Darko Luketic, Author at blog.icod.de

gitea log configuration for fail2ban

19. March 2025

Gitea since 1.21 has a different logging configuration format. TL;DR If you want to configure fail2ban to ban those failed ssh login attempts, use this log section in app.ini

[log]
LEVEL = Info
MODE = file
ROOT_PATH = /var/lib/gitea/log/
logger.default.MODE = file
logger.access.MODE =
logger.xorm.MODE =
logger.router.MODE =
ENABLE_SSH_LOG = true
[log.file]
default.FILE_NAME = gitea.log
LOG_ROTATE = true
MAX_SIZE_SHIFT = 28
DAILY_ROTATE = true
MAX_DAYS = 7
COMPRESS = true
COMPRESSION_LEVEL = -1

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

[log]

LEVEL = Info

MODE = file

ROOT_PATH = /var/lib/gitea/log/

logger.default.MODE = file

logger.access.MODE =

logger.xorm.MODE =

logger.router.MODE =

ENABLE_SSH_LOG = true

[log.file]

default.FILE_NAME = gitea.log

LOG_ROTATE = true

MAX_SIZE_SHIFT = 28

DAILY_ROTATE = true

MAX_DAYS = 7

COMPRESS = true

COMPRESSION_LEVEL = -1

Sadly you can’t turn off all logging except the SSH log. You have to wear your SSD. The actual fail2ban configuration is described on their […]

Recompile VLC on Archlinux

12. March 2025

For various reasons you’ll want to do that. For me it was VLC locking up when watching IPTV from a DVB>IP hardware with v3.0.21. And with v3.0.20 it would have extremely high CPU usage which went away when recompiling. Only on Archlinux. Something in their process is funky. Anyhow let’s go. First, enable optimizations for […]

tinode: what a waste of time

10. March 2025

This software is not nearly production ready. Spent the whole days constantly battling with bugs, inconsistencies. In the end I give up. I can’t recommend this software at all. #tinode #im #opensource #donotuse

minio single node single disk docker compose with letsencrypt tls

9. March 2025

How to have a single node minio instance, with docker compose, and auto updating letencrypt certificate. Prerequisite: A way to obtain a cert for your domain via certbot. The certs should already exist and be able to be renewed. 1st create the docker minio directories.

mkdir -p /docker/minio/data
mkdir -p /docker/minio/certs

1 2	mkdir -p /docker/minio/data mkdir -p /docker/minio/certs

/docker/minio/compose.yaml

name: minio
services:
    minio:
        ports:
            - 9000:9000
            - 9001:9001
        container_name: minio
        volumes:
            - /docker/minio/data:/data
            - /docker/minio/certs:/root/.minio/certs
        environment:
            - MINIO_ROOT_USER=rootuser
            - MINIO_ROOT_PASSWORD=rootpassword
        image: quay.io/minio/minio
        command: server /data --console-address ":9001"

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

name: minio

services:

minio:

ports:

- 9000:9000

- 9001:9001

container_name: minio

volumes:

- /docker/minio/data:/data

- /docker/minio/certs:/root/.minio/certs

environment:

- MINIO_ROOT_USER=rootuser

- MINIO_ROOT_PASSWORD=rootpassword

image: quay.io/minio/minio

command: server /data --console-address ":9001"

/etc/letsencrypt/renewal-hooks/deploy/copy-certs.sh

#!/bin/bash

TARGET_HOME=/docker/minio
TARGET_DOMAIN=domain.tld

if [[ $RENEWED_DOMAINS == *" $TARGET_DOMAIN "* ]]; then
        cp -L /etc/letsencrypt/live/$TARGET_DOMAIN/* $TARGET_HOME/certs/
	cd $TARGET_HOME
	docker compose up -d
fi

1

2

3

4

5

6

7

8

9

10

#!/bin/bash

TARGET_HOME=/docker/minio

TARGET_DOMAIN=domain.tld

if [[ $RENEWED_DOMAINS == *" $TARGET_DOMAIN "* ]]; then

cp -L /etc/letsencrypt/live/$TARGET_DOMAIN/* $TARGET_HOME/certs/

cd $TARGET_HOME

docker compose up -d

fi

And finally start it

chmod +x /etc/letsencrypt/renewal-hooks/deploy/copy-certs.sh
cd /docker/minio/certs
cp -L /etc/letsencrypt/live/domain.tld/* /docker/minio/certs/
ln -s fullchain.pem public.crt
ln -s privkey.pem private.key
cd ..
docker compose up -d

1

2

3

4

5

6

7

chmod +x /etc/letsencrypt/renewal-hooks/deploy/copy-certs.sh

cd /docker/minio/certs

cp -L /etc/letsencrypt/live/domain.tld/* /docker/minio/certs/

ln -s fullchain.pem public.crt

ln -s privkey.pem private.key

cd ..

docker compose up -d

Compiling gitlab.com/mattwb65/srt-live-server error solution

27. February 2025

If you’re having this issue with building https://gitlab.com/mattwb65/srt-live-server.git