Posts

TL;DR Deploy your own Forgejo runner in an IPv6-only Kubernetes cluster by patching the docker daemon.json 🚄 This post was supported by EC164 “Transalpin” and EC112 “Blauer Enzian” Why Codeberg/Forgejo? What are the actions for? Recently, I’ve started to migrate some of my git repositories from GitHub to Codeberg, which is a Forgejo instance, as I’m more comfortable with a community-driven Git & Development platform. Forgejo offers lots of features known from similar platforms (like PRs, Issues, and Actions), but obviously with limited resources (and sometimes features) due to the nature of the relatively young ecosystem. ...

TL;DR Monitor borgmatic with Prometheus textfiles Setup and History If you run infrastructure, you should have backups. Backups are only useful if they are tested and monitored. Part of my strategy to prevent “Schrödinger’s Backup” is tight monitoring and alarming. In the early days, I had borgbackup running with Icinga. Later, I switched to Prometheus, with a textfile created by a custom bash script. Right now, I’m cleaning things up in my infrastructure, and switching to borgmatic. ...

TL;DR Using WireGuard with VRFs under systemd-networkd. The concept When using VPNs for all of your traffic, you usually have a “private” network part (inside VPN), and a public one (public/direct internet, not trusted), which needs separation. From a practical perspective, you might want to have a Linux-based router with an “inner” default network, transported by WireGuard tunnels, and an external network for the internet, over which the VPN data is transported. The Public routing domain shall be routed completely separated from the private routing domain, so no packets can leak between them. No Layer 2 is used, packets in both domains are isolated and shall be routed differently. ...

TL;DR Adding QR Code labels with a unique serial number to scanned papers, matching paper originals and paperless version of documents. Updates 19.11.2023: Barcode Generation How can a workflow for handling paper documents with paperless-ngx look like? paperless-ngx is a pretty good tool for handling digital and scanned documents, which is under active development by the paperless community. Recently, some cool new features regarding the handling of paper originals were added. ...

TL:DR Monitor your apt-based packages with Prometheus. Project on GitHub Project on PyPi Why do we need to monitor software packages? When you are operating a larger amount of servers, VMs or containers, you need to keep the software on them up-to-date, at least for security reasons. You most probably won’t do this manually, but use helper systems like unattended upgrades on Debian/apt-based systems. But, as always, something automated may or may not happen when not observed actively. Unattended upgrades may fail for example when user input is required. ...

Running WLED on SP501E LED-Controllers In 2020, I got myself a few SP501E LED Controllers to experiment with. Over time, I have installed those, and embedded them in a bunch of home assistant automations. Make sure to read the first post, where much of this is explained in detail. Over time, I reprogrammed most of the controllers from esphome to WLED. There a few reasons: While the esphome-Firmware has a much wider field of use, WLED allows for more creativity. It has more effects included, slightly better control features (see the image below), a better User Interface for direct control, and allows for out-of-the-box remote control using Show Control software (sACN, Art-Net) or other projects like LedFX. ...

Tooldiskussionen über den Onlineunterricht an Schulen Wenn man heute, am zweiten Tag des Onlineunterrichts in BW, Twitter besucht oder Radio gehört hat, war ein Thema mit dabei: Der mehr oder weniger funktionierende Onlineunterricht an Schulen. Der SWR sieht ein “Moodle-Problem”, und auf Twitter hat jeder “Technikexperte” eine Meinung. Einige der Forderungen und Schuldzuweisungen haben mich dann doch so stark irritiert, das ich mir ein paar Gedanken gemacht habe, was konstruktiv zu machen wäre. Wie immer gilt: Soziale Probleme löst man nicht allein durch Technik. Da ich aber einerseits von sozialen Problemen keine Ahnung habe, und in der Pandemie dann wohl doch etwas Technik notwendig ist, beschränke ich mich auf technische Aspekte. ...

2h LED hack Recently, I got myself a little “WS2812 LED Pixel Controller” from AliExpress. The Controller is called “SP501E”, did cost around €8 and is supposed to be a “smart Wi-Fi device”. Therefore, I suspected an ESP8266 controller inside it, and I may be able to use my own firmware with it. I was right, and so the SP501E is now part of my Home Assistant without any cloud. ...

TL:DR How to add a warning banner to a web service, when a user visits via IPv4 User awareness for LegacyIP Recently, I got myself an IPv6-only network, and since then I’m figuring out how to design service connectivity for LegacyIP (also called IPv4). Using LegacyIP addresses in my own network is no option. My goal is to run IPv6-only services. To realise this, IPv6-Deployment must improve. As I am writing these lines, Google states roughly 50% of German requests are using IPv6. What about the other half? ...

Dieser Beitrag ist höchstwahrscheinlich veraltet, oder es gibt eine bessere Lösung! Bitte wende die entsprechende Vorsicht an. „Kein Backup – kein Mitleid“ – dieser weit verbreitete Spruch zeigt deutlich, wie wichtig ein Backup ist. Um Backups meiner Server und VM’s durchzuführen, verwende ich seit einiger Zeit das Tool borgbackup – welches bei vergleichsweise wenig Aufwand viele gute Features (Deduplikation, inkrementelles Backup, Kompression etc.) bietet. Ein Backup ist aber nur so gut, wie es auch getestet und überwacht wird: ...