#+title: Network & Router Info
#+HTML_HEAD: <link rel="stylesheet" type="text/css" href="_share/media/css/computer.css" />
#+HTML_HEAD: <link rel="stylesheet" type="text/css" href="_share/media/css/org-media-sass/content-overview.css" />
#+OPTIONS: H:6

* links
- [[./toc.org][TOC - Home Computer]]


* Router Configuration
** WiFi Settings
| Category  | Value        |
|-----------+--------------|
| SSID      | ronny-wifi   |
| Password  | 2reishit2ara |
| Router IP | 192.168.0.1  |

*** links to access the router
- http://tplinkwifi.net/webpages/index.html?t=baf9a7a7
- [[http://192.168.0.1]]

** Internet Connection
| Category            |           Value |
|---------------------+-----------------|
| Internet IP Address |  94.159.253.187 |
| Subnet Mask         | 255.255.255.255 |
| Default Gateway     |   82.102.129.99 |
| Primary DNS         |   80.179.52.100 |
| Secondary DNS       |   80.179.55.100 |

** DHCP Settings
| Category        | Value                       |
|-----------------+-----------------------------|
| DHCP Server     | Enabled                     |
| IP Address Pool | 192.168.0.2 - 192.168.0.253 |

** Open Ports
These are the active port forwarding rules configured on the router for local devices. All are currently marked as open and mapped directly from external to internal ports on the same device.

*** Current Port Forwards
| Service Name                |    Device IP | External Port | Internal Port | Protocol | Status |
|-----------------------------+--------------+---------------+---------------+----------+--------|
| GIT                         | 192.168.0.63 |           222 |           222 | TCP      | Open   |
| SSH                         | 192.168.0.63 |            22 |            22 | TCP      | Open   |
| HTTPS                       | 192.168.0.63 |           443 |           443 | TCP      | Open   |
| FTP                         | 192.168.0.63 |            21 |            21 | TCP      | Open   |
| HTTP                        | 192.168.0.63 |            80 |            80 | TCP      | Open   |
| Postgres - stg.ronnyabraham | 192.168.0.63 |          5433 |          5433 | TCP      | Open   |

* FTP
** FTP Server Configuration Overview

| Setting                  | Value                         | Notes                                                    |
|--------------------------+-------------------------------+----------------------------------------------------------|
| Server IP (LAN)          | 192.168.0.63                  | Your Raspberry Pi's local IP                             |
| Domain (optional)        | ftp.ronnyabraham.com          | Public address (requires DNS pointing to your home IP)   |
| FTP Username             | ftpuser                       | Restricted to chroot jail: /home/ftpuser/ftp             |
| FTP Password             | [your-password]               | Chosen during user setup                                 |
| Login Port               | 21 (TCP)                      | Already forwarded                                        |
| Passive Port Range       | 30000–31000 (TCP)             | Must be forwarded in router for PASV mode                |
| FTP Root Dir             | /mnt/storage/srv/ftp          | Physical storage location                                |
| FTP Mount (seen by user) | /home/ftpuser/ftp             | Bind-mounted for vsftpd                                  |
| Passive Mode Enabled     | YES                           | Required for most clients like FileZilla, ncftp          |
| Encrypted FTP (FTPS)     | NO                            | Not yet set up — optional for secure external access     |
| Firewall                 | None or default iptables      | UFW not installed                                        |
| External Access Ready?   | YES, if passive ports forwarded| Port forwarding must include 21 + 30000–31000            |

** vsftpd.conf Configuration

Location: `/etc/vsftpd.conf`

Add or ensure the following lines are present to enable passive mode:
#+begin_src conf
pasv_enable=YES
pasv_min_port=30000
pasv_max_port=31000
pasv_address=ftp.ronnyabraham.com
#+end_src

After changes, restart the service:
#+begin_src bash
sudo systemctl restart vsftpd
#+end_src

** Optional To-Do
*** DONE Forward passive ports in router (30000–31000)
*** TODO Enable TLS (FTPS) for secure login & transfer
Enabling TLS (also known as FTPS) encrypts both the FTP login credentials and file transfers, protecting them from interception over the internet.

This is especially important if you plan to access your FTP server remotely from public networks.

Steps to enable:
1. Generate or obtain an SSL certificate and key (self-signed or from a trusted CA)
2. Edit `/etc/vsftpd.conf` to enable SSL:
#+begin_src conf
      ssl_enable=YES
      rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
      rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
      force_local_data_ssl=YES
      force_local_logins_ssl=YES
      ssl_tlsv1=YES
      ssl_sslv2=NO
      ssl_sslv3=NO
      require_ssl_reuse=NO
      ssl_ciphers=HIGH
      #+end_src
3. Restart vsftpd:
      #+begin_src bash
      sudo systemctl restart vsftpd
      #+end_src
4. Configure your FTP client (e.g., FileZilla or ncftp) to use "FTP over TLS"



* Raspberry Pi Information
#+INCLUDE: "pi-storage.org::*Raspberry Pi Information" :only-contents t
