I host a range of things from home. There's a fedi instance, various things for me and my friends and family like a feed reader, a Nextcloud instance, a Minecraft server, and some other, less important things. The way I did this for the longest time was a VPS with …
I have a wildcard certificate for *.flisk.xyz and flisk.xyz on my primary reverse proxy VPS, mostly for convenience, and also to prevent me ever running into Let's Encrypt's rate limiting for additional subdomains. To get these kinds of wildcard certs from LE, they want you to verify not …
Hi there! It's been a while since I posted anything (don't hold your breath for anything more in the near future!), but I have a short and sweet brain teaser for you. Picture yourself flashing a compressed disk image to an SD card. You're running something like I've listed below …
My pet project recently has been restructuring my homelab for IPv6-first connectivity. I have several reasons, but the relevant one for this post is that this allows me to VPN into my homelab using just a single v6 route that won't realistically conflict with any network I'll ever be on …
So, OpenZFS is pretty neat. Unfortunately, Zvol's are not. Swaplock In short: don't put swap on a Zvol right now. Systems with high memory pressure that keep their swap space on a Zvol (like mine did until recently) are liable to deadlock. This is a long-standing known issue. ZFS doesn't …
I'm pretty happy with the way my Mastodon instance is set up right now, and I thought it'd be fun to share some internals. My instance runs on a little box in my closet, pictured below, where it has its own little VM to stomp around and do Mastodon things …
I experimented with a redundant home internet setup not too long ago. This post is a short update on that, and as you might already have guessed by the title: it wasn't meant to be. Reduced Bandwidth My download and upload bandwidth through the redundant tunnel went down to about …
Network Working Group Flisk Request for Comments: XXXX 19 October 2022 Category: Nonsense Asynchronous Rock-Paper-Scissors over Instant Message Status of this Memo This memo defines a nonsensical protocol for the Internet community. It does not specify an Internet standard of any kind. Discussion and suggestions for improvement are not requested …
When you're running a non-public computer network, you may eventually find it worthwhile to set up your own certificate authority so you can issue your own X.509 certificates. The process tends to look something like this: Issue a self-signed root certificate to serve as the CA's trust anchor Issue …
Update: I've rolled this setup back since this post went live. Read Home Internet Failover: Post-Mortem if you'd like to know why. I've been meaning to get my home network set up with a redundant internet uplink for a while now. I finally pulled the trigger on a second internet …
I semi-recently bought one of CZ.NIC's Turris Omnia home routers, and as of right now, it's sitting in my storage closet waiting to be returned or listed for re-sale – see the bottom of this post if you're interested been passed on to a hopefully happy new owner. There's nothing …
Alright, sorry for the clickbait title. Have a TL;DR: NTLMv2 is, surprisingly, not very good Samba's default configuration as shipped by upstream is also not very good I've been running Samba as part of my various homelab configurations for about a decade now. I was still a fledgeling sysadmin …
The title of this post may be a little cryptic, so I'll explain by example. Imagine you're hosting a Minecraft server at home. You want this server to be publicly accessible, but you don't want your home IP address out in the open, or maybe you don't have the ability …
Debian 11 aka "bullseye" is set to release later this month , and it contains a version upgrade for libvirt that makes a very interesting feature available: virtiofs (not to be confused with virtfs ), a host-to-guest filesystem mounting technology that promises "local file system semantics and performance". As far as I …
This post is an overview of how I handle backups in my homelab, both for my own hardware as well as remote servers that are involved with my lab somehow. The two most relevant pieces of software in my process are: BorgBackup , for backing up the actual data Rclone , for …
There was that one time I was running an ownCloud instance in a VM on my home server. I was planning to move this instance onto the host system to save some memory since that server only had 2 GB of memory at the time, but I still wanted a …
If you've ever used the ssh program in your terminal, there's a very good chance the implementation you were using was OpenSSH . It would of course be kind of lame if all OpenSSH could do was remote shell access. In this post I'd like to show you one of its …
Answering the age-old question: “Can you watch anime on the VT420?”
I bought a vintage DEC VT420 terminal and hooked it up. This entry details the process.