Hijacking DNS & Stopping DoH

//DNS Hijacks// Latest Updates on Wiki: https://wiki.haacksnetworking.org/doku.php?id=computing:dnshijacks This tutorial is for owner’s of cameras and/or IoT devices that want to monitor/secure their network from the device. As is well known, these devices ‘phone home’ and/or use built-in DNS to ensure connectivity but in so doing, bypass LAN policies and/or security. This tutorial assumes you already…

Spinning up a Castopod Instance

//castopod// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:castopod This tutorial is for Debian users wanting to set up a production-ready Castopod instance. Make sure you have a [[https://wiki.haacksnetworking.org/doku.php?id=computing:apachesurvival|sufficiently hardened]] VPS and LAMP stack first, then proceed: Make sure you set the /etc/postfix/main.cf interface to loopback-only. Now, set up the database by running sudo mysql -u root -p and entering…

Email behind NAT

//emailbehindnat// IntroductionThis tutorial covers how to setup system email on workstations behind NAT using exim4 in satellite mode. Although fairly straight forward, it took longer than expected. The main issues were getting the headers formatted correctly so recipients would not reject the email. Additionally, it took a bit of extra work to get system alerts…

Tolerating Cockpit on Debian

//cockpit// IntroductionThis tutorial covers how to set up Cockpit on Debian. The approach here assumes that Cockpit will be installed on bare metal being used in production, with only ssh exposed. This tutorial assumes you already have a sufficiently hardened and provisioned VPS/VM w/ a LAMP stack and some associated A/AAAA records ready to go.…

Creating a Production Pixelfed Instance

//pix3lfed// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:pix3lfed [Update 09-10-26: After sending two emails, contacting Dansup on social media, in-person, and receiving no response or support, this project has been abandoned. Despite obtaining discovery designation, third party app usage remained broken and unusable. After surveying community members, we’ve decided to self-host Ente instead.] [Update 07-22-26: We are attempting to…

Switching My Production Server to BTRFS

//btrfsreminders// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:btrfsreminders IntroductionThis tutorial is for Debian users that want to create a JBOD pool using BTRFS subvolumes and its RAID10 equivalent. These types of setups are common and helpful for virtualization environments and hosting multiple services, either for serious home hobbyist use and/or small business level production. These approaches are not designed…

Setting up a secure & public-facing Filebrowser instance

//filebrowser-pub// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:filebrowser This tutorial is for Debian Trixie users seeking to set up a secure and public-facing Filebrowser instance. This is to assist with uploading and managing music/media on Navidrome, Jellyfin, and other similar instances. Do not proceed with this tutorial until you’ve learned how to set up a public facing VM/VPS and…

Your Email, Your Rules: Self-Hosting Simplified

//mailserver// Wiki Entry: https://wiki.haacksnetworking.org/doku.php?id=computing:mailserverSlides: https://cloud.haacksnetworking.org/index.php/s/6N5mNHwAE52SgeY SeaGL Presentation: https://content.haacksnetworking.org/w/erLgeVDEdeUf84FXq2Xk4f SeaGL Information: https://pretalx.seagl.org/2025/talk/VLM7AS/ Introduction Contrary to popular belief, it’s entirely possible to self-host email servers. Like others, I listened to the propaganda that “it’s no longer feasible to self-host email” or “it’s too complex and servers won’t respect your mail health anyway” or other such explanations. In…

Monitoring Hard Drives on Production Hosts

Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:monitorvitals This tutorial is Debian GNU/Linux users wanting to regularly monitor the temperature and SMART health of their hard drives, as well as a slew of helpful zfs reports. Any production server I build includes these scripts and techniques. I set the vitals script to send me an email each hour, with the…

Managing AI Bots+ w/ Apache MPM, FPM, & Fail2Ban

//managingbots// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:managingbots This tutorial is designed for Debian OS and LAMP stack users that want to track and or prohibit bot scraping (or other url requests) that might harm server performance and/or cause it to fail. In my case, I have a multi-site WordPress that includes my tech blog, poetry, and teaching blog.…

Close