Stephan Kölle stephankoelle

netstat -s | grep -E "pruned|collapsed"
166 packets pruned from receive queue because of socket buffer overrun
8 packets pruned from receive queue
1787 packets collapsed in receive queue due to low socket buffer

nstat -az | grep -i listen
Fri Mar 20 07:49:54 UTC 2026
TcpExtListenOverflows 3748 0.0
TcpExtListenDrops 3748 0.0
TcpExtTCPFastOpenListenOverflow 0

Use filters to avoid surprises, e.g. keep images used in last 7 days:

podman image prune -a -f --filter "until=168h"

Use podman’s auto-prune via events (Podman 4.4+)

Podman supports automatic prune on certain events via containers.conf.
Rootless: edit ~/.config/containers/containers.conf
Rootful: edit /etc/containers/containers.conf

caddyfile

Define both domains and obtain certificates

www.abc.com, abc.com {
    # Redirect www to the bare domain
    @www {
        host www.abc.com
    }
    redir @www https://abc.com{uri}

	# how to fix:
	# Failed to connect to user scope bus via local transport: $DBUS_SESSION_BUS_ADDRESS and $XDG_RUNTIME_DIR not defined (consider using --machine=<user>@.host --user to connect to bus of other user)
	mkdir -p ~/.bashrc.d
	echo "export XDG_RUNTIME_DIR=/run/user/$(id -u)" > ~/.bashrc.d/systemd
	source ~/.bashrc.d/systemd

	# custom.container
	#
	# This does login into ECR and starts a private container on boot with podman and quadlet / systemd.
	# The container is running rootless, the systemd service is a 'user' service
	# This is build to work on Fedora CoreOS, even the aws-cli does not need to be installed, it's used from aws public container repo.
	# You need to have valid aws credentials in ~/.aws/
	# Replace the *** with your correct aws ecr url
	#
	# This file was partly generated with podlet
	#

	<style>
	/* Burger Menu Styles */
	.burger-menu {
	position: relative;
	z-index: 1001;
	}

	.burger-icon {
	position: fixed;
	top: 20px;

	package de.sk;

	import io.quarkus.runtime.annotations.StaticInitSafe;
	import org.eclipse.microprofile.config.spi.ConfigSource;
	import org.slf4j.Logger;
	import org.slf4j.LoggerFactory;
	import software.amazon.awssdk.auth.credentials.DefaultCredentialsProvider;
	import software.amazon.awssdk.regions.Region;
	import software.amazon.awssdk.services.secretsmanager.SecretsManagerClient;
	import software.amazon.awssdk.services.secretsmanager.model.GetSecretValueRequest;

	# Alter:
	# hcloud_server_type
	# ssh_public_key_file
	# ssh_private_key_file

	# versions.tf

	terraform {
	required_providers {
	hcloud = {

	#~/.config/systemd/user/manage_fleetlock.service
	#journalctl --user -t manage_fleetlock

	[Unit]
	Description=Manage fleetlock service based on public holidays and work hours

	[Service]
	Type=oneshot
	ExecStart=/usr/local/bin/manage_fleetlock.sh

	# Use Maven 3.9.X with Eclipse Temurin JDK 21 as the base image
	#FROM docker.io/library/maven:3.9.9-eclipse-temurin-21
	FROM public.ecr.aws/docker/library/maven:3.9.9-eclipse-temurin-21

	# Set working directory
	WORKDIR /app

	# Environment variables (replace with actual values or set dynamically in pipeline)
	ARG bitbucketpipelines_bootstrap
	ARG bamboo_id_rsa