Over the past year, I have started rebuliding my home lab. One thing about a home lab is you want very little entries into your network. I split off my home lab from my main network using a pfsense firewall. The home network only has 2 ports open on it. That’s 80 and 443. Everything runs through those ports. The whole lab is based on docker. This way I can run mulitple objects on different ports. For example, I have 3 wordpress living on one server. These are for development tests and so on and so forth. The question that needs to be answered is how do I get to those services outside the network? This is where a Reverse Proxy on Docker comes into play.
What is a Reverse Proxy?
Imagine walking into a massive building with hundreds of offices. There are no maps on the wall. The doors have no names and there is no glass to look through each door. All that lives on each door is a number. So, how would you find anything in that building? Well, there is a receiptionist at the front with a security guard. If you ask the receiptionist to see Dr Ross Geller, they will look at their charts. If Dr Ross Geller doesn’t work there. They will look up at you and say nothing. You get no feed back and you can go past that point without the security gaurd’s keys. Even if you got the keys, the lights are off and you need the recipionists keys for the lights.
Now, if Dr Ross Geller is there, She will grab the security guard and whisper the room number into their ear. Then, the guard will hand cuff you to himself and walk you to the office in the dark. Once at the door, he will pat you down for common weapons then open the door for you and you can walk into the meeting with Dr Ross Geller. Remember to PIVOT!
This is how a reverse proxy works. They are the gate keepers of the network. When something comes in on port 80 or 443, the reverse proxy will that the DNS name and check it’s register. If it has the DNS name, it then forwards you to the local port. It doesn’t tell the user about any other active ports. Many proxies will block common exploits and even work with your SSLs.
Ngnix Reverse Proxy Manager
We are going to be working with Ngnix Reverse Proxy Manager. Ngnix Reverse Proxy Manager is a docker friendly reverse proxy that gives you a beautiful ui to work with. Along with connecting to Let’s Encrypt to give you free ssls, it also allows multiple users, redirects, custom 404 pages, streaming services, and more. The Graphical interface helps keep management sustainable.
Install on Docker
We are going to assume you have docker installed on your system. If you do not, you can read on how to do it here and you can learn how to install docker compose here. Nginx proxy Manager has their quick guide that you can read here. This next steps below will match up to this documentation with a few small changes.
The First step is to setup your docker folders. I am in the camp of using a folder for each service. After logging in with SSH we want to make a directory using the mkdir command.
mkdir ReverseProxyManager
cd ReverseProxyManager
Now inside the “ReverseProxyManager” folder we want to create a compose file. On Ubuntu, my server of choice for this, we will use the built in editor, nano. I am a nano fan, some like vi, some like vim. That is a debate for other people. I suggest using what you have access to. So run the nano command and build a “docker-compose.yml” file.
nano docker-compose.yml
This will drop you into a text file. Copy the blow information and past it into the text file.
To save, all you have to do is press ctrl and x and follow the prompts.
Breakdown of the Yml
Here we ahve the service manager making a service called proxy-manager. We are using the offical Reverse proxy for Docker through jc21. We tell it to continue running until someone stops it. Then we tell it the ports we want. Here we want 80, 81, and 443. 81 will be your management port and should only be accessiable internally. The other two will be for the data coming in. Next we have the volumes. We need a data folder. Using ./ to indicate the folder this yml file lives in. We also want a place for the lets encrypt. Finally we are using enviromental tags. Having a sqlite server allows you to do more than without it. Finally, I disable IPv6 because I don’t use IPv6, yet. I will one day.
Starting The Docker
The next step is to start the docker. There is a way to test by using docker-compose up, but it freezes your terminal. adding the -d will make what the docker-compose up perment and give you back your terminal.
docker-compose up -d
# If using docker-compose-plugin
docker compose up -d
now the stack is up and running. The next step is to navigate to the ip address of the server. you can use the ip a to grab the ip address from the server. When you access the Url, you will see the below. Enter the below information.
URL: http://<serverIPAdddress>:81
Email: admin@example.com
Password: changeme
It will prompt you to change your password. Make sure you do that.
What can we learn as a person from Reverse Proxies?
In our lives, we have many different parts of ourselves. What’s interesting about these parts is we don’t know all of them. Imagine the reciptionist from our example above being your sub countinous mind. It knows all the parts of you and can direct you to those parts. But to get to the sub countinous mind, you have to go through the body. Imagine trying to walk into a building and the door handle says push, but every time you push it, it doesn’t open. Many people get mad and give up. The truth behind the door is a pull. Our brains don’t like being pushed, instead they like us to sit and pull them to us. Calm brings the sub countinous to the surface as it changes the state of our minds to allow the sub countinous to communicate back. Once that is achived, you will have access to some of the darkest parts of your mind.
Almost every religion has some reference to being still. In our busy world, being still is like dealing with an alien language. Being still allows you to communicate with your body. It allows you to know who you are and be able to sit with that knowledge. Without that stillness, we end up burning ourselves on our internal fire. This is why vacation times are so important in companies. Companies who give poor vaction time sees a higher turn over because their people don’t have a chance to commucate with themselves and enjoy thierselves.
Over the next week, take moments where you can be still with your thoughts and become aware of yourself. You may see that your internal proxy is hiding some dark secreats that are leaking out in verious of way.
One of my favorite things with powershell is building out splat parameters for commands through the main parameter set. Today we are going to go over how that is done. We are going to do this through the Get-childitem and get-ACL. These are some mighty commands and they can help you find permission gaps quickly and easily. Let us Building Parameters for Commands together.
This script is simple, it allows you to grab a directory’s ACL recursively. However, how it does it is kind of cool. Get-Childitem has so many different options, but using it within a function can take some of that power away. So, by passing the parameters that we want at the top level allows us to give that power back to the get-childitem. However, this could lead to a lot of if statements. Instead, we are going to build a splat parameter for our commands. I have covered splats in a previous blog post, but I wanted to point them out to express how much power they do have.
The Power of Splat
Splatting is a method in which you can build a parameter set for a command. The amazing part of splatting is the splat is a powershell object. This means you can add to it after the initial splat is started. To start a splat all one has to do is declare a variable with an object attached. The variable is declared with the $ and the object is a simple at symbol followed by curly brackets with an equal sign nestled in the middle. We can use objects anywhere in powershell. A custom PS object is the same way. If you wanted to, you can declare the object and give it an order with [pscustomobject][order]. However, that’s not always the best option as orders cause issue if things are not in that order later down the road.
$Param = @{}
At this point the powershell object is empty. From here we can start building parameters for our object. To do that we are going to use the add-member command. In our example, we are working with true and false statements. Our function parameters are mostly switches. I threw in some strings as well to give you examples of how to build with a string. The first check is to see if we have a recursive. This is simple to do. We ask if the recurse is true. Then we add the member.
The add-member starts us down the path of building our splat. The Add-member can give us a lot of different options on which way we want to add things. Here, we need to add the recurse flag to get-childitem. This is a note property inside the command. The best way I see note properties is a name with a value. That value can be null. Here we are adding the “Recurse” name and giving it a value of the boolean true. Thus, when we drop the splat into the command, the command will see a flag of recurse. We do this same method with the rest. Directory is a flag, and so is file.
Unlike the last three, the filter parameter is a string. We are going to use the same method using the note property. We want to give the name as a filter and the value will be our value from our command line. The difference here is we want to place that filter in a string. The next part of the filter is how we test the filter. Instead of doing a simple check to see if the value is true, we need to check the parameters. This is done through the value $PSboundParameters. We want to see which keys the power shell bound parameters are holding. What this means is when you do get-command -something “bob” we want to know if something exists. Then we are going to use that’s something, aka bob.
The next step is to use the splat. Which is very easy to do. To use a splat, instead of using the dollar sign, all you need to do is use the at symbol and the parameter. The Command should not have any other flags set as it all lives inside the splat. Building a parameter splat is super easy and makes life easier in the long run.
$Items = Get-ChildItem @Param
What can we learn as a person from splatting
As we go through our lives, we are a representation of a splat. We start off with a few things and over time we add and remove aspects from ourselves. Others add and remove aspects of us as well. Growing up in school, teacher pours so much of their selves into their students. As we get older, we have to do the same for ourselves. We have to add the note properties to our lives, or we will always stay the same. Today you add-member -membertype noteproperty “Splatting” -value “dang it’s cool” to yourself. Unlike a computer though, we have to practice to bring it close to ourselves. We have to conceptualize the idea.
As you go through life, you have to depend on your own splat. Not enjoying that splat, means you have to work on it. It takes action to do so. The thing that stops most people from taking that action is fear of the unknown or fear of dealing with the pain. As someone who has been working on himself for many years now, I can safely say, it’s ok not to be ok. It’s ok not to enjoy parts of your splat, but overall, your splat is who you are. So go out into this world and put your @ on things. Change up that splat if you don’t like parts of it. Just enjoy being yourself.
Ever considered that we are, in essence, hardware? This realization hit me like a bolt of lightning. It triggered a fascinating analogy between our brains and computer systems, especially for someone deeply entrenched in Information Technology.
The Structure of the Brain: A Hardware Blueprint
Now, Imagine your hands as the keyboard and mouse. A sophisticated gaming tool with preprogrammed keys and buttons capable of intricate functions. As you type, data travels up to the PCI bus, akin to the nervous system transmitting electrical impulses between your computer and peripherals. If you disconnect the cable, and the keyboard becomes useless—much like losing the function of a hand.
Next, let’s delve into the brain’s components. First up:
Cerebellum: The Basic Processor
Much like a computer’s front side bus, the cerebellum, often referred to as the lizard or reptilian brain, handles basic input and output functions. Think of it as the system responsible for making quick decisions without conscious thought, such as pulling your hand away from a hot stove. This exemplifies the hardware-like nature of our actions.
Limbic System: The Emotional Hub
Next, data ascends to the processor for logical structuring. However, it first must go through the limbic system of our brain. In our brain, the limbic system plays this role. Here, this emotional control center processes signals from the cerebellum, turning physical sensations into emotions. The pain from touching a hot stove transforms into sadness, anger, or other emotional responses. Memories, too, find their home in various parts of the brain, adding layers to our emotional experiences.
Frontal Lobes: The Logical Processor
The thought process then reaches the frontal lobes, the brain’s logical processor. Here, cognitive processing occurs, and the prefrontal lobes manage movements and other functions. In our scenario, the prefrontal lobes analyze the pain signal, deducing that touching the hot stove hurts and should be avoided. The processed information then relays back to the limbic system, creating a memorable, emotionally charged experience.
A Unique Feature: The Limbic System
One fascinating aspect of our brain is the centrality of the limbic system. Almost all thoughts pass through this emotional control center, which also crucially contributes to memory formation. The unique feature lies in the fact that the limbic system doesn’t judge the emotions it sends; we, as individuals, impose the judgment. It’s a reminder that these signals are just that—signals.
The Enigma of the Brain
While we marvel at the complexity of our brain, acknowledging it as a magical place, there’s still much we don’t fully understand. In recent decades, groundbreaking research into the electrical signals of the brain has revealed astonishing findings.
The Human Brain—A Symphony of Signals
In our journey through this intricate system, we glimpse the harmony of hardware and emotion, a dance of impulses and reactions that shape our human experience. As we continue to unlock the mysteries of the brain, the intersection of Information Technology and mental health reveals itself as a realm of endless possibilities.
Recently, I have been troubleshooting radius. Radius hasn’t changed in decades. I say this lightingly too. The network policy server is a feature that helps with connecting things like unifi wifi and more. Each radius connection produces a reason code. Today we want to look through the radius logs and get as much useful information without screaming at the screen. Radius logs are a little daunting. This is why many people use an SQL server for the radius logs. However, if you are not one of those people who can do this, the traditional radius logging works wonders. So, we will read radius logs with PowerShell.
Radius Logging
Before we start, we need to know what we are dealing with. The standard location for readius logs is: C:\Windows\System32\LogFiles. You can change this location as you see fit. I personally changed my locations to a c:\logs\radius location. This helps me find it quicker and generally, I don’t have trouble guessing what is what. You can set the radius log location by doing the following:
Start Network Policy Server
Click account
Under Log File Properties click Change Log File Properties
A box will pop up called “Log File Properties” Click on the “Log File” tab.
This is where you can change your directory.
Change your Format to DTS Compliant. As this script works best with it.
I personally like smaller files when I am working with log searches. So I select the “When log file reaches this size:” I select 1 – 5 MB.
Click ok
Now your log files will live wherever you told them. You will need to change the script around a little if you are using a different location than me.
As you can tell, this script needs to be used on the server in question. However, You could wrap this script into a nice wrapper. That would allow you to execute on remote machines. The breakdown is very simple on this one as well. DTS is an XML format. Thus, you just need to use the [XML] before any of the lines. The XML is formatted with the event, it’s name, and the text. It’s a very simple setup. From there I select what I want and give it in a pscustom object. That’s it. Its a very simple setup. That’s why we should always read radius logs with Powershell.
Recently I have had to come to a new level of understanding about myself. For years I have been attracted to the potential of others. I have picked my closest friends through this viewpoint; it worked for many years. However, as we get older, things change, and people change. This view of the world no longer works. Instead, it flipped and it led to more pain than good. I wanted to break down what I call Potential Trauma Lensing for yall and maybe it will help shine a light on some of the darker places and bring understanding.
Trauma Lensing
As a child, I was sexually abused by a babysitter and other family members. My parents didn’t know how to handle such a thing and thus, I was often beaten. I will admit, I wasn’t an easy child to raise. I grew up with extreme ADHD and I was one of four. One of my survival skills during this time was to see the good more than the bad.
I choose to see my mom as a loving and caring person, which was only part of the truth at the time. The truth was, she was scared. She was hurting, angry, and oftentimes felt like she was a failure. She was also physically abusive. The lens I choose to see her through my whole life was that of a caring and loving mother. It wasn’t until after she died did I see the full picture. Let me give you an example.
When we were younger, my mother use to take her thumbnail and grab the soft tissue part of our ears and drive us to the ground. It was very painful. While doing this to my brother one day, he decided to fight back. He had it. He broke free from her grip. While doing so, he hit her. As a child, I jumped to protect my mom. Which kid wouldn’t want to protect their mom? A few minutes later, she did the same thing to me for jumping in.
I choose only to see the good in my mom. I choose to “forget” what she did to us. This helped me survive as a child. I call this Potential Trauma Lensing.
Effects of Potential Trauma Lensing
This lensing forces us to see the “Shiny” inside someone. This isn’t necessarily a bad thing, but it will come to bite us in the long run. Often times I hear people bash the homeless, and I stop them pointing out the life of the homeless. There is a reason they are in the spot they are in and not all of them are bad. This gives many of the homeless I encounter a sense of being seen and human. Seeing the “shiny” in someone has brung about great healing in others. However, only seeing the shiny isn’t true and has led me down some hurtful roads. We can see what’s there, but we can’t make what’s their reality. The next story of a close friend in my life is how this Potential Trauma Lensing affected my life.
A close friend
I grew up with two extremely close friends. For the sake of privacy, I will call them Bob and Rob. I met Bob at school. When I met Bob, we both didn’t have any expectations of each other. We didn’t choose to see only good or bad. We saw each other as each other. Bob and I are still good friends and I often miss talking to him. While Rob on the other hand was another kid in the neighborhood. Growing up, we didn’t really have expectations of each other. I saw him as a fun kid to play with. We played all kinds of imaginary worlds. I was able to be the kid I wasn’t allowed to be around him.
As we grew up, he started going down different paths. Even though I saw warning signs, I choose to still see him as the friend I could be the kid I wasn’t allowed to be. As I went to college, and he started his college life, we drifted apart more and more. I was always there to help. I always choose to see the good in him and he in me. This was the Potential Trauma Lensing at play. After his first marriage failed due to abuse, He changed. I continued looking for the good in people, while he started seeing the darker sides of people.
Married Life
After I married, my wife and I moved 2 hours away. I lived in some rough conditions. He imposed aspects of his failed marriage onto my marriage. He saw my wife as an abuser and often talked bad about her and my living conditions. I, however, choose to see the good in each situation. When I should have been seeing the truth. It was hell with some good things. When we moved back to my hometown, things got better between us. It was nice for a while. We often played games and had game nights. Keeping true to our child-like states. He was there for my kids’ births and I was there for his kids’ birth. It was nice. I choose to keep seeing that side of our relationship.
The downfall
After my parents died, my view of the world was destroyed. No longer could I see my life growing up as fluffy and happy. The clouds I grew up with turned into the truth and it didn’t turn into truth that made sense. Complex PTSD showed its ugly head and it was ugly. The good fun part of me died. At this point in my life, I was just trying to survive. Instead of seeing the truth, I was suffering, He choose to look through the potential lensing like I was with him. However, the realisim was there. He was stuck between the two. I needed him to be the fun friend. I needed him to be my supporting friend. That wasn’t how he was.
The Potential Trauma Lensing
I choose to keep seeing him as a supportive friend. He chooses to still keep seeing me as his childhood friend. We both had the same lensing going on. He went as far as to take me to a mountaintop and threaten to leave me there if I didn’t wake up. He didn’t because of a storm. After being clean for a month of my addiction, We hung out, I was so excited I allowed my addiction to control the interaction. It was my fault. I longed for him to stop me, but he did not.
He moved away for work. I choose to still see him in the light of a good supportive friend instead of seeing that our relationship was split apart. During our time apart I learned to draw boundaries on myself. A while ago, he stated he was coming into town and wanted to grab lunch. I was excited, but I also drew a boundary, mainly on myself asking him to call me out.
The day before the meetup, I messaged him to confirm and He stated he was canceling. He later told me that he “didn’t want me to relapse”. Which was a lie. That’s when the lensing broke and I was able to see things as truth. We were at two different points in our lives. He couldn’t be a supportive friend because He was still stuck in the hurt of a past relationship. I couldn’t be the fun friend because I was trying to rebuild my inner child.
Holding onto Potentials
When you hold onto the “Shiny” aspect of people, we fail to see the consistency when they show us they are not that shiny. They are not the potential that we need from them. As you can see in the story, we both hurt each other over and over again. He took me to a mountain top with full intention of leaving me there. I choose to see the good in him. I held on tight to that view and he did with me.
What are you holding onto in people?
Breaking The lensing
Accepting Reality
The first step in breaking free of Potential Trauma Lensing is accepting reality as it is. When someone repeatedly shows us who they are, we should trust and believe them. We shouldn’t constantly try to see them in another light. It’s up to us to accept this reality. It’s a painful thing. The thing about this though, this new reality, might just be temporary. I may rebuild my inner child and be child-like again. I may become what he needs, and he may become what I need. We may become close friends again. However, at this moment, we are not. I have accepted this reality. I’m tired of hurting myself by rejecting this reality.
Self-Focus and Growth
Instead of using all that energy on someone else. I have chosen to invest in myself. At the core of the issue, we as humans want validation. That validation should come from within. At the end of the day, all we have is ourselves. If we are unable to be with ourselves, then how can we be with others? So, let’s take the energy we are placing towards our expectations, and put it back into ourselves. Let go of the self-inflected hurts and move forward. We need to accept that people change.
Acceptance and Moving Forward
Instead of trying to make people in our own minds into something they are not, we should accept them as they are. Our mental well-being begs for this. Once we embrace this reality, this world as it is, and not how we would have it, there is a sense of peace. This means taking off those trauma glasses. It’s ok to be hurt by others. It’s not ok to keep looking at the world through that lens.
Accepting the world as it is is hard, but worth it in the long run. As always, Please seek professional help if you need it. The Trauma Lenses can be glued to our faces. A well-trained trauma therapist can help take those glasses off.
We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.Ok
