Debian on Amlogic
I have few chinese Android TV boxes, two with flashed CoreELEC. One oldest which was not compatible with CoreELEC was unused, partialy bricked (OS loader… Read More »Debian on Amlogic
debian
Blocking Facebook in nginx
How to block Facebook complete from your site? It is easy using geoip2 module in nginx. In Debian / Ubuntu install libnginx-mod-http-geoip2 and we need… Read More »Blocking Facebook in nginx
Layer 2 VPN from Mikrotik to linux – Proxmox PVE
Mikrotik version 7 brings many new features, including wireguard vpn. Wireguard vpn is fine, but it is layer 3 VPN – can not be bridged. What if you need L2 VPN, for example to migrate local server to datacenter and from network view keep it in your local network?
In my setup I wanted to be able migrate VMs from local Proxmox PVE to PVE running in Hetzner in datacenter. PVE in datacenter was dedicated server.
Mikrotik 7.1 also support l2tpv3, which is not very well documented in Mikrotik wiki yet, but it enables Layer 2 VPN. L2tpv3 is also supported in linux. How to create bridge between them?
How to run radarbox24 feeder on x86
PlaneFinder or Flightradar24 are providing x86 (i386 or x86_64) binaries, Radarbox only provide arm version for raspberry pie.There is request for x86 feeder package in forum but what they released due GPL is just a joke – can’t be compiled without knowing some keys.
I have found that there is rbfeeder docker image for x86 – how is this possible?
Webmin behind haproxy
After recent security updates, my webmin (now 1.903) served trough haproxy stopped working. Login page was not loading correctly…Read More »Webmin behind haproxy
Using mod_geoip in .htaccess
There has been some comments in my old posts trying to use generated country lists in Apache .htaccess. This approach is wrong, and I will show you much better way how to block or allow specific country.
Protecting WordPress with mod-security
This my blog and also other hosted websites running WordPress are target of bots trying passwords to wordpress admin and posting spam comments. I was unable to found simple plugin for comments dns blacklist, so I focused to mod-security. Read More »Protecting WordPress with mod-security
Snapshoting virtual machine running mysql database
Backup in virtualized enviroment is mostly based on snapshoting entire virtual machine and saving this state to backup repository. This snapshot does not include memory of virtual machine. When you restore virtual machine from this snapshot filesystem is in unclean state, but journal filesystem can handle this. From mysql point of view server crash happended and database can be corrupted and unrecoverable, depending on what queries where running during snapshot. This unpredicted and unconsistent state you don’t want to have as a backup of your data. Read More »Snapshoting virtual machine running mysql database
Debian iso images with firmware included
Are you getting angry when installing Debian and your network cards (eg. bnx2) are not working because of missing non-free firmware policy? Solution is simple – just use for installation unofficial Debian iso images with firmware.Read More »Debian iso images with firmware included
Dotdeb packages unattended upgrade
Unattended upgrades in Debian will not upgrade packages from third-party repositories (for example dotdeb.org) by default. It can be easily enabled editing /etc/apt/apt.conf.d/50unattended-upgrades.
Read More »Dotdeb packages unattended upgrade