VirtualTam's bookmarks

1. Xen Orchestra Installer / Updater 2025-04-07

   tags: linux/debian, programming/node.js, virtualization/xen

   [ permalink ]

   • ronivay/xen-orchestra-docker
   • Install Xen Orchestra from Source
   • XOA Installation - From the sources
     • xo-server
     • xo-web
2. CoreDNS - header plugin 2025-01-12

   tags: network/dns, network/http

   [ permalink ]

   • #3690 - CoreDNS as dns server, when doing "nslookup domain" command, I Got ";; Got recursion not available from xx.xx.xx.xx, trying next server"
   • #3835 - [investigation] Got recursion not available from ... trying next server
3. macos - DNS Resolution Fails for ping and curl, but not dig 2025-01-11

   tags: apple/macos, network/dns, network/http

   [ permalink ]

   • OSX Domain-Specific DNS Servers (/etc/resolver)
   • [macOS] need to support domain specific dns server (custom DNS)
   • Using scutil to set DNS for specific domains
   • How to query macOS DNS resolver from Terminal?
4. Self-hosted online collaborative drawing platform Excalidraw 2024-11-25

   tags: database/mongodb, database/sqlite, diagram, image/png, image/svg, network/websocket, programming/json, programming/node.js, programming/typescript, schema, self-hosting, software-engineering/uml

   [ permalink ]

   • Self-hosted online collaborative drawing platform Excalidraw (alternate version on Medium)
     • alswl/excalidraw-collaboration - Excalidraw with collaboration feature, self-hosting, and only one-click deploy
     • alswl/excalidraw-storage-backend - Storage for scenes, images and collaboration rooms
     • alswl/excalidraw.alswl.com - Custom static version featuring a Chinese font with handwriting style
     • Someone0nEarth/excalidraw-self-hosted - A docker-compose configuration for a fully self-hosted excalidraw stack, a collaborative whiteboard solution
   • r/selfhosted - Excalidraw
     • excalidraw/excalidraw-room - Example collaboration server
     • Comment on excalidraw/excalidraw/issues/4993 - Building your own Docker images
     • excalidraw/excalidraw/issues/6506 - Tutorial for Træfik
   • PatWie/excalidraw-complete - Self-host Excalidraw with a single Go binary - Supports multiple storage options and real-time collaboration
5. DNS over HTTPS 2024-11-25

   tags: cryptography/encryption, ietf/rfc, internet/browser/chrome, internet/browser/firefox, network/dns, network/http, network/transport-layer-security

   [ permalink ]

   RFCs:

   • RFC 7858 - Specification for DNS over Transport Layer Security (TLS)
   • RFC 8484 - DNS Queries over HTTPS (DoH)

   Resources:

   • Carsten Strotmann - doh.defaultroutes.de DNS-over-TLS/HTTPS Server
   • DNS over HTTPS - Cloudflare 1.1.1.1 Documentation

   Setting up a DNS-over-HTTPS server:

   • DNS over HTTPS - ArchWiki
   • DNS-over-TLS almost working - Træfik Forum
   • Using Google’s dns.google.com with CoreDNS

   Browser configuration:

   • Configure DoH on your browser - Cloudflare Documentation
   • Using custom DNS-over-HTTPS with CoreDNS and Google Chrome
   • Firefox DNS-over-HTTPS - Firefox Help
6. go-safeweb - Secure-by-default HTTP servers in Go 2024-11-23

   tags: network/http, programming/go, security, security/authentication

   [ permalink ]
7. Make systemd better for Podman with Quadlet 2024-11-22

   tags: linux/container/podman, linux/red-hat, linux/systemd

   [ permalink ]

   Aka "Docker Compose for Podman"

   — What do you get if you squash a Kubernetes kubelet? — A quadlet

   • Deploying a multi-container application using Podman and Quadlet
   • containers/quadlet (archived repository)
   • Podman - Quadlets
   • Quadlet: Running Podman containers under systemd
     • mo8it's Quadlet Configuration
8. Swift on Server 2024-06-12

   tags: cloud-computing/aws, linux/container/docker, network/grpc, network/http, network/http/openapi, programming/swift

   [ permalink ]

   • swift-server
   • Packaging Applications for Deployment
   • swift-server/swift-openapi-lambda
   • swift-server/swift-aws-lambda-runtime
   • swift-server/swift-aws-lambda-events
   • grpc/grpc-swift
9. CoreDNS - DNS and Service Discovery 2024-05-28

   tags: network/dns, network/dnssec, programming/go

   [ permalink ]

   • coredns/coredns
   • Quick Start
   • Plugins
     • dnssec
     • file - Serve zone data from an RFC 1035-style file
   • Running CoreDNS as a DNS Server in a Container
10. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

    [ permalink ]

    • Run a private online TLS certificate authority in a Docker container
    • Configure popular ACME clients to use a private CA with the ACME protocol
    • Run your own private CA & ACME server using step-ca
    • Build a Tiny Certificate Authority For Your Homelab
11. stalwartlabs/mail-server - Secure & Modern All-in-One Mail Server (IMAP, JMAP, SMTP) 2024-04-26

    tags: email, email/dkim, email/spf, network/imap, network/jmap, network/smtp, programming/rust

    [ permalink ]

    • Stalwart Mail Server
    • NLNet Foundation - Stalwart Mail Server
    • /r/selfhosted - Announcement: All-in-one JMAP, IMAP and SMTP server
    • /r/selfhosted - Announcement: Open source JMAP / IMAP server written in Rust
12. ltex-ls - LTeX Language Server: LSP language server for LanguageTool with support for LaTeX, Markdown, and others 2024-04-22

    tags: editor, programming/kotlin, programming/latex, programming/markdown, text, text/spellcheck

    [ permalink ]

    • LTEX – Grammar/Spell Checker Using LanguageTool with Support for LATEX, Markdown, and Others
13. oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise 2024-03-31

    tags: compression/lzma, compression/xz, linux, programming/c, programming/shell/bash, security, security/backdoor

    [ permalink ]

    • XZ Utils backdoor
    • xz/liblzma: Bash-stage Obfuscation Explained
    • /r/Linux - XZ Utils backdoor
    • Debian Bug report logs - #1068024 revert to version that does not contain changes by bad actor
    • FAQ on the xz-utils backdoor
    • LWN - A backdoor in xz
    • Everything I Know About the Xz Backdoor
14. dev-sec/ansible-collection-hardening - Hardening for Linux, SSH, Apache HTTPD, Nginx, MySQL 2024-03-31

    tags: configuration-management/ansible, database/mysql, linux, network/http-server/apache-httpd, network/http-server/nginx, network/ssh

    [ permalink ]
15. Scaphandre - A metrology agent dedicated to electric power and energy consumption metrics 2024-02-15

    tags: electricity, observability/metrics, observability/time-series/prometheus, power, programming/rust, server, virtualization/qemu

    [ permalink ]

    • The road to Scaphandre v1.0 - Challenges and improvements to come on IT energy consumption evaluation
    • Scaphandre v1.0 is here : Windows support, IT resources metrics, packaging, and more...
16. How to Redirect a Domain to Another Domain with Traefik 2024-01-21

    tags: network/http, network/http-server/traefik, network/reverse-proxy

    [ permalink ]

    • Traefik Middleware - RedirectRegex
17. postgres_lsp - Language Server for PostgreSQL 2023-12-08

    tags: database/postgresql, programming-language, programming/sql

    [ permalink ]

    • Postgres Language Server: implementing the Parser
    • Hacker News announcement thread
18. Cosmopolitan libc - Your build-once run-anywhere C library 2023-11-05

    tags: apple/macos, bsd, linux, microsoft/windows, programming/c, unix

    [ permalink ]

    • ape - αcτµαlly pδrταblε εxεcµταblε
    • Cosmopolitan Third Edition
    • jart/cosmopolitan
    • redbean - single-file distributable web server
19. Firezone - WireGuard-based VPN server and firewall 2023-08-30

    tags: network/udp, network/vpn/wireguard, security

    [ permalink ]

    • https://www.firezone.dev/
20. WebAuthn - An API for accessing Public Key Credentials 2023-06-11

    tags: cryptography/public-key-infrastructure, internet/browser, security/authentication

    [ permalink ]

    The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO, with the participation of Google, Mozilla, Microsoft, Yubico, and others. The API allows servers to register and authenticate users using public key cryptography instead of a password.

    • Guide to Web Authentication
    • Asynchronous Remote Key Generation: An Analysis of Yubico’s Proposal for W3C WebAuthn [PDF]
    • Issue 664630: Web Authentication API for Chrome
    • Bugzilla - [meta] Update WebAuthn JS API to the L1-REC spec
    • keepassxc#1870 - Feature Request: Integration with the Web Authentication API