Author Archives: bastelfreak

systemd unit hardening

Posted on 3. January 2022 by bastelfreak

Systemd provides many hardening options for units. systemd-analyze security provides a nice overview for all services and their exposure level: What do those levels mean and how can we improve it? Let’s take a closer look (Screenshot of my already … Continue reading →

Posted in General, Linux | 1 Comment

Puppet control repo layout for puppet apply and agent/server Setup

Posted on 2. January 2022 by bastelfreak

The control repository in a Puppet context is usually a git repository that contains your Puppetfile. The Puppetfile has links to all modules in your environment and their version that shall be deployed. Besides the Puppetfile, Hiera data is often … Continue reading →

Posted in General, Linux, Puppet | Tagged , | Leave a comment

Setup a Raid 10 with mdadm

Posted on 1. January 2022 by bastelfreak

In the past I already blogged a few times about mdadm. Today we’ve a short article about creating a Raid 10 with mdadm on new disks. First we need to identify the two disks. lsblk is always a good indicator … Continue reading →

Posted in General, Linux | Tagged , , | Leave a comment

Automate let’s encrypt with systemd timer

Posted on 16. August 2020 by bastelfreak

A long long time ago I wrote a blog post about let’s encrypt automation with systemd timers that triggers letsencrypt: https://blog.bastelfreak.de/2016/05/lets-encrypt-automation-the-awesome-way/ Much changed this 2016. letsencrypt CLI is now called certbot, it can do auto renew via it’s own service … Continue reading →

Posted in General, Linux | Leave a comment

Vox Pupuli Tasks – The solution to manage your git modules!

Posted on 10. August 2020 by bastelfreak

Who is not aware of the following problem. It’s Sunday afternoon, you’re bored. You want to do something useful, you want to contribute to the community – you want to review a pull request! This might be a more or … Continue reading →

Posted in General, Linux, Puppet | Leave a comment

Dovecot: Apply sieve filter to existing emails

Posted on 9. August 2020 by bastelfreak

I recently restructured my email setup and updated my sieve filter (server side email filtering). I now have a sieve configuration file that’s way stricter. Many of the emails in my INBOX would now be sorted into subfolders, but Dovecot … Continue reading →

Posted in General, Linux, Short Tips | 1 Comment

Arch Linux installation guide

Posted on 20. June 2020 by bastelfreak

A long time ago I wrote a blog post about installing Arch Linux: I’m aware of the fact that there isn’t one definitive guide for installing it. This highly depends on your hardware, your use case for the system and … Continue reading →

Posted in General, Linux | Tagged , | 2 Comments

Vox Pupuli – Code of the Week 2

Posted on 9. January 2019 by bastelfreak

This is a new blog series that we would like to introduce. At Vox Pupuli, we receive many Pull Requests. We receive so much awesome code, that isn’t really appreciated. In the past, some of our members sent out tweets if … Continue reading →

Posted in General, Linux, Puppet | Tagged , , | Leave a comment

Thunderbird: Hide local hostname in mailheaders

Posted on 5. January 2019 by bastelfreak

By default, thunderbird uses the local hostname within the SMTP-Submission dialog with the mailserver. There might be situations where you have a hostname that exposes private data, like a company name. Sometimes this is very helpful for debugging, but sometimes … Continue reading →

Posted in General, Linux, Short Tips | Tagged | Leave a comment

Vox Pupuli – Code of the Week 1

Posted on 5. January 2019 by bastelfreak

This is a new blog series that we would like to introduce. At Vox Pupuli, we receive many Pull Requests. We receive so much awesome code, that isn’t really appreciated. In the past, some of our members sent out tweets … Continue reading →

Posted in General, Linux, Puppet | Tagged , , | Leave a comment