Generating new GPG subkeys on a Yubikey 5C
Posted onTechnical post that covers generating new GnuPG subkeys for encryption, authentication, and signing on a new Yubikey 5C.…
UniFi Security Gateway & Cloudflare's DNS over HTTPS
Posted onTechnical blog post covering how to configure Ubiquiti's UniFi Security Gateway to use Cloudflare's DNS over HTTPS service.…
DNSCrypt on the EdgeRouter Lite
Posted onIntroduction: ISP: Comcast Modem: Motorola SB6141 Router: Ubiquiti EdgeMax Router Lite EdgeOS System Image: v1.9.7+hotfix.3 WAN Interface: eth0 LAN Interface: eth1 (172.16.0.1) For this guide, I use the IP address 172.16.0.1 as the one I want dnscrypt-proxy bind to. So…
Yubikey w/ GPG & encrypted LUKS keys
Posted onIntroduction OS: Debian Stretch In my previous post here [https://techsmix.net/debian-stretch-btrfs/], I went through the process of creating 2048 bit LUKS keys with openssl and keeping them encrypted with a symmetric GPG key. While this process works, it creates another threat vector for the security of the private…
Headphones & Plex Notifier w/ SSL
Posted onHeadphones [https://github.com/rembo10/headphones] is a wonderful piece of open source software. However, if you've configured Plex to require SSL for all connections, the Headphones Plex notifier will error when attempting to connect to Plex due to an SSL certificate mismatch. Getting the SSL Certificate Info Navigate directly…
Timemachine Backups & Debian 9 Stretch
Posted onOS: Debian 9 Stretch Uname: Linux Balerion 4.3.0-1-amd64 #1 SMP Debian 4.3.3-7 (2016-01-19) x86_64 GNU/Linux Install avahi-daemon aptitude install avahi-daemon Debian currently does not ship with version 3.X of netatalk. However, user adiknoth has been actively porting the upstream version of netatalk to…
Debian Stretch, BTRFS, & dm-crypt/LUKS
Posted onGoals: * Fully encrypted RAID6 BTRFS Array * Each drive is encrypted with a unique key file * Each keyfile is encrypted with GPG * Keyfiles are never on disk in their unencrypted format Disk Layout: As shown below, I'm working with 10, 2TB drives and a single 256GB SSD for the OS. root@…
IPv6 with the Ubiquiti ERL
Posted onISP: Comcast Modem: Motorola SB6141 Router: Ubiquiti EdgeMax Router Lite EdgeOS System Image: v1.9 WAN Interface: eth0 LAN-Wired Interface: eth1 LAN-Wireless Interface: eth2 Cleanup: There's a high chance you've been trying out other guides prior to getting here. Let's just make sure you're current config doesn't have any remaining…
OSX Yosemite & OpenXenManager
Posted onAfter much finagling I was able to get OpenXenManager to launch on OSX Yosemite 10.10 without using macports. Here are the steps that I followed: 1. Install XQuartz - http://xquartz.macosforge.org 2. Install Homebrew - http://brew.sh 3. brew install python 4. Install PyGTK package -…
On: Sensu
Posted ontl;dr Yes, it's awesome, just have some patience during the setup. What is Sensu? Sensu is described as a monitoring router. It will handle the check scheduling and the storing of check results. Getting Started So, you're sold on the Sensu idea or you just want to try it…