CubelaPetar/notes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

]

Browse Source
This commit is contained in:
Petar Cubela
2025-07-15 15:36:24 +02:00
parent f6398bf45c
commit 252a91dbcc
162 changed files with 4584 additions and 54 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
projects/tu/20250604-uebernahme.md Normal file
View File

@@ -0,0 +1,10 @@
## notizen
- [x] passiver poe injector fuer kinderhaus projekt
## themen
- [x] Zeiten eintragen
- [x] Kinderhaus - hoffe das Projekt ist vorher fertig
- [x] Freigabe RCM reinkommen - Thomas Buecherl

105
projects/tu/TU_Homepage/DokuWiki_Install.md Normal file
View File

@@ -0,0 +1,105 @@
## Ressources
- [Install](https://www.dokuwiki.org/install)
- [security](https://www.dokuwiki.org/security)
- [php](https://www.dokuwiki.org/install:php#php_configuration_for_dokuwiki)
- [non-official install](https://landchad.net/dokuwiki/)
- [installer.php](https://www.dokuwiki.org/installer)
- [download page](https://download.dokuwiki.org/)
- [used tarball](https://download.dokuwiki.org/src/dokuwiki/dokuwiki-stable.tgz)
## History
Install web server (ngnix), php and its desired modules:
```sh
apt install nginx php php-fpm php-xml php-mbstring php-zip php-intl php-gd php-json php-bz2
```
Download the [tarball](https://download.dokuwiki.org/src/dokuwiki/dokuwiki-stable.tgz) , unpack the distribution tarball and upload/copy the files to your webspace:
```sh
wget https://download.dokuwiki.org/src/dokuwiki/dokuwiki-stable.tgz
tar xzvf dokuwiki-stable.tgz
mv dokuwiki-*a /var/www/dokuwiki
chown -R www-data:www-data /var/www/dokuwiki
```
Create the nginx config file at `/etc/nginx/sites-available/example.com` with the following input.
Nginx config example(change accordingly to your needs. mainly change "server_name"):
```conf
server {
listen 80;
listen [::]:80;
server_name example.com 10.0.0.10;
# Maximum file upload size is 4MB - change accordingly if needed
client_max_body_size 4M;
client_body_buffer_size 128k;
root /var/www/dokuwiki;
index doku.php;
#Remember to comment the below out when you're installing, and uncomment it when done.
location ~ /(conf/|bin/|inc/|vendor/|install.php) { deny all; }
# .ht - .htaccess, .htpasswd, .htdigest, .htanything
# .git, .hg, .svn - Git, Mercurial, Subversion.
# .vs - Visual Studio (Code)
# All directories except lib.
# All "other" files that you dont want to delete, but dont want public.
location ~ /(\.ht|\.git|\.hg|\.svn|\.vs|data|conf|bin|inc|vendor|README|VERSION|SECURITY.md|COPYING|composer.json|composer.lock) {
# Returns 403
deny all;
#return 404;
}
#Support for X-Accel-Redirect
location ~ ^/data/ { internal ; }
location ~ ^/lib.*\.(js|css|gif|png|ico|jpg|jpeg)$ {
expires 365d;
}
location / { try_files $uri $uri/ @dokuwiki; }
location @dokuwiki {
# rewrites "doku.php/" out of the URLs if you set the userwrite setting to .htaccess in dokuwiki config page
rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
rewrite ^/(.*) /doku.php?id=$1&$args last;
}
location ~ \.php$ {
try_files $uri $uri/ /doku.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param REDIRECT_STATUS 200;
fastcgi_pass unix:/var/run/php/php-fpm.sock;
# fastcgi_pass unix:/var/run/php5-fpm.sock; #old php version
}
}
```
Enable the Website:
```sh
ln -s /etc/nginx/sites-available/dokuwiki /etc/nginx/sites-enabled/
```
Restart nginx and php in order for the changes to take effect:
```sh
systemctl restart nginx && systemctl restart php8.2-fpm
```
To run the installer, open the page http://DokuWiki-IP/install.php in the web browser. Follow [installer.php manual](https://www.dokuwiki.org/installer).
Once that’s done, remember to uncomment the location line on the nginx configuration file.
Open `/etc/nginx/sites-available/dokuwiki` with a text editor and remove the “#” symbol at the beginning of the line.
Reload nginx once again so that the changes take effect.
```sh
systemctl restart nginx
```

5
projects/tu/general/Contacts.md Normal file
View File

@@ -0,0 +1,5 @@
- Martin Kettner: 0173 6156202
- Thomas Breitner:
- Priv.: 0171 2154285
- Dienst.: 0162 2540909

46
projects/tu/general/network-infra.md Normal file
View File

@@ -0,0 +1,46 @@
## Intro
Documentation about the network infrastructure on the TU Garching Campus.
## Network and VLANs
**Information is extracted from the Sophos Firewall**
| Name | Tag | Netz | FW Port | Gateway | Note |
| ------------------------- | ---- | ------------------ | ------- | -------------------------- | -------------------------------------------------------------------- |
| Bereichsrechner-Netz 5 | 45 | 10.0.45.1/24 | eth10 | | |
| CPA | 415 | 10.54.15.1/24 | eth10 | | CPA |
| CRC | 410 | 10.54.10.1/24 | eth10 | | |
| Chemie Neu | 400 | 10.54.0.1/24 | eth10 | | Chemie (neu&saniert) |
| E+I | 901 | 10.59.1.1/24 | eth10 | | |
| Entrepreneurship | 433 | 10.54.33.1/42 | eth10 | | |
| FMI | 600 | 10.56.0.1/42 | eth10 | | |
| FW-MGMT Netz Port E0 | | 10.0.0.1/24 | eth0 | | nur Management |
| GLT neu (mxi64) | 20 | 10.0.20.1/24 | eth10 | | gw2 verbunden. |
| Gesamtnetz alt | 1 | 10.0.10.1/24 | eth10 | | |
| Heizkraftwerk | 601 | 10.61.1.1/24 | eth10 | | |
| IFP Physik | 117 | 10.51.17.1/24 | eth10 | | Physik Verfuegungsbau 5117. gw2 verbunden. |
| Internetzugangsnetz | 95 | 10.0.95.1/24 | eth10 | | gw2 verbunden. |
| LRZ external (WAN) | | 129.187.145.129/28 | eth1 | DEFAULT GW 129.187.145.142 | Port A 17 LRZ Netz |
| LRZ intern (WAN) | 90 | 10.152.140.1/24 | eth10 | DEFAULT GW 10.152.140.254 | |
| MGMT | 30 | 10.0.30.1/24 | eth10 | | Management Netz fuer Switches; gw2 verbunden. |
| MW neu | 500 | 10.55.0.1/24 | eth10 | | Maschinenwesen (neu&saniert) |
| MW neu - DMZ HAS | 501 | 10.55.1.1/24 | eth10 | | MVV neu DMZ Netz fuer HAS |
| MXI-Bereich-1 | 21 | 10.0.21.1/24 | eth10 | | gw2 verbunden. |
| MXi-Sammelnetz | 99 | 10.0.99.1/24 | eth10 | | fuer kleine Gebauede |
| NDB | 305 | 10.53.5.1/24 | eth10 | | NDB 5305 |
| PD1-neu | 101 | 10.51.1.1/24 | eth10 | | |
| Radiochemie | 212 | 10.52.12.1/24 | eht10 | | OPNsense |
| Remote Management | 25 | 10.0.25.1/24 | eth10 | | Netz fuer Entwicklungs-VMs |
| SLS | 142 | 10.51.42.1/24 | eth10 | | Schwerlastenstation/P7 |
| Service-Port-Netz | 80 | 10.0.80.1/24 | eth10 | | Intermediate Serviceport Switches fuer RDP und HTTPS; gw2 verbunden. |
| SiBe | 85 | 10.100.1.1/24 | eth10 | | Sicherheitsbeleuchtung |
| V82_ohne_MXI64 | 82 | 10.0.82.1/24 | eth10 | | Loxone Sammelnetz |
| VBI alte Mensa | 302 | 10.53.2.1/24 | eth10 | | VBI alte Mensa |
| VLAN 63 | 63 | 192.157.163.1/24 | eth10 | | Bestandsnetz 192.157.163 |
| VLAN 64 | 64 | 192.157.164.1/24 | eth10 | | Bestandsnetz 192.157.164 |
| VLAN 65 | 65 | 192.157.165.1/24 | eth10 | | Bestandsnetz 192.157.165 |
| VLAN 66 | 66 | 192.157.166.1/24 | eth10 | | Bestandsnetz 192.157.166 |
| VLAN 67 | 67 | 192.157.167.1/24 | eth10 | | Bestandsnetz 192.157.167 |
| ZQE | 128 | 10.51.28.1/24 | eth10 | | ZQE. gw2 verbunden. |
| Zaehler-Netzwerk Garching | 2574 | 172.16.135.249/21 | eth10 | | ?? |

30
projects/tu/glt-mail/20250710-init.md Normal file
View File

@@ -0,0 +1,30 @@
## Deadline Planung
- 17.07.2025
## Vorstellung
- GLT Meldungen dper Mail an Sammelpostfach
- Empfaenger adresse benoetigt
- zum Beispiel Registrierung Veeam
### Zugang
- Tobais Moser
- Breittner Thomas
## Notizen
- Mail managed vom LRZ
- zu komplex
- umgehen, wenn moeglich
## Idee
- lokaler smtp/imap Server
- rein lokales Postfach. Nimmt interne GLT Meldungen entgegegn
- Falls Mails nach aussen muessen, leite es ueber die das mail-gw

18
projects/tu/ifp-5112/20250612-switches.md Normal file
View File

@@ -0,0 +1,18 @@
- asp01 - 10.0.30.156
- asp02 - 10.0.30.155
- asp03 - 10.0.30.154
- asp04 - 10.0.30.153
- asp05 - 10.0.30.152
- asp06 - 10.0.30.167
- asp07 - 10.0.30.151
- asp08 - 10.0.30.150
- asp09 - 10.0.30.??? (nicht gelistet)
- asp10 - 10.0.30.166
- asp11 - 10.0.30.165
- asp12 - 10.0.30.164
- asp13 - 10.0.30.163
- asp14 - 10.0.30.162
- asp15 - 10.0.30.161
- asp16 - 10.0.30.160

7
projects/tu/messschacht-ubnt/SecFeatures.md Normal file
View File

@@ -0,0 +1,7 @@
### Features
- WDS (Transparent Bridge Mode)
- hidden SSID
- MAC Filter