Paolo Barbolini paolobarbolini

FreeBSD on Hetzner Cloud VPS

This guide explains how to install the FreeBSD on Hetzner Cloud VPS. This might also work for other VPS providers with the proper rescue system in place.

Table of contents:

1. Rescue mode
2. Download and deploy FreeBSD
3. Post-installation

1. Rescue mode

Alpine Linux installation on Hetzner Cloud VPS

(Arm64/IPv6-only)

This guide describes how to install Alpine Linux on Hetzner Cloud VPS CAX ARM64 Servers with IPv6-only setup.

Table of contents:

Introduction

58 bytes of CSS to look great nearly everywhere

When making this website, i wanted a simple, reasonable way to make it look good on most displays. Not counting any minimization techniques, the following 58 bytes worked well for me:

main {
  max-width: 38rem;
  padding: 2rem;
  margin: auto;
}

Nginx TLS SNI routing, based on subdomain pattern

Nginx can be configured to route to a backend, based on the server's domain name, which is included in the SSL/TLS handshake (Server Name Indication, SNI).
This works for http upstream servers, but also for other protocols, that can be secured with TLS.

prerequisites

at least nginx 1.15.9 to use variables in ssl_certificate and ssl_certificate_key.
check nginx -V for the following:
```
...
TLS SNI support enabled
```

Install Golang 1.9:

wget https://storage.googleapis.com/golang/go1.9.linux-armv6l.tar.gz
sudo tar -C /usr/local -xzf go1.9.linux-armv6l.tar.gz
export PATH=$PATH:/usr/local/go/bin # put into ~/.profile

If already installed old golang with apt-get:

	// I'm tired of extensions that automatically:
	// - show welcome pages / walkthroughs
	// - show release notes
	// - send telemetry
	// - recommend things
	//
	// This disables all of that stuff.
	// If you have more config, leave a comment so I can add it!!

	{

	[[source]]
	url = "https://pypi.org/simple"
	verify_ssl = true
	name = "pypi"

	[packages]
	requests = "*"

	[dev-packages]

	{
	...
	"scripts": {
	"start:web:prod": "npm run build:prod:web && http-server dist/apps/web -d -c-1 -a 0.0.0.0 --proxy http://127.0.0.1:4200? --port 4200",
	"start:web:prod:local": "npm run build:prod:web:local && http-server dist/apps/web -d -c-1 -a 0.0.0.0 --proxy http://127.0.0.1:4200? --port 4200",
	"build:prod:web": "ng build web --prod",
	"postbuild:prod:web": "npm run build:pwa:web",
	"build:prod:web:local": "ng build web --prod",
	"postbuild:prod:web:local": "npm run build:pwa:web:local",
	"build:pwa:web": "rimraf ./dist/apps/web/service-worker.js && webpack --config ./service-worker/webpack.prod.config.js --progress --colors && node ./workbox-build-inject.js",

	https://youtu.be/-C-JoyNuQJs?t=39m45s

	When I put the reference implementation onto the website I needed to
	put a software license on it.

	And I looked at all the licenses that were available, and there were a lot
	of them. And I decided that the one I liked the best was the MIT License,
	which was a notice that you would put on your source and it would say,
	"you're allowed to use this for any purpose you want, just leave the
	notice in the source and don't sue me."

	#!/bin/bash

	if [ "$#" -ne 1 ]; then
	echo
	echo "No hostname given to obtain certificate status"
	echo "\tuse: $0 www.example.com"
	echo
	exit 1
	fi