If you follow current IT security vulnerabilities, you’ll agree that keeping systems up to date is critical. Unattended Upgrades for Debian/Ubuntu offers a simple yet powerful way to automate this process, securing your infrastructure with minimal manual intervention.
Continue reading Automating Security Patching: Debian Unattended UpgradesTag: Linux
WireGuard VPN Setup: The Fast and Simple Guide for Linux and ChromeOS
You read my last post about StrongSwan and thought it was too complicated? I understand. WireGuard is the revolutionary, simple VPN solution that often proves faster and integrates better with modern operating systems like ChromeOS.
While I found my specialized IPsec connection to be slightly faster, WireGuard excels in ease of setup and client usability: the tunnel automatically resumes after sleep/suspend without manual intervention.
Continue reading WireGuard VPN Setup: The Fast and Simple Guide for Linux and ChromeOSNextcloud Client on Chromebook (ARM/aarch64): Solving Two-Way Sync
Short explanation on how to get the Nextcloud Linux desktop client working reliably on a Chromebook. This solution is necessary because the official Android desktop client does not offer true two-way synchronization, which is a critical feature for managing files across systems.
Continue reading Nextcloud Client on Chromebook (ARM/aarch64): Solving Two-Way SyncRedis Instance Isolation: Running Multi-Instance Redis with systemd Templates
Instead of running a single global Redis server, I prefer to use multiple isolated instances. This allows me to precisely limit resources like memory (maxmemory) and apply specific tuning per instance. This approach is fundamental to reliable operation in a shared environment. I used systemd templates to manage this, creating an instance for Amavisd-new as a practical example.
Continue reading Redis Instance Isolation: Running Multi-Instance Redis with systemd TemplatesAdvanced Mail Filtering: A Deep Dive into Amavisd-new and Amavisd-milter Policy Banks
Amavis isn’t new; in fact, AMaViS started as a shell program back in 1997. It has since evolved into a powerful, flexible tool for content filtering. This article will be a hands-on guide to setting up Amavisd-new with a milter and multiple policy banks. I’ll explain the critical difference between after- and before-queue filtering in Postfix, demonstrate how to use both, and show you how to split your mail traffic for a robust, multi-layered defense.
Continue reading Advanced Mail Filtering: A Deep Dive into Amavisd-new and Amavisd-milter Policy Banks