VPN bans incoming for the UK. Time to pivot.
Set up a VPN-like tunnel using any servers with an SSH connection
$ sshuttle --dns -r <username>@<ip> 0.0.0.0/0 ::/0
dothash
@dothash.win
2.5K followers 1.8K following 998 posts
CTO in the Media Industry in Norway • x.com/iamdothash Omarchy Core Team member
![Usage:
pipe [options]
Options:
--host Remote host to deploy to
--user SSH user for remote host
--image Docker image name (default: app)
--dockerfile Path to the dockerfile (default: Dockerfile)
--tag Docker image tag (default: latest)
--platform Docker platform (default: linux/amd64)
--ssh-key Path to SSH key (default: "")
--container-name Name for the container (default: app)
--container-port Container port (default: 3000)
--host-port Host port (default: 3000)
--env-file Environment file (default: "")
--build-arg Build arguments (can be specified multiple times, format: KEY=VALUE)
--network Docker network to connect to
--volume Volume mount (can be specified multiple times, format: host:container)
--cpus Number of CPUs (e.g., '0.5' or '2')
--memory Memory limit (e.g., '512m' or '2g')
--rollback Rollback to the previous version
--version Show version information
--help Show this help message
Environment Variables:
HOST Remote host to deploy to
HOST_USER SSH user for remote host
HOST_PORT Host port
HOST_PLATFORM Docker platform
SSH_KEY_PATH Path to SSH key
DOCKER_IMAGE_NAME Docker image name
DOCKER_IMAGE_TAG Docker image tag
DOCKER_CONTAINER_NAME Name for the container
DOCKER_CONTAINER_PORT Container port
DOCKER_BUILD_ARGS Build arguments (comma-separated KEY=VALUE pairs)
DOCKER_CONTAINER_ENV_FILE Environment file
DOCKER_NETWORK Docker network to connect to
DOCKER_CPUS Number of CPUs
DOCKER_MEMORY Memory limit
Examples:
pipe --host example.com --user deploy
pipe --env-file .env.production --build-arg GIT_HASH=$(git rev-parse HEAD)
pipe --host example.com --user deploy --memory "512m"](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:dkf2zkkx44lve3oaft42f23h/bafkreiaf6o6gekc3ejqjzbdw3c3snisaal336nxvua4ih6obvfyhm7kusa)
![# The hurl.dothash.win endpoint is available
# for you to test these commands
# Define .hurl files these examples
# Basic GET request
# basic.hurl
GET https://hurl.dothash.win
HTTP 200
# JSON assertion
# json_assertion.hurl
GET https://hurl.dothash.win/users
HTTP 200
[Asserts]
jsonpath "$.[0].name" == "John Doe"
# Chained request
# chained_request.hurl
GET https://hurl.dothash.win/token
HTTP 200
[Captures]
token: jsonpath "$.token"
GET https://hurl.dothash.win/data
Authorization: Bearer {{token}}
HTTP 200
# Create a new user with a JSON body
# post_json.hurl
POST https://hurl.dothash.win/users
{
"id": 3,
"name": "Dothash Smith",
"email": "dothash@example.com"
}](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:dkf2zkkx44lve3oaft42f23h/bafkreige5ucoemmia2zhdi3xnc6dqj5c2fzcclfjwlwxfp2w5g2q4nvuxy)
![## person.yaml
# name: John Doe
# age: 25
# city: Anytown
# items:
# - name: Shirt
# price: 15
# - name: Shoes
# price: 50
# - name: Hat
# price: 8
# Print the yaml
yq . person.yaml
# Extract Values
yq '.name' person.yaml
John Doe
# Update Values
yq '.age = 30' person.yaml
# ... rest of the yaml
# age: 30
# Filter data
yq '.items[] | select(.price < 10)' data.yaml
# name: Hat
# price: 8](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:dkf2zkkx44lve3oaft42f23h/bafkreid3ui75g5aov7fhomuwz2bilwcicpwoamqnl4emmpxekrr7y5in3a)
![# Pretty print JSON
http https://api.openbrewerydb.org/v1/breweries?by_country=England&per_page=3 | jq .
# Extract a specific field
jq ".[1].name" breweries.json
"81 Artisan"
# Filter an array
jq ".[] | select(.phone == \"1825722375\")" breweries.json
{
"id": "63969ec8-b557-4c71-b993-ad00c99ab70e",
"name": "360 Degree Brewing Company",
"phone": "1825722375",
# ... more fields
}
# Transform data
jq '.[] | select(.phone == "1825722375") | { "new_field": "Hello Bsky", "original_data": . }' breweries.json
{
"new_field": "Hello Bsky",
"original_data": {
"id": "63969ec8-b557-4c71-b993-ad00c99ab70e",
"name": "360 Degree Brewing Company",
"phone": "1825722375",
# ... more fields
}
}](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:dkf2zkkx44lve3oaft42f23h/bafkreig2dxhgzjh66owmhfrpjcmxwbaurdlssnzo4baftnlt5lfze76sbi)
![tofu destroy
hcloud_server.docker: Destroying... [id=56559157]
hcloud_server.docker: Destruction complete after 0s
hcloud_ssh_key.sudo: Destroying... [id=24835347]
hcloud_firewall.ssh: Destroying... [id=1756098]
hcloud_firewall.http: Destroying... [id=1756096]
hcloud_firewall.https: Destroying... [id=1756097]
hcloud_ssh_key.sudo: Destruction complete after 1s
hcloud_firewall.https: Destruction complete after 1s
hcloud_firewall.http: Destruction complete after 2s
hcloud_firewall.ssh: Destruction complete after 2s
Destroy complete! Resources: 5 destroyed.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:dkf2zkkx44lve3oaft42f23h/bafkreiezvpq3a5xhc73lhmsv256g2xhyv7vxlyav7skpd4eb47idsvlt64)
![copepod --host=65.108.80.226 \
--user=root \
--image=hello-world \
--tag=v1.0.0 \
--container-name=hello-world \
--host-port=80 \
--container-port=80
# ... more logs
[2024-11-23T13:29:23Z] INFO: Verifying container status...
[2024-11-23T13:29:23Z] INFO: Executing: ssh root@65.108.80.226 "docker ps --filter name=hello-world --format '{{.Status}}'"
[2024-11-23T13:29:24Z] INFO: Deployment completed successfully! 🚀](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:dkf2zkkx44lve3oaft42f23h/bafkreifo464sabmcjnacfowazlf7msd6y272qltmfae2sgum6yl6u747ei)
![# Use the official nginx image as base
FROM nginx:alpine
# Create index.html directly in the container
RUN echo '<!DOCTYPE html>\
<html>\
<head>\
<title>Hello, World</title>\
</head>\
<body>\
<div class="container">\
<h1>Welcome to my app!</h1>\
<p>If you see this page, the nginx web server is successfully installed and working.</p>\
<p>This page was created from within the Dockerfile.</p>\
</div>\
</body>\
</html>' > /usr/share/nginx/html/index.html
# Expose port 80
EXPOSE 80
# Start nginx in the foreground
CMD ["nginx", "-g", "daemon off;"]](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:dkf2zkkx44lve3oaft42f23h/bafkreigcf3mzfff4aww3unlawn3jmot27xu27sxgqthrjalbbwablh5kri)
![# Install the tofu providers
tofu init
# Dry run with a plan
# this will not apply it, only view the output
# planned to be run
tofu plan
# Apply it to Hetzner
# Ideally you should not have this env var within the
# shell history
TF_VAR_hcloud_token=1337 tofu apply
hcloud_ssh_key.sudo: Creating...
hcloud_firewall.ssh: Creating...
hcloud_firewall.https: Creating...
hcloud_firewall.http: Creating...
hcloud_ssh_key.sudo: Creation complete after 1s [id=24835347]
hcloud_firewall.http: Creation complete after 1s [id=1756096]
hcloud_firewall.https: Creation complete after 2s [id=1756097]
hcloud_firewall.ssh: Creation complete after 2s [id=1756098]
hcloud_server.docker: Creating...
hcloud_server.docker: Still creating... [10s elapsed]
hcloud_server.docker: Still creating... [20s elapsed]
hcloud_server.docker: Still creating... [30s elapsed]
hcloud_server.docker: Still creating... [40s elapsed]
hcloud_server.docker: Creation complete after 46s [id=56559157]
Apply complete! Resources: 5 added, 0 changed, 0 destroyed.
Outputs:
server_ips = "65.108.80.226"](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:dkf2zkkx44lve3oaft42f23h/bafkreif64eulfx37zxunpz4ycaavfpe4qp5zlsjoki64u53xxfnhfdqpki)
![# provider.tf
# Define the hetzner cloud provider
terraform {
required_providers {
hcloud = {
source = "opentofu/hcloud"
version = "1.26.1"
}
}
}
# main.tf
# Set the variable value in *.tfvars file
# or using the -var="hcloud_token=..." CLI option
# or use env vars like TF_VAR_hcloud_token=
variable "hcloud_token" {
type = string
default = ""
}
variable "ssh_key" {
type = string
# Set the default to your key or override
default = "~/.ssh/id_ed25519.pub"
}
# Configure the Hetzner Cloud Provider
provider "hcloud" {
token = var.hcloud_token
}
# Create a new SSH key
resource "hcloud_ssh_key" "sudo" {
name = "ssh key"
public_key = file(var.ssh_key)
}
# Set up firewalls
## Port 80 for unencrypted http
resource "hcloud_firewall" "http" {
name = "allow_http"
rule {
direction = "in"
protocol = "tcp"
port = 80
source_ips = [
"0.0.0.0/0",
"::/0"
]
}
}
## Allow SSL (https)
resource "hcloud_firewall" "https" {
name = "allow_https"
rule {
direction = "in"
protocol = "tcp"
port = 443
source_ips = [
"0.0.0.0/0",
"::/0"
]
}
}
## Set the SSH access
resource "hcloud_firewall" "ssh" {
name = "allow_ssh"
rule {
direction = "in"
protocol = "tcp"
port = 22
# Limit this to your IP
# 0.0.0.0/0 means open for all IPs
source_ips = ["0.0.0.0/0"]
}
}
# end firewall setup
# Create the docker server
resource "hcloud_server" "docker" {
name = "docker"
# Using the predefined docker image from Hetzner
image = "docker"
server_type = "cpx11"
location = "hel1"
firewall_ids = [hcloud_firewall.http.id, hcloud_firewall.https.id, hcloud_firewall.ssh.id]
ssh_keys = [hcloud_ssh_key.sudo.id]
labels = {
"purpose" = "Docker installation"
}
}
# Output the IP addresses of the created servers
output "server_ips" {
value = hcloud_server.docker.ipv4_address
}](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:dkf2zkkx44lve3oaft42f23h/bafkreidbn7c3qkxz6k5qgia7p7pewerc7jze5d5xpaiz3t56dpofswebim)