Compare commits

1 Commits

Author SHA1 Message Date
f31552e791 Use vmax instead of vh
All checks were successful
Build and Deploy Zola Website / build_and_deploy (push) Successful in 15s
Build Zola Website / build (pull_request) Successful in 23s
2024-12-18 12:55:30 +01:00
19 changed files with 36 additions and 153 deletions

View File

@ -3,25 +3,25 @@ title = "About"
template = "about.html"
+++
I am an IT student at Charles University in Prague (Faculty of Education).
## About
I am student of IT at Charles University in Prague (Faculty of Education).
As a member of [Microlab](https://microlab.space), the university's hackerspace, I collaborate on various hardware and software projects. Additionally, I contribute to the open-source community as a package maintainer for [Void Linux](https://voidlinux.org).
My programming journey began in high school, where I developed a passion for `Linux` and co-founded [Fofrweb](https://fofrweb.com). Together with a classmate, I created web applications using `Node.js` and `Vue.js`, all hosted on my own Linux server.
As a member of [Microlab](https://microlab.space), the university's hacker space, I engage with fellow tech enthusiasts. Additionally, I contribute to the open-source community as a package maintainer for [Void Linux](https://voidlinux.org).
## Work
I currently work as a Linux engineer. Most of my work involves Debian based systems - desktops (Raspberry Pi, Intel NUC) and servers.
Currently employed as a Linux Devops engineer. Most of my work involves Debian-based systems on various hardware platforms.
I also create custom websites from time to time.
I also create custom websites from time to time.
## Projects
Most of my projects are hosted on my private Gitea instance and GitHub:
- Gitea: [git.filiprojek.cz/fr](https://git.filiprojek.cz/fr)
Most of my projects are hosted on Gitea and GitHub:
- Gitea: [git.filiprojek.cz](https://git.filiprojek.cz/fr)
- GitHub: [github.com/filiprojek](https://github.com/filiprojek)
## Contact
- <a href="mailto:&#102;&#105;&#108;&#105;&#112;&#064;&#102;&#105;&#108;&#105;&#112;&#114;&#111;&#106;&#101;&#107;&#046;&#099;&#122;">&#102;&#105;&#108;&#105;&#112;&#064;&#102;&#105;&#108;&#105;&#112;&#114;&#111;&#106;&#101;&#107;&#046;&#099;&#122;</a>
- [@filiprojek](https://t.me/filiprojek) on Telegram
- PGP: [0x7E65EA58C6075F09](https://keys.openpgp.org/vks/v1/by-fingerprint/CA3D9BE28315B49164130CD97E65EA58C6075F09)

View File

@ -1,91 +0,0 @@
+++
title = "Unix pass and Android Password Store with YubiKey"
date = 2025-01-01
description = "Setting Up Unix pass with YubiKey and Android Password Store"
+++
Using a secure and versatile password manager is a must for managing your digital life, and [pass](https://www.passwordstore.org/), the Unix password manager, is a fantastic choice. If you store your GPG key on a YubiKey and use the [Android Password Store](https://github.com/android-password-store/Android-Password-Store) app with [OpenKeychain](https://github.com/open-keychain/open-keychain), this guide will help you set everything up while addressing a common compatibility issue with `throw-keyids` in `gpg.conf`.
## What Youll Need
- A YubiKey configured with your GPG key (see the excellent [YubiKey-Guide by drduh](https://github.com/drduh/YubiKey-Guide)).
- The [pass](https://www.passwordstore.org/) command-line utility.
- [OpenKeychain](https://github.com/open-keychain/open-keychain) installed on your Android device.
- The [Android Password Store](https://github.com/android-password-store/Android-Password-Store) app.
## Configuring `pass` with a YubiKey-Stored GPG Key
1. **Set up your YubiKey and GPG key**
- Follow the steps in [drduhs YubiKey guide](https://github.com/drduh/YubiKey-Guide) to create and configure your GPG key on your YubiKey.
2. **Install `pass`**
- Install the `pass` utility on your Linux system. Most distributions have it in their package repositories:
```bash
apt install pass # For Debian/Ubuntu-based distros
xbps-install -S pass # For Void Linux
```
3. **Initialize `pass` with your GPG key**
- Run the following command to initialize the `.password-store` directory:
```bash
pass init <KEYID>
```
- Replace `<KEYID>` with your GPG key ID stored on the YubiKey.
4. **Sync passwords to your Android device**
- Clone your `.password-store` repository to your Android device and set up the `Password Store` app with `OpenKeychain`.
## The `throw-keyids` Issue
While working through this issue, I found a helpful discussion in [GitHub issue #173](https://github.com/android-password-store/Android-Password-Store/issues/173) for the Android Password Store repository. This thread provided insights that clarified the root cause of the problem and its resolution.
During setup, you might encounter an error in the Android Password Store app. OpenKeychain could report that the `.gpg` files are encrypted for a different key, even if they are not. This issue arises due to the `throw-keyids` option in `~/.gnupg/gpg.conf`.
### What Does `throw-keyids` Do?
The `throw-keyids` option in `gpg.conf` hides the recipients key ID during encryption. While this enhances privacy by preventing others from identifying the intended recipient(s), it can cause issues with OpenKeychain. OpenKeychain relies on visible key IDs to identify the correct decryption key, and without them, it assumes the files were encrypted for an unknown key.
### Fixing the Issue
To resolve this, you need to disable `throw-keyids` and re-encrypt your password store.
1. **Comment Out `throw-keyids` in `gpg.conf`**
- Open `~/.gnupg/gpg.conf` in your favorite text editor and comment out the line:
```
# throw-keyids
```
2. **Re-encrypt Your Password Store**
- Run the following command to re-encrypt all passwords with the new GPG options:
```bash
PASSWORD_STORE_GPG_OPTS="--no-throw-keyids" pass init <KEYID>
```
- Replace `<KEYID>` with your GPG key ID.
3. **Optional: Update Your Environment**
- To ensure `--no-throw-keyids` is always used, add the following line to your `~/.bashrc`:
```bash
export PASSWORD_STORE_GPG_OPTS='--no-throw-keyids' # Fix for OpenKeychain
```
- While this step is not strictly necessary (since the change in `gpg.conf` resolves the issue), it can serve as a safeguard.
4. **Sync the Updated Password Store**
- Push the updated `.password-store` to your remote repository and pull it on your Android device.
## Conclusion
With these steps, you can seamlessly use `pass` with a YubiKey and the Android Password Store app. The issue with `throw-keyids` is a minor hurdle that can be resolved by adjusting your `gpg.conf` and re-encrypting your password store. Disabling `throw-keyids` makes your key IDs visible, which slightly reduces privacy but is necessary for compatibility with OpenKeychain.
For further details on `pass`, GPG, or YubiKey, refer to their respective documentation. A secure password manager setup like this ensures your sensitive information stays safe across devices.
# References
- [Standard unix password manager](https://www.passwordstore.org/)
- [drduh's YubiKey Guide](https://github.com/drduh/YubiKey-Guide)
- [Android Password Store issue](https://github.com/android-password-store/Android-Password-Store/issues/173#issuecomment-453686599)

View File

@ -7,40 +7,30 @@ timestamp=$(date +%s)
# Define an array of folders to skip
skip_folders=("img" "svg" "fonts")
# Function to check if a path is within a skipped folder
is_skipped_folder() {
local path=$1
for skip in "${skip_folders[@]}"; do
if [[ "$path" == */$skip/* ]]; then
return 0
fi
done
return 1
}
# Function to add timestamp to CSS files and update HTML imports
update_css_references() {
find "$public_dir" -type f -name "*$css_extension" | while read -r css_file; do
if is_skipped_folder "$css_file"; then
continue
# Find all CSS files in the root of the public directory
for css_file in "$public_dir"/*$css_extension; do
if [[ -f "$css_file" ]]; then
base_name=$(basename "$css_file" "$css_extension")
new_name="${base_name}-${timestamp}${css_extension}"
# Rename the CSS file
mv "$css_file" "$public_dir/$new_name"
echo "Renamed: $css_file -> $new_name"
# Update all HTML files in the root and 'archiv' folder
for html_file in "$public_dir"/*.html "$public_dir/archiv/"*.html; do
if [[ -f "$html_file" ]]; then
sed -i "s|$base_name$css_extension|$new_name|g" "$html_file"
echo "Updated references in: $html_file"
fi
done
fi
base_dir=$(dirname "$css_file")
base_name=$(basename "$css_file" "$css_extension")
new_name="${base_name}-${timestamp}${css_extension}"
new_path="${base_dir}/${new_name}"
# Rename the CSS file
mv "$css_file" "$new_path"
echo "Renamed: $css_file -> $new_path"
# Update all HTML files under public recursively
find "$public_dir" -type f -name "*.html" | while read -r html_file; do
sed -i "s|$base_name$css_extension|$new_name|g" "$html_file"
echo "Updated references in: $html_file"
done
done
}
# Add timestamp to CSS files and update HTML references (including archiv/index.html)
update_css_references

View File

@ -1,20 +1,9 @@
.about {
h1 {
font-size: 2rem;
margin-bottom: 2rem;
}
h2 {
margin-top: 1rem;
margin-bottom: .5rem;
}
h3,
h4,
h5,
h6,
p {
h3, h4, h5, h6, p {
margin-top: .5rem;
margin-bottom: .5rem;
}
@ -22,6 +11,5 @@
p {
text-align: left;
}
margin-bottom: 3rem; // space for footer
}

View File

@ -51,7 +51,6 @@ code {
.copy-code-wrapper {
position: relative;
margin-block-start: 1em; // Fixes wrong margin when code block is inside listed item
}
.copy-code {

View File

@ -7,7 +7,7 @@
body {
display: flex;
flex-direction: column;
min-height: 100dvh;
min-height: 100vmax;
font-family: 'Source Code Pro', monospace;
background: var(--background);
color: var(--color);
@ -79,8 +79,7 @@ footer {
align-items: center;
align-self: flex-end;
margin-top: auto;
margin-bottom: max(2rem, env(safe-area-inset-bottom)); /* Account for safe area */
margin-bottom: 2rem;
}
.hamburger {

View File

@ -6,7 +6,6 @@
{% block content %}
<section class="about content">
<h1>{{ page.title }}</h1>
{{ page.content | safe }}
{{ page.content | safe }}
</section>
{% endblock content %}

View File

@ -60,7 +60,6 @@
{% endblock content %}
</main>
<footer>
<p>Built using <a href="https://getzola.org" target="_blank">Zola SSG</a></p>
<p>Build time: {{ now() | date(format="%Y-%m-%d %H:%M") }},
{% if config.extra.git %}
<a href="{{ config.extra.git }}" target="_blank">Source</a>

View File

@ -5,7 +5,7 @@
<section>
<p>Filip Rojek &lt&#102;&#105;&#108;&#105;&#112;&#064;&#102;&#105;&#108;&#105;&#112;&#114;&#111;&#106;&#101;&#107;&#046;&#099;&#122;&gt</p>
<br>
<p>Linux sysadmin, software engineer <a href="https://www.fofrweb.com/" target="_blank">@fofrweb</a>,<br> GNU/Linux <a href="http://voidlinux.org" target="_blank">Void</a> contributor and student at Charles University in Prague<span class="underscore">_</span><p>
<p>Linux sysadmin, backend node.js & php developer <a href="https://www.fofrweb.com/" target="_blank">@fofrweb</a>,<br> GNU/Linux <a href="http://voidlinux.org" target="_blank">Void</a> user, student and coffee enthusiast<span class="underscore">_</span><p>
<br>
<p>PGP: <a href="https://keys.openpgp.org/vks/v1/by-fingerprint/CA3D9BE28315B49164130CD97E65EA58C6075F09" target="_blank">0x7E65EA58C6075F09</a></p>
<br>

View File

@ -20,7 +20,7 @@
{% endif %}
</p>
<hr>
<p>{{ project.date }}</p>
<p>{{ project.date }} | {{ project.extra.state}}</p>
</div>
{% endfor %}
</section>