IT-Syndikat/its-network
27
0
Fork 1
Code Issues1 Pull requests Projects Releases Packages Wiki Activity Actions

Fix markdown formatting

Browse source 
mkdocs requires 4-space indents for nested lists and explicit hyperlinks
This commit is contained in:
Xiretza 2025-03-16 12:10:01 +00:00
parent 1da95fd46c
commit 9376f77c0d
14 changed files with 65 additions and 66 deletions

32
docs/README.md
View file

@ -23,15 +23,15 @@ infrastructure:
a general purpose hypervisor
- Proxmox Hypervisor [[acraze]](space/srv-acraze/acraze.md) running
- Database VM [[pgsql]](space/srv-acraze/database.md)
- Local recursive resolver and Auth. NS [[luude]](space/srv-acraze/dns.md)
- Git forge [[tea]](space/srv-acraze/gitea.md)
- Mail VM [[blackmail]](space/srv-acraze/mail.md)
- Matrix chat VM [[matrix]](space/srv-acraze/matrix.md)
- Bitwarden team PW manager VM [[vaultwarden]](space/srv-acraze/vaultwarden.md)
- "New" General web VM [[web-general]](space/srv-acraze/web-general.md)
- "Old" web VM for it-s.org blog [[web-its]](space/srv-acraze/web-its.md)
- Calamity Monitoring [[zabbix]](space/srv-acraze/zabbix.md)
- Database VM [[pgsql]](space/srv-acraze/database.md)
- Local recursive resolver and Auth. NS [[luude]](space/srv-acraze/dns.md)
- Git forge [[tea]](space/srv-acraze/gitea.md)
- Mail VM [[blackmail]](space/srv-acraze/mail.md)
- Matrix chat VM [[matrix]](space/srv-acraze/matrix.md)
- Bitwarden team PW manager VM [[vaultwarden]](space/srv-acraze/vaultwarden.md)
- "New" General web VM [[web-general]](space/srv-acraze/web-general.md)
- "Old" web VM for it-s.org blog [[web-its]](space/srv-acraze/web-its.md)
- Calamity Monitoring [[zabbix]](space/srv-acraze/zabbix.md)
as well as nerd entertainment
@ -59,25 +59,25 @@ linked below:
- Some Network documentation, mainly on the access points, by dxld:
https://github.com/IT-Syndikat/its-network-docs
<https://github.com/IT-Syndikat/its-network-docs>
- Mimaki vinyl Cutter:
https://github.com/IT-Syndikat/its-mimaki
<https://github.com/IT-Syndikat/its-mimaki>
- Oki Printer
https://github.com/IT-Syndikat/oki-c8600-ppd
<https://github.com/IT-Syndikat/oki-c8600-ppd>
- Router
https://github.com/IT-Syndikat/its-gateway
<https://github.com/IT-Syndikat/its-gateway>
https://github.com/IT-Syndikat/its-sozial
<https://github.com/IT-Syndikat/its-sozial>
- ITS isitopen
https://github.com/IT-Syndikat/its-syn-open
<https://github.com/IT-Syndikat/its-syn-open>
Note: This list is still incomplete. You can help by expanding it.
@ -87,4 +87,4 @@ This document, and all other documents in this repository, except stated
otherwise, are licensed under the creative commons cc-by 4.0 liense. A copy of
the license may be obtained here:
https://creativecommons.org/licenses/by/4.0/legalcode
<https://creativecommons.org/licenses/by/4.0/legalcode>

2
docs/space/3d-printer/ender/README.md
View file

@ -1,5 +1,5 @@
# 3D printer Creality Ender-3
Fluidd web GUI: http://kmfdm.asozial.it-syndikat.org/
Fluidd web GUI: <http://kmfdm.asozial.it-syndikat.org/>
Cura printer profile should work as-is

2
docs/space/3d-printer/wanhao/README.md
View file

@ -1,6 +1,6 @@
# 3d-Printer Wanhao Duplicator
* Fluidd Webgui: http://fluidd.asozial.it-syndikat.org/ (user / passwowrd no longer required)
* Fluidd Webgui: <http://fluidd.asozial.it-syndikat.org/> (user / passwowrd no longer required)
* send-to-octoprint api still works

4
docs/space/laas.md
View file

@ -1,7 +1,7 @@
# LoFi as a Service
There is a public announcement speaker mounted to the cable tray in coucharea. It is connected to a
Raspberry Pi, `laas.asozial.it-syndikat.org`, running https://git.it-syndikat.org/oha/laas. Can be
Raspberry Pi, `laas.asozial.it-syndikat.org`, running <https://git.it-syndikat.org/oha/laas>. Can be
controlled via a REST API, most easily through the entities already set up in Home Assistant.
## API Endpoints
@ -28,5 +28,5 @@ Change Volume
Get Volume
`GET /api/volume`
Skip Track
Skip Track
`POST /api/skip`

10
docs/space/mimaki.md
View file

@ -11,9 +11,7 @@ This file contains the documentation of the it-sydikat mimaki vinyl plotter.
From the techincal standpoint, the Mimaki CG-61 Vinyl Cutter is used to cut
foil and print stickers. The following is pasted from the Mimaki meta
page at:
https://meta.it-syndikat.org/t/mimaki-cg-61-vinyl-cutter/41
page at <https://meta.it-syndikat.org/t/mimaki-cg-61-vinyl-cutter/41>:
Paste:
@ -45,7 +43,7 @@ Note für Inkscape > V.9: Man kann beim HPGL Speichern mehr als 2048 dpi eingebe
* HPGL Scaler (deprecated)
Alex hat uns einen HPGL Scaler geschrieben:
https://github.com/W4RH4WK/HPGLtrans
<https://github.com/W4RH4WK/HPGLtrans>
* Anwendung:
$ cat file.hpgl | ./HPGLtrans -S 1.25 > /dev/usb/lp0
@ -81,9 +79,7 @@ W4RH4WK: Webinterface, HPGLScaler
The software has been replaced in early 2018. It used to be a go script, piping
out the HPGL file to the printer location, most often /dev/usb/lp0. It was
replaced due to some errors with a php script doing the same thing. Its
source code is located here:
https://github.com/IT-Syndikat/its-mimaki
source code is located here: <https://github.com/IT-Syndikat/its-mimaki>
# Network

34
docs/space/router.md
View file

@ -47,26 +47,26 @@ internet/water/energy/whatever provider via FttH.
## IP Address plan
- 10.17.0.0/16 ITS networks
- 10.17.4.0/24 SERVERS
- 10.17.5.0/24 Members OpenVPN
- 10.17.7.0/24 Wireguard to cloud servers
- 10.17.8.0/24 Georg
- 10.17.9.0/24 Members Wireguard
- 10.17.42.0/24 IOT
- 10.17.54.0/24 LAN zone
- 10.17.4.0/24 SERVERS
- 10.17.5.0/24 Members OpenVPN
- 10.17.7.0/24 Wireguard to cloud servers
- 10.17.8.0/24 Georg
- 10.17.9.0/24 Members Wireguard
- 10.17.42.0/24 IOT
- 10.17.54.0/24 LAN zone
- 192.168.1.0/24 CUCO
- 2a0d:f302:e054::/48 ALWYZON Allocated prefix
- 2a0d:f302:e054:0000::/56 Space prefix
- 2a0d:f302:e054:0004::/64 Servers
- 2a0d:f302:e054:0009::/64 Members Wireguard
- 2a0d:f302:e054:0042::/64 IOT
- 2a0d:f302:e054:0050::/64 Members OpenVPN
- 2a0d:f302:e054:0054::/64 LAN
- 2a0d:f302:e054:0070::/64 Wireguard to cloud servers
- 2a0d:f302:e054:001b::/64 Matrix irc bridge identd net
- 2a0d:f302:e054:de00::/56 deneb (personal use)
- 2a0d:f302:e054:1a00::/56 lambda (personal use)
- 2a0d:f302:e054:0000::/56 Space prefix
- 2a0d:f302:e054:0004::/64 Servers
- 2a0d:f302:e054:0009::/64 Members Wireguard
- 2a0d:f302:e054:0042::/64 IOT
- 2a0d:f302:e054:0050::/64 Members OpenVPN
- 2a0d:f302:e054:0054::/64 LAN
- 2a0d:f302:e054:0070::/64 Wireguard to cloud servers
- 2a0d:f302:e054:001b::/64 Matrix irc bridge identd net
- 2a0d:f302:e054:de00::/56 deneb (personal use)
- 2a0d:f302:e054:1a00::/56 lambda (personal use)
- fd69:f943:1746:52a1::/64 Management VLAN
## CUCO

13
docs/space/srv-acraze/database.md
View file

@ -16,16 +16,17 @@ The PostgreSQL database uses client certificates for authentication. These are s
need for a "proper" PKI.
To set up a new postgresql client:
- Generate a new client key and certificate using `sudo generate_client_cert DBNAME KEY_OUTFILE`
- Copy the generated keyfile and certificate (from `/etc/postgresql/client_certs/`) as well as the
server certificate (from `/etc/postgresql/server.pem`) to the client
- Specify the following postgres arguments:
- `user=DBNAME`
- `database=DBNAME`
- `sslmode=verify-ca`
- `sslkey=[client keyfile.key]`
- `sslcert=[client cert.pem]`
- `sslrootcert=[server cert.pem]`
- `user=DBNAME`
- `database=DBNAME`
- `sslmode=verify-ca`
- `sslkey=[client keyfile.key]`
- `sslcert=[client cert.pem]`
- `sslrootcert=[server cert.pem]`
<details>
<summary><pre>generate_client_cert</pre> script</summary>

10
docs/space/srv-acraze/discourse.md
View file

@ -14,13 +14,13 @@ konfusius after the August 2022 parabox incident in November of 2022.
## TO UPDATE
1. Rebase https://git.it-syndikat.org/IT-Syndikat/discourse_docker on latest upstream main
1. Rebase <https://git.it-syndikat.org/IT-Syndikat/discourse_docker> on latest upstream main
2. Push `itsyndikat` branch back to forgejo
3. On pitchmadattack:
```
sudo git -C /var/discourse/ pull
sudo /var/discourse/launcher rebuild app
```
```
sudo git -C /var/discourse/ pull
sudo /var/discourse/launcher rebuild app
```
You may need to update the patches in `/var/discourse/templates/web.ssl.its.yml`
if [`nginx.sample.conf`](https://github.com/discourse/discourse/blob/main/config/nginx.sample.conf)

4
docs/space/srv-acraze/gitea.md
View file

@ -1,7 +1,7 @@
# About
This file contains the documenation for our gitea instance found at
`git.it-syndikat.org`.
This file contains the documenation for our gitea instance found at
<https://git.it-syndikat.org>.
## Location

1
docs/space/srv-acraze/ldap.md
View file

@ -62,6 +62,7 @@ This may change in the future if the need arises.
### User accounts
User accounts are required to fullfill the following objectClasses:
- top: Parent of every object. Not required explicitly, but added for
completeness sake.
- posixAccount: Specifies that accounts may login on unix machines.

6
docs/space/srv-acraze/logging.md
View file

@ -21,9 +21,9 @@ Assuming the client is named `clientsrv`:
LoadCredential=privkey:/etc/systemd/journal-upload-privkey.pem
```
4. On `arlog.srv.it-syndikat.org`:
1. Run `sudo /usr/local/bin/generate_client_cert clientsrv /tmp/journal-upload-privkey.pem`
2. Copy `/etc/systemd/journal-remote-client-certs/clientsrv.pem` to `/etc/systemd/journal-upload-cert.pem` on `clientsrv`
3. Copy `/tmp/journal-upload-privkey.pem` to `/etc/systemd/journal-upload-privkey.pem` on `clientsrv` (ensure chmod 600)
1. Run `sudo /usr/local/bin/generate_client_cert clientsrv /tmp/journal-upload-privkey.pem`
2. Copy `/etc/systemd/journal-remote-client-certs/clientsrv.pem` to `/etc/systemd/journal-upload-cert.pem` on `clientsrv`
3. Copy `/tmp/journal-upload-privkey.pem` to `/etc/systemd/journal-upload-privkey.pem` on `clientsrv` (ensure chmod 600)
5. `systemctl enable --now systemd-journal-upload.service`
6. Optionally reduce local journal retention - in `/etc/systemd/journald.conf`:
```

4
docs/space/srv-acraze/mail.md
View file

@ -3,7 +3,7 @@
blackmail.srv.it-syndikat.org is the IT-Syndikat mail enpoint. It handles
inbound/outbound mail delivery for ITS- Members/Services.
A webmail interface is available at https://webmail.it-syndikat.org
A webmail interface is available at <https://webmail.it-syndikat.org>.
# Maintainers
@ -24,7 +24,7 @@ IP-Reputation for the space local networks.
### Webmail
For web-access of your avccounts, a roundcube webmail service is available
at https://webmail.it-syndikat.org/, which is provisioned on
at <https://webmail.it-syndikat.org/>, which is provisioned on
droptek.srv.it-syndikat.org. To update it, download a new tarball from
[their website](https://roundcube.net/download/) and extract it over
/var/www/roundcube. Don't forget to backup the config beforehand.

8
docs/space/switch.md
View file

@ -17,13 +17,13 @@ Quick links:
Juniper (JunOS) docs cover all or most of their products in one document but there are CLI differences across different product categories and software versions (pre/post ELS) so it can be difficult to find exactly the docs page or incantation you need for a particular product. Reading carefully or if all else fails Google is your friend here.
- 802.1 L2, VLAN, ARP, Multicast
https://www.juniper.net/documentation/us/en/software/junos/multicast-l2
<https://www.juniper.net/documentation/us/en/software/junos/multicast-l2>
- L3 Per-port IP addressing, VLAN tagging config, negotiation etc.:
https://www.juniper.net/documentation/us/en/software/junos/interfaces-ethernet-switches/index.html
<https://www.juniper.net/documentation/us/en/software/junos/interfaces-ethernet-switches/index.html>
- Static IP routing:
https://www.juniper.net/documentation/us/en/software/junos/static-routing/index.html
<https://www.juniper.net/documentation/us/en/software/junos/static-routing/index.html>
- OS Snapshot, Recovery and Boot-from-USB
https://www.juniper.net/documentation/us/en/software/junos/junos-install-upgrade/topics/topic-map/backing-up-install-using-snapshot.html
<https://www.juniper.net/documentation/us/en/software/junos/junos-install-upgrade/topics/topic-map/backing-up-install-using-snapshot.html>
## Management Access

1
mkdocs.yml
View file

@ -68,6 +68,7 @@ markdown_extensions:
- pymdownx.emoji:
emoji_index: !!python/name:material.extensions.emoji.twemoji
emoji_generator: !!python/name:material.extensions.emoji.to_svg
- pymdownx.superfences
copyright: Copyright &copy; 2024-2025
extra:
generator: false