Ente

//Ente// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:ente This tutorial is for Debian users who want to setup Ente manually. I used this tutorial Ente Manual Install as a jumping off point for what is documented below. Since minio is now paywalled, I used Garage as the s3-compat bucket and just pointed it at the vm’s virtiofs mountpoint which…

Hijacking DNS & Stopping DoH

//DNS Hijacks// Latest Updates on Wiki: https://wiki.haacksnetworking.org/doku.php?id=computing:dnshijacks This tutorial is for owner’s of cameras and/or IoT devices that want to monitor/secure their network from the device. As is well known, these devices ‘phone home’ and/or use built-in DNS to ensure connectivity but in so doing, bypass LAN policies and/or security. This tutorial assumes you already…

Spinning up a Castopod Instance

//castopod// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:castopod This tutorial is for Debian users wanting to set up a production-ready Castopod instance. Make sure you have a [[https://wiki.haacksnetworking.org/doku.php?id=computing:apachesurvival|sufficiently hardened]] VPS and LAMP stack first, then proceed: Make sure you set the /etc/postfix/main.cf interface to loopback-only. Now, set up the database by running sudo mysql -u root -p and entering…

Simple Scalable Privacy: Unleashing OpenWRT, Pi-hole, Unbound, & Bind9

Resources: https://cloud.haacksnetworking.org/index.php/s/rrMY5sYXBrBs2zM Presentation: https://content.haacksnetworking.org/w/p/4PTUKXVdejWf7UTo4eZXpg This blog post and associated presentation are an attempt by me to gather together a bunch of projects that helped me bring about more control over my data and computer infrastructure. Having used computers since the early 80s as a kid, I have always been accustomed to managing your own tools…

Email behind NAT

//emailbehindnat// IntroductionThis tutorial covers how to setup system email on workstations behind NAT using exim4 in satellite mode. Although fairly straight forward, it took longer than expected. The main issues were getting the headers formatted correctly so recipients would not reject the email. Additionally, it took a bit of extra work to get system alerts…

Tolerating Cockpit on Debian

//cockpit// IntroductionThis tutorial covers how to set up Cockpit on Debian. The approach here assumes that Cockpit will be installed on bare metal being used in production, with only ssh exposed. This tutorial assumes you already have a sufficiently hardened and provisioned VPS/VM w/ a LAMP stack and some associated A/AAAA records ready to go.…

Creating a Production Pixelfed Instance

//pix3lfed// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:pix3lfed [Update 09-10-26: After sending two emails, contacting Dansup on social media, in-person, and receiving no response or support, this project has been abandoned. Despite obtaining discovery designation, third party app usage remained broken and unusable. After surveying community members, we’ve decided to self-host Ente instead.] [Update 07-22-26: We are attempting to…

Switching My Production Server to BTRFS

//btrfsreminders// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:btrfsreminders IntroductionThis tutorial is for Debian users that want to create a JBOD pool using BTRFS subvolumes and its RAID10 equivalent. These types of setups are common and helpful for virtualization environments and hosting multiple services, either for serious home hobbyist use and/or small business level production. These approaches are not designed…

Authoritative DNS w/ Bind 9

//bind9dns// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:bind9dns Introduction This tutorial is for users of Debian GNU/Linux to set up an authoritative DNS server using bind9. An authoritative DNS server serves DNS records about other hosts … that is, you use an authoritative server to serve domain.com’s A, AAAA, DMARC, SPF, etc., records. These records can then be queried…

Setting up a secure & public-facing Filebrowser instance

//filebrowser-pub// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:filebrowser This tutorial is for Debian Trixie users seeking to set up a secure and public-facing Filebrowser instance. This is to assist with uploading and managing music/media on Navidrome, Jellyfin, and other similar instances. Do not proceed with this tutorial until you’ve learned how to set up a public facing VM/VPS and…

Close