sysadmin – Jean's Blog

Switching from Redis to KeyDB

I just read a few pages with benchmarks about Redis vs KeyDB and I wanted to give KeyDB a long time a try – it was on my ToDo. Here are (finally) three examples on how to switch from Redis to KeyDB.

Paperless-ngx with S3 using rclone

It’s easier for me to access all my data with some sort of a central storage – for this purpose I decided to use S3 a long time ago. Some cool tools I use do not have native s3 support (yet) but rclone helps with that. In this article I’ll show you how to use the docker volume plugin with a minio s3 storage configured in docker-compose.yml for use with paperless-ngx.

Nextcloud with S3 using rclone

I had trouble with Nextcloud’s own implementation (external storage s3) as it would corrupt some of my photos on auto upload using the Android Nextcloud Client. This did not happen with s3fs, goofys, rclone and also did not happen without s3. Disabling chunking, tuning timeouts, nothing really helped. After testing with goofys, s3fs and rclone I decided to use rclone. Here’s how I did…

(very simple) auto update bash script for paperless-ngx docker-compose

Just like the title states. In my previous post I published a very very simple script for doing pull automatically for the docker-compose stuff of paperless-ngx. I modified this one a bit more. Maybe useful to you, too.

Updating & Upgrading paperless-ngx stack (Installed with docker compose)

Just some notes on how I update my paperless-ngx Stack which I previously installed with docker compose as explained in one of my previous posts. In this one I’ll also upgrade PostgreSQL from 15 to 16 and Gotenberg from 7.10 to 8. This is with Paperless-NGX 2.5.3.

Automatic / Unattended (Security) Updates in Debian

If you follow current IT security vulnerabilities and security breaches, you’ll probably agree that keeping systems up to date is becoming increasingly important. Unattended upgrades for Debian/Ubuntu have been around for as long as I can remember and it’s a pretty easy way to achieve that. Here’s how.

How to setup WireGuard VPN with ChromeOS client

You read my last post about strongSwan because you wanted to setup a VPN for yourself? Too complicated? Well, give Wireguard a try then.

strongSwan IPsec VPN IKEv2 with ChromeOS client

strongSwan is a complete IPsec solution. It can be used to secure the communication between your servers and clients by authentication and encryption.

eBPF bypass with Suricata 7.0.2 in Debian 12 Bookworm

This does not work out-of-the-box currently. I saw a bug report that the currently shipped .bpf files are not working with current libbpf (version >1.0). However, here’s how you can compile them yourself.

Your site is unable to reach wordpress.org or dokuwiki plugin store through suricata?

I had some trouble with Suricata as an IPS with wordpress and dokuwiki. My wordpress was unable to reach wordpress.org and my dokuwiki was unable to reach the plugin/extension store of dokuwiki. While I’m (still) not sure what exactly is causing this, I found a work-around for it.