britannic

Adding tailscale to an EdgeRouter (and surviving system upgrades)

I suggest you run sudo bash on all of these so you're the root user.

Installing

Download tailscale and put the files in /config/. Find the latest stable or unstable version for your EdgeRouter's processor (ex. ER4 is mips and ERX is mipself)

sudo bash    # if you havent already

Nginx TLS SNI routing, based on subdomain pattern

Nginx can be configured to route to a backend, based on the server's domain name, which is included in the SSL/TLS handshake (Server Name Indication, SNI).
This works for http upstream servers, but also for other protocols, that can be secured with TLS.

prerequisites

at least nginx 1.15.9 to use variables in ssl_certificate and ssl_certificate_key.
check nginx -V for the following:
```
...
TLS SNI support enabled
```

	# Insert your company-hash here. When you get the download link, this is the long alpha-numeric scring
	# that comes after setupdownloader_ in the filename.
	# Do not include the square brackets (but do include the = if there is one).
	$CompanyHash = ""

	### Modify below this line at your own risk!

	# If it's already installed, just do nothing
	$Installed = Get-ItemProperty "HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*" \|
	Where-Object { $_.DisplayName -eq "Bitdefender Endpoint Security Tools" }

	# Stick this in your home directory and point your Global Git config at it by running:
	#
	# $ git config --global core.attributesfile ~/.gitattributes
	#
	# See https://tekin.co.uk/2020/10/better-git-diff-output-for-ruby-python-elixir-and-more for more details

	*.c diff=cpp
	*.h diff=cpp
	*.c++ diff=cpp
	*.h++ diff=cpp

	# Instructions for installing Pi-hole 4.2 on UniFi CloudKey Gen 1 (UC-CK) running firmware 0.13.6
	# Pi-hole will need to be completely re-installed after every FW update or if CloudKey is reset to defaults.

	# Verify UC-CK is running firmware v0.13.6 (or later) before installing Pi-hole. If not, do:
	ubnt-systool fwupdate https://dl.ubnt.com/unifi/stage/cloudkey/firmware/UCK/UCK.mtk7623.v0.13.6.7ad551e.190225.0939.bin

	# UC-CK firmware v0.13.6 downgrades UniFi Controller to 5.10.17. Upgrade to 5.10.19 with:
	cd /tmp
	wget https://dl.ubnt.com/unifi/5.10.19/unifi_sysvinit_all.deb
	dpkg -i unifi_sysvinit_all.deb

	$path='d:\email.txt'
	$GroupId=<groupid>

	Import-Csv $path \| % {
	Add-TeamUser -User $_.Name -GroupId $GroupId
	}

	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
	<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en" dir="ltr">
	<head>
	<title><unifi txt="Redirector" /></title>
	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
	<meta http-equiv="refresh" content="0;url=https://<YOUR CAPTIVE PORTAL URL>/<unifi var="mac" />/<unifi var="ap_mac" />">
	</head>
	<body>
	</body>
	</html>