Tag: Security
-
Setting up Sudo on Debian
In this article I’ll set up the sudo system on Debian. By default the Debian installer only sets up sudo if you don’t supply a root password at install time. You don’t need sudo on a machine to to use it effectively and I have used Debian machines without it for years. The problem is…
-
Proxmox Firewall
Today I’ll be looking at the Proxmox firewall and what to do about container and VM firewalls. Out of the box Proxmox comes with a firewall installed but not activated. At a minimum you should probably activate the Proxmox firewall for the cluster but it’s up to you how you protect the containers and VM’s…
-
Installing Pi-Hole on Proxmox
In this article I’ll be installing Pi-Hole on Proxmox. Pi-Hole is a DNS sinkhole or blackhole that can effectively block ads and other unwanted content. It works by replacing your usual DNS server with Pi-Hole and then dishing up non-routable addresses for unwanted content based on a block list. In this article we’ll be installing…
-
Configuring SSH Keys on Raspberry Pi from Raspberry Pi
In an earlier article I configured a Raspberry Pi to accept SSH logins using keys rather than passwords all the while working from a Windows 10 machine. In this article I’ll do the same but working from another Raspberry Pi machine. Although I’m using a Raspberry Pi here this process, or something very much like…
-
Configuring SSH Keys on Raspberry Pi from Windows
This guide assumes you have a Raspberry Pi already installed e.g. you can log in and see either a command prompt or the desktop. This guide will make use of the command line. I’m setting up a headless server as I write this and working on a Windows 10 machine. All key generation and configuration…
-
Making a Docker Container Use a VPN
A while back I wrote a post on routing all traffic through a VPN under Linux. The solution discussed in that post is fine if you are only dealing with regular applications but when you are dealing with containers the world is a difference place. Docker networks are, or at least can be, complicated. By…
-
Routing All Traffic Over a VPN Under Linux
I’ve recently been setting up a machine that has to send all data over a VPN which feels like it should be really simple but has actually turned out to be tougher than I expected. I thought I could set it up by using routing and I think it’s probably possible but way more hassle…
-
How to Setup Let’s Encrypt for Apache on Windows
This guide will show you how to create your first Let’s Encrypt certificate for Apache running on Windows. Later guides will show you how to improve automatic renewal by automatically restarting Apache and how to add additional features such as a secure FTP server using the same certificate. Download Win-ACME (WACS) – Formerly Known as…