Force secure SMB connection

With the recent vulnerabilities in the SMB protocol and clients, I like to force the Linux Samba server to only work with secure versions. Edit the samba config: sudo nano /etc/smb.conf Some information online will use the min protocol= option, however this breaks remote mounting in some clients,…

Self-hosting Ghost

Previously I was using Ghost (Pro) to host my blog, however, the tiny amount of traffic did not justify the annual cost. I decided to move the site over to my own host and use Cloudflare as a CDN to provide caching. I also setup SNI Proxy to allow for…

Using SNI Proxy to serve multiple hostnames from a single IP

SNI Proxy NOTE: THERE'S A HARD CODED DNS SERVER IN THIS CONFIG Prerequisites sudo apt update &&\ sudo apt install -y autotools-dev cdbs debhelper \ dh-autoreconf dpkg-dev gettext libev-dev libpcre3-dev \ libudns-dev pkg-config fakeroot devscripts Clone latest version git clone https://github.com/dlundquist/sniproxy sniproxy Build the package cd sniproxy…

Installing UniFi controller on Ubuntu 16.04

I run the UniFi control software on an LXC/D containter on my VM host, currently the default LXC network is bridged to my LAN (not ideal). There is a seperate article, if you need to setup an LXC bridge. Setup contanier: lxc launch ubuntu:xenial unifi Make sure an…

Manage machines using Canonical Landscape

Landscape can be installed with limited/hobby licenses (10 physical, 50 container) on premesis. This allows full management of local or cloud servers, including updates and package deployment policies. In a later post, I will go over further configuration, but for now here's how to get up and running: Prerequsisites…