Skip to main content
Advanced Search
Search Terms
Content Type

Exact Matches
Tag Searches
Date Options
Updated after
Updated before
Created after
Created before

Search Results

65 total results found

2025-09-19 - Summer hurries not over yet

Journal

Closed cloud perimeter for direct SSH access, adjusted firewall policies. Mail client to support Microsoft 365, IMAP, PGP encryption/signing and S/MIME encryption/signing. Speech recognition engine MacWhisper run locally (data remains local) Tested Calend...

Obtain and activate free 3DES-AES license for Cisco ASA5505 from Cisco?

Virtual Personal Network (VPN) IPSEC

Get free license from Cisco Proceed with normal registration to get Cisco ID. https://software.cisco.com/software/swift/lrp/#/pak Add device Choose in 'Product Family' Enter serial or Enter serial Approve agreement Add device Download licenses Unpac...

Firmware upgrade

Cisco forest Cisco ASA5505

Login into ASA (SSH or serial port) Provide 'enable' password enable Prepare files on TFTP server. ping 192.168.74.128 copy tftp: disk0: dir Perform change of booting image show version configure terminal dir show bootvar no boot system disk0:/asa845-k8.bin...

Encryption

Nextcloud

Enable encryption app (functionality) sudo -u www-data php /var/www/nextcloud/occ app:enable encryption Enable encryption sudo -u www-data php /var/www/nextcloud/occ encryption:enable Enable master key mode sudo -u www-data php /var/www/nextcloud/occ encrypt...

Asterisk and FreePBX on Debian12

Telephony

Preparations Database Create new user in Cloud SQL https://console.cloud.google.com/sql/instances/xxx/users?project=yyy Warning: - dashes (hyphens) can not be used in the MariaDB databases' naming. To match user to database, only underlines are used. Verify ...

Raspberry PI Connect

Priviledged Access Management (PAM)

CLI only (without graphics) Install PAM agent sudo apt install rpi-connect-lite Enable PAM agent by desired user (normal user) rpi-connect on Enroll (connect) device rpi-connect signin Sign in with your account Give name for device Device connected List...

Fresh installation of Raspberian (RaspOS)

Raspberry Pi (Debian)

What is inside ? free -h df -hT | sort Lite (no-GUI) Full Raspberian Add yourself privileged access sudo su nano /etc/sudoers.d/099_anton anton ALL=(ALL:ALL) NOPASSWD: ALL Verify (valuable is last command) sudo -l -U anton Install tmux (screen) sudo su...

Icinga2 agent on Debian13 (trixie)

Icinga Installation of agents on target machines

(On Raspberry PI) apt install \ icinga2 \ monitoring-plugins \ monitoring-plugins-basic \ monitoring-plugins-common Register icinga2 node wizard Logs tail -f \ /var/log/icinga2/icinga2.log \ /var/lib/icinga2/api/zones-stage-startup.lo...

Backup and restore configuration using Trivial File Transfer Protocol (TFTP)

Cisco forest Cisco ASA5505

Run tftp server (pumkin on tftpd) Ensure tftp server is listening ping 192.168.74.129 Backup (from ASA) copy running-config tftp://192.168.74.129 On the server side: Rename config. Restore (to ASA) ensure the correct name of config exists before pulling...

tftp on MacOS v26 (Tahoe) [CANCELLED]

Network tools and utilities

preface tftp was depreciated from macOS. lesson (might be useful) Check is it available ls /usr/libexec/tftpd Create local tftp directory AS NORMAL user export u="anton-w" export dir="/Users/${u}/delme/tftp" mkdir -p ${dir} cd ${dir} pwd current status nets...

Backup and restore configuration using Secure SHell (SSH)

Cisco forest Cisco ASA5505

scp must be enabled enable conf t ssh enable scopy dump running-config into file copy running-config flash:/running-config dir SSH weak algorithms and ciphers need to be enabled vi ~/.ssh/config config Host 192.168.74.1 KexAlgorithms +diffie-hellman-gro...

Morning script (for MacOS)

Scripts

Hereby I publish part of my morning script, which perform needed actions. The nature of this script, that it is all-time adjustable. location vi /Users/anton/dox-pvt/tech/scripts/start_general_env_on_mac.sh #!/bin/sh # # this is a morning script of Anton to ...

fixperm.sh for /Users/Shared

Scripts

Usage of resources from several profiles: /Users/Shared/tech/scripts/fixperm.sh #!/bin/bash # # This script will restore permissions on shared directories # # # 2023-05-24 + init /A # 2023-06-06 * changed to use 'find' /A # 2023-10-22 + set executables t...

Hostname

Raspberry Pi (Debian)

Disbale cloud-init (which overwrites everyboot, not the first only) touch /etc/cloud/cloud-init.disabled Set new hostname hostnamectl set-hostname ku5mon1 shutdown -r now

Podcasts

Sources

  Audio Nextcloud Podcast SUSE Podcast Video

RustDesk - deployment

Remote Access solutions RustDesk

Environment Operating System: Debian GNU/Linux 12 (bookworm) Create DNS record dig A desk.2dz.fi +short 35.228.9.88 Request LE certificate cd /etc/nginx/sites-available/ cp default desk.2dz.fi.conf ln -s /etc/nginx/sites-available/desk.2dz.fi.conf /etc/nginx...

RustDesk on SUSE v15.6 Xfc DE

Remote Access solutions RustDesk

Installing RustDesk remote management solution on pure, clean, fresh install of SUSE 15.6 with 'Xfc' Graphical Desktop Environment. For non-GUI/DE setup, refer here. hostnamectl set-hostname ku5desk2 zypper lr zypper mr -d repo-openh264 zypper ps -s Install...

LVM - extend the volume

Disks and partitions

To extend the volume, we have to attach new physical (virtual) disk on hypervisor. Preparations We need to understand which disk need to be extended: In my case it is a root which is full. df -h and verify it is LVM lsblk After adding the disk, it should a...

Terminal via serial port on MacOS Sonoma

Network tools and utilities

Connect Verify connectivity system_profiler SPUSBDataType | grep -i -A5 serial ioreg -p IOUSB Identify device ls -ltr /dev/tty* Disconnect, connect back, repeat command to identify it is exactly the same device (it will be usually owned by the root, but ...

Determine the best server for OPNsense updates and upgrades

Virtual Personal Network (VPN) OPNsense

Wherever you are on the planet, there is a need to determine, which server out of many is accessible and which has the lowest latency. Let's create a mirros list vi mirrors.list Mirrors (this one was reverse engineered from official OPNsense page) https://ftp...