513  export nextube=10.10.10.1
514  curl -d '' http://$nextube/api/ping
515  curl http://$nextube/api/firmwareVersion
516  curl http://$nextube/api/hardwareVersion
517  curl http://$nextube'/api/file/download?path=/config.json'>nextube1.json
518  vi nextube1.json
520  curl http://$nextube'/api/file/df'
523  vi nextube1.json
526  curl -F file=@nextube1.json http://$nextube'/api/file/upload?path=/config.json'
527  curl -d '' http://$nextube/api/reset


{
"MMPM_MAGICMIRROR_ROOT": "/home/pi/MagicMirror"
"MMPM_MAGICMIRROR_URI": "http://172.16.X.X:8080/"
"MMPM_MAGICMIRROR_PM2_PROCESS_NAME": "MagicMirror"
"MMPM_MAGICMIRROR_DOCKER_COMPOSE_FILE": "."
"MMPM_IS_DOCKER_IMAGE": false
}

*$sudo reboot
* rotate screen (config.txt & lightdm.conf won't work)
$vi ~/MagicMirror/css/custom.css

 body {
        margin: 0;
	position: absolute;
 	transform: rotate(90deg);
 	transform-origin: bottom left;
	width: 100vh;
	height: 100vw;
	object-fit: cover;
	top: -100vw;
        visibility: visible;
 }

Just create a script, like this:

$cat ~/bin/pingtest.sh
!/bin/bash
rtt=$(ping -W 2 -c 1 $1 | grep rtt | gawk -F/ {'print $6}')
if [[ -n "$rtt" ]] ; then
echo '${color green}Up ('$rtt'ms)'
else
echo '${color red}'"Down"
aplay /usr/share/sounds/freedesktop/stereo/network-connectivity-lost.oga
fi

make it executable with:

$chmod +x ~/bin/pingtest.sh

A conky file could look like this:

$cat conky.ttxt
alignment tr
gap_y 0
maximum_width 390
minimum_size 390
update_interval 30
use_xft yes
xftfont Bitstream Vera Sans Mono:size=8
xftalpha 0.8
update_interval 10
draw_shades no
TEXT
${alignc}${time %Y-%m-%d %H:%M:%S Uhr}
${color white}8.9.9.9${alignr}9.9.9.9
${execpi 10 ~/bin/pingtest.sh 8.9.9.9}${alignr}${execpi 10 ~/bin/pingtest.sh 9.9.9.9}
${color white}8.1.1.1${alignr}1.1.1.1
${execpi 10 ~/bin/pingtest.sh 8.1.1.1}${alignr}${execpi 10 ~/bin/pingtest.sh 1.1.1.1}

Run everything:

$conky -o -c conky.ttxt

Result:

wasn't too hard. However the sound made me some headache. From the original SD card I could find out, that I had to modify /boot/config.txt and add:
dtparam=i2c_arm=on
dtparam=i2s=on
dtparam=spi=on
dtoverlay=pi3-disable-bt
dtoverlay=pi3-miniuart-bt
dtoverlay=rpi-proto

After reboot and enabling all audio outputs via alsamixer (a bit hidden), I was able to speak first time to snips. However in a ridiculous high pitch and too fast output. Playing around with sample rates in alsa didn't bring success, what worked was to switch to pulseaudio:
apt install pulseaudio
cat << EOF >>/etc/systemd/system/pulseaudio.service
[Unit]
Description=PulseAudio system-wide server
#network only required for remote sinks
After=network-online.target
Wants=network-online.target
[Service]
Type=forking
PIDFile=/var/run/pulse/pid
ExecStart=/usr/bin/pulseaudio --daemonize --system --realtime --log-target=journal
ExecStop=/usr/bin/pulseaudio -k
[Install]
WantedBy=multi-user.target
EOF
systemctl --global disable pulseaudio.service pulseaudio.socket
systemctl enable --now pulseaudio
usermod -G pulse-access -a pi
usermod -G pulse-access -a _snips
systemctl restart snips-audio-server
cat << EOF >> /etc/asound.conf
pcm.pulse {
type pulse
}
ctl.pulse {
type pulse
}
pcm.default pulse
ctl.default pulse
echo default-sample-rate = 44100 >> /etc/pulse/daemon.conf

mca-ctrl -t dump-cfg

then find parts you want to change, in my case custom DNS entries (static IP mappings in GUI necessary) and a destiantion Nat für all DNS queries, example:

{
        "system": {
                "static-host-mapping": {
                        "host-name": {
                                "hostA.local": {
                                        "alias": [
                                                "hostA"
                                        ],
                                        "inet": [
                                                "192.168.32.64"
                                        ]
                                },
                                "hostB.local": {
                                        "alias": [
                                                "hostA.local"
                                        ],
                                        "inet": [
                                                "192.168.32.66"
                                        ]
                                }

                        }
                }
        },
         "service": {
                "nat": {
                        "rule": {
                                "76": {
                                        "description": "DNS catch for vlan 76",
                                        "destination": {
                                                "port": "53"
                                        },
                                        "inbound-interface": "eth1.76",
                                        "inside-address": {
                                                "address": "192.168.32.1"
                                        },
                                        "log": "enable",
                                        "protocol": "tcp_udp",
                                        "type": "destination"
                                }
                         }
                }
        }
}

Place this file under /var/lib/unifi/data/sites/default/config.gateway.json on the controller and provision USG via GUI.
You can check success by issuing: ```show nat translations``` on your USG. You will see a lot of entries from Google Home devices, as they ignore the DNS provided from DHCP. Next step would be to use DNS over TLS. To be continued...

Setup docker:

#pacman -S docker
#systemctl enable --now docker
#docker run -d --name ghost -p 2368:2368 -v /.../ghost:/var/lib/ghost/content ghost:1-alpine

Setup nginx:

#cat /etc/nginx/nginx/sites-enabled/default
...
location / {
               proxy_set_header   X-Real-IP $remote_addr;
               proxy_set_header   Host      $http_host;
               proxy_pass         http://127.0.0.1:2368;
}
...

Configure ghost for public site:

#docker exec -it ghost /bin/sh
#vi config.production.json

get Wordpress export

• install wp2ghost plugin and download json file
• goto https://example.org/ghost and under settings lab import json file

upgrade to latest ghost

#docker stop ghost
#docker rm ghost
#docker rmi ghost:1-alpine
#docker run -d --name ghost -p 2368:2368 -v /.../ghost:/var/lib/ghost/content ghost

convert pictures

#cp /.../wp-content/uploads/* /.../ghost/data/content/images
# docker stop ghost
#cp ghost.db ghst.db.bkp
# sqlite3 ghost.db
sqlite> .output changeme.sql
sqlite> .dump
sqlite> .exit
# /.../ghost/data # sed 's|wp-content/uploads|content/images|g' -i changeme.sql                                                                                                                                       :(
# /.../ghost/data # vi changeme.sql
# /.../ghost/data # sqlite3 g.db < changeme.sql

# cp g.db ghost.db
# docker start ghost

resize pics (dosn't work yet)

find . -type f -size +512k -name \*.jpg -print0 | xargs -0 mogrify -size 800

For Windows install:

• install vagrant official Vagrant website
• install virtualbox click
• install vagrant-spk vagrant-spk releases list

Setup Environment:

• vagrant-spk setupvm uswgi
• vi .sandstorm/setup.sh
• vagrant-spk vm up
• if vi .sandstorm/setup.sh again
  • vagrant-spk vm provision
• vagrant-spk init
• vi .sandstorm/sandstorm-pkgdef.capnp
• vi .sandstorm/launcher.sh
• vagrant-spk dev
• open http://local.sandstorm.io:6080/

debug:

• vagrant-spk vm ssh
• vagrant-spk enter-grain

installation

• wildcard DNS entry
• download latest: https://dl.sandstorm.io/sandstorm-.tar.gz
• download https://raw.githubusercontent.com/sandstorm-io/sandstorm/master/install.sh
• bash install.sh sandstorm-.tar.gz
• setup nginx for (wildcard-)ssl with certbot and point to 6080

app installation (AppMarket)

TODO

#/opt/openhab2/runtime/bin/client

openhab> log:set default openhab.binding.zwave  
openhab> log:tail zwave

Ok, so I am using homegear – they changed their policy, so source code for some parts are not available. As they are newly able to control nanoleaf, I desperatly needed to update it.

However, the former free part of enocean is not available anymore…

As only precompiled packages are available, I decided to use the provided docker Image.

 #pacman -S docker 
 #sytemctl start docker 
 #sytemctl enable docker

I downloaded the homegear docker image, however it was missing nanoleaf ofc…

Put config files into : /homegear-data

 # ls /homegear-data/*
 /homegear-data/etc:
 devices families homegear.csr homegear-start.sh main.conf mqtt.conf rpcclients.conf dh1024.pem homegear.crt homegear.key homegear-stop.sh main.conf.pacnew php.ini rpcservers.conf
 
 /homegear-data/lib: 
 admin-ui db.sql.bak0 db.sql.bak2 db.sql.bak4 db.sql.bak6 db.sql.bak8 db.sql-shm flows node-blue tmp db.sql db.sql.bak1 db.sql.bak3 db.sql.bak5 db.sql.bak7 db.sql.bak9 db.sql-wal modules scripts ui 
 
 /homegear-data/log: 
 homegear.err homegear.log homegear-scriptengine.err homegear-scriptengine.log 
 
 #cd 
 #git clone https://github.com/Homegear/Homegear-Docker/ nightly 
 #cd nightly 
 #vi installNightly.sh 
 installNightly.sh:
 downloadModule homegear-nanoleaf_current_${system}_${arch}.deb 
 installNightly.sh:
 installModule homegear-nanoleaf_current_${system}_${arch}.deb 
 #./buildImage.sh 
 #docker run -d --restart unless-stopped -v /homegear-data/etc:/etc/homegear:Z -v /homegear-data/lib:/var/lib/home gear:Z -v /homegear-data/log:/var/log/homegear:Z -e HOMEGEARUSER=root -e HOMEGEARGROUP=root -p 2001:2001 -p 2002:2002 -p 2003:2003 --device=/dev/ttyUSB300 --name homegear homegear/homegear:nightly 
 #docker exec -it homegear homegear -r add nanoleaf 
 #docker update --restart always homegear 
 #docker exec -it homegear homegear -e rc 'print_v($hg->getValue(19,1,BRIGHTNESS));'

openSCAP

# oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_common --report /tmp/report.html /usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml

arch-audit

# arch-audit