//DNS Hijacks// Latest Updates on Wiki: https://wiki.haacksnetworking.org/doku.php?id=computing:dnshijacks This tutorial is for owner’s of cameras and/or IoT devices that want to monitor/secure their network from the device. As is well known, these devices ‘phone home’ and/or use built-in DNS to ensure connectivity but in so doing, bypass LAN policies and/or security. This tutorial assumes you already…
//castopod// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:castopod This tutorial is for Debian users wanting to set up a production-ready Castopod instance. Make sure you have a [[https://wiki.haacksnetworking.org/doku.php?id=computing:apachesurvival|sufficiently hardened]] VPS and LAMP stack first, then proceed: Make sure you set the /etc/postfix/main.cf interface to loopback-only. Now, set up the database by running sudo mysql -u root -p and entering…
//emailbehindnat// IntroductionThis tutorial covers how to setup system email on workstations behind NAT using exim4 in satellite mode. Although fairly straight forward, it took longer than expected. The main issues were getting the headers formatted correctly so recipients would not reject the email. Additionally, it took a bit of extra work to get system alerts…
//cockpit// IntroductionThis tutorial covers how to set up Cockpit on Debian. The approach here assumes that Cockpit will be installed on bare metal being used in production, with only ssh exposed. This tutorial assumes you already have a sufficiently hardened and provisioned VPS/VM w/ a LAMP stack and some associated A/AAAA records ready to go.…
//pix3lfed// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:pix3lfed [Update 05-30-26: After initially getting approved for Discovery, I then received no response back from the Pixelfed dev team, so pulled the instance down for now. Without Discovery, no one can use the phone app, which renders it pointless. If I receive word back, happy to spin it back up and…
//btrfsreminders// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:btrfsreminders IntroductionThis tutorial is for Debian users that want to create a JBOD pool using BTRFS subvolumes and its RAID10 equivalent. These types of setups are common and helpful for virtualization environments and hosting multiple services, either for serious home hobbyist use and/or small business level production. These approaches are not designed…
//jellyfin// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:jellyfin This tutorial is for Debian users wanting to set up a production-ready Jellyfin server. This instance runs on a VM inside my virsh+qemu stack recently recapped in detail in this article. This VM is set up with a LAMP stack, a reverse proxy with Let’s Encrypt, automated syncing, scanning, and some…
//classic-bridging// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:classic-bridging This tutorial is for Debian users who want to create network bridges, or virtual switches, on production hosts. By production hosts, I mean something that’s designed to run virtual appliances (VMs, containers, etc.). This tutorial assumes you have access to PTR records and/or have a block of external IPs. In this…
//navidrome// Latest Updates: https://wiki.haacksnetworking.org/doku.php?id=computing:navidrome This tutorial is for Debian Trixie users seeking to set up a production-ready Navidrome server. I used virsh+qemu to make a VM sufficient storage, and the VM is set up with a LAMP stack, a reverse proxy with Let’s Encrypt, automated syncing, scanning, and some hardening measures. Im using fpm with…
//mailserver// Wiki Entry: https://wiki.haacksnetworking.org/doku.php?id=computing:mailserverSlides: https://cloud.haacksnetworking.org/index.php/s/6N5mNHwAE52SgeY SeaGL Presentation: https://content.haacksnetworking.org/w/erLgeVDEdeUf84FXq2Xk4f SeaGL Information: https://pretalx.seagl.org/2025/talk/VLM7AS/ Introduction Contrary to popular belief, it’s entirely possible to self-host email servers. Like others, I listened to the propaganda that “it’s no longer feasible to self-host email” or “it’s too complex and servers won’t respect your mail health anyway” or other such explanations. In…