Recently a colleague suggested me to try ZSH instead of my old bash shell. As ZSH is having all functions I used in bash and adds a ton of additional possibilities like a git integration, I am very happy with that change. Install ZSH and oh-my-zsh (nice configuration framework): Edit ZSH config: I am currently […]
I recently created a new mysql backup script. It is compatible with local mysql-servers or can be used to backup the databases of a docker container. It will save on dump every hour and holds 6 of them normally and one every day, holding a complete week. I am running this script every hour via […]
I was recently introduced to a new software called Traefik. A reverse proxy / load balancer that’s easy, dynamic, automatic, fast, full-featured, open source, production proven, provides metrics, and integrates with every major cluster technology… No wonder it’s so popular! What else to say? Sounds exactly like a tool I would love. As my setup […]
I recently started to add some security features to my asterisk server. One was adding a fail2ban jail. Because I have asterisk running inside of docker, I mounted my log folder and changed fail2ban (installed on my docker host itself) to use the message file (in my case: /opt/asterisk/log/messages) . Start by editing /etc/fail2ban/jail.d/asterisk.conf: Fail2ban […]
Because newer Ubuntu versions are using systemd for dns resolution instead of resolvconf, you need to modify your Openvpn client config a bit. Add following lines to your config (/etc/openvpn/myconnection.conf): Simply add the new update script by running: Or add the script manually: Server config To route all clients over the vpn gateway add following […]
When using a lxc container in Proxmox it (sometimes) happens that Proxmox overrides the network config of the container and applies its own. In most cases this is contraproductive and not so easy to find out. To stop this, “touch /etc/network/.pve-ignore.interfaces” to tell Proxmox to not change the network configuration.
As recommended you should add reject_sender_login_mismatch to your sender_restrictions to only allow users to send with their own address as FORM. Anyways some special cases are requiring you to login with one address, but send as another like WordPress on most php setups tries to. I created an account called firstname.lastname@example.org and changed some settings […]
Dieser Eintrag wurde nach der Erstveröffentlichung wesentlich erweitert und verändert. An dieser Stelle besten Dank an Sven Hofacker für das gemeinsame Erarbeiten einer besseren Konfiguration. Wenn man statt der weit verbreiteten Fritz!Boxen (und einigen anderen Routern) eine pfSense-Installation für die Bereitstellung des Internetzuganges nutzen will, sind einige Punkte zu beachten. DHCPv6 oder SLAAC oder 6rd? (WAN-Seite) Da bei IPv6 im Gegensatz zu IPv4 reichlich Adressen vorhanden sind, sind […]