Debian-facile

#! /bin/bash
# This script enables policy routing after the tunnel interface is brought up
# Policy routing is used to make sure response packets go through the tunnel interface
# This is mandatory when your ISP has setup anti-spoofing filters

# Add a default route via tun0 into the VPN routing table
ip route add default dev $1 table VPN

# Pass traffic from lo:1 (192.168.0.1) to the VPN routing table, using policy routing ("ip rule" commands)
ip rule add from 192.168.0.1/32 table VPN

# Pass traffic from tur0 IP address to the VPN routing table
ip rule add from $4/32 table VPN

#sed -i 's/\(\"bind-address-ipv4\":\).*/\1\ \"'"$4"'\",/' /etc/transmission-daemon/settings.json

#On ajoute les règles iptables pour faire le NAT

 # Source NAT and destination NAT rules to make sure the incoming and ougoing packets on 192.168.0.1 are $
 iptables -A PREROUTING -t nat -i $1 -p tcp --dport 443 -j DNAT --to 192.168.0.1
 iptables -A PREROUTING -t nat -i $1 -p udp --dport 443 -j DNAT --to 192.168.0.1
 iptables -A POSTROUTING -t nat -o $1 -j MASQUERADE
 # Allow session continuation traffic
 iptables -A INPUT -i $1 -m state --state RELATED,ESTABLISHED -j ACCEPT
 # Allow Bittorrent traffic via tun0
 iptables -A SERVICES -p tcp --dport PORT_TORRENT -j ACCEPT # rTorrent random range
 iptables -A SERVICES -p udp --dport PORT_TORRENT -j ACCEPT # DHT

 # Disallow BitTorrent traffic via eth0 - Just to be extra safe ;)
 iptables -A FORWARD -s 192.168.0.1/32 -o eth0 -j DROP

#Démarrage de transmission
/etc/init.d/transmission-daemon restart
 

sudo apt-get install mtp-tools

sudo apt-get install ntfs-3g gvfs gvfs-fuse  gvfs-backends gvfs-daemons usbmount

blacklist nouveau

sudo chmod 1777 /tmp

server {

    index index.php

    # Make site accessible from http://localhost/
    server_name X.X.X.X;

    # Header cache control
    add_header  Cache-Control public;

    # Redirection des fichiers statiques
    location ~* \.(jpg|jpeg|gif|css|png|js|ico|swf|mp3|mp4|svg|eot|ttf|woff|txt|xml|json|pdf|zip|doc|ppt|xls)$ {


        if ($request_uri ~* /roundcube) {
          root /usr/share/;
        }
        if ($request_uri ~* /postfixadmin) {
          root /usr/share/;
        }

        expires          max;
        access_log       off;
        error_log        off;
        log_not_found    off;

    location /phpmyadmin {
root /usr/share/;
index index.php index.html index.htm;
location ~ ^/phpmyadmin/(.+\.php)$ {
try_files $uri =404;
root /usr/share/;
fastcgi_pass unix:/var/run/php5-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include /etc/nginx/fastcgi_params;
        }

        location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
root /usr/share/;
        }
    }

    location /phpMyAdmin {
rewrite ^/* /phpmyadmin last;
}
    # Redirection par défaut
    location / {

        proxy_pass               http://127.0.0.1:8080;
        proxy_redirect          off;
        proxy_set_header        Host            $host;
        proxy_set_header        X-Real-IP       $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
        client_max_body_size    10m;
        client_body_buffer_size 128k;
        proxy_connect_timeout   90;
        proxy_send_timeout      90;
        proxy_read_timeout      90;
        proxy_buffers           32 4k;


    }