Compare commits
16
Commits
78384a31fb
..
master
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
345d66b5c9 | ||
|
|
b6ccb0c859 | ||
|
|
42a12d7ced | ||
|
|
a329511464 | ||
|
|
fc927eef63 | ||
|
|
7ed3b07ab4 | ||
|
|
0f2ab58f00 | ||
|
|
950c9a6aea | ||
|
|
414c300b41 | ||
|
|
a5ac19a2a4 | ||
|
|
78c0895418 | ||
|
|
8cbe7eecd3 | ||
|
|
9090da987f | ||
|
|
650e77210e | ||
|
|
16a45c495d | ||
|
|
08ae04a154 |
+1
-1
@@ -1,5 +1,5 @@
|
|||||||
# syntax=docker/dockerfile:1.4
|
# syntax=docker/dockerfile:1.4
|
||||||
FROM python:3-slim-bookworm AS builder
|
FROM python:3.12-slim-bookworm AS builder
|
||||||
|
|
||||||
# Second line optional/debug/qol
|
# Second line optional/debug/qol
|
||||||
RUN apt update && apt install -y \
|
RUN apt update && apt install -y \
|
||||||
|
|||||||
@@ -7,7 +7,7 @@ from app.models import User
|
|||||||
|
|
||||||
class LoginForm(FlaskForm):
|
class LoginForm(FlaskForm):
|
||||||
username = StringField('Username', validators=[DataRequired()])
|
username = StringField('Username', validators=[DataRequired()])
|
||||||
password = PasswordField('Pasword', validators=[DataRequired()])
|
password = PasswordField('Password', validators=[DataRequired()])
|
||||||
remember_me = BooleanField('Remember Me')
|
remember_me = BooleanField('Remember Me')
|
||||||
submit = SubmitField('Sign In')
|
submit = SubmitField('Sign In')
|
||||||
|
|
||||||
|
|||||||
@@ -0,0 +1 @@
|
|||||||
|
eee
|
||||||
@@ -19,10 +19,12 @@
|
|||||||
<a {% block profilecurrent %}{% endblock %} href="{{ url_for('user', username=current_user.username) }}">profile</a>
|
<a {% block profilecurrent %}{% endblock %} href="{{ url_for('user', username=current_user.username) }}">profile</a>
|
||||||
<a href="{{ url_for('logout') }}">logout</a>
|
<a href="{{ url_for('logout') }}">logout</a>
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
<a href="https://gut.oily.dad/explore/repos">
|
||||||
|
<img style="vertical-align: middle; horizontal-align: center; height: 22px" src="https://gut.oily.dad/assets/img/logo.svg" alt="Logo" aria-hidden="true">
|
||||||
|
</a>
|
||||||
</nav>
|
</nav>
|
||||||
|
|
||||||
<h2>oily.dad</h2>
|
<h2>oily.dad</h2>
|
||||||
<h5>oilydada7ckiseinkbeathsefwgkvjrce743xy7x7iiybkuxh4vheead.onion</h5>
|
|
||||||
</header>
|
</header>
|
||||||
<hr>
|
<hr>
|
||||||
{% with messages = get_flashed_messages() %}
|
{% with messages = get_flashed_messages() %}
|
||||||
|
|||||||
+8
-4
@@ -75,10 +75,13 @@ services:
|
|||||||
- GITEA__mailer__PROTOCOL=smtp
|
- GITEA__mailer__PROTOCOL=smtp
|
||||||
- GITEA__mailer__SMTP_ADDR=pmb
|
- GITEA__mailer__SMTP_ADDR=pmb
|
||||||
- GITEA__mailer__SMTP_PORT=25
|
- GITEA__mailer__SMTP_PORT=25
|
||||||
- GITEA__service__REGISTER_EMAIL_CONFIRM=true
|
- GITEA__service__REGISTER_EMAIL_CONFIRM=false
|
||||||
|
- GITEA__service__REGISTER_MANUAL_CONFIRM=true
|
||||||
- GITEA__service__ENABLE_NOTIFY_MAIL=true
|
- GITEA__service__ENABLE_NOTIFY_MAIL=true
|
||||||
|
- GITEA__server__LANDING_PAGE=explore
|
||||||
|
- GITEA__ui__REACTIONS="+1, -1, fu, heart, laugh, confused, hooray, eyes, gun, boom, poop, kiss, rocket, bomb, chart_with_downwards_trend, eggplant"
|
||||||
# To disable new users after setup:
|
# To disable new users after setup:
|
||||||
#- GITEA__service__DISABLE_REGISTRATION=false
|
- GITEA__service__DISABLE_REGISTRATION=true
|
||||||
networks:
|
networks:
|
||||||
- backnet
|
- backnet
|
||||||
- frontnet
|
- frontnet
|
||||||
@@ -139,11 +142,12 @@ services:
|
|||||||
build:
|
build:
|
||||||
context: sshtun
|
context: sshtun
|
||||||
dockerfile: Dockerfile
|
dockerfile: Dockerfile
|
||||||
restart: always
|
restart: on-failure
|
||||||
|
environment:
|
||||||
|
- USE_TUN=${USE_TUN}
|
||||||
ports:
|
ports:
|
||||||
- "22222:22"
|
- "22222:22"
|
||||||
expose:
|
expose:
|
||||||
- "11111"
|
|
||||||
- "11112"
|
- "11112"
|
||||||
networks:
|
networks:
|
||||||
- frontnet
|
- frontnet
|
||||||
|
|||||||
+8
-4
@@ -75,10 +75,13 @@ services:
|
|||||||
- GITEA__mailer__PROTOCOL=smtp
|
- GITEA__mailer__PROTOCOL=smtp
|
||||||
- GITEA__mailer__SMTP_ADDR=pmb
|
- GITEA__mailer__SMTP_ADDR=pmb
|
||||||
- GITEA__mailer__SMTP_PORT=25
|
- GITEA__mailer__SMTP_PORT=25
|
||||||
- GITEA__service__REGISTER_EMAIL_CONFIRM=true
|
- GITEA__service__REGISTER_EMAIL_CONFIRM=false
|
||||||
|
- GITEA__service__REGISTER_MANUAL_CONFIRM=true
|
||||||
- GITEA__service__ENABLE_NOTIFY_MAIL=true
|
- GITEA__service__ENABLE_NOTIFY_MAIL=true
|
||||||
|
- GITEA__server__LANDING_PAGE=explore
|
||||||
|
- GITEA__ui__REACTIONS="+1, -1, fu, heart, laugh, confused, hooray, eyes, gun, boom, poop, kiss, rocket, bomb, chart_with_downwards_trend, eggplant"
|
||||||
# To disable new users after setup:
|
# To disable new users after setup:
|
||||||
#- GITEA__service__DISABLE_REGISTRATION=false
|
- GITEA__service__DISABLE_REGISTRATION=false
|
||||||
networks:
|
networks:
|
||||||
- backnet
|
- backnet
|
||||||
- frontnet
|
- frontnet
|
||||||
@@ -139,11 +142,12 @@ services:
|
|||||||
build:
|
build:
|
||||||
context: sshtun
|
context: sshtun
|
||||||
dockerfile: Dockerfile
|
dockerfile: Dockerfile
|
||||||
restart: always
|
restart: on-failure
|
||||||
|
environment:
|
||||||
|
- USE_TUN=${USE_TUN}
|
||||||
ports:
|
ports:
|
||||||
- "22222:22"
|
- "22222:22"
|
||||||
expose:
|
expose:
|
||||||
- "11111"
|
|
||||||
- "11112"
|
- "11112"
|
||||||
networks:
|
networks:
|
||||||
- frontnet
|
- frontnet
|
||||||
|
|||||||
+8
-4
@@ -75,10 +75,13 @@ services:
|
|||||||
- GITEA__mailer__PROTOCOL=smtp
|
- GITEA__mailer__PROTOCOL=smtp
|
||||||
- GITEA__mailer__SMTP_ADDR=pmb
|
- GITEA__mailer__SMTP_ADDR=pmb
|
||||||
- GITEA__mailer__SMTP_PORT=25
|
- GITEA__mailer__SMTP_PORT=25
|
||||||
- GITEA__service__REGISTER_EMAIL_CONFIRM=true
|
- GITEA__service__REGISTER_EMAIL_CONFIRM=false
|
||||||
|
- GITEA__service__REGISTER_MANUAL_CONFIRM=true
|
||||||
- GITEA__service__ENABLE_NOTIFY_MAIL=true
|
- GITEA__service__ENABLE_NOTIFY_MAIL=true
|
||||||
|
- GITEA__server__LANDING_PAGE=explore
|
||||||
|
- GITEA__ui__REACTIONS="+1, -1, fu, heart, laugh, confused, hooray, eyes, gun, boom, poop, kiss, rocket, bomb, chart_with_downwards_trend, eggplant"
|
||||||
# To disable new users after setup:
|
# To disable new users after setup:
|
||||||
#- GITEA__service__DISABLE_REGISTRATION=false
|
- GITEA__service__DISABLE_REGISTRATION=false
|
||||||
networks:
|
networks:
|
||||||
- backnet
|
- backnet
|
||||||
- frontnet
|
- frontnet
|
||||||
@@ -139,11 +142,12 @@ services:
|
|||||||
build:
|
build:
|
||||||
context: sshtun
|
context: sshtun
|
||||||
dockerfile: Dockerfile
|
dockerfile: Dockerfile
|
||||||
restart: always
|
restart: on-failure
|
||||||
|
environment:
|
||||||
|
- USE_TUN=${USE_TUN}
|
||||||
ports:
|
ports:
|
||||||
- "22222:22"
|
- "22222:22"
|
||||||
expose:
|
expose:
|
||||||
- "11111"
|
|
||||||
- "11112"
|
- "11112"
|
||||||
networks:
|
networks:
|
||||||
- frontnet
|
- frontnet
|
||||||
|
|||||||
@@ -13,6 +13,9 @@ BUILD_GPG_PP=
|
|||||||
# Tor:
|
# Tor:
|
||||||
# true/false:
|
# true/false:
|
||||||
USE_TOR=false
|
USE_TOR=false
|
||||||
|
# SSH Tun:
|
||||||
|
# true/false:
|
||||||
|
USE_TUN=false
|
||||||
|
|
||||||
# Backend:
|
# Backend:
|
||||||
FLASK_SECRET_KEY="flaskkey"
|
FLASK_SECRET_KEY="flaskkey"
|
||||||
|
|||||||
@@ -22,6 +22,7 @@ server {
|
|||||||
root /var/www/html;
|
root /var/www/html;
|
||||||
index index.php index.html index.htm;
|
index index.php index.html index.htm;
|
||||||
|
|
||||||
|
add_header Onion-Location http://oilydada7ckiseinkbeathsefwgkvjrce743xy7x7iiybkuxh4vheead.onion$request_uri;
|
||||||
|
|
||||||
location / {
|
location / {
|
||||||
proxy_pass http://backend:8000/;
|
proxy_pass http://backend:8000/;
|
||||||
|
|||||||
@@ -22,6 +22,7 @@ server {
|
|||||||
root /var/www/html;
|
root /var/www/html;
|
||||||
index index.php index.html index.htm;
|
index index.php index.html index.htm;
|
||||||
|
|
||||||
|
add_header Onion-Location http://oilydada7ckiseinkbeathsefwgkvjrce743xy7x7iiybkuxh4vheead.onion$request_uri;
|
||||||
|
|
||||||
location / {
|
location / {
|
||||||
proxy_pass http://backend:8000/;
|
proxy_pass http://backend:8000/;
|
||||||
|
|||||||
+11
-5
@@ -1,8 +1,14 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
# Container goal:
|
# Container goal: egress
|
||||||
# autossh -N -R 11111:localhost:11434 -i sshtun/oilykey/<SOMEKEY> -p 22222 <SOMEURL>
|
# first: physical_box$ autossh -N -R 11111:localhost:11434 -i sshtun/oilykey/<SOMEKEY> -p 22222 <rem_vps_url>
|
||||||
# forwards rem_c_port:(operator_pc:op_pc_port) ...some args... rem_host_p rem_host_url
|
# will forward rem_c_port:physical_box:physical_box_port ...some args... rem_vps_p rem_vps_url
|
||||||
|
# then: frontnet_c$ curl sshtun.frontnet:11112 --> physical_box:11434
|
||||||
|
|
||||||
nohup socat TCP-LISTEN:11112,fork TCP:localhost:11111 &
|
if $USE_TUN ; then
|
||||||
/usr/sbin/sshd -D
|
echo "@@@@@@@@@@ SSH TUNNEL ENABLED BY ENV"
|
||||||
|
nohup socat TCP-LISTEN:11112,fork TCP:localhost:11111 &
|
||||||
|
/usr/sbin/sshd -De
|
||||||
|
else
|
||||||
|
echo "@@@@@@@@@@ SSH TUNNEL DISABLED BY ENV"
|
||||||
|
fi
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user