Recent content by mma

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. M

    Release Asuswrt-Merlin 386.10 is now available for AC models

    I performed a dirty upgrade from 386.9 to 386.10 on my RT-AC86U 22 hours ago. Everything works flawlessly. 70495/131072 bytes of NVRAM free.
  2. M

    How to submit corrections to web GUI translations?

    It turns out that the httpd and httpds processes will be automatically respawned (perhaps once per minute) if they are killed. I found a wiki page with some instructions that could be easily adapted to install a modified translation: Change the webui language when it's factory locked What I...
  3. M

    How to submit corrections to web GUI translations?

    Thank you. mount --bind /some/where/XX.dict /www/XX.dict worked (replace XX with the language co-de). I killed both httpd and httpds, and after I started httpds -s -i br0 -p 8443 & and logged in, I would see the changed messages. I see that the files in /www/*.dict differ from the ones in the...
  4. M

    How to submit corrections to web GUI translations?

    I have noticed a few inaccurate or misleading translations in the web UI for my native language. I found release/src/router/www/??.dict in the source code repository. I have a few questions: How to update the translations in the router? Is there some simple way of copying some files, without...
  5. M

    Are there any Asuswrt-Merlin solutions for self-hosting your password manager Vault on the router hardware?

    I used to think like that, but the acme.sh that is mentioned in the wiki page is a simple enough alternative for me. The only moment when something listens on ports 80 (HTTP) or 443 (HTTPS) is when that script runs. Yesterday, when my certificate had expired, I disabled the firewall for the few...
  6. M

    Are there any Asuswrt-Merlin solutions for self-hosting your password manager Vault on the router hardware?

    Is there a particular reason why you are using a self-signed certificate instead of LetsEncrypt?
  7. M

    Merlin thought that you should see this

    If this is an uptime contest, I won’t win, but I’ll post anyway. RT-AC86U on 386.7_2, 40 days and 3 hours and counting. I may have upgraded from 386.7 back then. I have no swap configured (I try not to exceed the available RAM on any of my Linux systems), 430 MB RAM, 98 MB free, 84 MB buffers...
  8. M

    Firewall configuration

    I created the wiki pages Prosody and LetsEncrypt based on my setup. If someone knows how the libletsencrypt.so of the web UI can be made to work, edits to the latter wiki page are welcome. For what it is worth, in my attempt to run acme.sh release 3.0.4 from the web UI, I reverted the default...
  9. M

    Firewall configuration

    I decided to give the web UI one more chance. The mount --bind option was something new to me. Using it, I replaced the /usr/sbin/acme.sh, but I do not see it being invoked by the web UI. My edited version of the file starts with the following: #!/usr/bin/env sh echo acme: "$@" >>...
  10. M

    Firewall configuration

    I just realized that I had used lighttpd and dehydrated (another shell script) instead of acme.sh on the Raspberry Pi. A search of the output of strings libletsencrypt.so revealed that the web UI is using acme.sh in standalone mode (letting the script implement a web server for communicating...
  11. M

    Firewall configuration

    The third line of the acme.sh in 386.7 says VER=2.8.3. The file is almost identical to the 2.8.3 release tag in the upstream repository. It should be safe to assume that the LetsEncrypt thingy from the web UI is not worth spending time on. Yesterday I found this unresolved ticket from 2018...
  12. M

    Firewall configuration

    Thank you. Do you know which web server the built-in acme.sh is using? Also NginX? I see, we are basically going in opposite directions. I had LetsEncrypt (with lightttpd) and Prosody running on the Raspberry Pi 2 B, with NAT port forwarding from the old router. Now both are offline. If I...
  13. M

    Firewall configuration

    I found this acme.sh wrapper script by @Jeffrey Young. That thread also says that the ASUS version of acme.sh had better be replaced with one from upstream. Would that also be case with asuswrt-merlin 386.7? In the source code, I found a number of precompiled libraries libletsencrypt.so that...
  14. M

    Firewall configuration

    According to its documentation, Prosody is listening on all interfaces by default. The following did the trick for me. I was first trying to use the other2wan chain, until I understood that probably is for filtering LAN-to-WAN traffic. cat > /jffs/scripts/firewall-start << EOF #!/bin/sh...
  15. M

    Firewall configuration

    I added a line for a new user and group to each of passwd, group, shadow, gshadow in /etc. It worked, but after the router was accidentally power-cycled (a bad contact between the power supply and the wall plug adapter, which I think I was able to fix later), the changes were gone, and "ls"...
Top