RSS Feed

Upgrade from Debian 10 (buster) to 11 (bullseye)

Having an up-to-date system is a big challenge with increasing security problems, systems should be updated as early as possible. Debian 11 will be released this fall, since 12-03-2021 the next version is in Hard freeze state, which means that after the freeze only minor changes will take place. so: it’s time for an upgrade Prepare Debian 10 for the upgrade Update and upgrade all installed packages to the latest version by running:
Read more →

Sign your Git commit with a PGP key

Authenticity is a psychological and philosophical concept. According to existential philosophy, the lack of authenticity is a sign of lack of trustworthiness. We should not only be authentic in what we do, but also in what we produce. In early 2021, a software was reported to have malicious code introduced through changes made by well known developers. In this particular case, the changes were noticed in time, but that was rather lucky.
Read more →

How to install HedgeDoc

Preconditions

not part of this tutorial

  • nginx installation
  • mariadb installation
  • nextcloud installation
  • how to exit VIM therefor I use nano in all commands
Read more →

nftables firewall introduction (Debian 10 Buster)

The first thing everyone should do before connecting to the Internet is to set up a proper firewall. Since Debian 10 (Buster), the iptables framework is replaced by the nftables framework.

To make it easier to get started, here is a short guide on how to get your firewall up and running in no time.

Read more →

Windows Server 2019 installation from USB Stick

If you have to install Windows Server 2019 manually, you will come to the point where you ask yourself how you should install a ISO without burning the image to a physical disk and search this damned USB 2.0 External DVD drive which is covered by cobwebs in the cellar?

The Prerequisites are plain simple

  • windows Iso file
  • USB stick (at least 8GB)
Read more →

50kb is enough!

Now that I have found a new blog software it is time to get the web server up and running. First we teach nginx a little bit about compression with gzip.

Step 1: gzip everything

By default gzip is already enabled in /etc/nginx/nginx.conf but the important part of the configuration is commented out.

Read more →

Install Office365 without Teams and OneDrive

Are you sick of getting stuff you never ordered?
I had to set up a new Windows system and I remembered that the last time I tried to remove Microsoft Teams, Skype for Business and OneDrive from my Windows installation it was really annoying. So this time I had to go in a different direction. Instead of installing the complete package from office.com, I decided to install a custom package. Here is a short description how to do an office installation without the desired applications.

Read more →

Securing ssh connections with ed25519 keys

The problem is not that’s to easy for you to log in, the problem is that everyone else can try it too. If there are no additional mechanisms in place, such as fail2ban, an attacker will have endless time to try to guess your password or even worse the root password.

Step 1: Create a ssh key

First lets start with the key generation for your client

ssh-keygen -a 100 -t ed25519 -f ~/.ssh/example.com_id_ed25519
Read more →

Conditional Git Config

You have once again committed with your private mail address in a repo where you should actually use your company profile?
Does this sound familiar to you?
I know this only too well, sometimes noticed early enough but mostly my private profile ends up in the commit!

So if we can’t manage to remember to use the right config by ourselves, then this must happen automatically.

Read more →