Pieter Hollander
Download Windows 11 installation ISO Download W11 On this page generate a download link by clicking “Download now” under “Download Windows 11 Disk Image (ISO) for x64 devices”. Select your product language and click “Confirm”. Right-click the “64-bit Download” button and copy the link, which will look something like…
I was recently looking for a reliable network switch for my home, which needed to have: A management interface and support for VLANs At least 12 ethernet ports Passive noiseless cooling Affordable (< €40,-) Low power consumption (idle power consumption <10W) Supported with software & security updates I often prefer buying used enterprise hardware compared to new consumer devices as the latter are…
Recently, I ran into a situation many may recognise when cleaning up. Over the years, I’ve owned many different computers. I sold or discarded most to recycling, but in those cases, I did take out the drives as I often had no idea anymore about what was on them, promising myself I’d take care of that “later”. Years passed and the disks were just sitting on a shelf in a…
Last year, I installed solar panels using Hoymiles micro inverters. Typically, these rely on a proprietary cloud platform and a DTU (Data Transfer Unit) for communication. The Hoymiles S-Miles cloud platform is limited in its functionality and using it comes with obvious privacy implications. Through reverse engineering, the OpenDTU and AhoyDTU projects have managed to develop open source, locally…
Around two years ago, my parents’ internet connection was upgraded, as a new ISP became active in their area. Instead of just cable or DSL, they can now also use a fiber connection. Initially, they got access to a symmetric 1 Gbps connection. Fast-forward to this month, the ISPs connection was upgraded to XGS-PON, offering up to 8 Gbps speeds up and down. Unfortunately, at my own house, I am…
I like Docker, but I don’t like how it interferes with firewall rules. Moreover, I like to keep the base OS of every server as basic and clean as possible and use unprivileged Incus / LXD containers to run services. My servers usually use BTRFS, as this enables efficient backups through creating snapshots with Incus’ BTRFS storage driver . Docker can also use BTRFS, but requires some…
Over the past decades, landline use has been steadily decreasing. However, for business usage, having a landline provides credibility and allows you to separate business from your private cell phone number, especially combined with apps like WhatsApp Business. Unfortunately, owning a landline number can be expensive through regular ISPs. Moreover, when switching between ISPs on a yearly basis to…
To sign git commits globally across every repository using your SSH key, set: git config --global gpg.format ssh git config --global user.signingkey ~/.ssh/id_ed25519 git config --global commit.gpgsign true To do the same per repo, omit the --global flag. Closing thoughts I welcome your feedback and hearing about your experiences! If this post has been useful to you, please feel free to leave a…
Oracle Cloud offers AMD VPSes with 0,1 virtual CPU core and 1GB RAM for free through their Oracle Free Tier program. Unfortunately, Debian is not part of their standard range of OSes available to install. For the free ARM nodes Oracle offers, reinstalling is very simple through the use of netboot.xyz and selecting a netinstall image. Unfortunately, reinstalling their x86 instances is a bit more…
Since around 2010 I have been running mail servers for myself and other organisations. In this post my notes on how I generally approach this are described. It shows how to set up a modern mail server capable of handling e-mail for multiple domains on Debian 12 “Bookworm” using the following software packages: Postfix SMTP server Used to send and receive e-mail. Dovecot IMAP server…
This post contains my personal notes on how to set up Dendrite , Matrix.org’s second-generation homeserver written in Go. These notes are not yet complete, but do contain the basics to get things going. Please note that Dendrite is in early beta and not yet recommended for use in production environments. For more information, refer to the README.md on Github and this blogpost on Matrix.org .…
By default, nano on Debian Buster does not support syntax highlighting YAML files. Adding this template to nano will give you syntax highlighting when opening YAML files in nano. sudo tee /usr/share/nano/yaml.nanorc <<EOF >> /dev/null # Supports `YAML` files syntax "YAML" "\.ya?ml$" header "^(---|===)" "%YAML" ## Keys color magenta "^\s*[\$A-Za-z0-9_-]+\:" color brightmagenta…
sudo apt install unbound sudo tee -a /etc/unbound/unbound.conf << EOF > /dev/null server: interface: 127.0.0.1 interface: ::1 access-control: 127.0.0.0/8 allow access-control: ::1/128 allow # enable remote-control (useful when utilising monitoring tools such as netdata) remote-control: control-enable: yes EOF sudo systemctl restart unbound sudo apt install resolvconf sudo nano…
sudo visudo /etc/sudoers add # Paswordless sudo %sudo ALL=(ALL) NOPASSWD: ALL Closing thoughts I welcome your feedback and hearing about your experiences! If this post has been useful to you, please feel free to leave a comment down below. Changelog 2023-11-05: Changed nano to visudo to prevent accidental misconfiguration.
Recently, I’ve become a big fan of replacing bash with zsh as my standard shell on Debian. Combined with the Oh My Zsh ( GitHub ) framework, it makes the terminal more convenient to use, offering better history search, autocompletion and plugins for many popular tools, such as git , systemctl and kubectl . I can now just enter these commands and press TAB in order to view their options.…
Commento is, according to its developer, “A fast, privacy-focused commenting platform”. You can use it to enable visitors to comment on your website. It’s also what is powering the comments on this website. You can either make use of Commento’s hosted service, or deploy a self-hosted version, available on GitLab . This is how I set it up. sudo apt install postgresql -y sudo…
Brother printers work great on Linux. However, in order to make use of all supported features such as toner-save, you’ll need to install the manufacturer’s driver. wget https://download.brother.com/welcome/dlf006893/linux-brprinter-installer-2.2.1-1.gz gunzip linux-brprinter-installer-*.*.*-*.gz Turn on printer sudo bash linux-brprinter-installer-2.2.1-1.gz Will you specify Device URI:…
NB: This post hasn’t been updated since May 2021, as I nowadays don’t use this approach anymore. However, it can still be useful as a reference, although version numbers and configuration settings may have changed. Bitwarden is an open-source password manager. Using Vaultwarden , a Bitwarden compatible server implementation written in Rust formerly known as Bitwarden_RS, it is possible…
I like my systems to automatically apply security updates. Sometimes these require a reboot, but I do not want reboots to happen unattended. This script: Checks daily (every day at 8.00) if a reboot is required. Sends an e-mail notification when this is the case. sudo nano /usr/local/sbin/email_reboot_required On systems with a mailserver capable of sending outgoing messages if [ -f…
Learn spam: find /var/vmail/mailboxes/*/*/mail/Spam/cur -type f -exec /usr/bin/rspamc learn_spam {} \; Learn ham: find /var/vmail/mailboxes/*/*/mail/cur -type f -exec /usr/bin/rspamc learn_ham {} \; find /var/vmail/mailboxes/*/*/mail/Sent/cur -type f -exec /usr/bin/rspamc learn_ham {} \; find /var/vmail/mailboxes/*/*/mail/Trash/cur -type f -exec /usr/bin/rspamc learn_ham {} \; find…
I sometimes receive .mts video files made with Sony videocameras. These don’t play well on web video players or iOS devices. This is how, for most models, you can remux them to mp4 without converting and thus without losing quality and waiting a long time for the conversion to complete. One file at a time ffmpeg -i input.MTS -c copy output.mp4 Multiple files at once While in directory with…
This guide assumes you are using Debian Buster sudo apt install git rcs make makepasswd cpanminus sudo apt install libauthen-ntlm-perl \ libclass-load-perl libcrypt-ssleay-perl liburi-perl \ libdata-uniqid-perl libdigest-hmac-perl libdist-checkconflicts-perl \ libfile-copy-recursive-perl libio-compress-perl libio-socket-inet6-perl \ libio-socket-ssl-perl libio-tee-perl libmail-imapclient-perl \…
In this post, we’ll be using Rspamd as an example. apt-cache policy Look for the repository you want to add, e.g.: Rspamd. 500 http://rspamd.com/apt-stable bookworm/main amd64 Packages release o=Rspamd,n=bookworm,l=Rspamd,c=main,b=amd64 origin rspamd.com Look up in which field the distribution is recorded. Sometimes “n” (shorthand for codename) like in this case, but usually…
NB: The information in this post is outdated and dates back to Debian Buster when a recent OpenSMTPD version with proper feature support wasn’t included in the distribution. Nowadays, this has changed and installing is as simple as sudo apt install opensmtpd -y . Build & Install LibreSSL apt update apt install git nano wget nano /etc/apt/sources.list Make sure deb-src is enabled deb-src…
Setup existing folder as repo Initialise repository For my personal git server, I like to use HTTPS instead of SSH, because it runs behind a reverse proxy without SSH ports exposed to the internet. cd ~/Documents/docs git init git remote add origin https://git.example.org/user/docs.git git add . git commit -m "Initial commit" git push -u origin master If find typing credentials every time I…
Manually: sudo rm -rf /etc/letsencrypt/archive/host.example.com/ sudo rm -rf /etc/letsencrypt/live/host.example.com/ sudo rm -rf /etc/letsencrypt/renewal/host.example.com.conf All at once: sudo rm -rf /etc/letsencrypt/{archive,live,renewal}/domain.example.org{,.conf} Closing thoughts I welcome your feedback and hearing about your experiences! If this post has been useful to you, please feel free…
This website is built with the Hugo static site generator. Install On macOS brew install hugo Create deployment script On local computer cd $HUGO_REPO cat <<EOF >> ./deploy.sh #!/bin/sh USER=pieter HOST=host.example.org DIR=/var/www/website/ hugo && rsync -avz --delete public/ \${USER}@\${HOST}:\${DIR} exit 0 EOF chmod +x deploy.sh On server export WEBSITE_DOMAIN="pieterhollander.nl" export…