Browse Source

various

master
Amolith 2 years ago
parent
commit
7c409e12a4
Signed by: Amolith GPG Key ID: 51FD40936DB0065B
  1. 13
      _posts/2019-07-20-blocking-ads-on-mobile-and-desktop.md
  2. 14
      _posts/2019-07-20-setting-dns-on-mobile-and-desktop.md
  3. 42
      _posts/2019-08-21-resizing-luks-encrypted-lvm-partitions.md
  4. 6
      _sass/_default.scss
  5. 44
      about.html
  6. 591
      amolith.txt
  7. BIN
      assets/pages/support.png
  8. BIN
      assets/posts/disk.png
  9. 98
      assets/svgs/disk.svg
  10. 127
      assets/svgs/heart.svg
  11. BIN
      cover.png
  12. 9
      dns.md
  13. 3
      index.html
  14. 21
      json/cards.json
  15. 14
      privacy-policy.md

13
_posts/2019-07-20-blocking-ads-on-mobile-and-desktop.md

@ -37,19 +37,14 @@ If you have a rooted phone, [AdAway](https://adaway.org/) is 100% the way to go.
### Non-rooted phones
If you **don't** have a rooted phone, try [Nebulo](https://smokescreen.app/). If you use F-Droid (which I also highly recommend), the repo is at `fdroid.frostnerd.com`. The source code for the app can be found on their [GitLab](https://git.frostnerd.com/PublicAndroidApps/smokescreen) instance as well. Nebulo is an app that lets you use DNS-over-TLS and DNS-over-HTTPS on Android. To actually block ads with it, there are a few steps you have to go through first. If you use F-Droid (recommended), follow that guide. If you stick to Google Play, follow that guide.
#### F-Droid
In F-Droid, go to Settings > My Apps > Repositories then click the `+` button. Type `fdroid.frostnerd.com` in the box then `ADD`. Wait for your repos to update then search for `Nebulo` and install!
#### Google Play
Google doesn't like apps that block ads (being an advertising company and all). As such, the Play Store version doesn't have blocklists included by default; you'll have to add them manually. I have my own hosts file at [/hosts.txt](/hosts.txt) that anyone can use. All you have to do is open the app, open the <i class="fa fa-bars"></i> menu in the top right, tap the <i class="fa fa-plus"></i> icon. For the name, type something like NixNet lists; it really doesn't matter what you use so long as you recognise it. In the URL entry field, type `https://nixnet.xyz/hosts.txt`. Tap the add button, then the <i class="fa fa-refresh"></i> icon, go back to the homescreen, tap the <i class="fa fa-server"></i> icon, and pick which server you want to use (I recommend [mine](/dns/) or [UncensoredDNS](https://blog.uncensoreddns.org/)). Finally, tap start! You shouldn't see ads in any apps now!
Open the app, open the <i class="fa fa-bars"></i> menu in the top right, tap DNS Rules, enable AdAway, CoinBlockerList, and Energized Basic, tap the <i class="fa fa-refresh"></i> icon, then toggle DNS Rules in the top right. Go back to the homescreen, tap the <i class="fa fa-server"></i> icon, pick which server you want to use (I recommend [mine](/dns/) or [UncensoredDNS](https://blog.uncensoreddns.org/)). Finally, tap start! You shouldn't see ads in any apps now!
#### F-Droid
In F-Droid, go to Settings > My Apps > Repositories then click the `+` button. Paste the URL below into the box then tap `ADD`. Wait for your repos to update then search for `Nebulo`, install, then follow the instructions for [Google Play](#google-play)!
You *can* just use `fdroid.frostnerd.com` but I recommend using the link with the fingerprint for additional security:
`https://fdroid.frostnerd.com/fdroid/repo?fingerprint=74BB580F263EC89E15C207298DEC861B5069517550FE0F1D852F16FA611D2D26`
There's actually a simpler way to add hosts and it works in both the F-Droid and Google Play versions. The section below details that.
#### Google Play
Google doesn't like apps that block ads (being an advertising company and all). As such, the Play Store version doesn't have blocklists included by default; you'll have to add them manually. I have my own hosts file at [/hosts.txt](/hosts.txt) that you can use. All you have to do is follow everything in the second paragraph of the F-Droid section except you'll tap the <i class="fa fa-plus"></i> icon instead of enabling the host sources. For the name, type something like NixNet lists. In the URL entry field, type `https://nixnet.xyz/hosts.txt`. Tap the add button, tap the <i class="fa fa-refresh"></i> icon, then follow the rest of the F-Droid section.
## iOS
As I mentioned above, [Better](https://better.fyi) is what I would use if I was on iOS or macOS. I've heard good things about it from people and I think Aral is a trustworthy guy.

14
_posts/2019-07-20-setting-dns-on-mobile-and-desktop.md

@ -16,7 +16,7 @@ Another useful term to know is [Anycast](https://en.wikipedia.org/wiki/Anycast).
DoT stands for [DNS-over-TLS](https://en.wikipedia.org/wiki/DNS_over_TLS). It's a protocol that wraps DNS queries and responses in the [TLS](https://en.wikipedia.org/wiki/Transport_Layer_Security) protocol. By default, most systems use plaintext DNS and this is very insecure. Plaintext is . . . plaintext; anyone can snoop on your connection and see what websites you're visiting. If you're using DNS-over-TLS, the only parties that know where you're going is you and the DNS server itself. This article focuses on that because it's more secure and private. DNS-over-HTTPS ([DoH](https://en.wikipedia.org/wiki/DNS_over_HTTPS)) is another option but far fewer clients support it, it's more difficult to set up, and there are far fewer DoH providers.
# Setup
Linux, Windows, and Android are all fairly simple to set up. I don't have any Apple products so I the information there likely won't be complete or particularly good. I still recommend reading it, however.
Linux and Android are all fairly simple to set up but I couldn't find anything for Windows other than DNS-over-HTTPS (DoH). I couldn't find anything at all for iOS but there are instructions for macOS.
## Linux
[Unbound](https://wiki.archlinux.org/index.php/Unbound) is what I use for DNS on all of my systems. It's wonderfully easy to use and works very well. Once you've used it for a while and have built up a cache, it's much faster than third-party resolvers.
@ -39,7 +39,7 @@ forward-zone:
forward-tls-upstream: yes
forward-addr: 198.251.90.114@853#uncensored.any.nixnet.xyz
forward-addr: 212.83.138.44@853#resolver1.lelux.fi
forward-addr: 104.244.79.229@853#resolver2.lelux.fi
forward-addr: 91.239.100.100@853#anycast.censurfridns.dk
forward-addr: 185.95.218.42@853#dns.digitale-gesellschaft.ch
```
@ -63,7 +63,7 @@ forward-zone:
forward-tls-upstream: yes
forward-addr: 198.251.90.114@853#uncensored.any.nixnet.xyz
forward-addr: 212.83.138.44@853#resolver1.lelux.fi
forward-addr: 104.244.79.229@853#resolver2.lelux.fi
forward-addr: 91.239.100.100@853#anycast.censurfridns.dk
forward-addr: 185.95.218.42@853#dns.digitale-gesellschaft.ch
```
@ -75,7 +75,7 @@ echo "nameserver 127.0.0.1" | sudo tee /etc/resolv.conf && sudo chattr +i /etc/r
This sets `127.0.0.1` as your nameserver and locks the file by adding the *immutable* flag (`chattr +i`). To remove the flag and make it editable again, run `chattr -i /etc/resolv.conf`.
## Windows
I know the title is for DNS-over-TLS but, from what I've found, DoT on Windows is **incredibly** difficult and I can't find much on it. This tell you how to change your plaintext DNS configuration.
I know the title is for DNS-over-TLS but, from what I've found, DoT on Windows is **incredibly** difficult and I can't find much on it. This tell you how to change your plaintext DNS configuration so you can at least use a private resolver.
1. Open the **Control Panel**
2. Click **Network and Internet**
3. Click **Network and Sharing Center**
@ -88,6 +88,8 @@ I know the title is for DNS-over-TLS but, from what I've found, DoT on Windows i
10. Click **OK**
11. As with all things Windows, **reboot** to finish applying the changes.
**EDIT:** It was pointed out that you can use DoH on Windows using something like [Simple DNSCrypt](https://simplednscrypt.org/). After installing and getting it set up, it looks like you would just go to the **Resolvers** tab, disable **Automatic Mode**, then add whatever custom resolvers you want. I don't offer DoH *yet* but there are some providers listed on a friend's [wiki](https://wiki.lelux.fi/dns/resolvers/).
## macOS
I got this tutorial from [phiffer.org](https://phiffer.org/writing/dns-over-tls-on-macos/). I don't have anything from Apple so I can't test it but a friend of mine did and said it works.
@ -95,7 +97,7 @@ I got this tutorial from [phiffer.org](https://phiffer.org/writing/dns-over-tls-
2. Use your favourite text editor to modify `/usr/local/etc/kresd/config` and add this to the very end of the file: `{% raw %}policy.add(policy.all(policy.TLS_FORWARD({{'198.251.90.114', hostname='uncensored.any.dns.nixnet.xyz'}}))){% endraw %}`
3. Restart `kresd` with `sudo brew services restart knot-resolver`
4. At this point, you should check what DNS server you're currently using to make sure it actually changes. You can do that with `kdig nixnet.xyz`
5. Go to Apple **Menu** > **System Preferences** > **Advanced** > **DNS** then add `127.0.0.1`
5. Go to **Apple Menu** > **System Preferences** > **Advanced** > **DNS** then add `127.0.0.1`
6. Test again with `kdig nixnet.xyz`. This time, one of the last couple IP addresses you see should show up something like `127.0.0.1@53(UDP)`.
That's it!
@ -104,4 +106,4 @@ That's it!
Note that DoT is only available on Android Pie and up. For other versions, try [Nebulo](https://smokescreen.app). I go over the process of installing and using it in my last [post](/blog/blocking-ads-on-mobile-and-desktop/#non-rooted-phones). Once you've gone through that, you're pretty much good to. If you want to add additional servers tap the <i class="fa fa-server"></i> server icon, then the plus at the bottom, and add whatever IP addresses or hostnames you'd like. Mine is included by default as **NixNet Uncensored** so all you have to do is select it.
# iOS
As far as I've been able to find, you can't. I'm sorry ¯\\\_(ツ)\_/¯
As far as I've been able to find, you can't set custom DNS server on iOS, much less DoT or DoH. I'm sorry ¯\\\_(ツ)\_/¯

42
_posts/2019-08-21-resizing-luks-encrypted-lvm-partitions.md

@ -0,0 +1,42 @@
---
layout: post
title: Resizing LUKS-encrypted LVM partitions
subtitle: Increasing the size of LVM partitions encrypted with LUKS
description: Mostly copy/paste tutorial on increasing the size of LVM partitions that have been encrypted with LUKS
cover: /assets/posts/disk.png
date: 2019-08-21 20:09 -0400
---
My server has been sporadically down for the past couple of weeks as I attempted to take advantage of my increased storage. The server has 160 GB but I was only able to use 40 of those because the partitions were too small. I just figured it out and thought I'd write about it 😉
# Forward
There are ways you can do this entirely in CLI but I found a GUI easier. I don't say that often but it holds true in this case. Partitioning always scares me because of the *huge* potential for data loss. Using [GParted](https://gparted.org/) as I do here was risky because graphical tools can fail as well but I had already tried with `fdisk` and `parted` and I must have done something wrong because it didn't work. This method will work for both servers as well as desktops/laptops. The only requirement for servers is that you know the encryption key and the only requirement for PCs is a flash drive or something you can boot from. For images, I used GParted's [live image](https://gparted.org/livecd.php). Before partitioning, I *always* recommend taking backups or snapshots so, even if something goes wrong, you're not permanently screwed and you can revert back to the previous setup.
# Resizing partitions
The process here is rather simple. Just open GParted (it should open right on boot) and drag the right side of the **logical** partition to fill all unallocated space. After, increase the size of the `[Encrypted]` partition to take up the remaining space in the logical volume.
# Resizing everything else
First thing is to open the encrypted volume so you can make changes to it. Do that with:
```
cryptsetup luksOpen /dev/sdX5 cryptdisk
```
Of course, replace sdX5 with your encrypted partition. You can also use whatever name you want in place of `cryptdisk`; that's just what I like. Next, you're going to resize the physical volume with:
```
pvresize /dev/mapper/cryptdisk
```
Run `pvdisplay -m` and take a look at the output. Somewhere, you should see something like this:
```
Logical volume /dev/xXxXxXxX/root
```
`xXxXxXxX` will be your logical volume group. `root` might not be what you want to extend though; there could be something that says `home` as well. If that's the case, you probably want to increase the size of that instead. My server shows `swap_1` and `root` and I certainly don't need 124 GB of swap. Take note of which path you'll be using for the next command. You're going to resize the logical volume to fill the remaining space.
```
lvextend +100%FREE /dev/xXxXxXxX/root
```
The last step is checking the encrypted volume itself if needed then extending it. If `resize2fs` prompts you to run `e2fsck` then do it and I recommend optimising everything it asks about.
```
resize2fs -p /dev/xXxXxXxX/root
```
After that, simply reboot and run `df -h` to see if it worked!

6
_sass/_default.scss

@ -137,6 +137,12 @@ a {
font-family: "ForkAwesome";
margin-left: 5px;
}
.content li a::after {
content: "\f08e";
font-size: 15px;
font-family: "ForkAwesome";
margin-left: 5px;
}
p {
font-size: 20px;
line-height: 32px;

44
about.html

@ -9,33 +9,37 @@ permalink: /about/
<center>
<h1>NixNet</h1>
<p><b>NixNet.xyz</b> is a network of websites and services hosted by the pseudonymous <b>Amolith</b> (me). The main reason I'm hosting these sites is because I like to be in control of my own data where feasible. The easiest way to accomplish this is to host the services I use. I make them public and and maintain them simply because I want to. The Linux and FLOSS community has completely changed my life and I feel like this is a small way I can do my part and give back.</p>
<center>
<a href="/blog" rel="noreferrer" target="_blank"><button class="donate"><i class="fa fa-rss-square"></i> Blog</button></a>
<a href="/contact" rel="noreferrer" target="_blank"><button class="donate"><i class="fa fa-comments"></i> Contact</button></a>
<a href="/privacy" rel="noreferrer" target="_blank"><button class="donate"><i class="fa fa-user-secret"></i> Privacy</button></a>
<a href="https://nixnet.xyz/donate" rel="noreferrer" target="_blank"><button class="donate"><i class="fa fa-heart"></i> Support</button></a>
</center>
<hr/>
<center>
<br />
<hr/>
<center>
<h1>Finance</h1>
</center>
<p>At the moment, all the sites I host are running on <a href="https://www.netcup.eu/vserver/vps.php" rel="noreferrer" target="_blank">netcup GmbH's 500 G8</a> VPS. I pay <b>$6.10/mo</b> in lump sums of <b>$36.60</b> every six months. The domain <a href="/" rel="noreferrer" target="_blank">nixnet.xyz</a> is registered with <a href="http://gandi.net" rel="noreferrer" target="_blank">gandi.net</a> and it renews at <b>$13.63/yr</b>. I use Gandi because they have WHOIS privacy by default, every domain comes with two inboxes and unlimited aliases for both. One is <a href="mailto:amolith@nixnet.xyz">amolith@nixnet.xyz</a> and the other uses my real name rather than my pseudonym. My plans are to upgrade to the 1000 G8 (on the same page) and add a <a href="https://www.netcup.eu/vserver/storagespace.php" rel="noreferrer" target="_blank">Tariff A storage server</a>. This would cost $4.07/mo. I've also added the domain, nixnet.xyz to the goal, which is $13/year ($0.27/mo). My goal is $4.34/week <i>exactly</i> so I can upgrade VPSs, add a storage server, and not have anything left over.</p>
<p>This all changed recently. Gathering the requisite information will take a bit but this page will be updated shortly.</p>
</h1>
</center>
</div>
<center>
<a href="https://liberapay.com/Amolith/donate" rel="noreferrer" target="_blank"><button class="donate"><i class="fa fa-liberapay"></i> Liberapay</button></a>
</center>
<br/>
<div class="content">
<center>
<p>If you want to donate in crypto currencies, I accept <a href="https://getmonero.org/" rel="noreferrer" target="_blank">Monero</a> and <a href="https://bitcoin.org/en/" rel="noreferrer" target="_blank">Bitcoin</a> though I do prefer Monero because of its privacy-by-default features. If you do crypto on mobile, you can scan the QR codes with your preferred app or tap them to open the appropriate app. The address is also below for other methods.</p>
</div>
<div class="flex-wrapper">
<div class="flex-cards">
<div class="crypto-card">
<h1><a title="Monero" href="monero:44rQhN2PwB52RZnKbez5XGXweMdDvphMhZE8CRBhrtSq1nciTxGzZEReEmkhH19EnbKk4k884PrbVd4LaT1ZMqSHCpTUEcH"><img src="/assets/xmr.png" alt="Monero QR code"></img></a></h1>
<h2>Monero</h2>
<p>44rQhN2PwB52RZnKbez5XGXweMdDvphMhZE8CRBhrtSq1nciTxGzZEReEmkhH19EnbKk4k884PrbVd4LaT1ZMqSHCpTUEcH</p>
</div>
<div class="crypto-card">
<h1><a title="Bitcoin" href="bitcoin:1Q3o8Wtji2QS566BExdcPGMk76NjJgHrcz"><img src="/assets/btc.png" alt="Bitcoin QR code"></img></a></h1>
<h2>Bitcoin</h2>
<p>1Q3o8Wtji2QS566BExdcPGMk76NjJgHrcz</p>
</div>
</div>
<div class="flex-wrapper">
<div class="flex-cards">
<div class="crypto-card">
<h1><a title="Monero" href="monero:44rQhN2PwB52RZnKbez5XGXweMdDvphMhZE8CRBhrtSq1nciTxGzZEReEmkhH19EnbKk4k884PrbVd4LaT1ZMqSHCpTUEcH"><img src="/assets/xmr.png" alt="Monero QR code"></img></a></h1>
<h2>Monero</h2>
<p>44rQhN2PwB52RZnKbez5XGXweMdDvphMhZE8CRBhrtSq1nciTxGzZEReEmkhH19EnbKk4k884PrbVd4LaT1ZMqSHCpTUEcH</p>
</div>
<div class="crypto-card">
<h1><a title="Bitcoin" href="bitcoin:1Q3o8Wtji2QS566BExdcPGMk76NjJgHrcz"><img src="/assets/btc.png" alt="Bitcoin QR code"></img></a></h1>
<h2>Bitcoin</h2>
<p>1Q3o8Wtji2QS566BExdcPGMk76NjJgHrcz</p>
</div>
</div>
</div>
</center>

591
amolith.txt

@ -11,305 +11,294 @@ cfjUvQUMjJtgn9VOl1opz5XBB2VUn9nPj1dP1RbcFi0MfD8fIYGUJydjiZIpdinO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=nOej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=wsBh
-----END PGP PUBLIC KEY BLOCK-----

BIN
assets/pages/support.png

Binary file not shown.

After

Width:  |  Height:  |  Size: 6.7 KiB

BIN
assets/posts/disk.png

Binary file not shown.

After

Width:  |  Height:  |  Size: 4.2 KiB

98
assets/svgs/disk.svg

@ -0,0 +1,98 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!-- Created with Inkscape (http://www.inkscape.org/) -->
<svg
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:cc="http://creativecommons.org/ns#"
xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
xmlns:svg="http://www.w3.org/2000/svg"
xmlns="http://www.w3.org/2000/svg"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
width="600"
height="315"
viewBox="0 0 158.75 83.343752"
version="1.1"
id="svg8"
inkscape:version="0.92.4 5da689c313, 2019-01-14"
sodipodi:docname="disk.svg"
inkscape:export-filename="/home/amolith/repos/nixnet/assets/posts/disk.png"
inkscape:export-xdpi="96"
inkscape:export-ydpi="96">
<defs
id="defs2">
<symbol
id="shield-alt">
<title
id="shield-alt-title">Alternate Shield</title>
<path
style="stroke-width:0.26458332"
inkscape:connector-curvature="0"
d="m 131.23333,33.866667 c 0,58.547529 -35.965868,91.187323 -58.615524,100.623153 a 12.7,12.7 0 0 1 -9.76921,0 C 34.526802,122.69073 4.2333333,86.383019 4.2333333,33.866667 A 12.7,12.7 0 0 1 12.04886,22.143508 l 50.8,-21.16666633 a 12.7,12.7 0 0 1 9.769211,0 L 123.41807,22.143508 a 12.7,12.7 0 0 1 7.81526,11.723159 z m -63.499997,84.220313 0.01746,0.009 C 92.551515,105.74285 113.39063,76.739485 114.26904,36.676012 L 67.733333,17.286023 Z"
id="path26851" />
</symbol>
</defs>
<sodipodi:namedview
id="base"
pagecolor="#ffffff"
bordercolor="#666666"
borderopacity="1.0"
inkscape:pageopacity="0.0"
inkscape:pageshadow="2"
inkscape:zoom="0.98994949"
inkscape:cx="276.36316"
inkscape:cy="108.46432"
inkscape:document-units="mm"
inkscape:current-layer="layer1"
showgrid="false"
units="px"
inkscape:snap-bbox="true"
inkscape:bbox-paths="true"
inkscape:bbox-nodes="true"
inkscape:snap-bbox-edge-midpoints="true"
inkscape:snap-bbox-midpoints="true"
inkscape:object-paths="true"
inkscape:snap-intersection-paths="true"
inkscape:snap-smooth-nodes="true"
inkscape:snap-midpoints="true"
inkscape:window-width="1336"
inkscape:window-height="698"
inkscape:window-x="15"
inkscape:window-y="35"
inkscape:window-maximized="0"
fit-margin-top="0"
fit-margin-left="0"
fit-margin-right="0"
fit-margin-bottom="0"
inkscape:snap-global="false" />
<metadata
id="metadata5">
<rdf:RDF>
<cc:Work
rdf:about="">
<dc:format>image/svg+xml</dc:format>
<dc:type
rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
<dc:title></dc:title>
</cc:Work>
</rdf:RDF>
</metadata>
<g
inkscape:label="Layer 1"
inkscape:groupmode="layer"
id="layer1"
transform="translate(5.0862632e-6,-213.65623)">
<rect
style="opacity:1;fill:#323232;fill-opacity:1;stroke:none;stroke-width:1.84040475;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
id="rect99612"
width="158.75"
height="83.34375"
x="-5.0862632e-06"
y="213.65623" />
<path
inkscape:connector-curvature="0"
style="fill:#ffffff;stroke-width:0.26458332"
d="m 102.62029,259.20233 v 7.74843 c 0,2.1397 -1.73452,3.87422 -3.874217,3.87422 h -38.74216 c -2.139697,0 -3.874216,-1.73452 -3.874216,-3.87422 v -7.74843 c 0,-2.1397 1.734519,-3.87422 3.874216,-3.87422 h 38.74216 c 2.139697,0 3.874217,1.73452 3.874217,3.87422 z m -3.874217,-6.45703 a 6.4212713,6.4212713 0 0 1 2.484097,0.4976 l -7.790968,-11.6865 a 3.8744583,3.8744583 0 0 0 -3.223586,-1.72515 H 68.534372 a 3.8742161,3.8742161 0 0 0 -3.223509,1.72515 l -7.791049,11.68649 a 6.4212713,6.4212713 0 0 1 2.484099,-0.49759 z m -3.874214,7.74843 c -1.426438,0 -2.58281,1.15637 -2.58281,2.58282 0,1.42643 1.156372,2.58281 2.58281,2.58281 1.426437,0 2.582809,-1.15637 2.582809,-2.58281 0,-1.42644 -1.156372,-2.58282 -2.582809,-2.58282 z m -7.748435,0 c -1.426435,0 -2.582809,1.15637 -2.582809,2.58282 0,1.42643 1.156374,2.58281 2.582809,2.58281 1.42644,0 2.582811,-1.15637 2.582811,-2.58281 0,-1.42644 -1.156371,-2.58282 -2.582811,-2.58282 z"
id="path2-1" />
</g>
</svg>

After

Width:  |  Height:  |  Size: 4.2 KiB

127
assets/svgs/heart.svg

@ -0,0 +1,127 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!-- Created with Inkscape (http://www.inkscape.org/) -->
<svg
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:cc="http://creativecommons.org/ns#"
xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
xmlns:svg="http://www.w3.org/2000/svg"
xmlns="http://www.w3.org/2000/svg"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
width="600"
height="315"
viewBox="0 0 158.75 83.343752"
version="1.1"
id="svg8"
inkscape:version="0.92.4 5da689c313, 2019-01-14"
sodipodi:docname="heart.svg"
inkscape:export-filename="/home/amolith/repos/nixnet/assets/pages/support.png"
inkscape:export-xdpi="96"
inkscape:export-ydpi="96">
<defs
id="defs2">
<symbol
id="shield-alt">
<title
id="shield-alt-title">Alternate Shield</title>
<path
style="stroke-width:0.26458332"
inkscape:connector-curvature="0"
d="m 131.23333,33.866667 c 0,58.547529 -35.965868,91.187323 -58.615524,100.623153 a 12.7,12.7 0 0 1 -9.76921,0 C 34.526802,122.69073 4.2333333,86.383019 4.2333333,33.866667 A 12.7,12.7 0 0 1 12.04886,22.143508 l 50.8,-21.16666633 a 12.7,12.7 0 0 1 9.769211,0 L 123.41807,22.143508 a 12.7,12.7 0 0 1 7.81526,11.723159 z m -63.499997,84.220313 0.01746,0.009 C 92.551515,105.74285 113.39063,76.739485 114.26904,36.676012 L 67.733333,17.286023 Z"
id="path26851" />
</symbol>
<symbol
id="child">
<title
id="child-title">Child</title>
<path
style="stroke-width:0.26458332"
inkscape:connector-curvature="0"
d="M 31.75,19.05 C 31.75,8.5288437 40.278844,0 50.8,0 61.321156,0 69.85,8.5288437 69.85,19.05 69.85,29.570892 61.321156,38.1 50.8,38.1 40.278844,38.1 31.75,29.570892 31.75,19.05 Z m 67.37006,0.363273 c -3.306233,-3.306498 -8.66722,-3.306498 -11.973454,0 L 64.226281,42.333333 H 37.373454 l -22.92006,-22.92006 c -3.306234,-3.306498 -8.6672211,-3.306498 -11.9734544,0 -3.30649793,3.306498 -3.30649793,8.667221 0,11.973719 L 27.516667,56.423454 V 127 c 0,4.67598 3.790685,8.46667 8.466666,8.46667 h 4.233334 c 4.675981,0 8.466666,-3.79069 8.466666,-8.46667 V 97.366667 h 4.233334 V 127 c 0,4.67598 3.790685,8.46667 8.466666,8.46667 h 4.233334 c 4.675981,0 8.466666,-3.79069 8.466666,-8.46667 V 56.423454 L 99.12006,31.386727 c 3.3065,-3.306498 3.3065,-8.666956 0,-11.973454 z"
id="path22180" />
</symbol>
<symbol
id="users">
<title
id="users-title">Users</title>
<path
style="stroke-width:0.26458332"
inkscape:connector-curvature="0"
d="m 58.208333,43.391667 c 0,-14.612673 11.845925,-26.458334 26.458334,-26.458334 14.612408,0 26.458333,11.845661 26.458333,26.458334 C 111.125,58.00434 99.279075,69.85 84.666667,69.85 70.054258,69.85 58.208333,58.00434 58.208333,43.391667 Z M 12.7,55.033333 c 0,-11.690085 9.476581,-21.166666 21.166667,-21.166666 11.690085,0 21.166666,9.476581 21.166666,21.166666 C 55.033333,66.723419 45.556752,76.2 33.866667,76.2 22.176581,76.2 12.7,66.723419 12.7,55.033333 Z m 101.6,0 c 0,-11.690085 9.47658,-21.166666 21.16667,-21.166666 11.69008,0 21.16666,9.476581 21.16666,21.166666 C 156.63333,66.723419 147.15675,76.2 135.46667,76.2 123.77658,76.2 114.3,66.723419 114.3,55.033333 Z m -5.82083,20.108334 C 118.70796,75.141667 127,83.433708 127,93.6625 v 18.52083 c 0,3.50706 -2.84295,6.35 -6.35,6.35 H 48.683333 c -3.507052,0 -6.35,-2.84294 -6.35,-6.35 V 93.6625 c 0,-10.228792 8.292042,-18.520833 18.520834,-18.520833 h 4.722283 c 11.737975,7.060935 26.439812,7.062523 38.1807,0 h 4.72202 M 33.866667,93.6625 c 0,-3.168385 0.550598,-6.2103 1.558131,-9.037108 -5.802313,0.3048 -11.673946,-1.090348 -16.83041,-4.192059 H 14.816667 C 6.6336333,80.433333 0,87.066967 0,95.25 v 8.46667 c 0,3.50705 2.8429479,6.35 6.35,6.35 H 33.866667 Z M 154.51667,80.433333 h -3.77772 c -5.15806,3.102769 -11.02943,4.496859 -16.83041,4.192059 a 26.866321,26.866321 0 0 1 1.55813,9.037108 v 16.40417 h 27.51666 c 3.50706,0 6.35,-2.84295 6.35,-6.35 V 95.25 c 0,-8.183033 -6.63363,-14.816667 -14.81666,-14.816667 z"
id="path23540" />
</symbol>
<symbol
id="shield-alt-5">
<title
id="shield-alt-title-0">Alternate Shield</title>
<path
id="path26851-4"
d="m 131.23333,33.866667 c 0,58.547529 -35.965868,91.187323 -58.615524,100.623153 a 12.7,12.7 0 0 1 -9.76921,0 C 34.526802,122.69073 4.2333333,86.383019 4.2333333,33.866667 A 12.7,12.7 0 0 1 12.04886,22.143508 l 50.8,-21.16666633 a 12.7,12.7 0 0 1 9.769211,0 L 123.41807,22.143508 a 12.7,12.7 0 0 1 7.81526,11.723159 z m -63.499997,84.220313 0.01746,0.009 C 92.551515,105.74285 113.39063,76.739485 114.26904,36.676012 L 67.733333,17.286023 Z"
inkscape:connector-curvature="0"
style="stroke-width:0.26458332" />
</symbol>
</defs>
<sodipodi:namedview
id="base"
pagecolor="#ffffff"
bordercolor="#666666"
borderopacity="1.0"
inkscape:pageopacity="0.0"
inkscape:pageshadow="2"
inkscape:zoom="0.86"
inkscape:cx="252.29979"
inkscape:cy="179.73716"
inkscape:document-units="mm"
inkscape:current-layer="layer1"
showgrid="false"
units="px"
inkscape:snap-bbox="true"
inkscape:bbox-paths="true"
inkscape:bbox-nodes="true"
inkscape:snap-bbox-edge-midpoints="true"
inkscape:snap-bbox-midpoints="true"
inkscape:object-paths="true"
inkscape:snap-intersection-paths="true"
inkscape:snap-smooth-nodes="true"
inkscape:snap-midpoints="true"
inkscape:window-width="1336"
inkscape:window-height="698"
inkscape:window-x="15"
inkscape:window-y="35"
inkscape:window-maximized="0"
fit-margin-top="0"
fit-margin-left="0"
fit-margin-right="0"
fit-margin-bottom="0" />
<metadata
id="metadata5">
<rdf:RDF>
<cc:Work
rdf:about="">
<dc:format>image/svg+xml</dc:format>
<dc:type
rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
<dc:title></dc:title>
</cc:Work>
</rdf:RDF>
</metadata>
<g
inkscape:label="Layer 1"
inkscape:groupmode="layer"
id="layer1"
transform="translate(5.0862632e-6,-213.65623)">
<rect
style="opacity:1;fill:#323232;fill-opacity:1;stroke:none;stroke-width:1.84040475;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
id="rect99612"
width="158.75"
height="83.34375"
x="-5.0862632e-06"
y="213.65623" />
<path
inkscape:connector-curvature="0"
style="fill:#ffffff;stroke-width:0.26458332"
d="m 100.80856,235.23853 c -5.693248,-4.85173 -14.160399,-3.97905 -19.386138,1.41292 l -2.046661,2.109 -2.046661,-2.109 c -5.215354,-5.39197 -13.692896,-6.26465 -19.386145,-1.41292 -6.524386,5.56858 -6.867226,15.56294 -1.028528,21.59903 l 20.102998,20.75751 c 1.298643,1.3402 3.407639,1.3402 4.706281,0 L 101.8267,256.83756 c 5.84909,-6.03609 5.50625,-16.03045 -1.01814,-21.59903 z"
id="path2" />
</g>
</svg>

After

Width:  |  Height:  |  Size: 7.0 KiB

BIN
cover.png

Binary file not shown.

Before

Width:  |  Height:  |  Size: 7.3 KiB

After

Width:  |  Height:  |  Size: 7.3 KiB

9
dns.md

@ -6,10 +6,17 @@ subtitle: Uncensored public DNS servers
permalink: /dns/
cover: /assets/pages/dns.png
---
***NOTE:*** Adblock with [Pi-Hole](https://pi-hole.net/) is Coming Soon&trade;
# Preamble
Before going through and setting every device to use my DNS servers, I recommend you read sections 1 - 2 of a [previous post](/blog/dns-and-root-certificates-what-you-need-to-know/#1-what-is-dns-and-why-does-it-concern-you) so you actually understand what's happening and what you're doing. DNS is set up on the same servers as my [Tor exits](/tor-nodes/) so, if you're in a country that actively blocks Tor, you could run into issues unless you use the Anycast IP/hostname.
# Features
* [Anycast](https://en.wikipedia.org/wiki/Anycast)
* [DNS-over-TLS](https://en.wikipedia.org/wiki/DNS_over_TLS)
* [QNAME minimisation](https://tools.ietf.org/html/rfc7816)
* [DNSSEC validation](https://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en)
* No logs (see [Privacy Policy](/privacy))
* Optional adblock w/ [Pi-Hole](https://pi-hole.net/) coming soon&trade;
# IPs & Hostnames
For simplicity's sake, I recommend using the [Anycast](https://en.wikipedia.org/wiki/Anycast) hostname as your primary, the location normally nearest to you as secondary, and a different provider for your tertiary DNS. With Anycast, you'll automatically use the server geographically nearest (the one with the lowest latency) and it will be secured with TLS. For more technical information on Anycast, click the link above. The second Anycast IP address is for plaintext DNS (**not recommended**); everything else is DNS-over-TLS. If you don't know what those are, the next section explains a bit more.

3
index.html

@ -11,6 +11,9 @@ priority: 0.9
<p>I host a variety of services that are available for anyone to use free of charge. Below is a list with descriptions of each.
<br />
<br />
<a href="/support?project=2" rel="noreferrer" target="_blank"><button class="donate"><i class="fa fa-heart"></i> Support</button></a>
<br />
<br />
<a href="https://git.nixnet.xyz/NixNet" rel="noreferrer" target="_blank"><button class="donate"><i class="fa fa-cogs"></i> Technical Info</button></a>
<a href="/lists/" rel="noreferrer" target="_blank"><button class="donate"><i class="fa fa-envelope"></i> Subscribe for updates</button></a>
</p>

21
json/cards.json

@ -37,13 +37,6 @@
"tor":"#"
},
{
"name": "Nextcloud",
"description": "Nextcloud is your personal cloud. You have files, contacts, calendar, video calls, chat, notes, notecards, a gallery, and even polls. The best thing is that it's open source and private!",
"button_text": "Register!",
"link": "/nextcloud",
"tor":"#"
},
{
"name": "Searx",
"description": "searX is a meta search engine that aggregates results from more than 70 different search engines. Users are neither tracked nor profiled. searX can also be used over Tor for increased anonymity.",
"button_text": "Search!",
@ -51,13 +44,6 @@
"tor":"http://searx.l4qlywnpwqsluw65ts7md3khrivpirse744un3x7mlskqauz5pyuzgqd.onion/"
},
{
"name": "Taiga",
"description":"Taiga is an open source project management platform for developers, designers, and project managers who want a beautiful tool that makes work truly enjoyable.",
"button_text":"Manage!",
"link":"https://taiga.nixnet.xyz",
"tor":"#"
},
{
"name": "CodiMD",
"description": "CodiMD is an application that allows users to collaborate in real time on markdown documents and presentations. Perfect for quick and easy slideshows and documentation.",
"button_text": "Collaborate!",
@ -72,6 +58,13 @@
"tor":"http://bin.l4qlywnpwqsluw65ts7md3khrivpirse744un3x7mlskqauz5pyuzgqd.onion/"
},
{
"name": "Invidious",
"description": "Invidious is an open source alternative frontend to YouTube without the tracking and ads. You can subscribe to people, watch livestreams, and import/export subscriptions between instances!",
"button_text": "Watch!",
"link": "https://invidious.nixnet.xyz/",
"tor":"http://invidious.l4qlywnpwqsluw65ts7md3khrivpirse744un3x7mlskqauz5pyuzgqd.onion/"
},
{
"name": "Plume",
"description": "Plume is an open source and federated blogging platform that can be interacted with and followed from any social network powered by ActivityPub including Mastodon and others!",
"button_text": "Write!",

14
privacy-policy.md

@ -30,14 +30,22 @@ Your web browser communicates uniquely identifying information to all websites i
## DNS services
In short:
* Haproxy TCP/HTTP logs are disabled. No IP addresses are collected.
* Unbound query logs are enabled (log level verbosity: 1).
* Unbound debug logs are enabled (verbosity: 1).
* Query amounts coming specifically from the DNS-over-TLS server aren't counted.
* Website/DNS-over-HTTPS gateway's nginx logs are disabled.
* Website/DNS-over-HTTPS gateway's NGINX logs are disabled.
To elaborate on Unbound's verbosity, if you have it installed, you can run `man unbound.conf`, search `verbosity` and read it yourself. More human-readably . . .
* Level 0 only outputs **errors**
* Level 1 gives **high-level operational information** (how Unbound is running)
* Level 2 gives **detailed operational information**
* Level 3 shows the admin what **queries** are going through Unbound
* Level 4 gives lower-level **algorithm** information
* Level 5 logs **client** information
There's no warranty, no uptime assurance, etc. so I recommend using multiple [resolvers](https://wiki.lelux.fi/dns/resolvers); that also improves privacy because the DNS queries are spread across multiple providers
# Exceptions
I do live in the US; one server is here and the other is in Germany. If, for whatever reason, I'm compelled by law enforcement to give up your email, IP address, or any other information, I will. *I don't want to*. As such, I do whatever I can to make sure *I don't have that information*. If I don't have it, I can't share it.
I do live in the US; I have two servers here, one in Germany, and another in Luxmebourg. If, for whatever reason, I'm compelled by law enforcement to give up your email, IP address, or any other information, I will. *I don't want to*. As such, I do whatever I can to make sure *I don't have that information*. If I don't have it, I can't share it.
# Recommendations
To mitigate invasions of privacy like this, use a throwaway email address for registration, such as one from [anonbox](https://anonbox.net/) if you want a temporary address or [cock.li](https://cock.li/) for something a bit more permanent, provide a [fake name](https://fakena.me/fake-name/), and use the service from behind [Tor](https://www.torproject.org/) or a VPN. Rather than a VPN, however, I *strongly* recommend using Tor across all devices. They have an [Android version](https://www.torproject.org/download/#android) now and there's another browser for iOS that they recommend called [Onion Browser](https://apps.apple.com/us/app/onion-browser/id519296448). I don't use iOS so I can't say whether or not it's any good, just that the Tor Project recommends it below the Android section.

Loading…
Cancel
Save