Zanshin Dojo

Synology + Proxmox + NUT UPS

Synology + Proxmox + NUT UPS

The recent apocalyptic wind storms and fires in Colorado [https://youtu.be/dgP0_9q6VqY] have given me a reason to finally suss out proper UPS (uninterruptible power supply) config in my homelab. My environment consists of a primary rack, an 'annex' rack, a bunch of Ubiquity networking gear,

Verify TLS certificate via CLI

TLS is everywhere these days (thankfully!), and while browsers do a pretty good job of letting you know when a cert is no good, sometimes you need to do it from the terminal. openssl s_client -connect $HOST:$PORT For example, for google.com we see This lets use see

Persisting UI Settings to Tails

Tails is very useful for tasks that require attention to opsec. The "amnesiac OS" is adept at avoiding malware infestation, as it boots clean every time. This is great, except for UI/UX preferences that you struggle to survive without. Tails supports use of persistent volumes, which allow

Algo VPN on Debian 10

Algo [https://github.com/trailofbits/algo] is a fantastic open source VPN, and I've been using it for years to quickly spin up Strongswan, and now Wireguard [https://www.wireguard.com/] VPN servers in DigitalOcean [https://www.digitalocean.com/]. All the major public cloud providers are supported. Just

Threat Hunting with SecurityOnion , Proxmox & Port Mirroring

Ever wondered if your washing machine was sending a gigabyte a day [https://www.reddit.com/r/StallmanWasRight/comments/mni3jf/lg_dryer_traffic_1gb_daily_updown/] to AWS? Curious to know to what extent the North Koreans are beaconing from your VSCode [https://www.wired.com/story/north-korea-hackers-target-cybersecurity-researchers/] ? Yearning to

Outbound Email for Ghost Blog

Ghost [https://github.com/TryGhost/Ghost] is a modern, open source, decentralized by design blogging platform. Out of the box it has a 'subscribe' feature that requires the ability to send email confirmations (and updates) to your audience. So it needs to send email. How hard could that

Postfix Smarthost with SendGrid

As a developer, it's nearly impossible for your apps to send email anymore, particularly when you're developing on your own metal in your homelab. Comcast, and many other residential ISP's, block tcp/25 completely. This means that the apps that you're developing

Proxmox ZFS Performance Tuning

Proxmox [https://proxmox.com/en/] is a great open source alternative to VMware ESXi. ZFS is a wonderful alternative to expensive hardware RAID solutions, and is flexible and reliable. However, if you spin up a new Proxmox hypervisor you may find that your VM's lock up under heavy