Avocado Raspberry Pi

Notes on my Raspberry Pi configuration.

Installation

Download the latest 64 bit Raspberry Pi OS.
Use the Raspberry Pi Imager to prepare the SSD.

Terminal & SSH

Username and Password

Login to Raspberry Pi.
- User: pi
- Password: raspberry
Set the root password.
```
$ sudo passwd root
```
Logout and login as root.

Change the pi user to shad.

# usermod -l shad pi
# usermod -m -d /home/shad shad

Hostname

Launch raspi-config.
```
$ sudo raspi-config
```
Select System Options.
Select Hostname and hit Enter.
Enter a new hostname and hit Enter.
Click Finish.

SSH

Enable SSH.

$ sudo systemctl enable ssh
$ sudo systemctl start ssh

Mount the Old Root

Option 1: Old Device

List the available devices.

$ sudo lsblk -o name,label,size,mountpoint
NAME   LABEL      SIZE MOUNTPOINT
sda             465.8G
├─sda1 boot       256M /boot
└─sda2 rootfs   465.5G /
sdb               1.8T
└─sdb1 tanpopo    1.8T
sdc               4.6T
└─sdc1 ajisai     4.6T
sdd              29.8G
├─sdd1 RECOVERY   2.2G
├─sdd2              1K
├─sdd5 SETTINGS    32M
├─sdd6 boot       256M
└─sdd7 root      27.3G /mnt/oldroot

Mount the appropriate partition.

$ sudo mkdir /mnt/oldroot
$ sudo mount /dev/sdd7 /mnt/oldroot

Option 2: Backup Archive

Copy the backup to avocado.

$ scp rootfs.tar.gz shad@avocado.local:

Install archivemount.
```
$ sudo apt install archivemount
```

Mount the archive.

$ sudo mkdir /mnt/oldroot
$ sudo archivemount -o readonly -o allow_other rootfs.tar.gz /mnt/oldroot

SSH Keys

Restore SSH keys from backup.
```
$ cp -a /mnt/oldroot/home/shad/.ssh ~
```

Zsh

Restore the old zsh history.

$ cp /mnt/oldroot/home/shad/.zsh_history ~

Install zsh.
```
$ sudo apt install zsh
```

Switch the default shell.

$ chsh
Password:
Changing the login shell for shad
Enter the new value, or press ENTER for the default
    Login Shell [/bin/bash]: /usr/bin/zsh

Logout and log back in.

Common Apps

Install them.
```
$ sudo apt install vim git curl tmux
```
Launch tmux and install plugins by pressing ctrl+a, I

Dot Files

Install .dotfiles.

$ git clone git@github.com:shadanan/dotfiles.git .dotfiles
$ .dotfiles/install

Logout and log back in.

Passwordless `sudo`

Open the sudo config editor.
```
$ sudo visudo
```
Add the following to the file.
```
shad    ALL=(ALL) NOPASSWD:ALL
```

SSH Two Factor Authentication

Install the Google Authenticator PAM module.

$ sudo apt install libpam-google-authenticator

Initialize the configuration. Answer yes to everything.
```
$ google-authenticator
```

Add the following to the top of /etc/pam.d/sshd.

# Google Two Factor Authentication
auth required pam_google_authenticator.so

In /etc/ssh/sshd_config, change ChallengeResponseAuthentication from no to yes.
Restart the sshd daemon.
```
$ sudo systemctl restart sshd.service
```

Debian Sid

Replace the contents of /etc/apt/sources.list with:

deb http://deb.debian.org/debian unstable main contrib non-free

Update and upgrade.

$ sudo apt update
$ sudo apt dist-upgrade

Clean up and reboot.

$ sudo apt-get autoremove
$ sudo reboot

Message of the Day (MotD)

Add the following to the top of /etc/motd
```
🥑.shad.io
```

Console Beautification

Console Font Size

Start the console configuration.
```
$ sudo dpkg-reconfigure console-setup
```
In the Configuring console-setup, select:
- UTF-8
- Guess optimal character set
- Terminus
- 16x32

Console Overscan

In /boot/config.txt, uncomment disable_overscan=1.
Reboot.

Dynamic DNS

Install ddclient.
```
$ sudo apt install ddclient
```
Press esc to skip config screens.

Restore the original ddclient config.

$ sudo cp /mnt/oldroot/etc/ddclient.conf /etc/ddclient.conf

Or use this template:

#usev6=if
#if=eth0
protocol=dyndns2
use=web
ssl=yes
server=domains.google.com
login=<get this from domains.google.com>
password=<get this from domains.google.com>
*.shad.io

Restart the ddclient service.
```
$ sudo systemctl restart ddclient
```
Verify that it's working by tailing /var/log/syslog.
```
$ tail /var/log/syslog
```

Mount Media Volumes

List the available HDDs.

$ sudo lsblk -o name,label,size,mountpoint
NAME   LABEL      SIZE MOUNTPOINT
sda             465.8G
├─sda1 boot       256M /boot
└─sda2 rootfs   465.5G /
sdb               1.8T
└─sdb1 tanpopo    1.8T
sdc               4.6T
└─sdc1 ajisai     4.6T
sdd              29.8G
├─sdd1 RECOVERY   2.2G
├─sdd2              1K
├─sdd5 SETTINGS    32M
├─sdd6 boot       256M
└─sdd7 root      27.3G /mnt/oldroot

Add the following to /etc/fstab.

LABEL=tanpopo   /mnt/tanpopo    exfat   defaults,auto,uid=1000,gid=1000,umask=0022,users,rw,nofail 0 0
LABEL=ajisai    /mnt/ajisai     exfat   defaults,auto,uid=1000,gid=1000,umask=0022,users,rw,nofail 0 0

Install exfat.

$ sudo apt install exfat-fuse exfat-utils

Create the mount points.
```
$ sudo mkdir /mnt/tanpopo /mnt/ajisai
```

Mount the volumes.

$ sudo mount /mnt/tanpopo
$ sudo mount /mnt/ajisai

Install samba
```
$ sudo apt install samba
```

Create shares for the mounted volumes in /etc/samba/smb.conf:

[tanpopo]
   comment = Tanpopo 2TB External Drive
   valid users = shad
   path = /mnt/tanpopo
   read only = no
   guest ok = no

[ajisai]
   comment = Ajisai 5TB External Drive
   valid users = shad
   path = /mnt/ajisai
   read only = no
   guest ok = no

Set the password for user shad.
```
$ sudo smbpasswd -a shad
```
Restart the smbd.service.
```
$ sudo systemctl restart smbd.service
```

Transmission

Install transmission-daemon.
```
$ sudo apt install transmission-daemon
```

Change the run as user to shad.

$ sudo systemctl edit transmission-daemon.service

Add the following to the file:
```
[Service]
User=shad
```
Restart the transmission daemon to create configuration files.
```
$ sudo systemctl restart transmission-daemon
```
Edit ~/.config/transmission-daemon/settings.json.
Update the following values:
- "rpc-username": "shad"
- "rpc-password": "<new password>"
- "rpc-whitelist": "192.168.*.*"
- "rpc-host-whitelist-enabled": false

Reload the transmission daemon.

$ sudo systemctl reload transmission-daemon.service

Golang

Install golang
```
$ sudo apt install golang
```

Caddy

Install Caddy.

$ curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | sudo tee /etc/apt/trusted.gpg.d/caddy-stable.asc
$ curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | sudo tee /etc/apt/sources.list.d/caddy-stable.list
$ sudo apt update
$ sudo apt install caddy

Configure reverse proxies by adding the following to /etc/caddy/Caddyfile:

mixair.shad.io {
    reverse_proxy localhost:8000
}

covid.shad.io {
    reverse_proxy localhost:8501
}

brita.shad.io {
    reverse_proxy localhost:8502
}

Restart Caddy.
```
$ sudo systemctl restart caddy.service
```