Untitled

#	OrangePi 3 LTS
login:		root
Password:	Bot7Nang

Login:		pi
Password:	Garda3See

# in case no pi User
adduser pi
usermod -aG sudo pi
visudo
#	Nessecary for /dev/ttyACM0 in zigbee2mqtt setup
sudo usermod -a -G dialout pi

stty rows 43 columns 132

sudo orangepi-config
#	configure Network (LAN) / static IP
#	Personal
	Timezone	Europe / Berlin

#	Hostname
	FH01

#	System
	Boot Environment	> Verbosity 15
	Avahi	-> Announce System in Network

#	get last updates
sudo apt update && sudo apt dist-upgrade -y

# Scargill Script
wget https://bitbucket.org/api/2.0/snippets/scargill/kAR5qG/master/files/script.sh

bash ./script.sh

							 x    [ ] quiet       Quiet(er) install - untick for lots of info        x
                             x    [*] prereq      Install general pre-requisites                     x
                             x    [*] mosquitto   Install Mosquitto                                  x
                             x    [*] apache      Install Apache/PHP/SQLITE + PHPLITEADMIN           x
                             x    [ ] nginx       Install Nginx/PHP/SQLITE + PHPLITEADMIN            x
                             x    [*] nodenew     Install NodeJS and NodeRed (NEW)                   x
                             x    [ ] nodejs      Install NodeJS                                     x
                             x    [ ] nodered     Install Node-Red                                   x
                             x    [*] webmin      Install Webmin                                     x
                             x    [ ] java        Update Java                                        x
                             x    [ ] hwsupport   Enable support for Serial, I2C, GPIO, etc          x
                             x    [ ] phone       Install on Android Smartphone - see blog           x
                             x    [ ] odroid      Install ODROID C2-specific GPIO                    x
                             x    [ ] generich3   Install GENERIC H3 GPIO (not Raspberry Pi)         x
                             x    [*] phpsysinfo  Install PHPSYSYINFO                                x
                             x    [*] modpass     Mod USER and ADMIN passwords (password123)         x
                             x    [*] addindex    Add an index page and some CSS                     x
                             x    [ ] passwords   Update ROOT and PI user passwords                  x
                             x    [ ] rpiclone    Install RPI-Clone                                  x
                             x    [ ] log2ram     Install Log2RAM default 40Meg                      x
                             x    [*] grafana     Install Grafana and InfluxDB

#	Passwords for NodeRed / NodeRed UI
Login:		user
Password:	User8Password

Login:		admin
Password:	Admin8Password

#	Grafana Login
Login:		admin
Password:	Grafana8Password

#	added new user to Mosquitto
cd /etc/mosquitto
sudo mosquitto_passwd -b passwords moskito Mosquitto8Password

#	Test MQTT Broker
mosquitto_sub -u moskito -P Mosquitto8Password -v -t '#'&
mosquitto_pub -u moskito -P Mosquitto8Password -t /home/test -m Hallo

#	Output
/home/test Hallo

#	Add addtl. Nodes
cd ~
cd .node-red
npm install node-red-contrib-fake-wemo &
npm install node-red-contrib-sunpos &
npm install node-red-contrib-fritz &
npm install node-red-contrib-light-scheduler &
npm install node-red-contrib-schedex &
npm install node-red-node-twitter

#	Install Zigbee2mqtt

https://www.zigbee2mqtt.io/getting_started/running_zigbee2mqtt.html

ls -l /dev/ttyACM0
ls -l /dev/serial/by-id
#	-> lrwxrwxrwx 1 root root 13 May  4 16:41 usb-Texas_Instruments_TI_CC2531_USB_CDC___0X00124B000BE8B284-if00 -> ../../ttyACM0

cd ~
tee zigbee2mqtt-install

--------------
# Install Node.js and required dependencies
# In Debian/Raspbian bullseye and up (11 and up), NodeJS v12.X is packaged, this is the safest method of installing NodeJS (from official repositories) for Zigbee2MQTT. Older i386 hardware can work with [unofficial-builds.nodejs.org](https://unofficial-builds.nodejs.org/download/release/v12.16.3/ e.g. Version 12.16.3 should work.
# Check https://github.com/nodesource/distributions/blob/master/README.md if you want to install a specific version from NodeJS repositories instead.
sudo apt-get install -y nodejs npm git make g++ gcc

# Verify that the correct nodejs and npm (automatically installed with nodejs)
# version has been installed
node --version  # Should output v10.X, v12.X, v14.X, v15.X or V16.X
npm --version  # Should output 6.X or 7.X

# Clone Zigbee2MQTT repository
git clone https://github.com/Koenkk/zigbee2mqtt.git
sudo mv zigbee2mqtt /opt/zigbee2mqtt

# Install dependencies (as user "pi")
cd /opt/zigbee2mqtt
npm ci
-------------------------------

bash ./zigbee2mqtt-install


/opt/zigbee2mqtt/data/configuration.yaml

-----------------
homeassistant: false
permit_join: true
frontend: true
mqtt:
  base_topic: /home/zigbee
  server: mqtt://192.168.123.16
  user: moskito
  password: xxxxxxxxxq
serial:
  port: null
  adapter: zstack
  baudrate: 115200
  rtscts: false
  disable_led: false
advanced:
  ikea_ota_use_test_url: true
  log_level: info
-----------------

#	Starting Zigbee2MQTT
cd /opt/zigbee2mqtt
npm start

#	further command see documentation at above URL

----------------
#	Update zigbee2mqtt
run file /opt/zigbee2mqtt/update.sh

---------------
#	Setup InfluxDB
https://www.sensorsiot.org/node-red-infuxdb-grafana-installation/

influx
create database FH01
use FH01
create user "pi" with password 'Influx8Password' with all privileges
show field keys
select * from Werte where Room = 'Outside'

#	some more DB queries (change according your structure)

SELECT * FROM Werte WHERE Room = 'Blitzwolf-Plug-01' and time > now() - 1h limit 1000;
SELECT Count, Total, Time FROM Werte WHERE Room = 'Gas' and time > now() - 1h limit 1000;


# To convert influxdb timestamp to normal timestamp you can type on console:

influx -precision rfc3339

------------------------------------------------------------------------------
#	just in case there is a problem with InfluxDB
#	Repair influxdb
https://docs.influxdata.com/influxdb/v1.8/administration/rebuild-tsi-index/

influx_inspect buildtsi -datadir ./data -waldir ./wal
ls -al
chown -R influxdb *
chgrp -R influxdb *
service influxdb start

# Backup InfluxDB
-----------------

https://docs.influxdata.com/influxdb/v1.8/administration/backup_and_restore/

influxd backup -portable -database FH01 -host localhost:8088 ~/mysnapshot/FH01

# for remote backup, change /etc/influxdb/influxdb.conf

# activate RPC port !
#bind-address = "127.0.0.1:8088"
bind-address = ":8088"

#	Backup from local Windows (D:\Onedrive ... is just an example)
#	IP address has to be changed, also local path on Windows computer
scp root@192.168.123.16:/home/pi/mysnapshot/FH01/* D:\OneDrive\OrangePi\Influx-Backup\FH01

#	Configureed Datasource in Grafana
URL:		http://localhost:8086
Database:	FH01
User:		pi
Password:	Influx8Password

--------------------------------------------------------
# SSL Config for Apache2 Server

https://www.tecchannel.de/a/owncloud-9-unter-ubuntu-server-16-04-lts-installieren,3277807,2

sudo a2enmod ssl
sudo mkdir /etc/apache2/ssl
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/apache2/ssl/apache.key -out /etc/apache2/ssl/apache.crt

Nun editieren Sie die Datei /etc/apache2/sites-available/default-ssl.conf. Dort finden Sie eine Zeile, die mit SSLEngine on beginnt. Fügen Sie darunter die beiden eben angelegten Zertifikate ein:

sudo vi /etc/apache2/sites-available/default-ssl.conf
SSLCertificateFile /etc/apache2/ssl/apache.crt
SSLCertificateKeyFile /etc/apache2/ssl/apache.key

sudo a2ensite default-ssl.conf

Für den weiteren Verlauf dieses Artikels ändern Sie außerdem die Zeile
DocumentRoot /var/www/html

sudo a2enmod headers

Editieren Sie die Datei /etc/apache2/sites-available/default-ssl.conf abermals und fügen zum Beispiel unter der Zeile mit ServerAdmin diese Sektion ein:

<IfModule mod_headers.c>Header always set Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"</IfModule>

sudo service apache2 restart
-----------------------------
# Password and https for NodeRed

# settings.js

cd ~/.node-red
vi settings.js

    adminAuth: {
                type: "credentials",
                        users: [{
                                username: "admin",
                                password: "$2a$08$EVg5KlhlBKwZEJIMFL260uy2z/48Fu5HRsiWUPb4BkT7kkAZhMKbm",
                                permissions: "*" }]
    },
    httpNodeAuth: {
            user:"user",
            pass:"$2a$08$qstd3YKjwXYMii3nOKqKQe7OkZGfjOx5hlCygvlz2b52j.ZVftre."
    },
    editorTheme: { projects: { enabled: false }
    },

    // By default, credentials are encrypted in storage using a generated key. To
    // specify your own secret, set the following property.
    // If you want to disable encryption of credentials, set this property to false.
    // Note: once you set this property, do not change it - doing so will prevent
    // node-red from being able to decrypt your existing credentials and they will be
    // lost.
    //credentialSecret: "a-secret-key",

    https: {
        key: fs.readFileSync('/home/pi/.node-red/privkey.pem'),
        cert: fs.readFileSync('/home/pi/.node-red/cert.pem')
    },
    requireHttps: true
}
------------------------------------
# Webmin SSL

https://www.webmin.com/ssl.html

If Webmin is already installed, turn on SSL
In the Webmin Configuration module (under the Webmin category) an icon for SSL Encryption should appear. Click on it, and change the SSL option from Disabled to Enabled.

--------------------
#	https for Grafana

https://www.turbogeek.co.uk/grafana-how-to-configure-ssl-https-in-grafana/

sudo openssl genrsa -out grafana.key 2048
sudo openssl req -new -key grafana.key -out grafana.csr

Country Name (2 letter code) [AU]:DE
State or Province Name (full name) [Some-State]:Saxonia
Locality Name (eg, city) []:Leipzig
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Home Ltd.
Organizational Unit Name (eg, section) []:Home
Common Name (e.g. server FQDN or YOUR name) []:FH01
Email Address []:xxxxxxxxx@gmail.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:Challenge8Password
An optional company name []:Home

sudo openssl x509 -req -days 365 -in grafana.csr -signkey grafana.key -out grafana.crt
-> Signature ok
	subject=C = DE, ST = Saxonia, L = Leipzig, O = Home Ltd., OU = Home, CN = FH01, emailAddress = xxxxxxxxx@gmail.com
	Getting Private key

sudo chown grafana:grafana grafana.crt
sudo chown grafana:grafana grafana.key
sudo chmod 400 grafana.key grafana.crt

sudo vi /etc/grafana/grafana.ini

cert_key = /etc/grafana/grafana.key
cert_file = /etc/grafana/grafana.crt

sudo service grafana-server restart
sudo service grafana-server status
-----------------------------------------------------