Networking, system administration and more
Networking, system administration and more
Using Traefik with Let’s Encrypt is very simple however when using Cloudflare with strict SSL mode to proxy traffic it becomes a bit more difficult. If the option is set in Cloudflare to redirect HTTP to HTTPS it also causes more problems with HTTP validation. The main issue with strict […]
Read moreI was looking for a backup solution for some personal servers; I had a few requirements in mind: Not agent based Lightweight Stores backups in a Dropbox application folder (so each server can have its own folder not accessible to the others) Encrypted storage of backups Only backup the data […]
Read moreThese are the steps for deployment of the Juniper vRR (virtual route reflector) on Proxmox VE. For those not unaware, the virtual route reflector gives you the full policy capability of JunOS for routes without the actual forwarding engine. The route reflectors can then be configured using existing configuration tools […]
Read moreAn often overlooked feature of the OpenSSH client is the ControlMaster feature. This feature allows multiple sessions to share a single TCP connection. This results in fast session startup and single sign on. There are many web pages which explain the feature in more detail which is not the point […]
Read moreDNSControl is a fantastic tool to manage DNS records, especially if there are multiple DNS zones being managed: DNS records in plain text files allowing them to be stored in a VCS of your choice Records are vendor agnostic; switch from one DNS provider to another without having to import/export […]
Read moreAfter making a change to a GitLab configuration file I ran the gitlab-ctl reconfigure command and got this error: GitLab is managing the SSL certificates from LetsEncrypt using ACME in this case. Checking the existing certificate I could see that it was working up until recently so it seems to […]
Read moreI had written a packet capture with tcpdump into a file for future analysis. The interface the capture was taken on had multiple VLAN’s trunked. When I got around to analyzing the file, I found I could read the it with no issues at all using no filter: However, the […]
Read moreOn my Linux desktop, I prefer to use KeePassXC with libsecret integration. After installing Skype and rebooting, I noticed KeePassXC secret service integration broke. One of the dependencies pulled in with Skype is gnome-keyring. When I checked in KeePassXC, the secret service integration page shows that another service is running […]
Read moreThe dnsdist web server and API at the time of writing does not have the ability to use TLS to secure traffic. Recently this was brought up on the dnsdist mailing list in the thread here. The solution mentioned on the mailing list by Stephane Bortzmeyer was using stunnel; personally […]
Read moreI needed to temporary ‘steal’ an interface from a server for other purposes. The problem is the interface was one of two interfaces used in an Open vSwitch bond. I found a couple of ways to remove it, but my goal was to do it with either no service interruption […]
Read more