add auto fetch ssl certs

This commit is contained in:
2021-08-26 12:11:25 +08:00
parent 11ca254bed
commit 509ac048fc
237 changed files with 4968 additions and 7406 deletions

View File

@@ -1,7 +1,7 @@
<!DOCTYPE html>
<html lang="en-us">
<head>
<meta name="generator" content="Hugo 0.58.3" /><meta charset="utf-8">
<meta name="generator" content="Hugo 0.68.3" /><meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<script type="application/ld+json">
{
@@ -22,8 +22,8 @@
"accountablePerson" : "",
"copyrightHolder" : "",
"copyrightYear" : "2021",
"datePublished": "2021-07-20 09:19:47 \x2b0800 CST",
"dateModified" : "2021-07-20 09:19:47 \x2b0800 CST",
"datePublished": "2021-08-26 12:08:43 \x2b0800 CST",
"dateModified" : "2021-08-26 12:08:43 \x2b0800 CST",
"url" : "https:\/\/h.cowbay.org\/",
"wordCount" : "0",
"image" : "https://h.cowbay.org%!s(\u003cnil\u003e)"",
@@ -46,9 +46,9 @@
<link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.3.1/css/all.css" integrity="sha384-mzrmE5qonljUremFsqc01SB46JvROS7bZs3IO2EmfFsd15uHvIt+Y8vEf7N7fWAU" crossorigin="anonymous">
<link href="https://h.cowbay.org/css/style.css?v=1626744134" rel="stylesheet" id="theme-stylesheet" type='text/css' media='all'>
<link href="https://h.cowbay.org/css/style.css?v=1629951055" rel="stylesheet" id="theme-stylesheet" type='text/css' media='all'>
<link href="https://h.cowbay.org/css/custom.css?v=1626744134" rel="stylesheet" type='text/css' media='all'>
<link href="https://h.cowbay.org/css/custom.css?v=1629951055" rel="stylesheet" type='text/css' media='all'>
<link rel="shortcut icon" href="https://h.cowbay.org/img/favicon.ico" type="image/x-icon">
<link rel="icon" href="https://h.cowbay.org/img/favicon.ico" type="image/x-icon">
@@ -84,10 +84,6 @@ if (!doNotTrack) {
<ul id="menu-secondary-items" class="menu-secondary-items">
<li class="menu-item menu-item-type-taxonomy menu-item-object-category">
<a href="/categories/"></a>
</li>
<li class="menu-item menu-item-type-taxonomy menu-item-object-category">
<a href="/categories/ansible">ansible</a>
</li>
@@ -325,11 +321,8 @@ if (!doNotTrack) {
<div class='excerpt-content'>
<article>
<p>很久以前就有看到這個用來備份postgresql 的 pgbarman</p>
<p><a href="https://www.pgbarman.org/">https://www.pgbarman.org/</a></p>
<p>前幾天老闆在slack 上面又提到,所以這次就花了點時間來玩玩看</p>
<p>不過呢,雖然有弄起來,但是還真不知道有些問題是怎麼解決的&hellip;</p>
<div class="more-link-wrapper"><a class="more-link" href="https://h.cowbay.org/post/pgbarman-in-ubuntu-1804-postgresql-10/">Read the post<span class="screen-reader-text">This is a Standard Post</span></a></div>
@@ -383,11 +376,8 @@ if (!doNotTrack) {
<div class='excerpt-content'>
<article>
<p>因為老闆說要試試看用GPU 來跑postgresql 威力</p>
<p>手邊剛好有一張 geforce gt 720</p>
<p>一開始沒想太多看到有這張卡的驅動程式然後CUDA也有支援</p>
<p>就直接從桌機拔下來接去LAB Server ,然後就開始一連串的難關了&hellip;</p>
<div class="more-link-wrapper"><a class="more-link" href="https://h.cowbay.org/post/install-nvidia-driver-cuda-pgstrom-in-ubuntu-1804/">Read the post<span class="screen-reader-text">This is a Standard Post</span></a></div>
@@ -441,17 +431,11 @@ if (!doNotTrack) {
<div class='excerpt-content'>
<article>
<p>最近一直在玩 wireguard 先前把各個分公司和總部的VPN 改用 wireguard 建立</p>
<p>想說再打個VPN tunnel 來當跳板連 ptt 好了</p>
<p>因為wireguard 建立很簡單,而且又可以指定想要繞出去的路由,不會影響原本的網路環境</p>
<p>本來是在vultr 的VPS上面建立這個tunnel</p>
<p>但是那台VPS連去ptt 很頓,卡卡的</p>
<p>所以改用google cloud platform 的free tier 來做</p>
<p>反正只是拿來當跳板,不會有什麼流量、運算產生,可以一直保持免費的狀態</p>
<div class="more-link-wrapper"><a class="more-link" href="https://h.cowbay.org/post/do-no-use-10-0-0-0-private-ipaddr-in-gcp/">Read the post<span class="screen-reader-text">This is a Standard Post</span></a></div>
@@ -505,15 +489,10 @@ if (!doNotTrack) {
<div class='excerpt-content'>
<article>
<p>因為實在受夠了現在用的 openwrt + strongswan 建立 IPSec VPN</p>
<p>雖然說其實沒有什麼不好,但是畢竟不是我建立的,而當初的文件也都不見了</p>
<p>完全沒辦法了解當時設計的邏輯造成後續debug 困難</p>
<p>可以想像一下一台VPN router ping 不到remote、ping不到internet、甚至ping不到自己 是要怎麼debug !?(翻桌</p>
<p>之前買了兩台edgerouter X 拿來玩了一下 wireguard感覺還不錯不過只有測試到點對點</p>
<p>這次試試看躲在gateway後面看看能不能建立多點的VPN環境</p>
<div class="more-link-wrapper"><a class="more-link" href="https://h.cowbay.org/post/multiple-site-to-site-vpn-using-wireguard/">Read the post<span class="screen-reader-text">This is a Standard Post</span></a></div>
@@ -567,23 +546,14 @@ if (!doNotTrack) {
<div class='excerpt-content'>
<article>
<p>之前總部和分公司之間 是用buffalo 的小AP 灌 openwrt</p>
<p>然後用strongswan 來打 IPSEC site to site VPN</p>
<p>config 看起來不是很難 (只是看起來)</p>
<p>但是實際上已經找不到當初的文件</p>
<p>所以要維護很困難(光那些RSA KEY 就不知道為何、如何產生)</p>
<p>後來採購了兩台edgerouter X 做測試</p>
<p>也用openvpn 成功的建立了 site to site VPN</p>
<p>本來想說 openvpn 已經夠簡單了</p>
<p>今天看到文章說用wireguard 可以更簡單</p>
<p>於是研究了一下,發現還真的很簡單!</p>
<div class="more-link-wrapper"><a class="more-link" href="https://h.cowbay.org/post/site-to-site-vpn-using-wireguard-in-two-edgerouters/">Read the post<span class="screen-reader-text">This is a Standard Post</span></a></div>
@@ -868,7 +838,7 @@ if (!doNotTrack) {
</ul> <div class="design-credit">
<p>&copy; 2018 Göran Svensson</p>
<p>© 2018 Göran Svensson</p>
<p>Nederburg Hugo Theme by <a href="https://appernetic.io">Appernetic</a>.</p>
@@ -880,7 +850,7 @@ if (!doNotTrack) {
</div>
<script src="https://h.cowbay.org/js/jquery.min.js"></script>
<script src="https://h.cowbay.org/js/jquerymigrate.js"></script>
<script src="https://h.cowbay.org/js/production.min.js?v=1626744134"></script>
<script src="https://h.cowbay.org/js/production.min.js?v=1629951055"></script>
</body>
</html>