Rationale Setting up a local NAS was my answer to two problems I had wanted to solve for a long time: How/where can I back up my data? How to make my data available from the Internet 24/7? Cost (16TB, 10 years, incl. power) Backup? Available 24/7? Notes RAID on desktop ~60€/yr + power Not really No RAID prevents failure of one disk; but not accidental data deletion rsync on desktop ~60€/yr + power…
Context Traditionally, the data path for sending HTTPS traffic is: Read data from a file into a user-space buffer Encrypt that data using a user-space cryptography routine Send that encrypted data to a socket The data is copied to a kernel-space socket buffer The kernel sends the encrypted data to the NIC The NIC writes the encrypted data to the wire With Kernel TLS, this becomes: Read data from a…
Context Sysctl settings are not permanent by default. Processes can change sysctl settings by writing into the sysctlfs at /proc/sys , and they are lost at reboot. On most systems, systemd (actually /lib/systemd/systemd-sysctl ) loads sysctl settings automatically at boot-time from various sysctl configuration files (see man 8 sysctl ). In these cases, removing a sysctl should just be done by…
Rationale Setting up a personal email server in 202 X is simple, easy, secure, and non-intrusive to your system thanks to the latest generation of email software. Email is becoming more and more centralized, so by using your own email server you can also help delay the inevitable! 1 Email software: maddy maddy is a simple, all-in-one open source email server (SMTP as MTA, SMTP as MX, IMAP) with…
Configuration initiale J’ai récemment acheté un routeur Netgear R6220 pour mettre devant ma Freebox, afin de diminuer le bufferbloat de ma connexion, et brider la bande passante de Youtube ou de la télévision par Internet. Pour utiliser le routeur comme routeur et non comme switch, il faut passer la Freebox en mode bridge , au lieu de routeur. Faire fonctionner Internet est plutôt simple :…
Warning : I wrote this post a while ago. There are better ways to limit a process memory. (eg create a new cgroup by mkdir -ing in your cgroupfs, writing your PID to its processes list file.) Some of the Twitter bots I have created that run on my tiny DigitalOcean droplet need to call external tools like youtube-dl, ffmpeg, and tesseract which can consume a very large and unpredictable amount of…