Mastodon Mastodon Mastodon Systeemkabouter blog

Using RAM disk to store unencrypted secrets

Posted on vr 03 december 2021 in desktop • Tagged with security

During my day I have secrets that I use a lot. Best example would be the ansible vault password for a particular environment to run a playbook or the password to access a API I use a lot.

On my mac I added a small bit of code to my …


Continue reading

Deploying ten new tor bridges

Posted on vr 19 november 2021 in webapps • Tagged with freedom

The tor project needs more bridges

Privacy is a human right

Some time has passed since I removed my last tor relay node. But apparently the tor project is facing a declining number of tor bridges, special nodes used by people unable to connect to the tor system in a more convenient/open way. So …


Continue reading

Preparing new rackserver setup with proxmox + opnsense + openbsd

Posted on zo 14 november 2021 in servers • Tagged with proxmox, opnsense, openbsd

Physical server

Just for fun and for profit I'm preparing a new physical setup to be deployed in some rack not to far from my home. The first step was selecting hardware. I still have a Proliant ML350 on the attic, but figured it was too big to actually deploy …


Continue reading

XPS laptop running Zorin 16 Pro now

Posted on zo 31 oktober 2021 in desktop • Tagged with zorin

Ok, so I love Debian for what it is. Great collection of packages, rock solid stability and very true to the open and libre aspects of open source. But it is not de most polished option when running a desktop.

Zorin on my laptop screenshot large

So this time around I opted for Zorin. This …


Continue reading

How I run multiple TLS secured websites using OpenBSD httpd

Posted on zo 24 oktober 2021 in openbsd • Tagged with openbsd

I was trying to add another TLS secured website to the openbsd httpd instance hosting this website. Apparently this is possible, but not totally how I expected. The thing is that httpd will happily serve multiple TLS secured websites using the SNI (Server Name Indication) option, but it will only …


Continue reading