VirtualTam's bookmarks

1. HAProxy as Egress Controller 2025-02-13

   tags: network/http, network/http-server/haproxy, network/reverse-proxy

   [ permalink ]
2. CoreDNS - header plugin 2025-01-12

   tags: network/dns, network/http

   [ permalink ]

   • #3690 - CoreDNS as dns server, when doing "nslookup domain" command, I Got ";; Got recursion not available from xx.xx.xx.xx, trying next server"
   • #3835 - [investigation] Got recursion not available from ... trying next server
3. macos - DNS Resolution Fails for ping and curl, but not dig 2025-01-11

   tags: apple/macos, network/dns, network/http

   [ permalink ]

   • OSX Domain-Specific DNS Servers (/etc/resolver)
   • [macOS] need to support domain specific dns server (custom DNS)
   • Using scutil to set DNS for specific domains
   • How to query macOS DNS resolver from Terminal?
4. Self-hosted online collaborative drawing platform Excalidraw 2024-11-25

   tags: database/mongodb, database/sqlite, diagram, image/png, image/svg, network/websocket, programming/json, programming/node.js, programming/typescript, schema, self-hosting, software-engineering/uml

   [ permalink ]

   • Self-hosted online collaborative drawing platform Excalidraw (alternate version on Medium)
     • alswl/excalidraw-collaboration - Excalidraw with collaboration feature, self-hosting, and only one-click deploy
     • alswl/excalidraw-storage-backend - Storage for scenes, images and collaboration rooms
     • alswl/excalidraw.alswl.com - Custom static version featuring a Chinese font with handwriting style
     • Someone0nEarth/excalidraw-self-hosted - A docker-compose configuration for a fully self-hosted excalidraw stack, a collaborative whiteboard solution
   • r/selfhosted - Excalidraw
     • excalidraw/excalidraw-room - Example collaboration server
     • Comment on excalidraw/excalidraw/issues/4993 - Building your own Docker images
     • excalidraw/excalidraw/issues/6506 - Tutorial for Træfik
   • PatWie/excalidraw-complete - Self-host Excalidraw with a single Go binary - Supports multiple storage options and real-time collaboration
5. DNS over HTTPS 2024-11-25

   tags: cryptography/encryption, ietf/rfc, internet/browser/chrome, internet/browser/firefox, network/dns, network/http, network/transport-layer-security

   [ permalink ]

   RFCs:

   • RFC 7858 - Specification for DNS over Transport Layer Security (TLS)
   • RFC 8484 - DNS Queries over HTTPS (DoH)

   Resources:

   • Carsten Strotmann - doh.defaultroutes.de DNS-over-TLS/HTTPS Server
   • DNS over HTTPS - Cloudflare 1.1.1.1 Documentation

   Setting up a DNS-over-HTTPS server:

   • DNS over HTTPS - ArchWiki
   • DNS-over-TLS almost working - Træfik Forum
   • Using Google’s dns.google.com with CoreDNS

   Browser configuration:

   • Configure DoH on your browser - Cloudflare Documentation
   • Using custom DNS-over-HTTPS with CoreDNS and Google Chrome
   • Firefox DNS-over-HTTPS - Firefox Help
6. go-safeweb - Secure-by-default HTTP servers in Go 2024-11-23

   tags: network/http, programming/go, security, security/authentication

   [ permalink ]
7. Make systemd better for Podman with Quadlet 2024-11-22

   tags: linux/container/podman, linux/red-hat, linux/systemd

   [ permalink ]

   Aka "Docker Compose for Podman"

   — What do you get if you squash a Kubernetes kubelet? — A quadlet

   • Deploying a multi-container application using Podman and Quadlet
   • containers/quadlet (archived repository)
   • Podman - Quadlets
   • Quadlet: Running Podman containers under systemd
     • mo8it's Quadlet Configuration
8. Swift on Server 2024-06-12

   tags: cloud-computing/aws, linux/container/docker, network/grpc, network/http, network/http/openapi, programming/swift

   [ permalink ]

   • swift-server
   • Packaging Applications for Deployment
   • swift-server/swift-openapi-lambda
   • swift-server/swift-aws-lambda-runtime
   • swift-server/swift-aws-lambda-events
   • grpc/grpc-swift
9. CoreDNS - DNS and Service Discovery 2024-05-28

   tags: network/dns, network/dnssec, programming/go

   [ permalink ]

   • coredns/coredns
   • Quick Start
   • Plugins
     • dnssec
     • file - Serve zone data from an RFC 1035-style file
   • Running CoreDNS as a DNS Server in a Container
10. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

    [ permalink ]

    • Run a private online TLS certificate authority in a Docker container
    • Configure popular ACME clients to use a private CA with the ACME protocol
    • Run your own private CA & ACME server using step-ca
    • Build a Tiny Certificate Authority For Your Homelab
11. stalwartlabs/mail-server - Secure & Modern All-in-One Mail Server (IMAP, JMAP, SMTP) 2024-04-26

    tags: email, email/dkim, email/spf, network/imap, network/jmap, network/smtp, programming/rust

    [ permalink ]

    • Stalwart Mail Server
    • NLNet Foundation - Stalwart Mail Server
    • /r/selfhosted - Announcement: All-in-one JMAP, IMAP and SMTP server
    • /r/selfhosted - Announcement: Open source JMAP / IMAP server written in Rust
12. ltex-ls - LTeX Language Server: LSP language server for LanguageTool with support for LaTeX, Markdown, and others 2024-04-22

    tags: editor, programming/kotlin, programming/latex, programming/markdown, text, text/spellcheck

    [ permalink ]

    • LTEX – Grammar/Spell Checker Using LanguageTool with Support for LATEX, Markdown, and Others
13. oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise 2024-03-31

    tags: compression/lzma, compression/xz, linux, programming/c, programming/shell/bash, security, security/backdoor

    [ permalink ]

    • XZ Utils backdoor
    • xz/liblzma: Bash-stage Obfuscation Explained
    • /r/Linux - XZ Utils backdoor
    • Debian Bug report logs - #1068024 revert to version that does not contain changes by bad actor
    • FAQ on the xz-utils backdoor
    • LWN - A backdoor in xz
    • Everything I Know About the Xz Backdoor
14. dev-sec/ansible-collection-hardening - Hardening for Linux, SSH, Apache HTTPD, Nginx, MySQL 2024-03-31

    tags: configuration-management/ansible, database/mysql, linux, network/http-server/apache-httpd, network/http-server/nginx, network/ssh

    [ permalink ]
15. Scaphandre - A metrology agent dedicated to electric power and energy consumption metrics 2024-02-15

    tags: electricity, observability/metrics, observability/time-series/prometheus, power, programming/rust, server, virtualization/qemu

    [ permalink ]

    • The road to Scaphandre v1.0 - Challenges and improvements to come on IT energy consumption evaluation
    • Scaphandre v1.0 is here : Windows support, IT resources metrics, packaging, and more...
16. How to Redirect a Domain to Another Domain with Traefik 2024-01-21

    tags: network/http, network/http-server/traefik, network/reverse-proxy

    [ permalink ]

    • Traefik Middleware - RedirectRegex
17. postgres_lsp - Language Server for PostgreSQL 2023-12-08

    tags: database/postgresql, programming-language, programming/sql

    [ permalink ]

    • Postgres Language Server: implementing the Parser
    • Hacker News announcement thread
18. Cosmopolitan libc - Your build-once run-anywhere C library 2023-11-05

    tags: apple/macos, bsd, linux, microsoft/windows, programming/c, unix

    [ permalink ]

    • ape - αcτµαlly pδrταblε εxεcµταblε
    • Cosmopolitan Third Edition
    • jart/cosmopolitan
    • redbean - single-file distributable web server
19. Firezone - WireGuard-based VPN server and firewall 2023-08-30

    tags: network/udp, network/vpn/wireguard, security

    [ permalink ]

    • https://www.firezone.dev/
20. HAProxy - TLS Termination Setup 2023-07-24

    tags: cryptography/encryption, network/http, network/http-server/haproxy, network/reverse-proxy, network/transport-layer-security, security

    [ permalink ]

    • Traffic Routing - Rewrite Requests
    • Client IP Preservation - X-Forwarded-For
    • HAProxy & HTTP Strict Transport Security (HSTS)
    • Secure Cookies Using HAProxy Enterprise