Admiral Patrick

Nice! Yeah, I’ve been a big fan of it. Planning to eventually replace my custom Snapdrop with Pairdrop since they’ve made quite a few other improvements.

Pair Drop

Quickly send files, paste images/text snippets between devices.

I’m using the older Snapdrop (which PD was forked from) with some patches I made to:

• Work behind Authelia for SSO + 2FA
• Use the display name provided by Authelia instead of the random usernames it gives out by default
• Send transfers over the internet without dealing with the temporary “rooms” that Pairdrop uses (it’s behind Authelia, so only authorized users can get to it).

It has 100% replaced emailing things to myself or shuffling files to/from Nextcloud. I probably use it to send text (URLs, clipboard contents, etc) to/from my phone as much as I use it for sending files back and forth.

https://smallstep.com/docs/step-ca/index.html

There’s basically two executabled involved:

• step is the CLI app used to request certificates
• step-ca is the server process the step client connects to

I’ve got the CA portion bundled into Docker. It can also run as an ACME server (and is compatible with certbot).

I run a custom build of Nginx with a few extra modules compiled in:

• ModSecurity
  • https://github.com/SpiderLabs/ModSecurity-nginx.git
  • https://github.com/SpiderLabs/ModSecurity
• Nginx GeoIP2 Module (https://github.com/leev/ngx_http_geoip2_module.git)
• OWASP Core Rule Set: https://github.com/coreruleset/coreruleset/tree/v4.10.0/rules

Some guidance can be found here: https://docs.nginx.com/nginx-waf/admin-guide/nginx-plus-modsecurity-waf-owasp-crs/

That guidance is for NginxPlus, but you can compile the dynamic module yourself with the community versions.

RCS is a whole can of worms. It’s presented like a carrier services (and carriers are in the mix, though often just for authentication), but it’s really a Google service. With Android, RCS connects directly to google’s mothership.

I believe on iOS those go to Apple’s servers which “peers” with google. Maybe search the RCS endpoint for Apple and see what comes up?