![#geek2gether](/img/default-banner.jpg)
- Видео 99
- Просмотров 389 313
#geek2gether
Добавлен 6 янв 2021
Information Technology, Networking, and Cyber security tutorial videos.
Follow me on Instagram @geek_2_gether
Join our geek2gether|Hub forum and seek help/ask questions geek2gether.com/community
If you have any questions or concerns, please contact - support@geek2gether.com
We also provide support for Apache Guacamole. Email us for more information.
Follow me on Instagram @geek_2_gether
Join our geek2gether|Hub forum and seek help/ask questions geek2gether.com/community
If you have any questions or concerns, please contact - support@geek2gether.com
We also provide support for Apache Guacamole. Email us for more information.
Apache Guacamole High Availability Setup
#This is not a sponsored video#
In this video we setup apache guacamole high availability using HAProxy Load balancer.
Guacamole database authentication:
guacamole.apache.org/doc/gug/jdbc-auth.html
HAproxy:
www.haproxy.org/
Tutorial Mysql Commands:
github.com/geek2gether/Apacheguacamole/blob/main/apache%20-guacamole-database
Tutorial HAProxy commands:
github.com/geek2gether/Apacheguacamole/blob/main/guacamole-ha-setup-haproxy
Timeline:
Part 1: Database setup 6:19
Part 2: Setup HAProxy 19:40
Finale: Clean Up(Uninstall and remove existing mysql on guacamole servers) 28:26
#apache-guacamole #apacheguacamole #loadbalance #guacamole
In this video we setup apache guacamole high availability using HAProxy Load balancer.
Guacamole database authentication:
guacamole.apache.org/doc/gug/jdbc-auth.html
HAproxy:
www.haproxy.org/
Tutorial Mysql Commands:
github.com/geek2gether/Apacheguacamole/blob/main/apache%20-guacamole-database
Tutorial HAProxy commands:
github.com/geek2gether/Apacheguacamole/blob/main/guacamole-ha-setup-haproxy
Timeline:
Part 1: Database setup 6:19
Part 2: Setup HAProxy 19:40
Finale: Clean Up(Uninstall and remove existing mysql on guacamole servers) 28:26
#apache-guacamole #apacheguacamole #loadbalance #guacamole
Просмотров: 482
Видео
Using a security Key to Login to Nextcloud ( Passwordless login and MFA)
Просмотров 172Месяц назад
In this video we learn how to setup nextcloud passwordless login and/or setup MFA using a security Key such as Yubikey. Part 1: Passswordless Login 0:08 Part 2: MFA 04:20 Link to fido2 alliance page: fidoalliance.org/fido2/ #passwordlesslogin #nextcloud #mfa #securitykey
Setup Openappsec Advance Machine Learning Model
Просмотров 1402 месяца назад
In this video we learn how to setup the openappsec "Advanced Model" which is recommended for production use by openappsec by checkpoint. Documentation: docs.openappsec.io/getting-started/using-the-advanced-machine-learning-model geek2gether|hub for questions: hub.geek2gether.com/c/openappsec/17 #openappsec #checkpoint
Openappsec WAF setup with Nginx Proxy Manager(SaaS Option)
Просмотров 8842 месяца назад
The video introduces openappsec WAF and goes over installation and setup with Nginx Proxy Manager #openappsec #checkpoint Documentation: About openappsec: www.openappsec.io/get-started NPM and openappsec Setup (saas option) docs.openappsec.io/integrations/nginx-proxy-manager-integration/install-nginx-proxy-manager-with-open-appsec-managed-from-central-webui-saas hub.geek2gether.com/c/openappsec...
Encrypt Apache Guacamole GUACD protocol with SSL
Просмотров 1,6 тыс.5 месяцев назад
In this video we setup guacd with ssl and connect it to a guacamole client/web server hosted in the cloud. Generate certificate and private key command: sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/guacd.key -out /etc/ssl/certs/guacd.crt Java keytool command: keytool -import -alias secure_guacd_cert -keystore /usr/lib/jvm/java-11-openjdk-amd64/lib/security/c...
Nextcloud Federation Sharing
Просмотров 7645 месяцев назад
In this video we learn how to share files/folders to users between different nextcloud servers. Nextcloud documentation: docs.nextcloud.com/server/latest/admin_manual/configuration_files/federated_cloud_sharing_configuration.html #nextcloud #geek2gether hub.geek2gether.com
Apache Guacamole Distributed Install
Просмотров 1,1 тыс.5 месяцев назад
In this video we setup Apache guacamole in the cloud and install a guacamole-server "guacd" instance in our internet network that the cloud instance of apache guacamole uses to connect to local network servers/clients using SSH, RDP and VNC. This way we only need to port forward port 4822/tcp for guacd to access RDP, SSH and VNC. #commands: 1. Install dependencies: sudo apt install build-essent...
Change Nextcloud Data Directory
Просмотров 4,2 тыс.5 месяцев назад
In this video we learn how to change nextcloud data directory after installation. #nextcloud #geek2gether hub.geek2gether.com
Monitor and Parse Nginx Proxy Manager Proxy Hosts Logs with Crowdsec
Просмотров 1,5 тыс.5 месяцев назад
In this video we setup crowdsec to monitor npm proxy hosts. #crowdsechub app.crowdsec.net/hub/collections #geeksgetherforum hub.geek2gether.com #crowdsec #npm #nginxproxymanager
Setup Crowdsec Blocklist Mirror for Network firewalls
Просмотров 6735 месяцев назад
In this video i explain how to setup crowdsec blocklist mirror for firewall external block list. For questions or troubleshooting please join the geek2gether hub at hub.geek2gether.com/latest docs.crowdsec.net/u/bouncers/blocklist-mirror/ Commands: Add crowdsec repo: curl -s packagecloud.io/install/repositories/crowdsec/crowdsec/script.deb.sh | sudo bash Install crowdsec blocklist mirror: $ sud...
Securing Multiple Webservers using Nginx proxy Manager with Crowdsec and Rsyslog.
Просмотров 1,6 тыс.9 месяцев назад
In this video we setup Rsyslog server to forward logs from multiple servers and parse them with crowdsec security engine to identify and block malicious attempts using Nginx Proxy Manager. Configuration: raw.githubusercontent.com/geek2gether/random_files/main/securing multiple servers with crowdsec using syslog server Learn how to install Nginx proxy manager with crowdsec: ruclips.net/video/qnv...
Microsoft Windows Crowdsec install and setup
Просмотров 3,8 тыс.10 месяцев назад
In this video we learn how to install and configure crowdsec in a windows machine. crodsec windows security engine download: github.com/crowdsecurity/crowdsec/releases/tag/v1.5.5 crowdsec windows firewall bouncer: github.com/crowdsecurity/cs-windows-firewall-bouncer/releases geek2gether|hub geek2gether.com/community #crowdsec #windows
Setup Crowdsec with Nginx Proxy Manager - Part 2 (Multi-server setup)
Просмотров 3,8 тыс.10 месяцев назад
We continue from the part 1 to setup a crowdsec multi-server installation. This video can help you setup a local LAPI crowdsec server with multiple agents on different servers. To install crowdsec run commands: command 1 curl -s packagecloud.io/install/repositories/crowdsec/crowdsec/script.deb.sh | sudo bash command 2 sudo apt install crowdsec crowdsec hub: app.crowdsec.net/hub/ www.crowdsec.ne...
Setup Crowdsec with Nginx Proxy Manager - Part 1
Просмотров 9 тыс.10 месяцев назад
in this video we use docker to setup crowdsec for Nginx proxy manager using the image from LePresidente/docker-nginx-proxy-manager to secure/protect proxied services. crowdsec hub: app.crowdsec.net/hub/ www.crowdsec.net/ LePresidente's github page: github.com/LePresidente/docker-nginx-proxy-manager docker-compose.yml file: raw.githubusercontent.com/geek2gether/random_files/main/crowdsec-nginx-p...
Nextcloud Installation using a script
Просмотров 2,5 тыс.10 месяцев назад
The nextcloud installation script will download and install nextcloud. It also resolves setup errors after installation. The script sets up HTTPS using the snake-oil self signed cert in linux. The self signed certificate can be changed after install. To use the script run the commands: wget raw.githubusercontent.com/geek2gether/Nextcloud/main/nextcloud-install.sh sudo chmod x nextcloud-install....
No-Auth Extension Apache Guacamole
Просмотров 1,5 тыс.10 месяцев назад
No-Auth Extension Apache Guacamole
Install and Configure OpenVPN Access server - Part 5 - Access Control
Просмотров 72410 месяцев назад
Install and Configure OpenVPN Access server - Part 5 - Access Control
Install and Configure OpenVPN Access server - Part 6 - User Scripts
Просмотров 46210 месяцев назад
Install and Configure OpenVPN Access server - Part 6 - User Scripts
Install and Configure OpenVPN Access server - Part 4 - Creating User Groups
Просмотров 65110 месяцев назад
Install and Configure OpenVPN Access server - Part 4 - Creating User Groups
Install and Configure OpenVPN Access server - Part 3 - Creating User Accounts
Просмотров 2,1 тыс.10 месяцев назад
Install and Configure OpenVPN Access server - Part 3 - Creating User Accounts
Install and Configure OpenVPN Access server - Part 1 - Installation
Просмотров 5 тыс.11 месяцев назад
Install and Configure OpenVPN Access server - Part 1 - Installation
Installing and Configuring OpenVPN Access Server - Part 2 - Setup Web Server SSL
Просмотров 1,5 тыс.11 месяцев назад
Installing and Configuring OpenVPN Access Server - Part 2 - Setup Web Server SSL
Setup and Access RemoteApp with Apache Guacamole
Просмотров 7 тыс.11 месяцев назад
Setup and Access RemoteApp with Apache Guacamole
Apache Guacamole fail2ban setup with UFW or Cloudflare
Просмотров 1,1 тыс.11 месяцев назад
Apache Guacamole fail2ban setup with UFW or Cloudflare
Create a custom Apache Guacamole Theme
Просмотров 4,8 тыс.11 месяцев назад
Create a custom Apache Guacamole Theme
How to enable Guacamole RDP Session File Transfer
Просмотров 6 тыс.11 месяцев назад
How to enable Guacamole RDP Session File Transfer
ntfy - Installation and full configuration setup
Просмотров 4,6 тыс.11 месяцев назад
ntfy - Installation and full configuration setup
Nextcloud TrueNAS Plugin SMBClient Support
Просмотров 3,7 тыс.11 месяцев назад
Nextcloud TrueNAS Plugin SMBClient Support
Change the default URL Path of Apache Guacamole
Просмотров 2,5 тыс.11 месяцев назад
Change the default URL Path of Apache Guacamole
Maybe you can help me, I can only open mp4 files on my host machine. I can't open mp4 files on any of my network devices.
Thank you so much. This tutorial is straight to the point and worked perfectly for me.
Thank you for this! Just for some odd reason my IP 192.168.0. 5 would not work but the name of the server "server2024" worked.. very strange but hey it works!
i follow your tutorial but AI model version still simple model not advanced model, need advice
Did you do docker compose down and then docker compose up -d ?
its necessary the SSL cert?
If you plan on securing communication, and using it externally then yes
Hello my friend thank you for your videos NextCloud I have a message 17 Error log i dont understand how to fix that
Can you provide the full error message? If you can’t paste it here, post a question on my forum at geek2gether.com Please remove any personal information before posting.
@@geek2gether469 thank you my friend look what i have: 18 errors in the logs since 13 August 2024, 15:27:29 jsresourceloader Could not find resource firstrunwizard/js/personalsettings.js to load no app in context Exception HMAC does not match. Could not decrypt or decode encrypted session data BadRequest Expected filesize of 6908057 bytes but read (from Nextcloud client) and wrote (to Nextcloud storage) 81920 bytes. Could either be a network problem on the sending side or a problem writing to the storage on the server side. WebDAV TypeError OCA\DAV\Connector\Sabre\Directory::__construct(): Argument #2 ($info) must be of type OCP\Files\FileInfo, bool given, called in /var/www/nextcloud/apps/dav/lib/Upload/UploadHome.php on line 93 PHP fopen(/var/www/nextcloud/config/config.php): Failed to open stream: No such file or directory at /var/www/nextcloud/lib/private/Config.php#221
@@geek2gether469 thank you my friend look what i have:18 errors in the logs since 13 August 2024, 15:27:29 jsresourceloader Could not find resource firstrunwizard/js/personalsettings.js to load no app in context Exception HMAC does not match. Could not decrypt or decode encrypted session data BadRequest Expected filesize of 6908057 bytes but read (from Nextcloud client) and wrote (to Nextcloud storage) 81920 bytes. Could either be a network problem on the sending side or a problem writing to the storage on the server side. WebDAV TypeError OCA\DAV\Connector\Sabre\Directory::__construct(): Argument #2 ($info) must be of type OCP\Files\FileInfo, bool given, called in /var/www/nextcloud/apps/dav/lib/Upload/UploadHome.php on line 93 PHP fopen(/var/www/nextcloud/config/config.php): Failed to open stream: No such file or directory at /var/www/nextcloud/lib/private/Config.php#221
Poor audio quality.. will look for an other video. Put a little more effort in your videos mate.
Thank you for your feedback. And I hope you find what you are looking for.
Please how do i resolve this : level=warning msg="You are using sqlite without WAL, this can have a performance impact. If you do not store the database in a network share, set db_config.use_wal to true. Set explicitly to false to disable this warning." time="15-08-2024 12:03:56" level=fatal msg="unable to create bouncer: bouncer firewall already exists"
What windows version are you using ?
Thank you so much for your tutorial. I’ve watched all the videos and finally could install Nextcloud fresh without any errors or warnings. I’ve migrated from the TrueNAS app to a clean one thanks to you.
Thank you for your feedback. Please like share and subscribe
Hi, thank you for this video. I already have Crowdsec installed on OpnSense. How do I utilize the engin that’s already installed?
Hi there, great video, I have a question please if you can help me: The video is great and all, but I was searching for something else, something that is nowhere in the internet, since I am deploying this for production use for a client: - The ldap works very good and everything, but what I want to do is I would like all the ldap users, by default, have access to all created connections? - And I also would like to add connections not via the GUI, but with a configuration file. I have seen in the official guacamole documentation that you can do this with /etc/guacamole/user-mapping.xml. but I have guacamole deployed as a kubernetes podman pod, in which I have the neccessery containers, but the guacamole container does not have a user-mapping.xml anywhere in the system, and even when I try to map such a file from the host system, on startup the guacamole container will delete this file. Do you have any suggenstions? Thank you in advance!!!
Thanks for this series. I can't follow this video because I use free DUCKDNS and I can't find how to use this.
What could be reasons, that the 50-default.conf is not being created on any machine? Everything else looks fine so far, it's just that one file.
Hi, I would try this installation method. Is it good to install NC in Proxmox LXC or VM? What template can I use? Thanks
Hey, what do you mean by template? Yes you can install nextcloud in a VM on proxmox
hi, you are the onlyone who give me the correct answare! Thanks!
Glad to hear that!
Script easy and fast to install. However i got a problem if I want to set up the email server it shows me always the following error: A problem occurred while sending the email. Please revise your settings. (Error: Email could not be sent. Check your mail server log) I reinstalled the script 2 times now, and I still have this problem. Thank you for any help here!
The problem is not the script! The script does not setup email. What is your setting for email ? And what email server/provider are you using? Gmail ? Yahoo?
@@geek2gether469Oh yeah sorry. I use purelymail and their technical setup from their documentation. But it doesnt work. It worked before I installed the script on nextcloud snap.
Can you share the documentation so I can test and provide feedback?
@@geek2gether469 test
is it possible search the groups? I tried ldap-group-base-dn and ldap-group-search-filter: but it didn't work.
Yes It is possible. You can use ldap-member-attribute
How do I connect using private key? I tried connecting to version 1.5.5, but without success. What command do I need to use to generate the key?
I have all the steps in the video on how to get it working. What issue are you facing?
What's the port you forward from outside for NPM ?
It depends on you. But if you want to use https standard port 443 you’d port forward 443 to 4443(NPM)
hi, during the login , i get error 400 missmatch redirect URi even though i had followed your links format. any advice?
Can you post your config here or in the geek2gether forum?
thank you
Thank you for making this video, using it I was able to move my data directory to an SMB share. Getting the SMB setup took a bit of troubleshooting such as updating the FSTAB entry to use the uid=www-data and gid=www-data so that the folder permissions are correct. I know your tutorial didn't cover that aspect but I figure I would drop that hint in there for the next person that wants to do this.
Failed to install mariadb server
If you already have MySQL or mariadb installed it won’t work .
@@geek2gether469 hmmm. okay. I'll try to check if any of this is installed already. First I need to figure out how. It's just my first time working with servers.
@@geek2gether469 maybe thats because i try to install it on truenas core
Oh the script has not been tested on truenas core
@@geek2gether469 tried to install in a CT Proxmox Debian 12, but received the same error
♥
Good video but barely can hear you? No its not my end :)
Yes I’m sure it’s my audio. This were my very first videos. Thank you for the feedback
Who can't view record in history, please change like that Recording path: ${HISTORY_PATH}/${HISTORY_UUID} Recording name:${GUAC_USERNAME}_${GUAC_DATE}_${GUAC_TIME}
Love your videos! I've been looking into this for a while now. There is any way to selfhost the dashboard instead of connecting it to saas?
Yes there is a self hosted option. I’m actually working on a video for that!
Thank you for this good and powerful video. Exactly what I needed.
You are welcome. I’m glad it helps. You can ping me if you have anymore specific questions
this works!. thanks man. at first i tried using SMB, but it fail. and i see many comment on several forums said that there's error on SMB permission. Well, then i change it using NFS. But, im worried about the security.
What exactly are you worried about in regards to security ? if your comfortable telling me about your setup i can advice you on best practices. Also you can open a topic on geek2gether.com and post your concerns.
@@geek2gether469 thanks a lot. before that, sorry, im noob at this kind of stuff. so please be patient. as far as i know, NFS dont have any authentication so i think someone could use and event remove files there. So i choose SMB rather than NFS
So your nextcloud instance is exposed to the internet? SMB should work , but again you need to mount it permanently with credentials. If you are willing to open a new topic with more info about your setup I can help you more. However, make sure if your nextcloud is exposed externally, your keeping it up to date, using a strong user password and MFA as well.
@@geek2gether469 yes, its exposed to the internet. i have tried SMB. it got error permission when i try turn off the maintenance mode. i surely have add the credential when i mount it.
Well you need to assign appropriate permission to the user such as rw then the nextcloud www-data will need to have permission to access and rw on the share as well.
Everything worked great except at the end I get this. Any ideas why? Forbidden You don't have permission to access this resource. Apache/2.4.58 (Ubuntu) Server at 192.168.x.x Port 80
It can be a handful of things. Can you check your Apache error log file and show me the error message you get there?
Thankyou dear thanks you so much
You are welcome. Please like share and subscribe
Cannot configure two systems successfully in ldap-servers.xml. it seems that only the information in guacamole.properties is being read. Any help?
Open up a topic at hub.geek2gether.com and post your ldap-servers.yml and guacamole.properties config. Make sure you remove personal information. Once I see these files I can provide appropriate advice!
can we make SMB external storage as private folder for each user? i see some documentation suggest to use $user on Remote subfolder, but i think thats not work. or maybe we have to do something on nextcloud or the truenas?
If I understand you correctly you want all user data to be stored on an smb share. The most effective way is changing the entire nextcloud data directory to use an smb share mounted. Note this may slow down your nextcloud depending on your connection speed and how fast your smb share is. I have a video here on how to change data directory: m.ruclips.net/video/Rk3kYCyY5ro/видео.html But in your case you will manually mount the smb share and make sure it is always mounted on boot then follow the video to change the data directory.
@@geek2gether469 thanks man, thats a lot easier than my thought before.
Thank you soo much!
I am having a nightmare trying to change the location where my files etc are saving. Everything at the moment is saving to the SD card and not the M.2 SSD. I've been trying to get help via the community, but so far nothing. I might have to give up soon. Can anyone help?
Sure thing! Open a new topic on my forums at geek2gether.com so I can help you resolve your issues. Please provide information about your setup as well and how your virtual machine or physical nextcloud server is setup. Do not provide personal information such as public ip addresses etc.
Just performed this step by step to move data from default to newly installed raid array. Worked perfectly(to much relief)!
Thanks for your helpful post How to cluster this service to have HA?
Thank you for watching. You can achieve this with 2 load balanced guacamole instances using thesame database. I may make a video about this in the near future.
@@geek2gether469 I am launching a project for my organization and the guacamole service is very attractive to me. Is it possible to have your email to exchange ideas? I need your opinion for some things. I will be grateful.
Sure thing. You can email me at cyberghost.turorials@gmail.com
Thank you so much Very simple, very easy to follow, learned a bit more linux and mySQL Everything has been painful until I found this video 😁😁😁😁😁
Comment établir une connexion avec les protocoles HTTP/HTTPS ?
tu veux dire la connexion RDP
This is what I have been looking for for a while. thank you
for nextcluod in snap, how to add smbclinet?
It is different for snap because of it’s containment. See their guide here : github.com/nextcloud-snap/nextcloud-snap/wiki/How-to-add-samba-shares-and-local-shares
excellent work !!!
Thank you for watching
Hi could you help me how to configure for saml-group-attribute I want to send this for controlling permissions and access from IDP. Could you tell me what to mention in it and how the value will be received e in it
What Idp are you using ?
Tkanks, i update 1.5.3 to 1.5.5, in a couple of minutes)
Thank you for watching
what if we want to remove everything ? that we done with script and want to install again using script?
Where should I contact you for consultation or help me, I need help to journal to do this to secure a vulnerable website locally🙏
Head over to hub.geek2gether.com/c/openappsec/17 and post a question about what you need help with.
@@geek2gether469OkeyThank you bro, I have asked a question, I hope you get an answer and help, I really need it
@@geek2gether469bro I need your answer immediately, please help me, it's important and time is running out🙏
@@geek2gether469I have created a topic on the nginx proxy manager webui saaas forum
Hello, I want to ask, how about doing it to protect the http in localhost, can you help me to do an experiment 🙏
Head over to hub.geek2gether.com/c/openappsec/17 and post a question about what you need help with.
OK, thank you, I'll wait for your answer there@@geek2gether469
Have done the same still it is showing authentication page
What version of Apache guacamole are you using
@@geek2gether469latest version of apache guacamole which was in your github installation script
Well this is not supported anymore for newer versions of Apache guacamole as it insecure. You will have to use the version I used in the video.
@@geek2gether469let us know the versions of both to proceed further
Understood - Thx
All connected fine, but when i open a document i see an error - Download failed. Press OK to return to document list. What i am doin wrong?...
Are you using cloudflare?
@geek2gether469 no, i am using KeenDNS on Keenetic router
Check the error logs in /var/log/onlyoffice for errors. Also make sure if your behind a proxy only office can get the clients real ip by using the x forwarded header depending on the reverse proxy you may be using but the logs should give you more information
@@geek2gether469 Keenetic router support team suggested that nextcloud incorrectly handles the HTTP header, so I need to run the following commands (telnet command in the router): ip http proxy <keendns name> preserve-host exit system configuration save Did. And start working! Thanks!
Awesome. I’m glad you got it working!