z-plain">iptables -t nat -A wlan0_Unknown -j wlan0_temp </span><span class="z-text z-plain"># forward new requests to this destination </span><span class="z-text z-plain">iptables -t nat -A wlan0_Unknown -p tcp --dport 80 -j DNAT --to-destination 192.168.24.1 </span><span class="z-text z-plain">iptables -t filter -N wlan0_Internet </span><span class="z-text z-plain">iptables -t filter -N wlan0_AuthServers </span><span class="z-text z-plain">iptables -t filter -N wlan0_Global </span><span class="z-text z-plain">iptables -t filter -N wlan0_temp </span><span class="z-text z-plain">iptables -t filter -N wlan0_Known </span><span class="z-text z-plain">iptables -t filter -N wlan0_Unknown </span><span class="z-text z-plain">iptables -t filter -I FORWARD -i wlan0 -j wlan0_Internet </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -m state --state INVALID -j DROP </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -o eth0 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -j wlan0_AuthServers </span><span class="z-text z-plain">iptables -t filter -A wlan0_AuthServers -d 192.168.24.1 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -j wlan0_Global </span><span class="z-text z-plain"># allow access to my website :) </span><span class="z-text z-plain">iptables -t filter -A wlan0_Global -d andrewwippler.com -j ACCEPT </span><span class="z-text z-plain">#allow unrestricted access to packets marked with 0x2 </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -m mark --mark 0x2 -j wlan0_Known </span><span class="z-text z-plain">iptables -t filter -A wlan0_Known -d 0.0.0.0/0 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Internet -j wlan0_Unknown </span><span class="z-text z-plain"># allow access to DNS and DHCP </span><span class="z-text z-plain"># This helps power users who have set their own DNS servers </span><span class="z-text z-plain">iptables -t filter -A wlan0_Unknown -d 0.0.0.0/0 -p udp --dport 53 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Unknown -d 0.0.0.0/0 -p tcp --dport 53 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Unknown -d 0.0.0.0/0 -p udp --dport 67 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Unknown -d 0.0.0.0/0 -p tcp --dport 67 -j ACCEPT </span><span class="z-text z-plain">iptables -t filter -A wlan0_Unknown -j REJECT --reject-with icmp-port-unreachable </span><span class="z-text z-plain">#allow forwarding of requests from anywhere to eth0/WAN </span><span class="z-text z-plain">iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE </span><span class="z-text z-plain"> </span><span class="z-text z-plain">#save our iptables </span><span class="z-text z-plain">iptables-save &gt; /etc/iptables/rules.v4 </span><span class="z-text z-plain"> </span></code></pre> <h3 id="nginx">nginx</h3> <p>Now we need to set up <code>nginx</code> to send a magic packet that prompts the user for action (i.e MyOpenAP requires you to sign in). To do that, we will run the following commands:</p> <pre class="z-code"><code><span class="z-text z-plain"># Make the HTML Document Root </span><span class="z-text z-plain">mkdir /usr/share/nginx/html/portal </span><span class="z-text z-plain">chown nginx:www-data /usr/share/nginx/html/portal </span><span class="z-text z-plain">chmod 755 /usr/share/nginx/html/portal </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># create the nginx hotspot.conf file </span><span class="z-text z-plain">cat &lt;&lt; EOF &gt; /etc/nginx/sites-available/hotspot.conf </span><span class="z-text z-plain">server { </span><span class="z-text z-plain"> # Listening on IP Address. </span><span class="z-text z-plain"> # This is the website iptables redirects to </span><span class="z-text z-plain"> listen 80 default_server; </span><span class="z-text z-plain"> root /usr/share/nginx/html/portal; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> # For iOS </span><span class="z-text z-plain"> if ($http_user_agent ~* (CaptiveNetworkSupport) ) { </span><span class="z-text z-plain"> return 302 http://hotspot.localnet/hotspot.html; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> # For others </span><span class="z-text z-plain"> location / { </span><span class="z-text z-plain"> return 302 http://hotspot.localnet/; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> upstream php { </span><span class="z-text z-plain"> #this should match value of &quot;listen&quot; directive in php-fpm pool </span><span class="z-text z-plain"> server unix:/tmp/php-fpm.sock; </span><span class="z-text z-plain"> server 127.0.0.1:9000; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain">server { </span><span class="z-text z-plain"> listen 80; </span><span class="z-text z-plain"> server_name hotspot.localnet; </span><span class="z-text z-plain"> root /usr/share/nginx/html/portal; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> location / { </span><span class="z-text z-plain"> try_files $uri $uri/ index.php; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> # Pass all .php files onto a php-fpm/php-fcgi server. </span><span class="z-text z-plain"> location ~ [^/]\.php(/|$) { </span><span class="z-text z-plain"> fastcgi_split_path_info ^(.+?\.php)(/.*)$; </span><span class="z-text z-plain"> if (!-f $document_root$fastcgi_script_name) { </span><span class="z-text z-plain"> return 404; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> # This is a robust solution for path info security issue and works with &quot;cgi.fix_pathinfo = 1&quot; in /etc/php.ini (default) </span><span class="z-text z-plain"> include fastcgi_params; </span><span class="z-text z-plain"> fastcgi_index index.php; </span><span class="z-text z-plain"> fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; </span><span class="z-text z-plain"> fastcgi_pass php; </span><span class="z-text z-plain"> } </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">EOF </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Enable the website and reload nginx </span><span class="z-text z-plain">ln -s /etc/nginx/sites-available/hotspot.conf /etc/nginx/sites-enabled/hotspot.conf </span><span class="z-text z-plain">systemctl reload nginx </span></code></pre> <p>We have just set up the path <code>/usr/share/nginx/html/portal</code> to serve web pages if accessed via IP (note the <code>default_server</code> directive) as well as if accessed by the hostname <code>hotspot.localnet</code>. If accessed via IP, it will trigger a 302 redirect to the hostname <code>hotspot.localnet</code>.</p> <h3 id="html-php">HTML / PHP</h3> <p>When it comes to the coding aspect, we only want to allow access if the webserver has determined the user has clicked the <strong>I agree to the terms</strong> button. To do that, I will add a <code>&lt;input type="hidden" name="security_code" value="andrew-wippler-is-cool" /&gt;</code> to my form field. This will stop a few script kiddies from gaining access without clicking the button, but one may want to add additional security features if deploying this in the enterprise (or just buy an appliance that has a captive portal already).</p> <p>We will need two files added to <code>/usr/share/nginx/html/portal</code>. They are the following:</p> <h6 id="index-php">index.php</h6> <pre class="z-code"><code><span class="z-text z-plain">&lt;!DOCTYPE html&gt; </span><span class="z-text z-plain">&lt;?php </span><span class="z-text z-plain"> </span><span class="z-text z-plain">// Grant access if the Security code is accurate. </span><span class="z-text z-plain">if ($_POST[&#39;security_code&#39;] == &quot;andrew-wippler-is-cool&quot;) { </span><span class="z-text z-plain"> </span><span class="z-text z-plain">// Grab the MAC address </span><span class="z-text z-plain">$arp = &quot;/usr/sbin/arp&quot;; // Attempt to get the client&#39;s mac address </span><span class="z-text z-plain">$mac = shell_exec(&quot;$arp -a &quot;.$_SERVER[&#39;REMOTE_ADDR&#39;]); </span><span class="z-text z-plain">preg_match(&#39;/..:..:..:..:..:../&#39;,$mac , $matches); </span><span class="z-text z-plain">$mac2 = $matches[0]; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">// Reconnect the device to the firewall </span><span class="z-text z-plain">exec(&quot;sudo rmtrack &quot; . $_SERVER[&#39;REMOTE_ADDR&#39;]); </span><span class="z-text z-plain">$i = &quot;sudo iptables -t mangle -A wlan0_Outgoing  -m mac --mac-source &quot;.$_GET[&#39;mac&#39;].&quot; -j MARK --set-mark 2&quot;; </span><span class="z-text z-plain">exec($i); </span><span class="z-text z-plain"> </span><span class="z-text z-plain">sleep(5); </span><span class="z-text z-plain"> </span><span class="z-text z-plain">?&gt; &lt;html&gt; </span><span class="z-text z-plain">&lt;head&gt; </span><span class="z-text z-plain">&lt;title&gt;&lt;/title&gt; </span><span class="z-text z-plain">&lt;/head&gt; </span><span class="z-text z-plain">&lt;body&gt; </span><span class="z-text z-plain">&lt;h1&gt;You are now free to browse the internet.&lt;/h1&gt; </span><span class="z-text z-plain">&lt;/body&gt; &lt;/html&gt; </span><span class="z-text z-plain">&lt;?php } else { </span><span class="z-text z-plain">  // this is what is seen when first viewing the page </span><span class="z-text z-plain">  ?&gt; </span><span class="z-text z-plain">  &lt;html&gt; </span><span class="z-text z-plain">  &lt;head&gt; </span><span class="z-text z-plain">  &lt;title&gt;&lt;/title&gt; </span><span class="z-text z-plain">  &lt;/head&gt; </span><span class="z-text z-plain">  &lt;body&gt; </span><span class="z-text z-plain">  &lt;h1&gt;Authorization Required&lt;/h1&gt; </span><span class="z-text z-plain">  &lt;p&gt;Before continuing, you must first agree to the &lt;a href=&quot;#&quot;&gt;Terms of Service&lt;/a&gt; and be of the legal age to do that in your selective country or have Parental Consent. </span><span class="z-text z-plain">  &lt;/p&gt; </span><span class="z-text z-plain">  &lt;form method=&quot;post&quot; action=&quot;index.php&quot;&gt; </span><span class="z-text z-plain">    &lt;input type=&quot;hidden&quot; name=&quot;security_code&quot; value=&quot;andrew-wippler-is-cool&quot; /&gt; </span><span class="z-text z-plain">    &lt;input type=&quot;checkbox&quot; name=&quot;checkbox1&quot; CHECKED /&gt;&lt;label for=&quot;checkbox1&quot;&gt;I Agree to the terms&lt;/label&gt;&lt;br /&gt; </span><span class="z-text z-plain">    &lt;input type=&quot;submit&quot; value=&quot;Connect&quot; /&gt; </span><span class="z-text z-plain">  &lt;/form&gt; </span><span class="z-text z-plain">  &lt;/body&gt; &lt;/html&gt; </span><span class="z-text z-plain">&lt;?php } ?&gt; </span><span class="z-text z-plain"> </span></code></pre> <h6 id="hotspot-html">hotspot.html</h6> <pre class="z-code"><code><span class="z-text z-plain"> &lt;!-- </span><span class="z-text z-plain"> &lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt; </span><span class="z-text z-plain"> &lt;WISPAccessGatewayParam xmlns:xsi=&quot;http://www.w3.org/2001/XMLSchema-instance&quot; xsi:noNamespaceSchemaLocation=&quot;http://www.wballiance.net/wispr_2_0.xsd&quot;&gt; </span><span class="z-text z-plain"> &lt;Redirect&gt; </span><span class="z-text z-plain"> &lt;MessageType&gt;100&lt;/MessageType&gt; </span><span class="z-text z-plain"> &lt;ResponseCode&gt;0&lt;/ResponseCode&gt; </span><span class="z-text z-plain"> &lt;VersionHigh&gt;2.0&lt;/VersionHigh&gt; </span><span class="z-text z-plain"> &lt;VersionLow&gt;1.0&lt;/VersionLow&gt; </span><span class="z-text z-plain"> &lt;AccessProcedure&gt;1.0&lt;/AccessProcedure&gt; </span><span class="z-text z-plain"> &lt;AccessLocation&gt;Andrew Wippler is awesome&lt;/AccessLocation&gt; </span><span class="z-text z-plain"> &lt;LocationName&gt;MyOpenAP&lt;/LocationName&gt; </span><span class="z-text z-plain"> &lt;LoginURL&gt;http://hotspot.localnet/&lt;/LoginURL&gt; </span><span class="z-text z-plain"> &lt;/Redirect&gt; </span><span class="z-text z-plain"> &lt;/WISPAccessGatewayParam&gt; </span><span class="z-text z-plain"> --&gt; </span></code></pre> <h3 id="additional-configurations">Additional Configurations</h3> <p>We are almost done; however, you may have noticed the line 14 in <code>index.php</code> which includes executing <code>rmtrack</code>. What is <code>rmtrack</code>? It is the code of <a class="external" href="https://www.linkedin.com/in/andy-beverley-94116215">Andy Beverley</a> which is licensed under the <a class="external" href="http://www.gnu.org/copyleft/fdl.html">GNU Free Documentation License 1.3</a>. In Andy's <a class="external" href="http://www.andybev.com/index.php/Using_iptables_and_PHP_to_create_a_captive_portal">tutorial for a captive portal</a>, <code>rmtrack</code> is used to remove the connection information in the kernel to prevent login loops. Let's create that file now:</p> <pre class="z-code"><code><span class="z-text z-plain">cat &lt;&lt; EOF &gt; /usr/bin/rmtrack </span><span class="z-text z-plain">/usr/sbin/conntrack -L \ </span><span class="z-text z-plain"> |grep $1 \ </span><span class="z-text z-plain"> |grep ESTAB \ </span><span class="z-text z-plain"> |grep &#39;dport=80&#39; \ </span><span class="z-text z-plain"> |awk \ </span><span class="z-text z-plain"> &quot;{ system(\&quot;conntrack -D --orig-src $1 --orig-dst \&quot; \ </span><span class="z-text z-plain"> substr(\$6,5) \&quot; -p tcp --orig-port-src \&quot; substr(\$7,7) \&quot; \ </span><span class="z-text z-plain"> --orig-port-dst 80\&quot;); }&quot; </span><span class="z-text z-plain">EOF </span><span class="z-text z-plain"> </span><span class="z-text z-plain">chmod +x /usr/bin/rmtrack </span><span class="z-text z-plain"> </span></code></pre> <p>We also have to allow our web server user <code>www-data</code> access to run privileged commands. We can do that by typing <code>visudo</code> and appending the below lines to the file.</p> <pre class="z-code"><code><span class="z-text z-plain">www-data ALL = NOPASSWD: /usr/bin/rmtrack [0-9]*.[0-9]*.[0-9]*.[0-9]* </span><span class="z-text z-plain">www-data ALL = NOPASSWD: /sbin/iptables -t mangle -A wlan0_Outgoing -m mac --mac-source ??\:??\:??\:??\:??\:?? -j MARK --set-mark 2 </span><span class="z-text z-plain"> </span></code></pre> <p>With the <code>sudoers</code> file saved, you are now ready to reboot the Raspberry Pi and enjoy offering a fairly simplistic captive portal.</p> 2016-03-04T15:00:40+00:00 2016-03-04T15:00:40+00:00 Andrew Wippler /2016-03-04-7-essential-android-it-tools/ <p>I have been using an Android phone for the past several years (since version 2.3.2). It has turned out to be the swiss army knife in my IT toolkit. Here are 7 apps that I cannot live without and help me perform my daily job duties.</p> <h3 id="activedir-manager">ActiveDir Manager</h3> <p><a class="external" href="https://play.google.com/store/apps/details?id=net.bealsystems.ADUserManager">ActiveDir Manager</a> is a $4.99 app that allows you to do 80% of Active Directory management tasks including: changing user passwords, locking/unlocking user accounts, adding users to groups, and editing basic user information. It comes in handy when someone stop you in the hall and mentions their account is locked out. Instead of writing it down in Evernote, then walking to your desk and unlocking the user, you can whip out this app and get it done in under 10 seconds!</p> <h3 id="wifi-analyzer">WiFi Analyzer</h3> <p><a class="external" href="https://play.google.com/store/apps/details?id=com.farproc.wifi.analyzer">WiFi Analyzer</a> is the most widely used app for wireless network troubleshooting. I have used it to hunt down missing access points, see signal strength in the location I am presently standing, and pick out an open channel for my home network. If this app is not on your phone, you obviously are not a network administrator!</p> <h3 id="juicessh">JuiceSSH</h3> <p><a class="external" href="https://play.google.com/store/apps/details?id=com.sonelli.juicessh">JuiceSSH</a> is another neat little app. I use it to manage my fleet of Raspberry PIs that power my campus display TVs and wayfinding signs. The feature that got me most locked into this app is the ability to sync connections and accounts between my old phone and new phone.</p> <h3 id="ring-scheduler">Ring Scheduler</h3> <p><a class="external" href="https://play.google.com/store/apps/details?id=com.farproc.ring.scheduler">Ring Scheduler</a> was developed by the same guy who made WiFi Analyzer. Its purpose is to silence your phone on a schedule. You can also use it to ensure your ringer is on at specific times. For me I use it to silence my phone at 10 pm and re-enable it at 6am.</p> <h3 id="microsoft-remote-desktop-client">Microsoft Remote Desktop Client</h3> <p><a class="external" href="https://play.google.com/store/apps/details?id=com.microsoft.rdc.android">Microsoft Remote Desktop Client</a> is a perfect app to connect to the GUI of Microsoft servers. Right-clicking is still kind of annoying, but this simple app keeps me from having to install 3rd party software on my servers just for remote desktop access.</p> <h3 id="es-file-explorer">ES File Explorer</h3> <p><a class="external" href="https://play.google.com/store/apps/details?id=com.estrongs.android.pop">ES File Explorer</a> is a utility I use to connect to remote network shares as well as navigate and cleanup my android device.</p> <h3 id="screebl">Screebl</h3> <p><a class="external" href="https://play.google.com/store/apps/details?id=com.keyes.screebl.full">Screebl</a> has made my reading more enjoyable. Ever read a news article or book only to have your phone go black in the middle of the good part? Screebl solves that. I have often come to rely so much on Screebl's function that I find using any device without it to be deemed as a dumb phone (including other android phones).</p> 2016-02-26T15:00:00+00:00 2016-02-26T15:00:00+00:00 Andrew Wippler /2016-02-26-how-to-get-users-to-switch-from-x-to-x-and-use-it/ <p>There are many free, open source programs available which are equal (if not better) than paid counterparts, but the biggest hurdle to overcome is getting people to switch. It is imperative that you remember what caused you to switch and realize the two reasons for change:</p> <p>"You change for two reasons: Either you learn enough that you want to, or you've been hurt enough that you have to." - Unknown</p> <p>So how do we get users to switch from X to X? Here are some quick ways:</p> <ul> <li>Share what you have learned about X</li> <li>Explain why you switched to X</li> <li>Show someone how to use X</li> </ul> <p>For example, I switched to OpenOffice (now LibreOffice) back in 2005. While I had a licensed copy of Microsoft Office 2003, one key feature was missing: saving as PDFs. OpenOffice has a simple button to save as a PDF. Once my friend showed me how to use it and where the button was, I was eager to learn more about OpenOffice. That is when I took the plunge and went all in.</p> 2016-02-19T15:00:00+00:00 2016-02-19T15:00:00+00:00 Andrew Wippler /2016-02-19-understanding-the-cloud/ <p>It's 2016, the cloud computing has been around for nearly two decades, but there still seems to be a lack of knowledge in what cloud computing actually is and how to do it.</p> <p>In diagrams, a cloud is the typified icon of the equipment of which you do not control; however, to those in the public internet, your diagram is the cloud. To them, your infrastructure is unknown, but to you it is known. Therefore, you can claim all servers under your control as being "in the cloud" even if they are not hosted in a public space such as Amazon Web Services or Microsoft Azure.</p> <p>Your cloud can be a raspberry pi, a single server, or multiple servers. The amount of hardware needed for a cloud service is based upon the usage of the service provided. Your reliability of the service depends on how well redundancy is set up on your part. When you get into warehouse computing (a single datacenter for one service), it might be difficult to wrap your head around how it operates to perform access to this service, but it is as easy as building a single, large computer. When building a single computer, you buy hard drives, ram, motherboard, a network card, and network equipment. Next you assemble the server, install the operating system, and finally configure the software.</p> <p>In warehouse computing, you break up the parts of your server to perform a specific task. In the storage realm, instead of attaching hard drives directly to the motherboard, they are connected via TCP/IP via either an iSCSI, SAN, or a network share (Samba or NFS). You also separate processes to different machines. Your database software (such as MySQL) will be the only program installed on a group of servers dedicated to run the database of your application. Additionally, you will have a cluster of servers running your application's server (php-fpm, django, etc.) with a load balancer in front.</p> 2016-02-12T15:00:52+00:00 2016-02-12T15:00:52+00:00 Andrew Wippler /2016-02-12-high-performant-chat-application/ <p>In a fictitious world where I started my own company and developed a LEMP-stack chat application, this is how I would do it in 2016:</p> <p>I would use WebSockets as the protocol in which data is being sent to and from the server. WebSockets has built-in support by nginx (since version 1.3). For caching, I would use the <code>expires max;</code> function of nginx for my static content (images, css, js, fonts, etc). I would also ensure static content was named in the scheme of <code>name-md5hash.ext</code>. This would allow the caching on the client side to shine.</p> <p>I would ensure my php files are gzip compressed (with .gz extension) to allow fast transferring of data between client and server. Nginx finds the .gz files when gzip compression is turned on and uses them if they exist. I would design small php-fpm servers that can support ~2,000 users at a time (basically, a dual core processor with 4gb of ram). This would allow ease of scaling at lower costs.</p> <p>I would use GlusterFS for fault-tolerant storage. I would use the <code>mount -t gluster</code> option on the servers as it would allow distributed nfs capability for storage of uploaded content.</p> <p>I would use MariaDB MaxScale as the database as it would allow for ease of scaling.</p> <p>In short, it would look similar to the following diagram:</p> <p><a href="/2016/01/chatapp.png"><img src="/2016/01/chatapp.png" alt="" /></a></p> 2016-02-08T15:00:06+00:00 2016-02-08T15:00:06+00:00 Andrew Wippler /2016-02-08-how-to-fix-error-transaction-check-error-with-dnfyum/ <p>When a <code>dnf</code> or <code>yum</code> process gets interrupted, you may get the below error:</p> <pre class="z-code"><code><span class="z-text z-plain">Running transaction check </span><span class="z-text z-plain">Transaction check succeeded. </span><span class="z-text z-plain">Running transaction test </span><span class="z-text z-plain">The downloaded packages were saved in cache until the next successful transaction. </span><span class="z-text z-plain">You can remove cached packages by executing &#39;dnf clean packages&#39;. </span><span class="z-text z-plain">Error: Transaction check error: </span><span class="z-text z-plain">file /usr/share/doc/avahi-libs/README from install of avahi-libs-0.6.32-0.4.rc.fc23.i686 conflicts </span><span class="z-text z-plain">with file from package avahi-libs-0.6.31-43.fc23.x86_64 </span></code></pre> <p>When presented with <code>Error: Transaction check error</code>, you are unable to install, update, or upgrade your system. The solution is to attempt to install the program (or download the files), locate them on your system, and manually update them using rpm.</p> <p>In the example above, I want to update <code>avahi-libs</code> to a later version, but an older version still exists on my system. The <code>dnf</code> process was interrupted before it could erase the older version. Hence, the error means manual intervention of the problem is required. To fix, one needs to locate the newer version and use the <code>rpm</code> command to forcefully install the update. In other words, do the following:</p> <pre class="z-code"><code><span class="z-text z-plain">find /var/cache/dnf/ -iname avahi-libs-0.6.32* -type f </span><span class="z-text z-plain">rpm -Uvh --replacefiles /path/to/avahi-libs-0.6.32-0.4.rc.fc23.i686.rpm </span></code></pre> <p>There is a good chance that the file you need is in <code>/var/cache/dnf/</code> already and does not need to be downloaded from a mirror.</p> 2016-02-05T15:00:11+00:00 2016-02-05T15:00:11+00:00 Andrew Wippler /2016-02-05-to-do-for-2016/ <p>As an IT worker, I have to re-learn my position every 3 years. This is due to the fact that Microsoft releases a new version (of their Server software, Exchange, office suite, etc.), or there has been a technology shift from one Linux specialty to another.</p> <p>To combat this change and to stay ahead of the technology bubble, I have to be self-motivated to be on the front-end. Here is what I have scheduled for 2016:Reading Goals</p> <ul> <li>Databases for Small Business by Anna Manning</li> <li>Programming in Go by Mark Summerfield</li> <li>The Rails 4 Way by Obie Fernandez</li> <li>Bootstrap for Rails by Syed Fazle Rahman</li> <li>Bible in a Year (McCheyne)</li> <li>The Varnish Book by Varnish Software</li> <li>Nginx HTTP Server Second Edition by Clement Nedelcu</li> <li>Nginx High Performance by Rahul Sharma</li> <li>Making Home Work by Paul Chappell</li> <li>MySQL High Availability by Charles Bell, Mats Kindahl, and Lars Thalmann</li> </ul> <p>Video Course Goals</p> <ul> <li><a class="external" href="http://www.lynda.com/Ruby-tutorials/essential-training/47905-2.html">Ruby Essential Training</a></li> <li><a class="external" href="http://www.lynda.com/Ruby-Rails-tutorials/Ruby-Rails-4-Essential-Training/139989-2.html">Ruby on Rails 4 Essential Training</a></li> <li><a class="external" href="http://www.lynda.com/Ruby-tutorials/RSpec-Testing-Framework-Ruby/183884-2.html">RSpec Testing Framework with Ruby</a></li> </ul> <p>Personal Goals</p> <ul> <li>Achieve RHSCA Certification</li> <li>Make 15 commits to an Open Source project</li> <li>Take my family on a monthly activity</li> <li>Blog once a week (Fridays)</li> </ul> 2016-01-29T15:00:29+00:00 2016-01-29T15:00:29+00:00 Andrew Wippler /2016-01-29-voip-troubleshooting-checklist/ <p>Voice over IP is very robust and reliable when set up properly. There are only four key areas to set up and check for issues. I have compiled the below list as things to check when an issue occurs. All of the steps are pretty basic and are known by every VoIP professional; however, it is handy to have to show a non-technical person or somebody who has little knowledge on VoIP systems.</p> <p>Phone</p> <ul> <li>Ensure the phone is compatible with the PBX you selected</li> <li>Ensure voice is on the voice vlan and data is on the data vlan</li> <li>Ensure the audio codec being used on the phone is supported by the server</li> <li>Ensure the codec you want to use is listed first in the settings</li> <li>Switch codecs to see if voice quality improves or declines in quality</li> </ul> <p>Phone-to-PBX</p> <ul> <li>Ensure voice traffic is on a separate vlan</li> <li>Ensure the voice vlan has priority on the network (QoS)</li> <li>Ensure there are no faulty Ethernet lines and that all 8 wires go to a single port (for PoE and best practice)</li> <li>Ensure switches are voice vlan capable</li> <li>Ensure the switch has enough voltage to power the amount of phones connected to it (if using PoE)</li> </ul> <p>PBX</p> <ul> <li>Ensure it is powered on</li> <li>Ensure services are running</li> <li>Check call quality between internal-to-internal extension</li> <li>Check call quality between internal-to-internal extension on separate PBX host (if clustered)</li> <li>Check inbound call routing rules</li> <li>Check outbound call routing rules</li> </ul> <p>PBX-to-Service Provider</p> <ul> <li>Ensure you have phone service and it is turned on</li> <li>Ensure the service provider allows self-managing of the Caller ID</li> <li>Ensure voice traffic is not being sent out on the public internet (on-net) if using SIP trunking</li> </ul> 2016-01-22T15:00:41+00:00 2016-01-22T15:00:41+00:00 Andrew Wippler /2016-01-22-my-review-of-digium/ <p>In a previous post, I mentioned that we switched to Digium Switchvox. Here are some features I really enjoy.</p> <h2 id="an-extension-has-access-to-everything">An extension has access to everything</h2> <p>There are no receptionist licenses. There are no addons for basic features such as faxing or voicemail. There is no confusion when it comes to determining a cost. Every extension has access to everything for one low yearly subscription fee.</p> <h2 id="the-admin-interface-is-accessed-via-web-browser">The admin interface is accessed via web browser</h2> <p>I like web browser software. It means I do not have to install an application to configure a setting and I can access the interface from my mobile phone, tablet, or Chromebook.</p> <h2 id="it-works-well-with-asterisk">It works well with Asterisk</h2> <p>While the extension licenses are cheap ($12/year/extension for titanium support), I have difficulty buying a license for a phone that will probably be used once in a 5 year time span - such as a lobby phone, dorm room phone, or classroom. These extensions just need dial tone and no advanced functionality (contact listing, switchboard, etc.) - having them as an Asterisk extension works great.</p> <h2 id="phones-are-easy-to-add">Phones are easy to add</h2> <p>Our installer set us up several templates. Using these templates, I can create an extension in under 10 seconds. Adding it to the phone takes an additional 10-60 seconds depending upon the state of the phone.</p> <h2 id="i-can-use-any-phone">I can use any phone</h2> <p>There are 3 specific spots in my environment where a cordless phone is vital. With Digium, I can deploy a Grandstream DP715 and call it a day.</p> <h2 id="the-servers-are-smart">The servers are "smart"</h2> <p>The servers are smart in that they start up after a power outage. Not that power outages happen all the time, but occasionally when the UPS battery is depleted, it is nice to know the default is set to power up when there is a power source.</p> 2016-01-15T15:00:47+00:00 2016-01-15T15:00:47+00:00 Andrew Wippler /2016-01-15-voip-implementation-and-tests/ <p>In 2014, we decided to transition from a Mitel sx200 to a VoIP solution. We researched Cisco UM, Mitel, Lync, Shoretel, Avaya, Digium, a few hosted solutions, and a few Asterisk clones. I was one of three who sat through several presentations of <strong>the same features of every single phone system</strong>. Two weeks into this process, we narrowed the field down to Avaya and Digium with cost-to-implement for 650 extensions being the main deciding factor. The other deciding factor was these two companies did not give a speech about we should choose them because such-and-so research company rated them #1 in customer satisfaction. In the second round of finding a VoIP solution, we asked if we could do a one week test of a demo system. Both parties agreed to this test and we were sent demo units. With the test units, we selected 6 secretaries, 1 programmer, myself, and 2 receptionists to participate in making internal calls and testing each of the functions. During the week, we deployed several tests:</p> <ul> <li>Phone server interruption (I unplugged the server ethernet for 10-30 seconds)</li> <li>Call audio quality</li> <li>Phone restart time</li> <li>The time it took to set up 1 phone</li> <li>Admin user interface</li> </ul> <p>After the week was done, we asked each participant which system they liked better. Everyone liked the Digium handsets. We also received reports that call audio quality was better with Digium (I believe Avaya adds white noise). During the "Phone server interruption" the Digium phones reconnected without rebooting whereas the Avaya phones rebooted as soon as the server went offline.</p> <p>After looking at a 20 year TCO (with updates and phone upgrades), both phone systems came out to be nearly equal in cost. Ultimately we chose to go with Digium based upon internal experiences and haven't regretted it.</p> 2016-01-08T15:00:03+00:00 2016-01-08T15:00:03+00:00 Andrew Wippler /2016-01-08-ovirt-pitfalls/ <p>After you use something for a bit, you notice the issues associated with it. While oVirt has solved my pain points of high availability, there are a few which stand out.</p> <h3 id="logging-in">Logging in</h3> <p>To log in to oVirt for administration, you visit the landing page of the oVirt-engine website. This is perfect - it means I can administrate it from the web browser on my mobile phone. The issue comes when you actually need to log in - you have to click another link on the landing page to see the spot to enter your credentials. It would be nice if the landing page had the username and password fields and, after authentication, would bring up the appropriate view based on permissions (reporting, user, or admin view). Another thought is to have another drop-down box with the area to load right next to the profile to use. It could be that the design of the landing page is different than what I am used to, but there is clearly room for improvement.</p> <h3 id="without-dns-the-engine-website-doesn-t-work">Without DNS, the engine website doesn't work</h3> <p>If you have your DNS server virtualized and the storage gluster goes into a rebuild mode, your oVirt engine doesn't work. You can't log in quickly, you can't shutdown/turn on VMs, and you can't select anything (if you have managed to log in). You have to resort to the cli interface in order to do anything! Apparently oVirt queries each server via DNS before it lets you type in the login fields. This is easily fixed by managing the hosts file on each server via Puppet, but it seems like bad IT practice to do this.</p> <h3 id="the-web-interface-has-too-many-tabs">The web interface has too many tabs</h3> <p>This makes it difficult to tell co-workers how to operate the interface via email, sms, or telephone conversation. Often I find myself clicking through 5 tabs because I forgot how to get to a previous page. This could be from my inexperience with the interface, but I think it could be improved. This also makes it difficult to use on a mobile web browser.</p> 2016-01-01T15:00:14+00:00 2016-01-01T15:00:14+00:00 Andrew Wippler /2016-01-01-read-the-bible-this-year/ <p>Most Christians read the Bible every day. Bible reading schedules are either in paper form only or there is a charge in obtaining the digital copy of one. Such was the case for my wife. She liked the McCheyne reading schedule which takes you through the new testament twice and the old once. A digital copy of the schedule was not within easy reach (we searched Amazon books) and our Church switched to distributing a different reading schedule at the beginning of the new year. This is how my <a class="external" href="https://github.com/andrewwippler/Bible-in-a-year">Bible-in-a-year github repository</a> was expanded.</p> <p>I already made a Bible reading schedule for myself to start from Genesis and end in Revelation for the kindle. It was easy to use this information I learned to create another kindle book for my wife - after all, kindle books are just compiled HTML.</p> <p>You may download the <a class="external" href="https://github.com/andrewwippler/Bible-in-a-year/raw/master/McCheyne/McCheyne.mobi">McCheyne version</a> or <a class="external" href="https://github.com/andrewwippler/Bible-in-a-year/raw/master/Old_New/Compiled-KJVinaYear.opf/KJVinaYear.mobi">Genesis-to-Revelation version</a> for free! Then start this year on the right foot by uploading them to your kindle or mobi reader.</p> 2015-12-25T15:00:22+00:00 2015-12-25T15:00:22+00:00 Andrew Wippler /2015-12-25-merry-christmas/ <p>For those who read my blog, I want to wish a Merry Christmas. It always gives me great joy to remember the virgin birth of Jesus Christ. Not only does Jesus' life impact so many, but it was his death that payed the price of my sin. I am one of those who believe that he took my spot as a scapegoat for my sin. I have placed my trust in him alone for salvation from sin's penalty, power, and preeminence in my life.</p> 2015-12-21T14:00:46+00:00 2015-12-21T14:00:46+00:00 Andrew Wippler /2015-12-21-switching-from-active-directory-to-samba4/ <p>Active Directory is solid, secure, and stable platform for user, group, and computer management. I would go as far and say that it is probably the backbone of 99.9% of all organizations world wide. So why would anyone want to switch away from Active Directory? The answer to that question is varied, but the most common reason why are:</p> <ul> <li>Reduce licensing costs (per user/device cals)</li> <li>Reduce Windows foot print</li> <li>Advanced features of AD are not needed</li> <li>Less than 5,000 users</li> <li>Because &lt;insert_favorite_software&gt; is greater than &lt;insert_hated_software&gt;</li> </ul> <p>Let us get started on switching to a Samba4 backend.</p> <p>This guide assumes the following:</p> <ul> <li>You already have a domain environment</li> <li>The forest functional level is 2003 or greater</li> <li>The domain functional level is not greater than 2008 R2</li> <li>You are running CentOS/RedHat 7 as your Samba4 host and it is a vanilla minimal install with no added repositories (i.e. you just installed it)</li> <li>Your domain is: AD.ANDREWWIPPLER.COM and your NETBIOS is AD.</li> </ul> <h2 id="installing-samba4">Installing Samba4</h2> <p>The samba version that ships with CentOS is compiled in legacy NT4 emulation mode. In order to get the AD emulation, we will need to compile Samba4 (Don't worry, it is very easy and compiles under 20 minutes with a 2 core processor.)</p> <pre class="z-code"><code><span class="z-text z-plain">cd /usr/src/ </span><span class="z-text z-plain">wget https://download.samba.org/pub/samba/stable/samba-4.3.2.tar.gz </span><span class="z-text z-plain">sudo tar xf samba-4.3.2.tar.gz </span><span class="z-text z-plain">cd samba-4.3.2/ </span></code></pre> <p>Now we need to install the build tools. (The most updated list is located <a class="external" href="https://wiki.samba.org/index.php/Operating_system_requirements/Dependencies_-_Libraries_and_programs#Red_Hat_Enterprise_Linux_.2F_CentOS_.2F_Scientific_Linux">here</a>)</p> <pre class="z-code"><code><span class="z-text z-plain">sudo yum install perl gcc attr libacl-devel libblkid-devel \ </span><span class="z-text z-plain"> gnutls-devel readline-devel python-devel gdb pkgconfig \ </span><span class="z-text z-plain"> krb5-workstation zlib-devel setroubleshoot-server libaio-devel \ </span><span class="z-text z-plain"> setroubleshoot-plugins policycoreutils-python \ </span><span class="z-text z-plain"> libsemanage-python perl-ExtUtils-MakeMaker perl-Parse-Yapp \ </span><span class="z-text z-plain"> perl-Test-Base popt-devel libxml2-devel libattr-devel \ </span><span class="z-text z-plain"> keyutils-libs-devel cups-devel bind-utils libxslt \ </span><span class="z-text z-plain"> docbook-style-xsl openldap-devel autoconf python-crypto </span></code></pre> <p>The next step is to compile and run:</p> <pre class="z-code"><code><span class="z-text z-plain">./configure </span><span class="z-text z-plain">make -j 2 </span><span class="z-text z-plain"># The number 2 should be relative to the number of cores on your machine </span><span class="z-text z-plain">sudo make install </span></code></pre> <p>This process should take less than 20 minutes. After it is done compiling, it will install to <code>/usr/local/samba/</code>. To make it easier to run the new commands, let us add the paths to our global path:</p> <pre class="z-code"><code><span class="z-text z-plain">sudo cat &lt;&lt; EOF &gt; /etc/profile.d/samba.sh </span><span class="z-text z-plain">##add samba to PATH </span><span class="z-text z-plain">export PATH=/usr/local/samba/bin/:/usr/local/samba/sbin/:$PATH </span><span class="z-text z-plain">EOF </span><span class="z-text z-plain">sudo chmod 0644 /etc/profile.d/samba.sh </span><span class="z-text z-plain">. /etc/profile </span></code></pre> <h2 id="preparing-the-system-to-join-ad">Preparing the system to join AD</h2> <p>Now that Samba is installed, we need to configure our system to interact with Active Directory as well and set up BIND9.</p> <h3 id="network-related">Network related</h3> <p>A static IP as well as DNS must be configured properly for this to work. Ensure the appropriate settings are in <code>/etc/sysconfig/network-scripts/ifcfg-(iface-name)</code>. The DNS servers must be an Active Directory domain controller and you should be able to ping it. If modification is done to this file, you will need to restart NetworkManager for changes to take effect. The desired result is to have <code>/etc/resolv.conf</code> appear like the following:</p> <pre class="z-code"><code><span class="z-text z-plain"># Generated by NetworkManager </span><span class="z-text z-plain">search ad.andrewwippler.com </span><span class="z-text z-plain">nameserver 192.168.1.201 </span></code></pre> <p>In my lab, 192.168.1.201 is a Windows 2008 R2 server named DC1.</p> <h3 id="hostname-related">Hostname related</h3> <p>If you have not named your CentOS install, it is best to do it now. You will also need to verify that pinging your hostname works and it returns with the ip of the interface you set and not the loopback interface.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo hostname dc2.ad.andrewwippler.com </span><span class="z-text z-plain">sudo echo &#39;dc2.ad.andrewwippler.com&#39; &gt; /etc/hostname </span><span class="z-text z-plain">echo &#39;192.168.1.202 dc2 dc2.ad.andrewwippler.com&#39; &gt;&gt; /etc/hosts </span></code></pre> <h3 id="kerberos-related">Kerberos related</h3> <p>Ensure <code>/etc/krb5.conf</code> has the following. The domain needs to be in all caps.</p> <pre class="z-code"><code><span class="z-text z-plain">... </span><span class="z-text z-plain">[libdefaults] </span><span class="z-text z-plain"> ... </span><span class="z-text z-plain"> dns_lookup_realm = false </span><span class="z-text z-plain"> dns_lookup_kdc = true </span><span class="z-text z-plain"> default_realm = AD.ANDREWWIPPLER.COM </span><span class="z-text z-plain">... </span></code></pre> <h3 id="testing">Testing</h3> <p>We can now test our DNS and Kerberos settings with two simple commands.</p> <pre class="z-code"><code><span class="z-text z-plain">kinit administrator </span></code></pre> <p>This should ask you for the domain administrator's password. Once entered you can verify everything is working with <code>klist</code>.</p> <h2 id="joining-active-directory">Joining Active Directory</h2> <p>At this point, we have not started Samba, nor do we need to until the very end. We can now issue the join command (with BIND9 support)</p> <pre class="z-code"><code><span class="z-text z-plain">sudo samba-tool domain join ad.andrewwippler.com DC -Uadministrator --realm=AD.ANDREWWIPPLER.COM --dns-backend=BIND9_DLZ </span></code></pre> <p>Now we will have to configure bind. For convenience sake, I have included my <code>/etc/named.conf</code></p> <pre class="z-code"><code><span class="z-text z-plain">// </span><span class="z-text z-plain">// named.conf </span><span class="z-text z-plain">// </span><span class="z-text z-plain"> </span><span class="z-text z-plain">options { </span><span class="z-text z-plain"> listen-on port 53 { any; }; </span><span class="z-text z-plain"> listen-on-v6 port 53 { any; }; </span><span class="z-text z-plain"> directory &quot;/var/named&quot;; </span><span class="z-text z-plain"> dump-file &quot;/var/named/data/cache_dump.db&quot;; </span><span class="z-text z-plain"> statistics-file &quot;/var/named/data/named_stats.txt&quot;; </span><span class="z-text z-plain"> memstatistics-file &quot;/var/named/data/named_mem_stats.txt&quot;; </span><span class="z-text z-plain"> allow-query { any; }; </span><span class="z-text z-plain"> recursion yes; </span><span class="z-text z-plain"> dnssec-enable yes; </span><span class="z-text z-plain"> dnssec-validation yes; </span><span class="z-text z-plain"> dnssec-lookaside auto; </span><span class="z-text z-plain"> /* Path to ISC DLV key */ </span><span class="z-text z-plain"> bindkeys-file &quot;/etc/named.iscdlv.key&quot;; </span><span class="z-text z-plain"> managed-keys-directory &quot;/var/named/dynamic&quot;; </span><span class="z-text z-plain"> pid-file &quot;/run/named/named.pid&quot;; </span><span class="z-text z-plain"> session-keyfile &quot;/run/named/session.key&quot;; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> //samba </span><span class="z-text z-plain"> tkey-gssapi-keytab &quot;/usr/local/samba/private/dns.keytab&quot;; </span><span class="z-text z-plain">}; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">logging { </span><span class="z-text z-plain"> channel default_debug { </span><span class="z-text z-plain"> file &quot;data/named.run&quot;; </span><span class="z-text z-plain"> severity dynamic; </span><span class="z-text z-plain"> }; </span><span class="z-text z-plain">}; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">zone &quot;.&quot; IN { </span><span class="z-text z-plain"> type hint; </span><span class="z-text z-plain"> file &quot;named.ca&quot;; </span><span class="z-text z-plain">}; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">include &quot;/etc/named.rfc1912.zones&quot;; </span><span class="z-text z-plain">include &quot;/etc/named.root.key&quot;; </span><span class="z-text z-plain">//samba </span><span class="z-text z-plain">include &quot;/usr/local/samba/private/named.conf&quot;; </span></code></pre> <h2 id="allowing-access">Allowing access</h2> <p>Now that we have a functioning samba server (even though it hasn't started yet), we need to allow it through SELinux and the firewall. Below are the commands to do just that:</p> <h3 id="firewall">Firewall</h3> <pre class="z-code"><code><span class="z-text z-plain">sudo firewall-cmd --add-port=389/tcp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=389/udp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=636/tcp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=53/tcp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=53/udp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=88/tcp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=88/udp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=464/tcp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=464/udp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=135/tcp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=137/udp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=139/tcp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=138/udp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=445/tcp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --add-port=3268/tcp --permanent </span><span class="z-text z-plain">sudo firewall-cmd --reload </span></code></pre> <h3 id="selinux">SELinux</h3> <pre class="z-code"><code><span class="z-text z-plain">sudo chown named:named /usr/local/samba/private/dns </span><span class="z-text z-plain">sudo chgrp named /usr/local/samba/private/dns.keytab </span><span class="z-text z-plain">sudo chmod g+r /usr/local/samba/private/dns.keytab </span><span class="z-text z-plain">sudo chmod 775 /usr/local/samba/private/dns </span><span class="z-text z-plain">sudo chown named:named /usr/local/samba/lib/bind9/dlz_bind9_9.so </span><span class="z-text z-plain">sudo chcon -t named_conf_t /usr/local/samba/private/dns.keytab </span><span class="z-text z-plain">sudo chcon -t named_conf_t /usr/local/samba/private/named.conf.update </span><span class="z-text z-plain">sudo chcon -t named_var_run_t /usr/local/samba/private/dns </span><span class="z-text z-plain">sudo chcon -t named_var_run_t /usr/local/samba/lib/bind9/dlz_bind9_9.so </span><span class="z-text z-plain">sudo semanage fcontext -a -t named_conf_t /usr/local/samba/private/dns.keytab </span><span class="z-text z-plain">sudo semanage fcontext -a -t named_conf_t /usr/local/samba/private/named.conf </span><span class="z-text z-plain">sudo semanage fcontext -a -t named_conf_t /usr/local/samba/private/named.conf.update </span><span class="z-text z-plain">sudo semanage fcontext -a -t named_var_run_t /usr/local/samba/private/dns </span><span class="z-text z-plain">sudo semanage fcontext -a -t named_var_run_t /usr/local/samba/lib/bind9/dlz_bind9_9.so </span><span class="z-text z-plain"> </span></code></pre> <p>Now we need to run SELinux in permissive mode and add the policy.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo setenforce 0 </span><span class="z-text z-plain">sudo systemctl restart named </span><span class="z-text z-plain">sleep 60 </span><span class="z-text z-plain">sudo systemctl stop named </span><span class="z-text z-plain">cd ~ </span><span class="z-text z-plain">sudo grep named /var/log/audit/audit.log | audit2allow -M named &gt; named.te </span><span class="z-text z-plain">sudo semodule -i named.pp </span><span class="z-text z-plain">sudo setenforce 1 </span><span class="z-text z-plain">sudo systemctl start named </span></code></pre> <h2 id="init-files">Init files</h2> <p>Samba does not ship with an init file so we will have to create one and enable it to start at boot.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo cat &lt;&lt; EOF &gt; /etc/init.d/samba </span><span class="z-text z-plain">#!/bin/bash </span><span class="z-text z-plain"># </span><span class="z-text z-plain"># samba4 This shell script takes care of starting and stopping </span><span class="z-text z-plain"># samba4 daemons. </span><span class="z-text z-plain"># </span><span class="z-text z-plain"># chkconfig: - 58 74 </span><span class="z-text z-plain"># description: Samba 4.0 will be the next version of the Samba suite </span><span class="z-text z-plain"># and incorporates all the technology found in both the Samba4 alpha </span><span class="z-text z-plain"># series and the stable 3.x series. The primary additional features </span><span class="z-text z-plain"># over Samba 3.6 are support for the Active Directory logon protocols </span><span class="z-text z-plain"># used by Windows 2000 and above. </span><span class="z-text z-plain"> </span><span class="z-text z-plain">### BEGIN INIT INFO </span><span class="z-text z-plain"># Provides: samba4 </span><span class="z-text z-plain"># Required-Start: $network $local_fs $remote_fs </span><span class="z-text z-plain"># Required-Stop: $network $local_fs $remote_fs </span><span class="z-text z-plain"># Should-Start: $syslog $named </span><span class="z-text z-plain"># Should-Stop: $syslog $named </span><span class="z-text z-plain"># Short-Description: start and stop samba4 </span><span class="z-text z-plain"># Description: Samba 4.0 will be the next version of the Samba suite </span><span class="z-text z-plain"># and incorporates all the technology found in both the Samba4 alpha </span><span class="z-text z-plain"># series and the stable 3.x series. The primary additional features </span><span class="z-text z-plain"># over Samba 3.6 are support for the Active Directory logon protocols </span><span class="z-text z-plain"># used by Windows 2000 and above. </span><span class="z-text z-plain">### END INIT INFO </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Source function library. </span><span class="z-text z-plain">. /etc/init.d/functions </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># Source networking configuration. </span><span class="z-text z-plain">. /etc/sysconfig/network </span><span class="z-text z-plain"> </span><span class="z-text z-plain">prog=samba </span><span class="z-text z-plain">prog_dir=/usr/local/samba/sbin/ </span><span class="z-text z-plain">lockfile=/var/lock/subsys/$prog </span><span class="z-text z-plain"> </span><span class="z-text z-plain">start() { </span><span class="z-text z-plain"> [ &quot;$NETWORKING&quot; = &quot;no&quot; ] &amp;&amp; exit 1 </span><span class="z-text z-plain"># [ -x /usr/sbin/ntpd ] || exit 5 </span><span class="z-text z-plain"> # Start daemons. </span><span class="z-text z-plain"> echo -n $&quot;Starting samba4: &quot; </span><span class="z-text z-plain"> daemon $prog_dir/$prog -D </span><span class="z-text z-plain"> RETVAL=$? </span><span class="z-text z-plain"> echo </span><span class="z-text z-plain"> [ $RETVAL -eq 0 ] &amp;&amp; touch $lockfile </span><span class="z-text z-plain"> return $RETVAL </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain">stop() { </span><span class="z-text z-plain"> [ &quot;$EUID&quot; != &quot;0&quot; ] &amp;&amp; exit 4 </span><span class="z-text z-plain"> echo -n $&quot;Shutting down samba4: &quot; </span><span class="z-text z-plain"> killproc $prog_dir/$prog </span><span class="z-text z-plain"> RETVAL=$? </span><span class="z-text z-plain"> echo </span><span class="z-text z-plain"> [ $RETVAL -eq 0 ] &amp;&amp; rm -f $lockfile </span><span class="z-text z-plain"> return $RETVAL </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># See how we were called. </span><span class="z-text z-plain">case &quot;$1&quot; in </span><span class="z-text z-plain">start) </span><span class="z-text z-plain"> start </span><span class="z-text z-plain"> ;; </span><span class="z-text z-plain">stop) </span><span class="z-text z-plain"> stop </span><span class="z-text z-plain"> ;; </span><span class="z-text z-plain">status) </span><span class="z-text z-plain"> status $prog </span><span class="z-text z-plain"> ;; </span><span class="z-text z-plain">restart) </span><span class="z-text z-plain"> stop </span><span class="z-text z-plain"> start </span><span class="z-text z-plain"> ;; </span><span class="z-text z-plain">*) </span><span class="z-text z-plain"> echo $&quot;Usage: $0 {start|stop|status|restart}&quot; </span><span class="z-text z-plain"> exit 2 </span><span class="z-text z-plain">esac </span><span class="z-text z-plain">EOF </span><span class="z-text z-plain">sudo chmod +x /etc/init.d/samba </span><span class="z-text z-plain">sudo chkconfig samba on </span></code></pre> <h2 id="flipping-the-switch">Flipping the switch</h2> <p>You are now ready to either restart the system or start samba. The next steps to fully migrate to a Samba4 AD backend would be to migrate the FSMO roles to this server. Managing this AD instance is done by loading the Remote Server Administration Tools (RSAT) on a windows client.</p> <h2 id="sources">Sources</h2> <p>Here are the list of sources and references to compile this tutorial:</p> <ul> <li>https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory</li> <li>https://wiki.samba.org/index.php/Build_Samba_from_source</li> <li>https://wiki.samba.org/index.php/Samba4/InitScript</li> <li>https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD</li> <li>https://lists.samba.org/archive/samba/2013-March/172397.html (Thanks <strong>Thomas Simmons</strong>)</li> </ul> 2015-12-18T15:00:08+00:00 2015-12-18T15:00:08+00:00 Andrew Wippler /2015-12-18-converting-debianubuntu-to-ovirt/ <p>oVirt 3.6 will have a better way to import virtual machines. In the mean time, here is the best method for getting an already made ova into oVirt. The example I am using is the open source log analyzer - <a class="external" href="https://www.graylog.org/">graylog</a>.</p> <p>A prerequisite is the script located at <a class="external" href="http://git.annexia.org/git/import-to-ovirt.git">http://git.annexia.org/git/import-to-ovirt.git</a></p> <pre class="z-code"><code><span class="z-text z-plain">git clone http://git.annexia.org/git/import-to-ovirt.git </span></code></pre> <p>Verify the type of the downloaded file:</p> <pre class="z-code"><code><span class="z-text z-plain">file graylog.ova </span><span class="z-text z-plain">graylog.ova: POSIX tar archive </span></code></pre> <p>This is wrapped archive, extract it.</p> <pre class="z-code"><code><span class="z-text z-plain">tar xf graylog.ova </span></code></pre> <p>Whether converting from Hyper-V or OVA, the following steps will be the same except Hyper-V's format will be <code>vpc</code> instead of <code>vmdk</code></p> <pre class="z-code"><code><span class="z-text z-plain">sudo qemu-img convert -f vmdk -O qcow2 graylog-disk1.vmdk graylog.qcow2 </span></code></pre> <p>This line will import the image into oVirt.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo import-to-ovirt.pl graylog.qcow2 ovirt-nfs-storage:/exports/import_export </span></code></pre> <p>The VM can then be imported using the import tab of the storage domain where you uploaded the file.</p> 2015-12-11T15:00:14+00:00 2015-12-11T15:00:14+00:00 Andrew Wippler /2015-12-11-converting-vms-for-ovirt/ <p>My existing Hyper-V infrastructure consisted of Windows, a few CentOS, and Debian/Ubuntu guests. The best method I found to importing into oVirt was using the <a class="external" href="http://oirase.annexia.org/virt-p2v/">virt-p2v disc</a>. This required down time of the server (approx 3 hours per 100GB on gigabit backbone) and a dedicated Fedora or Debian server which had <code>virt-v2v</code> installed. I used my Acer C710 Chromebook to serve as the <code>virt-v2v</code> converter. (This is possibly the reason I had slow conversion times.)</p> <p>Once you boot into <code>virt-p2v</code>, you enter the IP address of an ssh server with <code>virt-v2v</code> installed. Unfortunately, I had to log in with root credentials as using the sudo method did not work when I tried. In some instances, my virtual machines needed the legacy Hyper-V network adapter to get an IP from DHCP and be able to ping the conversion server. It would have been helpful if <code>virt-v2v</code> mentioned this rather than giving a general username/password is invalid error.</p> <p>After successfully testing the server and logging in, the next step is to enter the target properties. These are what you will name the image, how many virtual CPUs to allocate, and the desired RAM. Next the output options have to be set. Since I was using oVirt, I selected the <em>Output to (-o)</em> as rhev. I then had to enter the <em>Output storage (-os)</em> which is required when converting for oVirt/rhev. Since these settings are relative to the <code>virt-v2v</code> server, I could have mounted the nfs import domain (defaults in getting started guide - <em>nfs-server:/exports/import_export</em> ) as /var/tmp on the <code>virt-v2v</code> converter; however, I decided to enter the nfs server and path instead as this value. Next, you select the discs to convert as well as any network interfaces and removable media. I found that you only need to select the harddrives - everything else can be configured in oVirt.</p> <p>Once you click start conversion, <code>virt-p2v</code> boots into the virtual machine and forwards data to your <code>virt-v2v</code> server. The <code>virt-v2v</code> process removes devices and adds the special ones needed to prevent a BSOD when you boot your Windows server for the first time on oVirt. Something similarly happens on CentOS based VMs.</p> <p>Once that is done you need to go into the storage tab of the cluster (in my case, Default) and select the import storage domain. This will then open up the lower third of the web interface with another tab that is labeled <em>import</em>. This will list all VM guests that have successfully been converted by <code>virt-p2v</code>.</p> 2015-12-04T15:00:46+00:00 2015-12-04T15:00:46+00:00 Andrew Wippler /2015-12-04-planning-the-deployment-of-ovirt/ <p>After I played with oVirt I needed to do several items:</p> <ol> <li>Migrate the oVirt engine to a new host</li> <li>Migrate the storage from a single NFS share to GlusterFS</li> <li>Move my VMs from Hyper-V to oVirt</li> <li>Test my setup</li> </ol> <h2 id="migrate-the-ovirt-engine-to-a-new-host">Migrate the oVirt Engine to a new host</h2> <p>This task was to prepare me for the disaster recovery scenario - what if my server room blew up - how would I recover my virtualization backbone? It might not be that important (considering I back up my VMs and can restore them anywhere), but when disaster strikes, tasks need to be simple because concentration will be difficult. As of version 3.5, oVirt had a good back up and restore operation:</p> <pre class="z-code"><code><span class="z-text z-plain"> </span><span class="z-text z-plain">#backup example </span><span class="z-text z-plain">/usr/share/ovirt-engine/bin/engine-backup.sh --mode=backup --scope=all --file=/root/engine_backup --log=/root/backup_log </span><span class="z-text z-plain"> </span><span class="z-text z-plain">#restore example </span><span class="z-text z-plain">/usr/share/ovirt-engine/bin/engine-backup.sh --mode=restore --scope=all --file=/root/engine_backup --log=restore_lg </span><span class="z-text z-plain">engine-setup </span><span class="z-text z-plain"> </span></code></pre> <p>All I had to do was run the backup script, copy the file, restore it, and run <code>engine-setup</code>. To further harden my installation, I placed the backup line in my daily <code>crontab</code> an hour earlier than my scheduled <code>duplicity</code> run.</p> <h2 id="migrate-the-storage-from-a-single-nfs-share-to-glusterfs">Migrate the storage from a single NFS share to GlusterFS</h2> <p>This next step was a bit under-sighted on my part. In my test lab, I had 4 VMs running on 1 NFS server. The NFS server I chose in the lab environment began to choke around 30 VMs and eventually crashed when I hit the 35 mark. It was not a limitation on oVirt or NFS, but on my hardware. <code>GlusterFS</code> was extremely simple to set up and their documentation is easy to follow.</p> <h2 id="move-my-vms-from-hyper-v-to-ovirt">Move my VMs from Hyper-V to oVirt</h2> <p>I will discuss this in more detail in a following post. It was mostly running <code>virt-p2v</code> on Windows and CentOS and <code>import-to-ovirt.pl</code> on Debian and Ubuntu VMs.</p> <h2 id="test-my-setup">Test my setup</h2> <p>During the transition, I had the opportune time to experience what it was like when my single point of failure (the one NFS server) crashed. It was also painful when DNS and DHCP were on servers on the failed storage server (oVirt didn't like that). Through this process, I have formulated several key steps to prevent a failure like that from happening again.</p> 2015-11-27T15:00:31+00:00 2015-11-27T15:00:31+00:00 Andrew Wippler /2015-11-27-switching-from-hyper-v-to-ovirt/ <p>For quite some time I have heard that Hyper-V was a low player when it came to virtualization. It came with Windows and was the hypervisor of choice, but it had its limitations. In my environment, we had local storage and no clustering of hosts and consequently no high availability or fail over. This brought the first pain point - we need high availability.</p> <p>On one of my hosts, the broadcom Ethernet driver kept triggering flow control and would not resume causing all of the VM Guests to go offline. This triggered the second pain point - I need high availability yesterday.</p> <blockquote> <p>What matters most in a hypervisor environment is the tools you use to manage it.</p> </blockquote> <p>I took this principle as a guide when searching for a hypervisor environment. I first looked at Hyper-V and the new licensing costs it would accrue. Next I looked at the popular VMWare ESXi, but I heard the neat features were at a premium price and all I needed was high availability. I looked at Open Source versions like KVM, Xen, and OpenStack (which appeared to be too big for my 40 VM environment). Then I found RHEV's community version - oVirt. It had all the bells and whistles I needed - Linux hosts and high availability.</p> <p>oVirt's install documents were surprisingly simple as I quickly found 3 servers to set up: an engine server, a file server, and a VM Host. Once set up, I tinkered with it, and to my delight - everything worked right out of the box (on old hardware too!) My next step was to install a few VMs and test the high availability features. It was evident that oVirt was the solution to my pain points.</p> 2015-11-20T14:45:00+00:00 2015-11-20T14:45:00+00:00 Andrew Wippler /2015-11-20-why-i-cant-vote-for-hillary-clinton/ <p>We live in the year 2016 - anyone who does not know how to use basic computer functionality (such as email, using a word processor, decyphering between a spreadsheet and database, etc.) should not be allowed to hold public office. Why? Here is my main reason:</p> <p>One who does not understand technology will not make the right decision when it comes to a technology issue. Encryption is becoming a major topic with many in office wanting to do away with it or requiring back doors. Will she make the right decision here? After all, not everyone uses encryption for illegal purposes - most use it for company integrity and data leakage protection.</p> <p>What if some new technology appears which makes self driving cars much more reliable - would she allow it in all 50 states at once or do the dumb move and make every state approve of them?</p> <p>It has been my experience with people that those who do not understand how technology works in its lowest level (even from a high view) often make the wrong choices in critical matters. Because of that, I see any candidate running for President without basic general computer skills (like checking two different email accounts on the same device) <strong>unelectable</strong>.</p> 2015-11-13T14:59:38+00:00 2015-11-13T14:59:38+00:00 Andrew Wippler /2015-11-13-paying-for-open-source/ <p>While Open Source software is free to download, use, and depending on the license, free to distribute, it is not free to creator. The Open Source creators have to pay for hosting, branding (domain, etc.), coding (in time), and distribution. While some are offloading the costs by hosting the project on Open Source aware distribution channels such as <a class="external" href="https://github.com">GitHub</a> or <a class="external" href="https://bitbucket.org/">BitBucket</a>, many projects still lack the funds they need.</p> <p>The general rule is: if you use it, you should pay for it. How you should pay for it is entirely up to you. Below are several ways you can pay for open source software.</p> <h3 id="for-corporations">For Corporations</h3> <ul> <li>Hire an Open Source Developer to work on the project he contributes to</li> <li>Estimate how much it would cost annually with proprietary software and donate 10-30% of the amount evenly to various projects</li> <li>Open Source internally developed software</li> <li>Provide a publicly accessible mirror to an Open Source project</li> </ul> <h3 id="for-individuals">For Individuals</h3> <ul> <li>Donate a fixed amount annually to an Open Source Foundation such as the <a class="external" href="http://www.linuxfoundation.org/">Linux Foundation</a> or the <a class="external" href="https://www.documentfoundation.org/">Document Foundation</a></li> <li>Donate a fixed amount to the specific project you use</li> <li>Submit a patch that fixes a bug</li> <li>Submit a patch that adds a feature (bonus points if it was previously requested by another user)</li> <li>Offer support to other users using the program via the channels the creators recognize (mailing lists, forums, etc.)</li> <li>Create a plugin that enhances the project</li> <li>Promote the project you use most</li> <li>Suggest your company switch to the project (using the paid version)</li> </ul> <p>Have a suggestion that was not listed? Submit it in the comments below.</p> 2015-11-08T04:44:37+00:00 2015-11-08T04:44:37+00:00 Andrew Wippler /2015-11-07-switching-to-wordpress/ <p>I have completed the migration of my blog to Wordpress. The reasons for the change are very simple:</p> <ol> <li>I was spending 45 minutes extra just to post 1 web page</li> <li>I wanted to post to Google+ for every post I make - the service I was using only allowed for twitter.</li> <li>I wanted an easier way to manage my RSS feed.</li> <li>I wanted to spend more time writing and less time coding my website</li> </ol> 2015-10-03T21:55:06+00:00 2015-10-03T21:55:06+00:00 Andrew Wippler /2015-10-03-usb-key-start/ <p>Back in the good 'ole days of floppy drives, I used to install <code>grub</code> onto one. I would use it like a key to my computer and take it out if I did not want anyone using my computer when I was not around. Today, we use LUKS encryption to keep unwanted users out. Once <code>grub</code> became too big to fit on floppy drives (and floppy drives became extinct) I still wanted the physical functionality of removing a part that prevents others from using my desktop/laptop. Sure, I could remove the hard drive every time I was done with the computer, but this would become tedious and I want something quick and easy.</p> <p>I recently stumbled across <a class="external" href="https://github.com/tokiclover/mkinitramfs-ll">mkinitramfs-ll</a> which allowed passing in a LUKS keyfile in initrd. I attempted to use this for Fedora, but did not get very far. I then discovered <code>dracut</code> (Fedora's initrd maker) already includes support for passing in a LUKS keyfile as an argument. At this point, I raced to get one of my legacy 256mb flash drives and made a fully functional "key" to operate my laptop.</p> <p>The main points to get it working were simple:</p> <ul> <li>Have a crypted root file system</li> <li>Generate a keyfile to use</li> <li>Format a flash drive with a label</li> <li>Add the keyfile to the crypted filesystem and flash drive</li> <li>Configure and run <code>dracut</code></li> <li>Configure and generate <code>grub</code> configs</li> </ul> <p>**Generate a keyfile to use:**Keyfiles can be anything. Some use a gpg key, but I found it as easy and beneficial just to run: <code>sudo dd if=/dev/urandom of=/root/keyfile bs=1024 count=4</code></p> <p>**Format a flash drive with a label:**As I mentioned before, I already had a worthless flash drive handy. Since this flash drive is essentially the key to my computer, I do not want to risk plugging it into another computer and getting the key stolen or corrupted. It will have to become solely used for the purpose of unlocking my system. Creating the flash drive is the same as any other drive with ext4:</p> <pre class="z-code"><code><span class="z-text z-plain">mkfs.ext4 -L SECURIKEY /dev/sdb1 </span></code></pre> <p><strong>Add the keyfile to the crypted filesystem and flash drive.</strong></p> <pre class="z-code"><code><span class="z-text z-plain">sudo mount /dev/sdb1 /mnt </span><span class="z-text z-plain">sudo cp /root/keyfile /mnt/keyfile </span><span class="z-text z-plain">sudo cryptsetup -v luksAddKey /dev/mapper/fedora-00 /mnt/keyfile </span></code></pre> <p><strong>Configure <code>dracut</code>:</strong> <code>dracut</code> needs to load two modules in order for us to pass in the keyfile. Additionally systemd has an issue with keyfiles at the time of writing this so we will have to omit it. Both of these settings can be permanently set by <code>sudo vim /etc/dracut.conf.d/00-keyfile.conf</code> and inserting the below contents.</p> <pre class="z-code"><code><span class="z-text z-plain"># dracut modules to omit </span><span class="z-text z-plain">omit_dracutmodules+=&quot;systemd&quot; </span><span class="z-text z-plain"> </span><span class="z-text z-plain"># dracut modules to add to the default </span><span class="z-text z-plain">add_dracutmodules+=&quot;crypt lvm&quot; </span></code></pre> <p><strong>Configuring grub:</strong> Open up <code>/etc/default/grub</code> and append <code>rd.luks.key=/keyfile:LABEL=SECURIKEY</code> inside the quotes of <code>GRUB_CMDLINE_LINUX</code>. Mine looks like the following:</p> <pre class="z-code"><code><span class="z-text z-plain">GRUB_CMDLINE_LINUX=&quot;rd.lvm.lv=fedora/00 rd.luks.uuid=luks-fad7c380-bc0c-4680-917e-1e80eb244476 rhgb quiet rd.luks.key=/keyfile:LABEL=SECURIKEY&quot; </span></code></pre> <p><code>grub</code> can then be regenerated by running <code>sudo grub2-mkconfig -o /boot/grub2/grub.cfg</code>. After <code>grub</code> has been re-generated, we can then regenerate our initrd by issuing <code>dracut --force</code>. Everything is then all set and ready to go! If the keyfile is not present, you will be prompted to enter your encryption password upon next boot to unlock the root filesystem. I would advise leaving the password as you would be unable to access your files if the flash drive was ever lost or picked up by one of your kids and thrown in the toilet.</p> 2015-09-26T21:49:51+00:00 2015-09-26T21:49:51+00:00 Andrew Wippler /2015-09-26-my-review-of-arch/ <p>After my minimal install of Arch, I was greeted by a terminal console upon booting the kernel. With <a class="external" href="https://www.archlinux.org/packages/?sort=&amp;arch=i686&amp;repo=Community&amp;repo=Core&amp;repo=Extra&amp;repo=Multilib&amp;q=&amp;maintainer=&amp;flagged=">5,013 packages in the 32 bit stable repositories</a> (compare that to <a class="external" href="https://packages.debian.org/stable/allpackages?format=txt.gz">Debian Stable's 56,865</a>), I was not getting very far by relying on the built-in package manager <code>pacman</code>. <a class="external" href="https://aur.archlinux.org/packages/?O=0&amp;SeB=nd&amp;K=&amp;outdated=off&amp;SB=n&amp;SO=a&amp;PP=50&amp;do_Search=Go">The package count increased another 27,023</a> once I began using the Arch Users Repository (AUR) scripts.</p> <p>After installing a few packages, I realized Arch's greatest weaknesses: customizability and project collaboration. Arch is like a snowflake - no two systems are exactly alike. From a SysAdmin's viewpoint, I can't determine what state the operating system is just by looking at it. In certain circumstances where time is of the most urgent matter, one cannot spend time comparing program versions with unknown and known bugs. I envision managing two or more devices would be quite painful in the long run.</p> <p>Project collaboration is still in the early stages. With two great AUR package managers (<code>yaourt</code> and <code>cower</code>) and the realization that neither have been pushed to upstream, I have an eerie feeling that <a class="external" href="https://xkcd.com/927/">xkcd's standards statement</a> is at play in the Arch environment.</p> <p>**For those that do not know how collaboration works, here is a quick overview:**I use project A. Project A is lacking feature B. I fork project A, write feature B, and continue using project A with feature B. If people other than myself can benefit from feature B, I push my changes to upstream. If my changes are not accepted in mainstream, I have two choices: keep feature B to myself or write feature B to match upstream's policy.</p> <p>**This is how not to collaborate:**Project A is missing feature B. I fork project A, call it project V, write feature B, C, and D with a wrapper for project A. If somebody wants feature E in project A, tell them to use project C which is a fork/clone of project V.</p> <p>Contrary to public thinking, Arch is not a GNU/Linux distribution geared towards intermediate to advanced users. It is a primitive distribution that only intermediate-level and above understand. We understand the basics of how to compile a program and how to find the one line command to run that is nested in 5 sub-links on the wiki. We overlook the high level of expert documentation that isn't spelled out clearly, gives a recommended setting to new users, or in some cases doesn't actually tell you how to do what you are seeking to do.</p> <p>I claim Arch is still primitive because when I was installing packages, I felt like a caveman digging up <code>xf86-input-mouse</code> after I installed <code>gdm</code> and GNOME 3. (A clever person might think that would be at least a requirement of one of the packages that installs rather than an optional one - Oh, wait - GUI is never used by anybody on a desktop.) It might be that I was spoiled by reading <a class="external" href="https://wiki.gentoo.org/wiki/Handbook:Main_Page">Gentoo's Handbook</a> back when I was a noob and trying out an advanced distribution, or it could be that I have used distributions that have worked out all of these kinks for too long, but making GNU/Linux users dig like cavemen to find appropriate packages is harmful towards our primary objective: dominating the desktop OS marketplace.</p> <p>Even with these prominent issues, Arch will probably stay installed on my Acer C710 for awhile - at least until Fedora 23 becomes stable.</p> 2015-09-19T21:46:47+00:00 2015-09-19T21:46:47+00:00 Andrew Wippler /2015-09-19-jumping-on-the-arch-bandwagon/ <p>Well, after avoiding it for a few years, I have decided to install the Arch GNU/Linux distribution on my Acer C710. At first glance, it was nice to just install the necessary packages and have a working system within 20 minutes. The downside to having everything up and running in 20 minutes is that I did not install the base packages that come with most distributions - such as a GUI terminal program (i.e. <code>gnome-terminal</code>). That was OK since I still had my favorite tty - 3. I am going to miss the delta packages (DRPMS) from Fedora as I particularly enjoy saving bandwidth.</p> <p>Installing Arch was pretty simple compared to Gentoo or Funtoo, but not as simple as Fedora or Ubuntu. In Ubuntu, you load a LiveDVD, click the install icon on the desktop and follow the prompts. In Arch, you are presented with a terminal and are not given much instruction. The basic steps are to partition your drive, create a filesystem, mount your root partition as <code>/mnt</code>, run the package initializer, and chroot into the environment. In other words, it is as simple as:</p> <pre class="z-code"><code><span class="z-text z-plain">fdisk /dev/sda </span><span class="z-text z-plain">mkfs.ext4 /dev/sda2 </span><span class="z-text z-plain">mount /dev/sda2 /mnt </span><span class="z-text z-plain">pacstrap /mnt base </span><span class="z-text z-plain">genfstab -p /mnt &gt;&gt; /mnt/etc/fstab </span><span class="z-text z-plain">arch-chroot /mnt </span><span class="z-text z-plain">echo wipplertop &gt; /etc/hostname </span><span class="z-text z-plain">ln -sf /usr/share/zoneinfo/America/Los_Angeles /etc/localtime </span><span class="z-text z-plain">sed -i &#39;s/^#en_US.UTF-8$/en_US.UTF-8/g&#39; /etc/locale.gen </span><span class="z-text z-plain">locale-gen </span><span class="z-text z-plain">echo LANG=en_US.UTF-8 &gt; /etc/locale.conf </span><span class="z-text z-plain">mkinitcpio -p linux </span><span class="z-text z-plain">passwd </span><span class="z-text z-plain">useradd -m andrew </span><span class="z-text z-plain">passwd andrew </span><span class="z-text z-plain">pacman -S grub os-prober </span><span class="z-text z-plain">grub-install --recheck /dev/sda </span><span class="z-text z-plain">grub-mkconfig -o /boot/grub/grub.cfg </span><span class="z-text z-plain">exit </span><span class="z-text z-plain">reboot </span></code></pre> 2015-08-30T22:41:50+00:00 2015-08-30T22:41:50+00:00 Andrew Wippler /2015-08-30-expect-with-expect/ <p>Wouldn't it be nice to program a script that expects a certain line of text then sends a predetermined string? How about copy your ssh id to 40 different RPi units without typing the command for every one? Expect is that sort of program we all have been dreaming about. Just look at this script:</p> <pre class="z-code"><code><span class="z-text z-plain">#!/usr/bin/expect -f </span><span class="z-text z-plain"> </span><span class="z-text z-plain">set timeout 3 </span><span class="z-text z-plain">set serv [lindex $argv 0]; </span><span class="z-text z-plain"> </span><span class="z-text z-plain">spawn ssh-copy-id pi@$serv </span><span class="z-text z-plain">sleep 4 </span><span class="z-text z-plain">expect &quot;Are you sure you want to continue connecting (yes/no)?&quot; </span><span class="z-text z-plain">send &quot;yes\r&quot; </span><span class="z-text z-plain">expect &quot;pi@{$serv}&#39;s password: &quot; </span><span class="z-text z-plain">send &quot;p@ssw0rd\r&quot; </span><span class="z-text z-plain">interact </span></code></pre> <p>When this block of code is saved as <code>copy_pi.sh</code> and invoked as <code>./copy_pi.sh 192.168.1.42</code>, it will attemp to connect as the pi user, copy the current public key, say yes to the prompt, send the password (provided it is escaped properly), and drop you into the process you spawned.</p> <p>Now, let's look at the script in more detail as to what expect has to offer.</p> <pre class="z-code"><code><span class="z-text z-plain">#!/usr/bin/expect -f </span></code></pre> <p>This line has to be the absolute path of expect with the <code>-f</code> switch. This is to tell the program that it is being passed a file with a list of commands. On Debian/Fedora, this path is where <code>expect</code> is located. On other systems, you will need to run <code>which expect</code> to find the absolute location.</p> <pre class="z-code"><code><span class="z-text z-plain">set timeout 3 </span><span class="z-text z-plain">set serv [lindex $argv 0]; </span></code></pre> <p>The first line tells <code>expect</code> to wait up to 3 seconds for a new line before it times out. The second line is grabbing the variable being passed into this script. Normally, one would think arg 0 would be the name of the program (i.e. <code>copy_pi.sh</code>); however, <code>expect</code> captures the variables into <code>$argv</code> (<code>$argc</code> is the length of the variables).You can also specify a range of variables into one: <code>set range [lrange $argv 0 2];</code></p> <pre class="z-code"><code><span class="z-text z-plain">spawn ssh-copy-id pi@$serv </span><span class="z-text z-plain">sleep 4 </span></code></pre> <p>This is we are initializing the process of copying our ssh key to <code>$serv</code>. This is the part we would normally be typing ourselves. <code>sleep 4</code> tells expect to wait 4 seconds before continuing.</p> <pre class="z-code"><code><span class="z-text z-plain">expect &quot;Are you sure you want to continue connecting (yes/no)?&quot; </span><span class="z-text z-plain">send &quot;yes\r&quot; </span><span class="z-text z-plain">expect &quot;pi@{$serv}&#39;s password: &quot; </span><span class="z-text z-plain">send &quot;p@ssw0rd\r&quot; </span><span class="z-text z-plain">interact </span></code></pre> <p>The <code>expect</code> line could either be regex or what will be exactly shown. Since I know exactly what will appear in the process, I have chosen to go that route. The <code>send</code> command is transmitting the text into the spawned program. Special characters such as &amp; need to be escaped with a backslash. The <code>\r</code> simulates a carriage return (enter key). Since the <code>ssh-copy-id</code> is completed by the time <code>interact</code> is called, you will not be in the remote pi's shell. I have sometimes found it necessary to include <code>interact</code> so that the password is actually sent.</p> <p><code>expect</code> is a great tool that uses TCL syntax. <code>expect</code> has prooved useful to me many times over - especially when I had to re-key my puppet deployment after Heartbleed.</p> 2015-08-16T22:02:52+00:00 2015-08-16T22:02:52+00:00 Andrew Wippler /2015-08-16-the-arrow-law/ <p>When I first started out with Linux, I was having trouble understanding the basic commands such as <code>ln</code>, andrew<code>mv</code>, <code>scp</code>, <code>rsync</code>, etc. What got me with those commands was the SOURCE and DEST options until I figured out the arrow law.</p> <p>A typical <code>rsync</code> command looks like this:</p> <pre class="z-code"><code><span class="z-text z-plain">rsync -av /home/andrew/file1.txt /opt/andrew/file2.txt </span></code></pre> <p>Where as a basic tar command looks like this:</p> <pre class="z-code"><code><span class="z-text z-plain">tar -cJf tarfile.xz /home/andrew/file1.txt </span></code></pre> <p>In the <code>rsync</code> example, the SOURCE came first. In the <code>tar</code> example, the DEST came first. Did I really have to learn every command to know which order my commands were supposed to be in?</p> <p>There are a few quirks, but most commands follow the arrow law:<code>-&gt;</code> . SOURCE should come first - then DEST.</p> <p>To place the <code>tar</code> command in the arrow law way, we would write the command like the example below. Tar allows the use of multiple source locations in the form of files or folders. Each source is then compress and place in the file.</p> <pre class="z-code"><code><span class="z-text z-plain">tar -cJ /home/andrew/file1.txt /opt /folder -f files.xz </span></code></pre> <p>At a glance, one should easily recognize that the <code>-f</code> indicates the DEST/SOURCE file to be worked on by the <code>tar</code> command. Thus by typing the extraction command as the below is following the arrow law.</p> <pre class="z-code"><code><span class="z-text z-plain">tar -xvJf files.xz </span></code></pre> <p>The command that really confused me the most was the <code>ln</code>. By using the arrow law, it was easy to figure this one out. (note: in the below example <code>-s</code> is the option for making a symbolic link - not to indicate the source.)</p> <pre class="z-code"><code><span class="z-text z-plain">ln -s /opt /home/andrew/opt </span></code></pre> <p>In human readable terms, the above command means the following: take <code>/opt</code> and make it accessible by going to <code>/home/andrew/opt</code>.</p> 2015-08-08T22:38:59+00:00 2015-08-08T22:38:59+00:00 Andrew Wippler /2015-08-08-installing-fonts-on-windows-using-puppet/ <p>I was recently tasked to install a group of fonts on windows systems. In order to do it the Internet way, you have to:</p> <ol> <li>Install the font on a system</li> <li>Export the registry file</li> <li>Create a GPO</li> <li>Place the font in an accessible location (domain readable)</li> <li>Make sure the GPO has the .reg and the font file installing</li> <li>Reboot the machine 2-3 times</li> </ol> <p>Some have also suggested to install fonts via a packaged .msi - Something I also tried which did not work. Since my machines already have puppet installed, I went that route.</p> <pre class="z-code"><code><span class="z-text z-plain">mkdir fonts/files/ #where the FontReg file resides </span><span class="z-text z-plain">mkdir fonts/files/fonts #where the fonts reside </span><span class="z-text z-plain">mkdir fonts/manifests/ #where the below init.pp file resides </span><span class="z-text z-plain"> </span></code></pre> <p>Contents of init.pp are below:</p> <pre class="z-code"><code><span class="z-text z-plain"> </span><span class="z-text z-plain">class fonts { </span><span class="z-text z-plain"> </span><span class="z-text z-plain">case $operatingsystem { </span><span class="z-text z-plain"> windows: { </span><span class="z-text z-plain"> exec { &#39;FontReg&#39;: </span><span class="z-text z-plain"> command =&gt; &#39;C:\Windows\FontReg.exe&#39;, </span><span class="z-text z-plain"> path =&gt; $::path, </span><span class="z-text z-plain"> refreshonly =&gt; true, </span><span class="z-text z-plain"> require =&gt; File[&#39;C:\Windows\FontReg.exe&#39;], </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> exec { &#39;FixFonts&#39;: </span><span class="z-text z-plain"> command =&gt; &#39;cmd.exe /c C:\Windows\font_ownership.bat&#39;, </span><span class="z-text z-plain"> path =&gt; $::path, </span><span class="z-text z-plain"> refreshonly =&gt; true, </span><span class="z-text z-plain"> require =&gt; File[&#39;C:\Windows\font_ownership.bat&#39;], </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> file { &#39;C:\Windows\font_ownership.bat&#39;: </span><span class="z-text z-plain"> ensure =&gt; present, </span><span class="z-text z-plain"> notify =&gt; Exec[&quot;FixFonts&quot;], </span><span class="z-text z-plain"> source_permissions =&gt; ignore, </span><span class="z-text z-plain"> content =&gt; &quot;attrib -r -s c:\Windows\Fonts </span><span class="z-text z-plain">takeown /f c:\Windows\Fonts /r /d n </span><span class="z-text z-plain">cacls c:\Windows\Fonts /e /t /g users:c </span><span class="z-text z-plain">cacls c:\Windows\System32\FNTCACHE.DAT /e /t /g users:c&quot;, </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> file { &#39;C:\Windows\FontReg.exe&#39;: </span><span class="z-text z-plain"> source =&gt; $architecture ? { </span><span class="z-text z-plain"> &quot;x86&quot; =&gt; &quot;puppet:///modules/fonts/FontReg32.exe&quot;, </span><span class="z-text z-plain"> &quot;x64&quot; =&gt; &quot;puppet:///modules/fonts/FontReg64.exe&quot;, </span><span class="z-text z-plain"> default =&gt; &quot;unsupported architecture&quot; </span><span class="z-text z-plain"> }, </span><span class="z-text z-plain"> source_permissions =&gt; ignore, </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> $fonts = [&quot;font-name1.otf&quot;,&quot;fontname2.ttf&quot;]; </span><span class="z-text z-plain"> $fonts.each |$font| { </span><span class="z-text z-plain"> file {&quot;C:\\Windows\\Fonts\\${font}&quot;: </span><span class="z-text z-plain"> source =&gt; &quot;puppet:///modules/fonts/fonts/${font}&quot;, </span><span class="z-text z-plain"> ensure =&gt; present, </span><span class="z-text z-plain"> notify =&gt; Exec[&quot;FontReg&quot;], </span><span class="z-text z-plain"> require =&gt; [File[&#39;C:\Windows\FontReg.exe&#39;],File[&#39;C:\Windows\font_ownership.bat&#39;],], </span><span class="z-text z-plain"> source_permissions =&gt; ignore </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> } </span><span class="z-text z-plain"> </span><span class="z-text z-plain">} </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span></code></pre> <h3 id="required-programs">Required programs:</h3> <ul> <li>FontReg - <a class="external" href="http://code.kliu.org/misc/fontreg/">http://code.kliu.org/misc/fontreg/</a></li> <li>Puppet Future Parser (3.7.5+)</li> </ul> <h3 id="known-limitations">Known Limitations</h3> <ul> <li>In order to actually place the files on UAC systems, you have to take ownership of the font folder. This is done in the puppet script.</li> <li>I am using an iterator because there are some fonts that are installed on your system which prevent overwriting (even after you forcibly take ownership of the folder). ADP.ttf ... I am looking at you!</li> </ul> 2015-08-02T22:05:43+00:00 2015-08-02T22:05:43+00:00 Andrew Wippler /2015-08-02-installing-teamviewer-over-ssh/ <p>The recommended way to install TeamViewer is from a desktop environment using a package manager such as Synaptic, Yum, or apt-get. Sometimes you find yourself in a circumstance when ssh is the only way you have access to your server. This tutorial will help you get it installed on Ubuntu Server 14.04.2.</p> <p>As a reminder, TeamViewer is free for personal use. If you are using TeamViewer for commercial purposes - PURCHASE A LICENSE! Purchasing a license ensures TeamViewer will be available for years to come.</p> <p>First of all, download the latest teamviewer.</p> <pre class="z-code"><code><span class="z-text z-plain">wget http://download.teamviewer.com/download/teamviewer_i386.deb </span></code></pre> <p>Next, update your apt sources.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo apt-get update </span></code></pre> <p>TeamViewer needs a desktop manager and desktop environment to run. The Ubuntu Server edition does not have a GUI. The below command makes the server edition turn into the desktop edition and installs a command line page installer.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo apt-get install ubuntu-desktop gdebi -y </span></code></pre> <p>Next, install teamviewer with the following command. I like using gdebi because you do not have to run <code>sudo apt-get install -f</code> to fix dependencies.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo gdebi teamviewer_i386.deb </span></code></pre> <p>TeamViewer is now installed, but we have to jump through a few hoops to get it to allow us to remotely conenct. The first configuration we have to do is set up a password and then we need to enable the TeamViewer daemon. Both of these steps can be accomplished by doing the following:</p> <pre class="z-code"><code><span class="z-text z-plain">#set up teamviewer&#39;s password </span><span class="z-text z-plain">sudo teamviewer passwd password946 </span><span class="z-text z-plain"> </span><span class="z-text z-plain">#make teamviewer start at boot and start if it is not currently running </span><span class="z-text z-plain">sudo teamviewer daemon enable </span></code></pre> <p>At this point, you will be able to get your TeamViewer ID by running <code>sudo teamviewer info</code>; however, if you try to connect now, it will time out after you log in to your desktop environment. This is because TeamViewer requires the end user to accept their EULA. Since we installed TeamViewer over ssh, we were never prompted to accept the EULA. If you were to watch the monitor of the server, you would see the EULA be presented (as seen below), but not shown on the TeamViewer session. <a href="/2015/10/teamviewer-eula.png"><img src="/2015/10/teamviewer-eula.png" alt="" /></a></p> <p>To get past the license agreement, you can accept it by running the following command and answering the question with a <code>y</code>.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo teamviewer license </span></code></pre> <p>You can now TeamViewer to your host, use the specified password you set above, log in to your desktop environment, and enjoy accessing your GUI over TeamViewer. Remember to play fair.</p> 2015-07-26T22:35:41+00:00 2015-07-26T22:35:41+00:00 Andrew Wippler /2015-07-26-setting-the-io-scheduler-for-a-single-disk-on-fedora/ <p>You can set your IO scheduler on-the-fly by echoing the scheduler you want into <code>/sys/block/{DEVICE-NAME}/queue/scheduler</code>. This setting, however, does not persist across system reboots. The legacy method is to place this command in <code>/etc/rc.local</code> or by placing an elevator variable in <code>grub.cfg</code>.</p> <p>Beginning with Fedora 20, a better way of tuning your system has emerged: <code>tuned</code>.</p> <p><code>tuned</code> is a daemon that monitors your system and updates it based upon the variables at that moment. For instance, it will scale back your network interface - reducing power consumption - when it is not in use and will return it to full throttle when you are downloading the latest Fedora ISO. Enabling <code>tuned</code> on Fedora 22 is as simple as:</p> <pre class="z-code"><code><span class="z-text z-plain">sudo dnf install tuned </span><span class="z-text z-plain">systenctl enable tuned </span><span class="z-text z-plain">systemctl start tuned </span></code></pre> <p><code>tuned</code> comes pre-installed with default profiles (listed by running <code>tuned-adm list</code>). By default the IO scheduler is set for all disks on the system. Since this is not the behavior we intend, nor the result we want, we will have to create our own profile for <code>tuned</code>.</p> <p>System profiles are stored in <code>/usr/lib/tuned</code> and custom profiles are stored in <code>/etc/tuned</code>. Creating a custom profile is as simple as finding the recommended for your system, copying it to a new profile, editing it, and applying it.</p> <pre class="z-code"><code><span class="z-text z-plain">sudo mkdir /etc/tuned/andrewwippler </span><span class="z-text z-plain">sudo cp /usr/lib/tuned/$(tuned-adm recommend)/tuned.conf /etc/tuned/andrewwippler/tuned.conf </span><span class="z-text z-plain"> </span></code></pre> <p><code>tuned.conf</code> has a simple structure:</p> <pre class="z-code"><code><span class="z-text z-plain">[NAME] </span><span class="z-text z-plain">type=TYPE </span><span class="z-text z-plain">devices=DEVICES </span><span class="z-text z-plain">setting1=value </span><span class="z-text z-plain">setting2=value </span><span class="z-text z-plain">... </span></code></pre> <p>In the event of your <code>NAME</code> being the same as the <code>TYPE</code>, you can omit the type line. For example, a normal disk declaration looks like this:</p> <pre class="z-code"><code><span class="z-text z-plain">[disk] </span><span class="z-text z-plain"># Comma separated list of devices, all devices if commented out. </span><span class="z-text z-plain"># devices=sda </span><span class="z-text z-plain">alpm=medium_power </span><span class="z-text z-plain"> </span></code></pre> <p>Now all we have to do is append our declaration to <code>/etc/tuned/andrewwippler/tuned.conf</code> for sda's elevator switch and enable it.</p> <pre class="z-code"><code><span class="z-text z-plain">[my_ssd_disk] </span><span class="z-text z-plain">type=disk </span><span class="z-text z-plain">devices=sda </span><span class="z-text z-plain">elevator=noop </span></code></pre> <p>I can then enable my custom tuned profile by running <code>tuned-adm profile andrewwippler</code>.</p> 2015-07-18T22:12:35+00:00 2015-07-18T22:12:35+00:00 Andrew Wippler /2015-07-18-send-aliases-over-ssh-connections/ <p>Bash reads aliases from a file only; however, this file does not have to reside on the server you are connecting to. With OpenSSH, we have to ability to send environment variables that the server allows.</p> <pre class="z-code"><code><span class="z-text z-plain">On Debian/Ubuntu systems, the default accept environment variables are: </span><span class="z-text z-plain"># Allow client to pass locale environment variables </span><span class="z-text z-plain">AcceptEnv LANG LC_* </span><span class="z-text z-plain"> </span><span class="z-text z-plain">On CentOS/Fedora systems, the default accept environment variables are: </span><span class="z-text z-plain"># Accept locale-related environment variables </span><span class="z-text z-plain">AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES </span><span class="z-text z-plain">AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT </span><span class="z-text z-plain">AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE </span><span class="z-text z-plain">AcceptEnv XMODIFIERS </span><span class="z-text z-plain"> </span></code></pre> <p>If you remote into a mixed environment of servers - whether they be Debian, Ubuntu, or CentOS, you will need to find a common <code>AcceptEnv</code> variable. Since Debian and Ubuntu allow LC_* (everything with the prefix LC_), we are limited to forwarding our aliases over one of CentOS's variables. For me, it was easy to decide on a variable to overwrite - <code>LC_PAPER</code>. I hardly print anything and I especially do not print on remote servers.</p> <p>In order to send your aliases into a remote server, you have to set up your environment first.</p> <p>In <code>~/.ssh/config</code>, you need a line that sends the environment variable of your choice. These two lines denote that for every host, we will send the environment variable.</p> <pre class="z-code"><code><span class="z-text z-plain">Host * </span><span class="z-text z-plain"> SendEnv LC_PAPER </span><span class="z-text z-plain"> </span></code></pre> <p>Next, we will have to set an alias file we want to transfer. For my test, I create <code>~/.bash_aliases_xfer</code> and had the contents of:</p> <pre class="z-code"><code><span class="z-text z-plain"># .bash_aliases_xfer </span><span class="z-text z-plain"># Source global definitions </span><span class="z-text z-plain">if [ -f /etc/bashrc ]; then </span><span class="z-text z-plain"> . /etc/bashrc </span><span class="z-text z-plain">fi </span><span class="z-text z-plain">alias lollypop=&quot;echo lollypop&quot; </span><span class="z-text z-plain">alias lolp=&quot;lollypop&quot; </span><span class="z-text z-plain">#My servers display useful information in the motd. </span><span class="z-text z-plain">[ ! -z &quot;$TERM&quot; -a -r /etc/motd ] &amp;&amp; cat /etc/motd </span><span class="z-text z-plain"> </span></code></pre> <p>Next, we have to craft our ssh command:</p> <pre class="z-code"><code><span class="z-text z-plain">LC_PAPER=$(cat ~/.bash_aliases_xfer; exec 3&lt;&amp;-) \ </span><span class="z-text z-plain">ssh -t user@remote \ </span><span class="z-text z-plain"> &#39;exec bash --rcfile /dev/fd/3 3&lt; &lt;(printf %s &quot;$LC_PAPER&quot;)&#39; </span><span class="z-text z-plain"> </span></code></pre> <p>The first line defines the environment variable - an output of our local file and places that information in file descriptor 3. The second line is where we actually connect to the server. The third line is the command executed on the remote server: cleanly print the contents of our environment variable, put that information in file descriptor 3, and reload bash with that file as the only configuration file.</p> <p>To make the process easier, I have place the following function in my .bashrc. Since the function has $@ variable, I can use it as a replacement to ssh and I can pass any needed ssh switches to my new function.</p> <pre class="z-code"><code><span class="z-text z-plain">function ssha() { </span><span class="z-text z-plain">LC_BASHRC=$(cat ~/.bash_aliases_xfer; exec 3&lt;&amp;-) ssh -t &quot;$@&quot; &#39;exec bash --rcfile /dev/fd/3 3&lt; &lt;(printf %s &quot;$LC_BASHRC&quot;)&#39;; </span><span class="z-text z-plain">} </span><span class="z-text z-plain"> </span></code></pre> <p>After I reload my bashrc ( <code>source ~/.bashrc</code> ), I can then pass my aliases into my new ssh session: <code>ssha user@remote -i ~/.ssh/remote_id -X</code>.</p> 2015-07-06T22:30:02+00:00 2015-07-06T22:30:02+00:00 Andrew Wippler /2015-07-06-kodi-shutdown-script/ <p>I am currently using 14.2 of Kodi on my home media center. In order to save money and energy, our rule of thumb is to keep the media center powered off during the night. At first thought, it would make sense to use Kodi's built-in sleep function; however, it gets too mundane to open the setting option <em>every time</em> you want to watch something on the media center. Our second choice was to install a cron job to shutdown every night before we went to sleep. Our trouble with this aspect is that while we normally would be in bed before 2230, sometimes our kids would not fall asleep until 2100. This would make our together time begin later than normal. If we chose to watch a movie in our together time, we often found out we had to restart our media center just to get the last 5 minutes of the movie.</p> <p>This led to our third and optimal solution: find a script to do the job or make one. I searched and could not find an already made script that did what I want:</p> <ol> <li>Initiate a shutdown at a certain time</li> <li>Do not interrupt viewing when a video is playing past the certain time</li> </ol> <p>With those criteria, I was able to make the following bash script and placed it in my crontab:</p> <pre class="z-code"><code><span class="z-text z-plain">#!/bin/bash </span><span class="z-text z-plain">#set up curl env </span><span class="z-text z-plain">#username= #good idea to have one </span><span class="z-text z-plain">#password=#good idea to have one </span><span class="z-text z-plain">baseurl=http://127.0.0.1:8080/jsonrpc </span><span class="z-text z-plain">curl_cmd=&quot;curl --user ${username}:${password} --silent &quot; #remove --user ${username}:${password} if you do not have one set up </span><span class="z-text z-plain"> </span><span class="z-text z-plain">#Retun playerid </span><span class="z-text z-plain">#for the json command to work with kodi, the json format has to be &#39;{&quot;key&quot;:&quot;value&quot;}&#39; </span><span class="z-text z-plain">${curl_cmd} -H &quot;Content-Type: application/json&quot; --data &#39;{&quot;jsonrpc&quot;: &quot;2.0&quot;, &quot;method&quot;: &quot;Player.GetActivePlayers&quot;, &quot;id&quot;: 1}&#39; $baseurl &gt; /tmp/kodiOutput </span><span class="z-text z-plain"> </span><span class="z-text z-plain">#if playerid is found, run the scripts, otherwise, shutdown now </span><span class="z-text z-plain">if grep --quiet playerid /tmp/kodiOutput; then </span><span class="z-text z-plain"> #Get necessary items </span><span class="z-text z-plain"> ${curl_cmd} -H &quot;Content-Type: application/json&quot; --data &#39;{&quot;jsonrpc&quot;: &quot;2.0&quot;, &quot;method&quot;: &quot;Player.GetProperties&quot;, &quot;params&quot;: { &quot;playerid&quot;: 1, &quot;properties&quot;: [&quot;time&quot;] }, &quot;id&quot;: 1}&#39; $baseurl &gt; /tmp/kodiCurrent.json </span><span class="z-text z-plain"> ${curl_cmd} -H &quot;Content-Type: application/json&quot; --data &#39;{&quot;jsonrpc&quot;: &quot;2.0&quot;, &quot;method&quot;: &quot;Player.GetProperties&quot;, &quot;params&quot;: { &quot;playerid&quot;: 1, &quot;properties&quot;: [&quot;totaltime&quot;] }, &quot;id&quot;: 1}&#39; $baseurl &gt; /tmp/kodiTotal.json </span><span class="z-text z-plain"> </span><span class="z-text z-plain"> #Convert time </span><span class="z-text z-plain"> CHOURS=$[$(cat /tmp/kodiCurrent.json | awk -F: -v RS=&quot;,&quot; &#39;/&quot;hours&quot;/ {print $4}&#39;)*60] </span><span class="z-text z-plain"> CMINS=$[$(cat /tmp/kodiCurrent.json | awk -F: -v RS=&quot;,&quot; &#39;/&quot;minutes&quot;/ {print $2}&#39;)] </span><span class="z-text z-plain"> THOURS=$[$(cat /tmp/kodiTotal.json | awk -F: -v RS=&quot;,&quot; &#39;/&quot;hours&quot;/ {print $4}&#39;)*60] </span><span class="z-text z-plain"> TMINS=$[$(cat /tmp/kodiTotal.json | awk -F: -v RS=&quot;,&quot; &#39;/&quot;minutes&quot;/ {print $2}&#39;)+5] #adding 5 minutes to the shutdown time to overlap for remaining seconds and milliseconds that may be present. </span><span class="z-text z-plain"> REMAININGSECONDS=$[$[$THOURS+$TMINS]-$[$CHOURS+$CMINS]] </span><span class="z-text z-plain"> sleep $REMAININGSECONDS </span><span class="z-text z-plain"> sleep 300 </span><span class="z-text z-plain"> $0 </span><span class="z-text z-plain">else </span><span class="z-text z-plain"> shutdown -h now &amp; </span><span class="z-text z-plain">fi </span></code></pre> <h3 id="required-programs">Required programs:</h3> <ul> <li>curl</li> <li>awk</li> <li>cat</li> <li>grep</li> </ul> <h3 id="known-limitations">Known Limitations</h3> <ul> <li>The Kodi web interface has to be enabled.</li> <li>You have 5 minutes after the script was launched from cron to queue another video.</li> </ul> 2015-06-25T04:41:44+00:00 2015-06-25T04:41:44+00:00 Andrew Wippler /about/ <p><em>Andrew Wippler's Sketchpad</em> is where I express my interests. I love Jesus, my family, and technology. <em>My current interests are:</em> (in no particular order)</p> <ul> <li>Nicole and my 4 children</li> <li>Linux</li> <li>Fedora</li> <li>Internet Safety</li> <li>Amazon Web Services (AWS - same initials as this website :) )</li> <li>Coding</li> <li>Church Management</li> <li>SQL</li> <li>Open Source</li> <li>Vi/Vim</li> <li>Reading</li> <li>Documentation</li> </ul> <p><em>From time-to-time</em> I will post articles about things I am working on, have done, or something I want to do. My philosophy on technology is - Stay with the known. By this, I mean when new technology arises, keep it in training or development until it has become understood and known - then place it into production.</p> <p><em>I formerly held the position</em> of Director of Information Technology at Lancaster Baptist Church. I have done some interesting things such as: Setting up a controller website for OpenSprinkler units, replacing digital signage, replacing a room reservation system, setting up a Puppet environment, deploying network monitoring solutions, and devising ways to cut costs.</p> <p><em>I am licensing</em> this entire website's content under the Creative Commons Attribution-ShareAlike 4.0 International License. Feel free to share any articles or use the code in your own work as long as you link back to the article in which you found it on this website or (if applicable) link it to the project on github.</p> 2015-06-11T22:25:42+00:00 2015-06-11T22:25:42+00:00 Andrew Wippler /2015-06-11-named-virtual-hosts-on-aws-ec2/ <p>Named virtual hosts are not enabled by default on an Amazon AMI. To enable them, edit /etc/httpd/conf/httpd.conf and uncomment line 991:</p> <pre class="z-code"><code><span class="z-text z-plain">NameVirtualHost *:80 </span></code></pre> <p>You can then begin adding your named virtual hosts in the /etc/httpd/conf.d/ directory. Below is an example of a named virtual host file:</p> <pre class="z-code"><code><span class="z-text z-plain">&lt;VirtualHost *:80&gt; </span><span class="z-text z-plain"> ServerAdmin me@example.com </span><span class="z-text z-plain"> DocumentRoot /var/www/example.com </span><span class="z-text z-plain"> ServerName example.com </span><span class="z-text z-plain"> ServerAlias www.example.com </span><span class="z-text z-plain"> ErrorLog /var/log/httpd/error_example_com.log </span><span class="z-text z-plain"> CustomLog /var/log/httpd/access_example_com.log common </span><span class="z-text z-plain">&lt;/VirtualHost&gt; </span></code></pre> <p>The difference between a named virtual host and an IP-based virtual host is that you need an additional IP address on your server for each virtual host you want to implement. Named virtual hosts come in handy when you only have 1 external IP address or if you want to host multiple websites on the same web server.</p>