Stream of all the latest content published on tommi.space
Collecting notes on databases management, mainly Postgres. Change password It could be that connecting from localhost does not require a password. In that case, you have to replace trust with scram-sha-256 in /var/lib/postgresql/data/pg_hba.conf and either restart the service or run SELECT pg_reload_conf(); to apply the changes. ALTER USER username WITH PASSWORD 'newpasswordhereeeeee' Run inside a…
Going where the people are cool but techno-averse (not techno music but technology) make them curious first. Put them in the position where they are asking you to join the Fediverse. stickers tattoo clown and jester things Neighborhoods and proximity
I belong not to the people but the soul of my home. These rocks, paths, shaped by tides and greed. I belong to the cracks of solitude on a shore of clashes, silent witnesses of hollow present pursuits. I surrender to the mast, steadfast, mighty. I bow to the boom, swifting, aching. Posterity, the remnants gliding to collapse, I challenge plenitude, I dare to return.
I originally planned to host an HTML day celebration and mini-workshop for HTML Day: https://pan.rent/@tommi/116755244186938844 Unfortunately, I had too many things on my plate and I could not do it. If I was in Rotterdam (where Sevgi is hosting a super cool HTML event btw), I would have definitely made something up in a matter of days, but in Liguria, and specifically here in Sanremo, I find it…
Nebuchadnezzar has been using YunoHost for at least half a decade. I am immensely grateful to this software and its maintainers, most importantly because I respect their work, they are politically positioned, and they are very much aligned with the kind of critical perspective I wish all Free Software maintainers had. Nevertheless, YunoHost has its limits. The main one is that by making it super…
I decided to move away from YunoHost . Here are my notes migrating Nebuchadnezzar from YunoHost to container-based services using Podman . The following steps focus on the backup, migration, and installation process, not on the general configuration process of the server and of Podman. Refer to the Linux reference page for that. Vaultwarden Follow the comprehensive backup guide . Configure Caddy…
I am starting to learn about Linux firewalls because directly exposing Bocia to the Internet, without a VPN, makes it crucial to secure the machine as much as possible. The first concepts I got familiar with are the ones explored in the following podcast episode. https://youtube.com/live/YJZV79C-rNU Blocklist automation #TODO I have stumbled upon nftables-blacklist , a nifty tool to block…
Wake-on-LAN is used to power up devices via LAN. ip -br link to find the name of the network interface in use. sudo apt install ethtool to install the tool required to inspect the Ethernet configuration. sudo ethtool enp2s0 to check whether Wake-on-LAN is available and/or enabled. Wake-on: g means it is enabled. I found it to be enabled, so I will skip the steps required to enable it. ip a to find…
There are several problems with self-hosting at home by exposing the local network to the Internet. Among them, the public IPv4 address of the home network might change unexpectedly, requiring a Dynamic DNS configuration. Furthermore, exposing a home’s public IP address may be a privacy concern. This is why it is useful to configure a VPN between the local device and a cloud server with a static…
I always had quite a hard time figuring out how DNS resolution worked. This video helped me a lot: https://youtu.be/mG8xibe6oVk Changing global DNS settings #/etc/systemd/resolv.conf [ Resolve ] #DNS= #FallbackDNS= DNSOverTLS = yes DNSSEC = allow-downgrade Domain = ~. Cache = yes