mirror of
				https://github.com/TrentSPalmer/trentdocs_website.git
				synced 2025-10-31 05:51:42 -07:00 
			
		
		
		
	add docs/dynamic_cacheing_nginx_reverse_proxy_for_pacman.md and start
self_signed_certs.md
This commit is contained in:
		| @@ -64,6 +64,11 @@ | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../dynamic_cacheing_nginx_reverse_proxy_for_pacman/">Dynamic Cacheing Nginx Reverse Proxy For Pacman</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../arch_redis_nspawn/">Quick Dirty Redis Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
| @@ -78,6 +83,11 @@ | ||||
|     </ul> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../self_signed_certs/">Self Signed Certs</a> | ||||
| 	    </li> | ||||
|            | ||||
|         </ul> | ||||
|       </div> | ||||
|         | ||||
| @@ -138,6 +148,8 @@ wants to access the database.</p> | ||||
|    | ||||
|     <div class="rst-footer-buttons" role="navigation" aria-label="footer navigation"> | ||||
|        | ||||
|         <a href="../self_signed_certs/" class="btn btn-neutral float-right" title="Self Signed Certs">Next <span class="icon icon-circle-arrow-right"></span></a> | ||||
|        | ||||
|        | ||||
|         <a href="../arch_redis_nspawn/" class="btn btn-neutral" title="Quick Dirty Redis Nspawn Container on Arch Linux"><span class="icon icon-circle-arrow-left"></span> Previous</a> | ||||
|        | ||||
| @@ -168,6 +180,8 @@ wants to access the database.</p> | ||||
|         <span><a href="../arch_redis_nspawn/" style="color: #fcfcfc;">« Previous</a></span> | ||||
|        | ||||
|        | ||||
|         <span style="margin-left: 15px"><a href="../self_signed_certs/" style="color: #fcfcfc">Next »</a></span> | ||||
|        | ||||
|     </span> | ||||
| </div> | ||||
|     <script src="../js/theme.js"></script> | ||||
|   | ||||
| @@ -62,6 +62,11 @@ | ||||
|     <a class="" href="../nspawn/">Nspawn</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../dynamic_cacheing_nginx_reverse_proxy_for_pacman/">Dynamic Cacheing Nginx Reverse Proxy For Pacman</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1 current"> | ||||
| 		 | ||||
|     <a class="current" href="./">Quick Dirty Redis Nspawn Container on Arch Linux</a> | ||||
| @@ -78,6 +83,11 @@ | ||||
|     <a class="" href="../arch_postgresql_nspawn/">Quick Dirty Postgresql Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../self_signed_certs/">Self Signed Certs</a> | ||||
| 	    </li> | ||||
|            | ||||
|         </ul> | ||||
|       </div> | ||||
|         | ||||
| @@ -132,7 +142,7 @@ bind 0.0.0.0 | ||||
|         <a href="../arch_postgresql_nspawn/" class="btn btn-neutral float-right" title="Quick Dirty Postgresql Nspawn Container on Arch Linux">Next <span class="icon icon-circle-arrow-right"></span></a> | ||||
|        | ||||
|        | ||||
|         <a href="../nspawn/" class="btn btn-neutral" title="Nspawn"><span class="icon icon-circle-arrow-left"></span> Previous</a> | ||||
|         <a href="../dynamic_cacheing_nginx_reverse_proxy_for_pacman/" class="btn btn-neutral" title="Dynamic Cacheing Nginx Reverse Proxy For Pacman"><span class="icon icon-circle-arrow-left"></span> Previous</a> | ||||
|        | ||||
|     </div> | ||||
|    | ||||
| @@ -158,7 +168,7 @@ bind 0.0.0.0 | ||||
|     <span class="rst-current-version" data-toggle="rst-current-version"> | ||||
|        | ||||
|        | ||||
|         <span><a href="../nspawn/" style="color: #fcfcfc;">« Previous</a></span> | ||||
|         <span><a href="../dynamic_cacheing_nginx_reverse_proxy_for_pacman/" style="color: #fcfcfc;">« Previous</a></span> | ||||
|        | ||||
|        | ||||
|         <span style="margin-left: 15px"><a href="../arch_postgresql_nspawn/" style="color: #fcfcfc">Next »</a></span> | ||||
|   | ||||
							
								
								
									
										504
									
								
								site/dynamic_cacheing_nginx_reverse_proxy_for_pacman/index.html
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										504
									
								
								site/dynamic_cacheing_nginx_reverse_proxy_for_pacman/index.html
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,504 @@ | ||||
| <!DOCTYPE html> | ||||
| <!--[if IE 8]><html class="no-js lt-ie9" lang="en" > <![endif]--> | ||||
| <!--[if gt IE 8]><!--> <html class="no-js" lang="en" > <!--<![endif]--> | ||||
| <head> | ||||
|   <meta charset="utf-8"> | ||||
|   <meta http-equiv="X-UA-Compatible" content="IE=edge"> | ||||
|   <meta name="viewport" content="width=device-width, initial-scale=1.0"> | ||||
|    | ||||
|    | ||||
|   <link rel="shortcut icon" href="../img/favicon.ico"> | ||||
|   <title>Dynamic Cacheing Nginx Reverse Proxy For Pacman - Trent Docs</title> | ||||
|   <link href='https://fonts.googleapis.com/css?family=Lato:400,700|Roboto+Slab:400,700|Inconsolata:400,700' rel='stylesheet' type='text/css'> | ||||
|  | ||||
|   <link rel="stylesheet" href="../css/theme.css" type="text/css" /> | ||||
|   <link rel="stylesheet" href="../css/theme_extra.css" type="text/css" /> | ||||
|   <link rel="stylesheet" href="../css/highlight.css"> | ||||
|    | ||||
|   <script> | ||||
|     // Current page data | ||||
|     var mkdocs_page_name = "Dynamic Cacheing Nginx Reverse Proxy For Pacman"; | ||||
|     var mkdocs_page_input_path = "dynamic_cacheing_nginx_reverse_proxy_for_pacman.md"; | ||||
|     var mkdocs_page_url = "/dynamic_cacheing_nginx_reverse_proxy_for_pacman/"; | ||||
|   </script> | ||||
|    | ||||
|   <script src="../js/jquery-2.1.1.min.js"></script> | ||||
|   <script src="../js/modernizr-2.8.3.min.js"></script> | ||||
|   <script type="text/javascript" src="../js/highlight.pack.js"></script>  | ||||
|    | ||||
| </head> | ||||
|  | ||||
| <body class="wy-body-for-nav" role="document"> | ||||
|  | ||||
|   <div class="wy-grid-for-nav"> | ||||
|  | ||||
|      | ||||
|     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav"> | ||||
|       <div class="wy-side-nav-search"> | ||||
|         <a href=".." class="icon icon-home"> Trent Docs</a> | ||||
|         <div role="search"> | ||||
|   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get"> | ||||
|     <input type="text" name="q" placeholder="Search docs" /> | ||||
|   </form> | ||||
| </div> | ||||
|       </div> | ||||
|  | ||||
|       <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="main navigation"> | ||||
| 	<ul class="current"> | ||||
| 	   | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="..">Home</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../serve_and_share_apps_from_your_phone_with_fdroid/">Serve And Share Apps From Your Phone With Fdroid</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../nspawn/">Nspawn</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1 current"> | ||||
| 		 | ||||
|     <a class="current" href="./">Dynamic Cacheing Nginx Reverse Proxy For Pacman</a> | ||||
|     <ul class="subnav"> | ||||
|              | ||||
|     <li class="toctree-l2"><a href="#dynamic-cacheing-nginx-reverse-proxy-for-pacman">Dynamic Cacheing Nginx Reverse Proxy For Pacman</a></li> | ||||
|      | ||||
|         <ul> | ||||
|          | ||||
|             <li><a class="toctree-l3" href="#you-set-up-a-dynamic-cacheing-reverse-proxy-and-then-you-put-the-ip-address-or-hostname-for-that-server-in-etcpacmandmirrorlist-on-your-client-machines">You set up a dynamic cacheing reverse proxy and then you put the ip address or hostname for that server in /etc/pacman.d/mirrorlist on your client machines.</a></li> | ||||
|          | ||||
|             <li><a class="toctree-l3" href="#nginx-configuration">nginx configuration</a></li> | ||||
|          | ||||
|             <li><a class="toctree-l3" href="#systemd-service-that-cleans-the-proxy-cache">systemd service that cleans the proxy cache</a></li> | ||||
|          | ||||
|             <li><a class="toctree-l3" href="#systemd-timer-for-the-systemd-service-that-cleans-the-proxy-cache">systemd timer for the systemd service that cleans the proxy cache</a></li> | ||||
|          | ||||
|             <li><a class="toctree-l3" href="#systemd-service-that-deletes-the-pacman-database-files-from-the-proxy-cache">systemd service that deletes the pacman database files from the proxy cache</a></li> | ||||
|          | ||||
|             <li><a class="toctree-l3" href="#systemd-timer-for-the-systemd-service-that-deletes-the-pacman-database-files-from-the-proxy-cache">systemd timer for the systemd service that deletes the pacman database files from the proxy cache</a></li> | ||||
|          | ||||
|         </ul> | ||||
|      | ||||
|  | ||||
|     </ul> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../arch_redis_nspawn/">Quick Dirty Redis Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../arch_postgresql_nspawn/">Quick Dirty Postgresql Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../self_signed_certs/">Self Signed Certs</a> | ||||
| 	    </li> | ||||
|            | ||||
|         </ul> | ||||
|       </div> | ||||
|         | ||||
|     </nav> | ||||
|  | ||||
|     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap"> | ||||
|  | ||||
|        | ||||
|       <nav class="wy-nav-top" role="navigation" aria-label="top navigation"> | ||||
|         <i data-toggle="wy-nav-top" class="fa fa-bars"></i> | ||||
|         <a href="..">Trent Docs</a> | ||||
|       </nav> | ||||
|  | ||||
|        | ||||
|       <div class="wy-nav-content"> | ||||
|         <div class="rst-content"> | ||||
|           <div role="navigation" aria-label="breadcrumbs navigation"> | ||||
|   <ul class="wy-breadcrumbs"> | ||||
|     <li><a href="..">Docs</a> »</li> | ||||
|      | ||||
|        | ||||
|      | ||||
|     <li>Dynamic Cacheing Nginx Reverse Proxy For Pacman</li> | ||||
|     <li class="wy-breadcrumbs-aside"> | ||||
|        | ||||
|     </li> | ||||
|   </ul> | ||||
|   <hr/> | ||||
| </div> | ||||
|           <div role="main"> | ||||
|             <div class="section"> | ||||
|                | ||||
|                 <h1 id="dynamic-cacheing-nginx-reverse-proxy-for-pacman">Dynamic Cacheing Nginx Reverse Proxy For Pacman</h1> | ||||
| <h2 id="you-set-up-a-dynamic-cacheing-reverse-proxy-and-then-you-put-the-ip-address-or-hostname-for-that-server-in-etcpacmandmirrorlist-on-your-client-machines">You set up a dynamic cacheing reverse proxy and then you put the ip address or hostname for that server in <code>/etc/pacman.d/mirrorlist</code> on your client machines.</h2> | ||||
| <p>Of course if you want to you can set this up and run it in an | ||||
| <a href="../nspawn/">Nspawn Container</a>. | ||||
| The <a href="https://wiki.archlinux.org/index.php/Pacman/Tips_and_tricks#Dynamic_reverse_proxy_cache_using_nginx">ArchWiki Page for pacman tips</a> | ||||
| mostly spells out what to do, but I want to document | ||||
| the exact steps I would take.</p> | ||||
| <p>As for how you would run this on a server with other virtual hosts? | ||||
| Who cares? That is what is so brilliant about using using an | ||||
| nspawn container, in that it behaves like just another | ||||
| computer on the lan with it's own ip address.  But it only does one | ||||
| thing, and that's all you have to configure it for.</p> | ||||
| <p>I see no reason to use nginx-mainline instead of stable.</p> | ||||
| <pre><code class="bash">pacman -S nginx | ||||
| </code></pre> | ||||
|  | ||||
| <p>The suggested configuration in the Arch Wiki | ||||
| is to create a directory <code>/srv/http/pacman-cache</code>, | ||||
| and that seems to work well enough</p> | ||||
| <pre><code class="bash">mkdir /srv/http/pacman-cache | ||||
| # and then change it's ownershipt | ||||
| chown http:http /srv/http/pacman-cache | ||||
| </code></pre> | ||||
|  | ||||
| <h2 id="nginx-configuration">nginx configuration</h2> | ||||
| <p>and then it references an nginx.conf in | ||||
| <a href="https://gist.github.com/anonymous/97ec4148f643de925e433bed3dc7ee7d">this gist</a>, | ||||
| but that is not a complete nginx.conf and so here is a method to get that | ||||
| working as of July 2017 with a fresh install of nginx.</p> | ||||
| <p>You can start with a default <code>/etc/nginx/nginx.conf</code>, | ||||
| and add the line <code>include sites-enabled/*;</code> | ||||
| at the end of the <em>http</em> section.</p> | ||||
| <pre><code class="text"># /etc/nginx/nginx.conf | ||||
| #user html; | ||||
| worker_processes  1; | ||||
|  | ||||
| #error_log  logs/error.log; | ||||
| #error_log  logs/error.log  notice; | ||||
| #error_log  logs/error.log  info; | ||||
|  | ||||
| #pid        logs/nginx.pid; | ||||
|  | ||||
|  | ||||
| events { | ||||
|     worker_connections  1024; | ||||
| } | ||||
|  | ||||
|  | ||||
| http { | ||||
|     include       mime.types; | ||||
|     default_type  application/octet-stream; | ||||
|  | ||||
|     #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" ' | ||||
|     #                  '$status $body_bytes_sent "$http_referer" ' | ||||
|     #                  '"$http_user_agent" "$http_x_forwarded_for"'; | ||||
|  | ||||
|     #access_log  logs/access.log  main; | ||||
|  | ||||
|     sendfile        on; | ||||
|     #tcp_nopush     on; | ||||
|  | ||||
|     #keepalive_timeout  0; | ||||
|     keepalive_timeout  65; | ||||
|  | ||||
|     #gzip  on; | ||||
|  | ||||
|     server { | ||||
|         listen       80; | ||||
|         server_name  localhost; | ||||
|  | ||||
|         #charset koi8-r; | ||||
|  | ||||
|         #access_log  logs/host.access.log  main; | ||||
|  | ||||
|         location / { | ||||
|             root   /usr/share/nginx/html; | ||||
|             index  index.html index.htm; | ||||
|         } | ||||
|  | ||||
|         #error_page  404              /404.html; | ||||
|  | ||||
|         # redirect server error pages to the static page /50x.html | ||||
|         # | ||||
|         error_page   500 502 503 504  /50x.html; | ||||
|         location = /50x.html { | ||||
|             root   /usr/share/nginx/html; | ||||
|         } | ||||
|  | ||||
|         # proxy the PHP scripts to Apache listening on 127.0.0.1:80 | ||||
|         # | ||||
|         #location ~ \.php$ { | ||||
|         #    proxy_pass   http://127.0.0.1; | ||||
|         #} | ||||
|  | ||||
|         # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 | ||||
|         # | ||||
|         #location ~ \.php$ { | ||||
|         #    root           html; | ||||
|         #    fastcgi_pass   127.0.0.1:9000; | ||||
|         #    fastcgi_index  index.php; | ||||
|         #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name; | ||||
|         #    include        fastcgi_params; | ||||
|         #} | ||||
|  | ||||
|         # deny access to .htaccess files, if Apache's document root | ||||
|         # concurs with nginx's one | ||||
|         # | ||||
|         #location ~ /\.ht { | ||||
|         #    deny  all; | ||||
|         #} | ||||
|     } | ||||
|  | ||||
|  | ||||
|     # another virtual host using mix of IP-, name-, and port-based configuration | ||||
|     # | ||||
|     #server { | ||||
|     #    listen       8000; | ||||
|     #    listen       somename:8080; | ||||
|     #    server_name  somename  alias  another.alias; | ||||
|  | ||||
|     #    location / { | ||||
|     #        root   html; | ||||
|     #        index  index.html index.htm; | ||||
|     #    } | ||||
|     #} | ||||
|  | ||||
|  | ||||
|     # HTTPS server | ||||
|     # | ||||
|     #server { | ||||
|     #    listen       443 ssl; | ||||
|     #    server_name  localhost; | ||||
|  | ||||
|     #    ssl_certificate      cert.pem; | ||||
|     #    ssl_certificate_key  cert.key; | ||||
|  | ||||
|     #    ssl_session_cache    shared:SSL:1m; | ||||
|     #    ssl_session_timeout  5m; | ||||
|  | ||||
|     #    ssl_ciphers  HIGH:!aNULL:!MD5; | ||||
|     #    ssl_prefer_server_ciphers  on; | ||||
|  | ||||
|     #    location / { | ||||
|     #        root   html; | ||||
|     #        index  index.html index.htm; | ||||
|     #    } | ||||
|     #} | ||||
|     include sites-enabled/*; | ||||
|  | ||||
| } | ||||
| </code></pre> | ||||
|  | ||||
| <p>And then create the directory <code>/etc/nginx/sites-enabled</code></p> | ||||
| <pre><code class="bash">mkdir /etc/nginx/sites-enabled | ||||
| </code></pre> | ||||
|  | ||||
| <p>And then create <code>/etc/nginx/sites-enabled/proxy_cache.conf</code>, | ||||
| which is <em>mostly</em> a | ||||
| <a href="https://gist.github.com/anonymous/97ec4148f643de925e433bed3dc7ee7d">copy-and-paste from this gist</a>.</p> | ||||
| <p>Notice the <em>server_name</em>. This has to match the entry in | ||||
| <code>/etc/pacman.d/mirrorlist</code> on the client machines you are | ||||
| updating from. If you can use the hostname, great. But if you | ||||
| have to assign static ip addresses and explicitly write the local | ||||
| ip address instead, then that should match what you write in your mirrorlist.</p> | ||||
| <p>And of course your mirrorlist entry | ||||
| on the client machine, has to preserve the directory scheme.</p> | ||||
| <pre><code class="text"># /etc/pacman.d/mirrorlist | ||||
| Server = http://<hostname or ip address>:<port if not 80>/archlinux/$repo/os/$arch | ||||
| </code></pre> | ||||
|  | ||||
| <pre><code class="text"># /etc/nginx/sites-enabled/proxy_cache.conf | ||||
| # nginx may need to resolve domain names at run time | ||||
| resolver 8.8.8.8 8.8.4.4; | ||||
|  | ||||
| # Pacman Cache | ||||
| server | ||||
| { | ||||
| listen      80; | ||||
| server_name <hostname or ip address>; # has to match the entry in mirrorlist on client machine. | ||||
| root        /srv/http/pacman-cache; | ||||
| autoindex   on; | ||||
|  | ||||
|     # Requests for package db and signature files should redirect upstream without caching | ||||
|     # Well that's the default anyway. | ||||
|     # But what if you're spinning up a lot of nspawn containers, don't want to waste all that bandwidth? | ||||
|     # I choose to instead run a systemd timer that deletes the *db files once every 15 minutes | ||||
|     location ~ \.(db|sig)$ { | ||||
|         try_files $uri @pkg_mirror; | ||||
|         # proxy_pass http://mirrors$request_uri; | ||||
|     } | ||||
|  | ||||
|     # Requests for actual packages should be served directly from cache if available. | ||||
|     #   If not available, retrieve and save the package from an upstream mirror. | ||||
|     location ~ \.tar\.xz$ { | ||||
|         try_files $uri @pkg_mirror; | ||||
|     } | ||||
|  | ||||
|     # Retrieve package from upstream mirrors and cache for future requests | ||||
|     location @pkg_mirror { | ||||
|         proxy_store    on; | ||||
|         proxy_redirect off; | ||||
|         proxy_store_access  user:rw group:rw all:r; | ||||
|         proxy_next_upstream error timeout http_404; | ||||
|         proxy_pass          http://mirrors$request_uri; | ||||
|     } | ||||
| } | ||||
|  | ||||
| # Upstream Arch Linux Mirrors | ||||
| # - Configure as many backend mirrors as you want in the blocks below | ||||
| # - Servers are used in a round-robin fashion by nginx | ||||
| # - Add "backup" if you want to only use the mirror upon failure of the other mirrors | ||||
| # - Separate "server" configurations are required for each upstream mirror so we can set the "Host" header appropriately | ||||
| upstream mirrors { | ||||
| server localhost:8001; | ||||
| server localhost:8002; # backup | ||||
| server localhost:8003; # backup | ||||
| } | ||||
|  | ||||
| # Arch Mirror 1 Proxy Configuration | ||||
| server | ||||
| { | ||||
| listen      8001; | ||||
| server_name localhost; | ||||
|  | ||||
|     location / { | ||||
|         proxy_pass       http://mirrors.kernel.org$request_uri; | ||||
|         proxy_set_header Host mirrors.kernel.org; | ||||
|     } | ||||
| } | ||||
|  | ||||
| # Arch Mirror 2 Proxy Configuration | ||||
| server | ||||
| { | ||||
| listen      8002; | ||||
| server_name localhost; | ||||
|  | ||||
|     location / { | ||||
|         proxy_pass       http://mirrors.ocf.berkeley.edu$request_uri; | ||||
|         proxy_set_header Host mirrors.ocf.berkeley.edu; | ||||
|     } | ||||
| } | ||||
|  | ||||
| # Arch Mirror 3 Proxy Configuration | ||||
| server | ||||
| { | ||||
|     listen      8003; | ||||
|     server_name localhost; | ||||
|  | ||||
|     location / { | ||||
|         proxy_pass       http://mirrors.cat.pdx.edu$request_uri; | ||||
|         proxy_set_header Host mirrors.cat.pdx.edu; | ||||
|     } | ||||
| } | ||||
| </code></pre> | ||||
|  | ||||
| <h2 id="systemd-service-that-cleans-the-proxy-cache">systemd service that cleans the proxy cache</h2> | ||||
| <h3 id="dont-enable-the-service-enable-the-timer">don't enable the service, enable the timer</h3> | ||||
| <pre><code class="bash">systemctl enable/start /etc/systemd/system/proxy_cache_clean.timer | ||||
| </code></pre> | ||||
|  | ||||
| <p>Keeps the 2 most recent versions of each package using paccache command.</p> | ||||
| <pre><code class="text"># /etc/systemd/system/proxy_cache_clean.service | ||||
| [Unit] | ||||
| Description=Clean The pacman proxy cache | ||||
|  | ||||
| [Service] | ||||
| Type=oneshot | ||||
| ExecStart=/usr/bin/find /srv/http/pacman-cache/ -type d -exec /usr/bin/paccache -v -r -k 2 -c {} \; | ||||
| StandardOutput=syslog | ||||
| StandardError=syslog | ||||
| </code></pre> | ||||
|  | ||||
| <h2 id="systemd-timer-for-the-systemd-service-that-cleans-the-proxy-cache">systemd timer for the systemd service that cleans the proxy cache</h2> | ||||
| <pre><code class="text"># /etc/systemd/system/proxy_cache_clean.timer | ||||
| [Unit] | ||||
| Description=Timer for clean The pacman proxy cache | ||||
|  | ||||
| [Timer] | ||||
| OnBootSec=20min | ||||
| OnUnitActiveSec=100h | ||||
| Unit=proxy_cache_clean.service | ||||
|  | ||||
| [Install] | ||||
| WantedBy=timers.target | ||||
| </code></pre> | ||||
|  | ||||
| <h2 id="systemd-service-that-deletes-the-pacman-database-files-from-the-proxy-cache">systemd service that deletes the pacman database files from the proxy cache</h2> | ||||
| <h3 id="dont-enable-the-service-enable-the-timer_1">don't enable the service, enable the timer</h3> | ||||
| <pre><code class="bash">systemctl enable/start /etc/systemd/system/proxy_cache_database_clean.timer | ||||
| </code></pre> | ||||
|  | ||||
| <p>You won't need this if you don't cache the database files. But if you do cache | ||||
| the database files, then you'll just be stuck with old database files, unless | ||||
| you periodically delete them. But I'm not sure about all this, will keep an | ||||
| eye on things.</p> | ||||
| <pre><code class="text"># /etc/systemd/system/proxy_cache_database_clean.service | ||||
| [Unit] | ||||
| Description=Clean The pacman proxy cache database | ||||
|  | ||||
| [Service] | ||||
| Type=oneshot | ||||
| ExecStart=/bin/bash -c "for f in $(find /srv -name *db) ; do rm $f; done" | ||||
| StandardOutput=syslog | ||||
| StandardError=syslog | ||||
| </code></pre> | ||||
|  | ||||
| <h2 id="systemd-timer-for-the-systemd-service-that-deletes-the-pacman-database-files-from-the-proxy-cache">systemd timer for the systemd service that deletes the pacman database files from the proxy cache</h2> | ||||
| <pre><code class="text"># /etc/systemd/system/proxy_cache_database_clean.timer | ||||
| [Unit] | ||||
| Description=Timer for clean The pacman proxy cache database | ||||
|  | ||||
| [Timer] | ||||
| OnBootSec=10min | ||||
| OnUnitActiveSec=15min | ||||
| Unit=proxy_cache_database_clean.service | ||||
|  | ||||
| [Install] | ||||
| WantedBy=timers.target | ||||
| </code></pre> | ||||
|                | ||||
|             </div> | ||||
|           </div> | ||||
|           <footer> | ||||
|    | ||||
|     <div class="rst-footer-buttons" role="navigation" aria-label="footer navigation"> | ||||
|        | ||||
|         <a href="../arch_redis_nspawn/" class="btn btn-neutral float-right" title="Quick Dirty Redis Nspawn Container on Arch Linux">Next <span class="icon icon-circle-arrow-right"></span></a> | ||||
|        | ||||
|        | ||||
|         <a href="../nspawn/" class="btn btn-neutral" title="Nspawn"><span class="icon icon-circle-arrow-left"></span> Previous</a> | ||||
|        | ||||
|     </div> | ||||
|    | ||||
|  | ||||
|   <hr/> | ||||
|  | ||||
|   <div role="contentinfo"> | ||||
|     <!-- Copyright etc --> | ||||
|      | ||||
|   </div> | ||||
|  | ||||
|   Built with <a href="http://www.mkdocs.org">MkDocs</a> using a <a href="https://github.com/snide/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>. | ||||
| </footer> | ||||
| 	   | ||||
|         </div> | ||||
|       </div> | ||||
|  | ||||
|     </section> | ||||
|      | ||||
|   </div> | ||||
|  | ||||
|   <div class="rst-versions" role="note" style="cursor: pointer"> | ||||
|     <span class="rst-current-version" data-toggle="rst-current-version"> | ||||
|        | ||||
|        | ||||
|         <span><a href="../nspawn/" style="color: #fcfcfc;">« Previous</a></span> | ||||
|        | ||||
|        | ||||
|         <span style="margin-left: 15px"><a href="../arch_redis_nspawn/" style="color: #fcfcfc">Next »</a></span> | ||||
|        | ||||
|     </span> | ||||
| </div> | ||||
|     <script src="../js/theme.js"></script> | ||||
|  | ||||
| </body> | ||||
| </html> | ||||
| @@ -76,6 +76,11 @@ | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="dynamic_cacheing_nginx_reverse_proxy_for_pacman/">Dynamic Cacheing Nginx Reverse Proxy For Pacman</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="arch_redis_nspawn/">Quick Dirty Redis Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
| @@ -84,6 +89,11 @@ | ||||
|     <a class="" href="arch_postgresql_nspawn/">Quick Dirty Postgresql Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="self_signed_certs/">Self Signed Certs</a> | ||||
| 	    </li> | ||||
|            | ||||
|         </ul> | ||||
|       </div> | ||||
|         | ||||
| @@ -122,8 +132,10 @@ | ||||
| <ul> | ||||
| <li><a href="serve_and_share_apps_from_your_phone_with_fdroid/">Serve And Share Apps From Your Phone With Fdroid</a></li> | ||||
| <li><a href="nspawn/">Nspawn Containers</a></li> | ||||
| <li><a href="dynamic_cacheing_nginx_reverse_proxy_for_pacman/">Dynamic Cacheing Nginx Reverse Proxy For Pacman</a></li> | ||||
| <li><a href="arch_redis_nspawn/">Quick Dirty Redis Nspawn Container on Arch Linux</a></li> | ||||
| <li><a href="arch_postgresql_nspawn/">Quick Dirty Postgresql Nspawn Container on Arch Linux</a></li> | ||||
| <li><a href="self_signed_certs/">Self Signed Certs</a></li> | ||||
| </ul> | ||||
| <!--- | ||||
|     * [Template](Template.md) | ||||
| @@ -174,5 +186,5 @@ | ||||
|  | ||||
| <!-- | ||||
| MkDocs version : 0.16.3 | ||||
| Build Date UTC : 2017-06-30 04:37:41 | ||||
| Build Date UTC : 2017-07-01 21:12:17 | ||||
| --> | ||||
|   | ||||
										
											
												File diff suppressed because one or more lines are too long
											
										
									
								
							| @@ -86,6 +86,11 @@ | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../dynamic_cacheing_nginx_reverse_proxy_for_pacman/">Dynamic Cacheing Nginx Reverse Proxy For Pacman</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../arch_redis_nspawn/">Quick Dirty Redis Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
| @@ -94,6 +99,11 @@ | ||||
|     <a class="" href="../arch_postgresql_nspawn/">Quick Dirty Postgresql Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../self_signed_certs/">Self Signed Certs</a> | ||||
| 	    </li> | ||||
|            | ||||
|         </ul> | ||||
|       </div> | ||||
|         | ||||
| @@ -275,7 +285,7 @@ to talk to each other. But I intend to look into this some more.</p> | ||||
|    | ||||
|     <div class="rst-footer-buttons" role="navigation" aria-label="footer navigation"> | ||||
|        | ||||
|         <a href="../arch_redis_nspawn/" class="btn btn-neutral float-right" title="Quick Dirty Redis Nspawn Container on Arch Linux">Next <span class="icon icon-circle-arrow-right"></span></a> | ||||
|         <a href="../dynamic_cacheing_nginx_reverse_proxy_for_pacman/" class="btn btn-neutral float-right" title="Dynamic Cacheing Nginx Reverse Proxy For Pacman">Next <span class="icon icon-circle-arrow-right"></span></a> | ||||
|        | ||||
|        | ||||
|         <a href="../serve_and_share_apps_from_your_phone_with_fdroid/" class="btn btn-neutral" title="Serve And Share Apps From Your Phone With Fdroid"><span class="icon icon-circle-arrow-left"></span> Previous</a> | ||||
| @@ -307,7 +317,7 @@ to talk to each other. But I intend to look into this some more.</p> | ||||
|         <span><a href="../serve_and_share_apps_from_your_phone_with_fdroid/" style="color: #fcfcfc;">« Previous</a></span> | ||||
|        | ||||
|        | ||||
|         <span style="margin-left: 15px"><a href="../arch_redis_nspawn/" style="color: #fcfcfc">Next »</a></span> | ||||
|         <span style="margin-left: 15px"><a href="../dynamic_cacheing_nginx_reverse_proxy_for_pacman/" style="color: #fcfcfc">Next »</a></span> | ||||
|        | ||||
|     </span> | ||||
| </div> | ||||
|   | ||||
| @@ -60,6 +60,11 @@ | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="dynamic_cacheing_nginx_reverse_proxy_for_pacman/">Dynamic Cacheing Nginx Reverse Proxy For Pacman</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="arch_redis_nspawn/">Quick Dirty Redis Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
| @@ -68,6 +73,11 @@ | ||||
|     <a class="" href="arch_postgresql_nspawn/">Quick Dirty Postgresql Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="self_signed_certs/">Self Signed Certs</a> | ||||
| 	    </li> | ||||
|            | ||||
|         </ul> | ||||
|       </div> | ||||
|         | ||||
|   | ||||
							
								
								
									
										168
									
								
								site/self_signed_certs/index.html
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										168
									
								
								site/self_signed_certs/index.html
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,168 @@ | ||||
| <!DOCTYPE html> | ||||
| <!--[if IE 8]><html class="no-js lt-ie9" lang="en" > <![endif]--> | ||||
| <!--[if gt IE 8]><!--> <html class="no-js" lang="en" > <!--<![endif]--> | ||||
| <head> | ||||
|   <meta charset="utf-8"> | ||||
|   <meta http-equiv="X-UA-Compatible" content="IE=edge"> | ||||
|   <meta name="viewport" content="width=device-width, initial-scale=1.0"> | ||||
|    | ||||
|    | ||||
|   <link rel="shortcut icon" href="../img/favicon.ico"> | ||||
|   <title>Self Signed Certs - Trent Docs</title> | ||||
|   <link href='https://fonts.googleapis.com/css?family=Lato:400,700|Roboto+Slab:400,700|Inconsolata:400,700' rel='stylesheet' type='text/css'> | ||||
|  | ||||
|   <link rel="stylesheet" href="../css/theme.css" type="text/css" /> | ||||
|   <link rel="stylesheet" href="../css/theme_extra.css" type="text/css" /> | ||||
|   <link rel="stylesheet" href="../css/highlight.css"> | ||||
|    | ||||
|   <script> | ||||
|     // Current page data | ||||
|     var mkdocs_page_name = "Self Signed Certs"; | ||||
|     var mkdocs_page_input_path = "self_signed_certs.md"; | ||||
|     var mkdocs_page_url = "/self_signed_certs/"; | ||||
|   </script> | ||||
|    | ||||
|   <script src="../js/jquery-2.1.1.min.js"></script> | ||||
|   <script src="../js/modernizr-2.8.3.min.js"></script> | ||||
|   <script type="text/javascript" src="../js/highlight.pack.js"></script>  | ||||
|    | ||||
| </head> | ||||
|  | ||||
| <body class="wy-body-for-nav" role="document"> | ||||
|  | ||||
|   <div class="wy-grid-for-nav"> | ||||
|  | ||||
|      | ||||
|     <nav data-toggle="wy-nav-shift" class="wy-nav-side stickynav"> | ||||
|       <div class="wy-side-nav-search"> | ||||
|         <a href=".." class="icon icon-home"> Trent Docs</a> | ||||
|         <div role="search"> | ||||
|   <form id ="rtd-search-form" class="wy-form" action="../search.html" method="get"> | ||||
|     <input type="text" name="q" placeholder="Search docs" /> | ||||
|   </form> | ||||
| </div> | ||||
|       </div> | ||||
|  | ||||
|       <div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="main navigation"> | ||||
| 	<ul class="current"> | ||||
| 	   | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="..">Home</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../serve_and_share_apps_from_your_phone_with_fdroid/">Serve And Share Apps From Your Phone With Fdroid</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../nspawn/">Nspawn</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../dynamic_cacheing_nginx_reverse_proxy_for_pacman/">Dynamic Cacheing Nginx Reverse Proxy For Pacman</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../arch_redis_nspawn/">Quick Dirty Redis Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../arch_postgresql_nspawn/">Quick Dirty Postgresql Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1 current"> | ||||
| 		 | ||||
|     <a class="current" href="./">Self Signed Certs</a> | ||||
|     <ul class="subnav"> | ||||
|              | ||||
|     <li class="toctree-l2"><a href="#setting-up-self-signed-certs">Setting up Self-Signed Certs</a></li> | ||||
|      | ||||
|  | ||||
|     </ul> | ||||
| 	    </li> | ||||
|            | ||||
|         </ul> | ||||
|       </div> | ||||
|         | ||||
|     </nav> | ||||
|  | ||||
|     <section data-toggle="wy-nav-shift" class="wy-nav-content-wrap"> | ||||
|  | ||||
|        | ||||
|       <nav class="wy-nav-top" role="navigation" aria-label="top navigation"> | ||||
|         <i data-toggle="wy-nav-top" class="fa fa-bars"></i> | ||||
|         <a href="..">Trent Docs</a> | ||||
|       </nav> | ||||
|  | ||||
|        | ||||
|       <div class="wy-nav-content"> | ||||
|         <div class="rst-content"> | ||||
|           <div role="navigation" aria-label="breadcrumbs navigation"> | ||||
|   <ul class="wy-breadcrumbs"> | ||||
|     <li><a href="..">Docs</a> »</li> | ||||
|      | ||||
|        | ||||
|      | ||||
|     <li>Self Signed Certs</li> | ||||
|     <li class="wy-breadcrumbs-aside"> | ||||
|        | ||||
|     </li> | ||||
|   </ul> | ||||
|   <hr/> | ||||
| </div> | ||||
|           <div role="main"> | ||||
|             <div class="section"> | ||||
|                | ||||
|                 <h1 id="setting-up-self-signed-certs">Setting up Self-Signed Certs</h1> | ||||
| <p>This <a href="https://jamielinux.com/docs/openssl-certificate-authority/">jamielinux</a> | ||||
| blog post looks promising.</p> | ||||
|                | ||||
|             </div> | ||||
|           </div> | ||||
|           <footer> | ||||
|    | ||||
|     <div class="rst-footer-buttons" role="navigation" aria-label="footer navigation"> | ||||
|        | ||||
|        | ||||
|         <a href="../arch_postgresql_nspawn/" class="btn btn-neutral" title="Quick Dirty Postgresql Nspawn Container on Arch Linux"><span class="icon icon-circle-arrow-left"></span> Previous</a> | ||||
|        | ||||
|     </div> | ||||
|    | ||||
|  | ||||
|   <hr/> | ||||
|  | ||||
|   <div role="contentinfo"> | ||||
|     <!-- Copyright etc --> | ||||
|      | ||||
|   </div> | ||||
|  | ||||
|   Built with <a href="http://www.mkdocs.org">MkDocs</a> using a <a href="https://github.com/snide/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>. | ||||
| </footer> | ||||
| 	   | ||||
|         </div> | ||||
|       </div> | ||||
|  | ||||
|     </section> | ||||
|      | ||||
|   </div> | ||||
|  | ||||
|   <div class="rst-versions" role="note" style="cursor: pointer"> | ||||
|     <span class="rst-current-version" data-toggle="rst-current-version"> | ||||
|        | ||||
|        | ||||
|         <span><a href="../arch_postgresql_nspawn/" style="color: #fcfcfc;">« Previous</a></span> | ||||
|        | ||||
|        | ||||
|     </span> | ||||
| </div> | ||||
|     <script src="../js/theme.js"></script> | ||||
|  | ||||
| </body> | ||||
| </html> | ||||
| @@ -98,6 +98,11 @@ | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../dynamic_cacheing_nginx_reverse_proxy_for_pacman/">Dynamic Cacheing Nginx Reverse Proxy For Pacman</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../arch_redis_nspawn/">Quick Dirty Redis Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
| @@ -106,6 +111,11 @@ | ||||
|     <a class="" href="../arch_postgresql_nspawn/">Quick Dirty Postgresql Nspawn Container on Arch Linux</a> | ||||
| 	    </li> | ||||
|            | ||||
|             <li class="toctree-l1"> | ||||
| 		 | ||||
|     <a class="" href="../self_signed_certs/">Self Signed Certs</a> | ||||
| 	    </li> | ||||
|            | ||||
|         </ul> | ||||
|       </div> | ||||
|         | ||||
|   | ||||
| @@ -4,7 +4,7 @@ | ||||
|      | ||||
|     <url> | ||||
|      <loc>/</loc> | ||||
|      <lastmod>2017-06-29</lastmod> | ||||
|      <lastmod>2017-07-01</lastmod> | ||||
|      <changefreq>daily</changefreq> | ||||
|     </url> | ||||
|      | ||||
| @@ -12,7 +12,7 @@ | ||||
|      | ||||
|     <url> | ||||
|      <loc>/serve_and_share_apps_from_your_phone_with_fdroid/</loc> | ||||
|      <lastmod>2017-06-29</lastmod> | ||||
|      <lastmod>2017-07-01</lastmod> | ||||
|      <changefreq>daily</changefreq> | ||||
|     </url> | ||||
|      | ||||
| @@ -20,7 +20,15 @@ | ||||
|      | ||||
|     <url> | ||||
|      <loc>/nspawn/</loc> | ||||
|      <lastmod>2017-06-29</lastmod> | ||||
|      <lastmod>2017-07-01</lastmod> | ||||
|      <changefreq>daily</changefreq> | ||||
|     </url> | ||||
|      | ||||
|  | ||||
|      | ||||
|     <url> | ||||
|      <loc>/dynamic_cacheing_nginx_reverse_proxy_for_pacman/</loc> | ||||
|      <lastmod>2017-07-01</lastmod> | ||||
|      <changefreq>daily</changefreq> | ||||
|     </url> | ||||
|      | ||||
| @@ -28,7 +36,7 @@ | ||||
|      | ||||
|     <url> | ||||
|      <loc>/arch_redis_nspawn/</loc> | ||||
|      <lastmod>2017-06-29</lastmod> | ||||
|      <lastmod>2017-07-01</lastmod> | ||||
|      <changefreq>daily</changefreq> | ||||
|     </url> | ||||
|      | ||||
| @@ -36,7 +44,15 @@ | ||||
|      | ||||
|     <url> | ||||
|      <loc>/arch_postgresql_nspawn/</loc> | ||||
|      <lastmod>2017-06-29</lastmod> | ||||
|      <lastmod>2017-07-01</lastmod> | ||||
|      <changefreq>daily</changefreq> | ||||
|     </url> | ||||
|      | ||||
|  | ||||
|      | ||||
|     <url> | ||||
|      <loc>/self_signed_certs/</loc> | ||||
|      <lastmod>2017-07-01</lastmod> | ||||
|      <changefreq>daily</changefreq> | ||||
|     </url> | ||||
|      | ||||
|   | ||||
		Reference in New Issue
	
	Block a user