Markus G. NoxNoctium

Proxmox Complete Microsegmentation with OPNsense

The goal state for this setup is:

The dongle itself is sending out data using 802.11a (5 GHz WiFi) with OFDM and 6 Mbit/s data rate:

Radiotap Header v0, Length 38
    Header revision: 0
    Header pad: 0
    Header length: 38
    Present flags

Format your storage
Configure networking (it's easiest with LuCI, or just take a look at OpenWRT howtos)
Configure /storage by adding proper options in /etc/config/fstab, or, again, just clicking around in LuCI
opkg update && opkg install tor
Copy proper configuration, namely /etc/tor/torrc and /etc/config/uhttpd
Reboot (or /etc/init.d/uhttpd restart && /etc/init.d/tor restart)
Check /etc/tor/hidden_service/hostname for your public .onion address
...
PROFIT!

	blueprint:
	name: Heating Control with Window Sensor, Auto on/off and Better Thermostate UI
	description: Control your heating with options for group home, if temp is below
	a specific value, set temp, and heating between specific times.
	domain: automation
	input:
	heating:
	name: Climate Device
	description: The climate device to use.
	selector:

	#!/bin/bash

	set -euo pipefail
	IFS=$'\n\t'

	# parameters
	USERNAME="maybe empty"
	PASSWORD="fritzbox-password"
	CERTPATH="path to cert eg /etc/letsencrypt/live/domain.tld/"
	CERTPASSWORD="cert password if needed"

	#!/usr/bin/env python3
	# vim: fileencoding=utf-8
	"""
	Upload a TLS key and cert to a FRITZ!Box, in pretty Python
	Copyright (C) 2018--2021 Olivier Mehani <shtrom@ssji.net>

	This program is free software; you can redistribute it and/or modify
	it under the terms of the GNU General Public License as published by
	the Free Software Foundation; either version 2 of the License, or
	(at your option) any later version.

	# Set Intel(R) Speed Shift Technology to Enabled
	setup_var 0x4BC 0x1
	# Set CFG Lock to Disabled
	setup_var 0x4ED 0x0
	# Set Above 4GB MMIO BIOS assignment to Enabled
	# setup_var 0x79A 0x1

	# Set EHCI Hand-off to Disabled
	# setup_var 0x2 0x0
	# Set XHCI Hand-off to Disabled

	#!/bin/bash
	## this little Gist is for Copy the Letsencrypt Cert from an Linux machine (e.g. Raspberry PI or Synology NAS)
	## to the router (Fritzbox).
	## It is usefull to be able to speak to the Router over DDNS without any Cert issue in the Browser.
	## thanks to https://gist.github.com/mahowi for the perfect Idea
	## put it in /etc/letsencrypt/renewal-hooks/post so it gets run after every renewal.
	## since Fritz OS 7.25 it is needed to select a Username, from a security point of view
	## it is always a good idea to have a non default user name. And as normaly a Fritz Box
	## is connected to the Internet, the prefered method should be WITH Username.

	/* ---------------------------------------------------------------------------
	** This software is in the public domain, furnished "as is", without technical
	** support, and with no warranty, express or implied, as to its usefulness for
	** any purpose.
	**
	** main.cpp
	**
	** V4L2 RTSP streamer
	**
	** H264 capture using middleware_video