Category Sysadmin
Introduction At work, we decided to give a try to the Elastic Stack (Elastic Search, Logstash and Filebeat in our case) while having the whole communication secured with TLS. TLS Protocol You might at this point wonder how all the… Continue Reading →
When you manage a WordPress site, you see the worst that the internet can bring on you. When it’s not blatant comment spam, it’s some brute forcing to try to get admin access to your WordPress. I posted about this… Continue Reading →
In a previous blog post (Fail2ban + Tarpit), I explained how to setup a Tarpit for Fail2ban to use it against the attacker that got banned multiple times. It works great especially in conjunction with WP Fail2ban, a fail2ban plugin for… Continue Reading →
In my previous guide on dehydrated, the bash client for let’s encrypt, I’ve only touched on the DNS-01 feature. Upon further investigation and usage of said feature I give you this guide. DNS-01 DNS-01 is another type of verification of… Continue Reading →
Dehydrated was firstly known as letsencrypt.sh but because letsencrypt is a trademark, they decided to rename the project, but keep the excellent features. Purpose If you’re already familiar with let’s encrypt and the ACME protocol, you can go directly to… Continue Reading →
I went through my google analytic log and updated the referrer blacklist for Nginx. As before, it’s available as a gist on GitHub.
This website is hosted on my own dedicated server (a kimsufi) and like every server, it’s getting regularly attacked. To identify those attacks, I needed to add a layer of security to ban recurrent attempt, this layer is Fail2ban. It’s… Continue Reading →
I’m using my raspberry pi as a NAS with a samba server to provide the content through my home network. I wanted to have that content directly accessible from the rest of the world but without the traffic to be… Continue Reading →
In the last revision of transmission, I couldn’t get the user/password for the RPC of transmission work. To resolve this problem, I decided to use Nginx as reverse proxy to provide an SSL connection and also a way to secure… Continue Reading →
I just discovered lately Bittorrent Sync and found it to be an amazing way to replace dropbox or any other Cloud Storage since I’m owning a server and a raspberry pi.
