Koratsuki

Install latest version of Nginx on Debian/Ubuntu

Install GPG:

sudo apt install curl gnupg2 ca-certificates lsb-release ubuntu-keyring -y

Download repo key:

Koratsuki

Uptime-Kuma with MySQL in Docker with old data from SQLite

Note: Uptime-Kuma comes with SQLite database support by default in its Docker v1 image. However, when you have many servers, say, 150 or more, due to the SQLite structure itself, Uptime-Kuma starts to slow down to the point of becoming unresponsive and occasionally crashing. The best way to avoid this is to use MySQL/MariaDB.

Note 2: Currently, the docker image supporting MySQL/MariaDB is louislam/uptime-kuma:2.0.0-beta.3, which, while still in beta, is almost production-ready. So we'll be using this one.

Procedure:

1. Update system and install pip:

Koratsuki

openSUSE after install

Note: This is a little guide on what to do after openSUSE Tumbleweed fresh install.

Language

Set language:

Koratsuki

Docker install on Debian/Ubuntu

Debian

# Add Docker's official GPG key:
sudo apt update && sudo apt install -y ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc

Koratsuki

Ubuntu 24.04 fresh install guide

First of all, I must say that I'am not a fan or user of Ubuntu. This is just a guide for newcomers, and colleagues that are struggling after the new release with the system changes.

Repositories configurations and system upgrade

Right after fresh install, you must do a system update. Don't delay it, but first, let's configure repositories. Delete the new config for repositories, this can cause problems or new users can get lost configuring it, have friends reporting me that:

Koratsuki

iRedmail and OpenARC

Coming this february, Google/Yahoo/Outlook[1] and [2], are/were "enforcing", to some point, the usage of SPF/DKIM/DMARC to email servers in order to protect emails/users from spam and malware. And now they add ARC protocol to validate forwarded emails signing.

I tried with iRedmail, cause it comes out-of-the-box with SPF/DKIM/DMARC, with some minor touches on the config. All what I'am about to test here is my entire experience on this subject, due to limited documentation by OpenARC[3].

Test environment:

• Linode VPS with 4 cores/4GB of RAM
• OS: Ubuntu 22.04
• iRedmail 1.6.3. It was already installed

Koratsuki

List of notes:

[1] https://barredowlweb.com/2016/10/25/fighting-spam-block-entire-ttld-with-postfix/

[2] https://www.linuxbabe.com/mail-server/block-email-spam-postfix

[3] https://www.exratione.com/2019/02/a-mailserver-on-ubuntu-18-04-postfix-dovecot-mysql/

[4] https://krebsonsecurity.com/2018/06/bad-men-at-work-please-dont-click/

Koratsuki

Access Point dentro de una VM en Proxmox

Ejecutar este procedimiento en una VM con Debian/Ubuntu con el dongle WiFi attached/passthrough.

systemctl stop systemd-resolved
systemctl disable systemd-resolved
systemctl mask systemd-resolved

Koratsuki

Instalamos lo requerido:

apt install -y nginx openssl php php-{pear,common,curl,mbstring,gd,gettext,bcmath,json,xml,fpm,zip}

systemctl enable nginx

Listamos mediante openssl y revisamos los cifrados, en este caso, ECC para seguridad usa prime256v1, secp384r1 o secp521r1:

openssl ecparam -list_curves | grep -E "prime256v1|secp384r1|secp521r1"

Koratsuki

Samba4 + DLZ, o Samba4 con delegación de zona

Instalar un PDC con delegación de zona con Samba4 es tan fácil como seguir el siguiente procedimiento:

Nota: Asumimos que usted posee una máquina virtual/contenedor de proxmox actualizado con dist-upgrade, si no es así, por favor hágalo antes de comenzar.

Nota2: En este entorno se utilizará como ejemplo el dominio: "INUTIL.CU", y el password de administración será: "Admin*123"

Nota3: Si usted usa el CT de Debian 10 para Proxmox, active en CT_ID -> Options -> Features -> Nesting. Si no activa la opción Nesting tendrá problemas al iniciar algunos procesos como NTP, entre otros.