Linux

If you find this article helpful, you might want to consider using my referral code (ARM7IBQY) to sign-up for Shadow. (Although it most likely is too late, when you’re faced with the following problem. 😁) Baseline scenario I ran into an issue with the Nouveau-driver for my GTX 760 when I tried to use the cloud gaming service offered by Shadow. Shadow offers a Desktop-as-a-Service product mostly focused on gaming. In comparison to other services like GeForce Now or Google Stadia it offers way more flexibility, but no included game-licenses....

Alpine is a super small linux distribution. I am using it for all my new VMs running a docker instance. Install alpine Download alpine (virtual edition) ISO from https://alpinelinux.org/downloads/ Boot ISO and login with root and no password. Start setup with setup-alpine command and follow instructions Add SSH Key apk add curl mkdir -p /root/.ssh curl -L https://<yourserver>/ssh_key > /root/.ssh/authorized_keys Install docker apk add nano nano /etc/apk/repositories Enable edge-community repository....

I recently created a new mysql backup script. It is compatible with local mysql-servers or can be used to backup the databases of a docker container. It will save on dump every hour and holds 6 of them normally and one every day, holding a complete week. I am running this script every hour via crontab: 0 * * * * /opt/mysql/backup.sh > /dev/null 2>&1

If you want to use JavaFX with OpenJDK 8 on Ubuntu you have to install an older version of OpenJFX and its dependencies. sudo apt install openjdk-8-jdk openjfx=8u161-b12-1ubuntu2 libopenjfx-java=8u161-b12-1ubuntu2 libopenjfx-jni=8u161-b12-1ubuntu2 Hold the package, so they wont be upgraded on system updates. sudo apt-mark hold openjfx libopenjfx-java libopenjfx-jni Tested on Ubuntu 18.04.2

I was recently introduced to a new software called Traefik. A reverse proxy / load balancer that’s easy, dynamic, automatic, fast, full-featured, open source, production proven, provides metrics, and integrates with every major cluster technology… No wonder it’s so popular! What else to say? Sounds exactly like a tool I would love. As my setup is already based on a great diversity of docker containers it sounded interesting to me to have a reverse proxy that is handling routing and load balancing automatically to them and can even manage the necessary Let’s encrypt certificates for me....

I recently started to add some security features to my asterisk server. One was adding a fail2ban jail. Because I have asterisk running inside of docker, I mounted my log folder and changed fail2ban (installed on my docker host itself) to use the message file (in my case: /opt/asterisk/log/messages) . Start by editing /etc/fail2ban/jail.d/asterisk.conf: [asterisk] enabled = true filter = asterisk action = %(banaction)s[name=%(__name__)s-tcp, port="%(port)s", protocol="tcp", chain="%(chain)s", actname=%(banaction)s-tcp] %(banaction)s[name=%(__name__)s-udp, port="%(port)s", protocol="udp", chain="%(chain)s", actname=%(banaction)s-udp] banaction = iptables-multiport logpath = /opt/asterisk/log/messages maxretry = 5 findtime = 3h bantime = 1d Fail2ban needs a specific timestamp format and to prevent asterisk from creating GBs of logs I changed it to only log notice and error messages in the /etc/asterisk/logger....

Because newer Ubuntu versions are using systemd for dns resolution instead of resolvconf, you need to modify your Openvpn client config a bit. Add following lines to your config (/etc/openvpn/myconnection.conf): script-security 2 setenv PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin up /etc/openvpn/update-systemd-resolved down /etc/openvpn/update-systemd-resolved down-pre Simply add the new update script by running: sudo apt install openvpn-systemd-resolved Or add the script manually: sudo wget https://raw.githubusercontent.com/jonathanio/update-systemd-resolved/master/update-systemd-resolved -P /etc/openvpn/ Server config To route all clients over the vpn gateway add following lines to your server config:...

When using a lxc container in Proxmox it (sometimes) happens that Proxmox overrides the network config of the container and applies its own. In most cases this is contraproductive and not so easy to find out. To stop this, touch /etc/network/.pve-ignore.interfaces to tell Proxmox to not change the network configuration.

As recommended you should add reject_sender_login_mismatch to your sender_restrictions to only allow users to send with their own address as FORM. Anyways some special cases are requiring you to login with one address, but send as another like WordPress on most php setups tries to. I created an account called relay@mydomain.de and changed some settings to allow this specific user to send with all addresses. main.cf sender_restrictions = reject_sender_login_mismatch,... master.cf...

DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )"