To install:

• /etc/netplan
• apache httpd
• java
• golang
• tomcat
• jspwiki
• dhmb
• zaptecbot
• prometheus/grafana
• letsencrypt
• pihole
• iptables
• ip6tables
• knockd

apt install apache2 net-tools openjdk-25-jdk-headless make gcc knockd plocate
# golang:
cd /tmp/ && curl -OL https://go.dev/dl/go1.26.0.linux-arm64.tar.gz  && rm -rf /usr/local/go && tar -C /usr/local -xzf go1.26.0.linux-arm64.tar.gz

# tomcat:
cd /tmp && curl -OL https://dlcdn.apache.org/tomcat/tomcat-9/v9.0.117/bin/apache-tomcat-9.0.117.tar.gz && cd /usr/local && tar -xf /tmp/apache-tomcat-9.0.117.tar.gz && ln -s apache-tomcat-9.0.117 tomcat && rm -v /usr/local/tomcat/bin/*.bat
chown -R tomcat:tomcat /usr/local/apache-tomcat-9.0.117

groupadd tomcat
useradd -g tomcat tomcat --create-home
mkdir /var/run/tomcat && chown tomcat:tomcat /var/run/tomcat

create /etc/systemd/system/tomcat.service (from backup)
systemctl daemon-reload
systemctl status tomcat
systemctl start tomcat
systemctl enable tomcat

# jspwiki
cd /tmp && curl -LO https://downloads.apache.org/jspwiki/2.12.4/binaries/webapp/JSPWiki.war
cd /var/jspwiki && tar -xf /tmp/jspw.tar  # (tar created from backup)
# copy custom files to /usr/local/tomcat/lib  (from backup)

# zaptecbot
mkdir -p go/src/github.com/metskem

create /etc/systemd/system/zaptecbot.service (from backup)
touch /var/log/zaptecbot.out && chown metskem /var/log/zaptecbot.out
touch /var/log/zaptecbot.err && chown metskem /var/log/zaptecbot.err

systemctl daemon-reload
systemctl start zaptecbot
systemctl enable zaptecbot

# dhmb
create /etc/systemd/system/dhmb.service (from backup)
touch /var/log/dhmb.out && chown metskem /var/log/dhmb.out
touch /var/log/dhmb.err && chown metskem /var/log/dhmb.err

systemctl daemon-reload
systemctl start dhmb
systemctl enable dhmb
systemctl disable dhmb (we no longer run it)

# pihole
curl -sSL https://install.pi-hole.net | bash

# change port 80o to 81 in /etc/pihole/pihole.toml and systemctl restart pihole-FTL
# admin interface @ : http://192.168.2.19:81/admin

# knockd
systemctl enable knockd.service
# edit /etc/knockd.service (from backup)

saved /etc/netplan/01-network-manager-all.yaml:

network:
    ethernets:
        eth0:
            dhcp4: false
            addresses: [192.168.2.19/24]
            gateway4: 192.168.2.254
            nameservers:
              addresses: [8.8.8.8,8.8.4.4,192.168.2.254]
    version: 2