---
title: "Cheat Sheet"
date: 2025-04-01T23:09:53+08:00
lastmod: 2025-04-01T23:09:53+08:00
---

## GRUB

Update GRUB after `grub` package is updated. Replace `/boot` with your mount
point of the EFI partition in `--efi-directory=/boot`. Replace `GRUB` with your
bootloader id in `--bootloader-id=GRUB`.

```bash-session
# grub-install --target=x86_64-efi --efi-directory=/boot --bootloader-id=GRUB
# grub-mkconfig -o /boot/grub/grub.cfg
```

## (Private) My Service Infrastructure Management

All commands should be run at the project root path.

### Install Deno

Script from <https://docs.deno.com/runtime/getting_started/installation/>

```bash-session
$ curl -fsSL https://deno.land/install.sh | sh
```

### Add Git Server User / Set Password

```bash-session
$ docker run -it --rm -v "./data/git/user-info:/user-info" httpd htpasswd /user-info [username]
```

### Certbot

A complete command is `[prefix] [docker (based on challenge kind)] [command] [challenge] [domains] [test] [misc]`

| part | for | segment |
| --- | --- | --- |
| prefix | * | `docker run -it --rm --name certbot -v "./data/certbot/certs:/etc/letsencrypt" -v "./data/certbot/data:/var/lib/letsencrypt"` |
| docker | challenge standalone | `-p "0.0.0.0:80:80"` |
| docker | challenge nginx | `-v "./data/certbot/webroot:/var/www/certbot"` |
| command | create/expand/shrink | `certonly` |
| command | renew | `renew` |
| challenge | standalone | `--standalone` |
| challenge | nginx | `--webroot -w /var/www/certbot` |
| domains | * | `[-d [domain]]...` |
| test | * | `--test-cert --dry-run` |
| misc | agree tos | `--agree-tos` |
| misc | cert name | `--cert-name [name]` |
| misc | email | `--email [email]` |

For example, **test** create/expand/shrink with standalone server:

```bash-session
# docker run -it --rm --name certbot \
>   -v "./data/certbot/certs:/etc/letsencrypt" -v "./data/certbot/data:/var/lib/letsencrypt"` \
>   -p "0.0.0.0:80:80" \
>   certonly \
>   --standalone \
>   -d crupest.life -d mail.crupest.life \
>   --test-cert --dry-run
```

## System Setup

### Debian setup

#### Setup SSL Certificates and Curl

```bash-session
# apt-get update
# apt-get install ca-certificates curl
# install -m 0755 -d /etc/apt/keyrings
```

### Docker Setup

#### Uninstall Packages Provided by Stock Repo

```bash-session
# for pkg in docker.io docker-doc docker-compose \
>     podman-docker containerd runc; do
>   apt-get remove $pkg;
> done
```

#### Install Certs From Docker

Remember to [setup ssl and curl](#setup-ssl-certificates-and-curl) first.

```bash-session
# curl -fsSL https://download.docker.com/linux/debian/gpg \
>   -o /etc/apt/keyrings/docker.asc
# chmod a+r /etc/apt/keyrings/docker.asc
```

#### Add Docker Repos

```bash-session
# echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] \
>   https://download.docker.com/linux/debian \
>   $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
>   tee /etc/apt/sources.list.d/docker.list > /dev/null
```

#### Install Docker Packages

```bash-session
# apt-get update
# apt-get install docker-ce docker-ce-cli containerd.io \
>   docker-buildx-plugin docker-compose-plugin
```

#### Start And Enable Docker

Remember to log out and log back to let user group change take effects.

```bash-session
# systemctl enable docker
# systemctl start docker
# groupadd -f docker
# usermod -aG docker $USER
```

### Font Config

```xml
<?xml version="1.0"?>
<!DOCTYPE fontconfig SYSTEM "urn:fontconfig:fonts.dtd">
<fontconfig>

  <alias>
    <family>sans-serif</family>
    <prefer>
      <family>MiSans</family>
      <family>Noto Color Emoji</family>
    </prefer>
  </alias>

  <alias>
    <family>serif</family>
    <prefer>
      <family>MiSans</family>
      <family>Noto Color Emoji</family>
    </prefer>
  </alias>

  <alias>
    <family>Maple Mono</family>
    <prefer>
      <family>Maple Mono NF</family>
      <family>Maple Mono</family>
    </prefer>
  </alias>

  <alias>
    <family>Noto Sans</family>
    <prefer>
      <family>Noto Sans</family>
      <family>Noto Sans CJK SC</family>
    </prefer>
  </alias>

  <alias>
    <family>Noto Serif</family>
    <prefer>
      <family>Noto Serif</family>
      <family>Noto Serif CJK SC</family>
    </prefer>
  </alias>

</fontconfig>
```