This guide covers the clean installation of acme.sh and how to request and manage SSL certificates. We’ll use a server-wide installation approach with an organized directory structure. This tutorial assumes you’re logged in as root. If not, switch to root: Why acme.sh? acme.sh is a lightweight, pure bash ACME client that offers: Part 1: Clean…
The cloud-native landscape is at an inflection point. While Kubernetes and microservices once dominated the conversation, a growing chorus of organizations is sounding the alarm: complexity doesn’t scale. As experienced system administrators, we’ve watched clients wrestle with Kubernetes’ operational overhead, skyrocketing costs, and the “microservices hangover.” Now, a pragmatic shift is underway, toward solutions that prioritize simplicity,…
Configuring additional IPv6 addresses on Hetzner Cloud servers running Debian 12/13 requires a careful approach to work harmoniously with cloud-init. This guide is an updated version of my previous tutorial, reflecting lessons learned from production deployments and providing a more reliable method that avoids common pitfalls. What’s changed since the original guide: Note: These instructions…
When operating a mail server such as Postfix, DNS lookups play a crucial role in message delivery and spam detection. Postfix often performs frequent DNSBL (DNS-based Blacklist) queries to identify spam sources, and relying on public DNS resolvers for these lookups can quickly become a problem. Many public DNS providers, including Google and Cloudflare, intentionally…
If you’re running a SIP-based PBX system (Asterisk, FreeSWITCH, FreePBX, MikoPBX, etc.) exposed to the internet, you’re likely seeing constant authentication attacks from bots scanning for vulnerable systems. Here’s a simple, elegant firewall solution that stops these attacks before they ever reach your PBX. The Problem Traditional firewall approaches try to rate-limit authentication attempts or…
This guide provides a streamlined yet comprehensive approach to upgrading Debian 12 (Bookworm) to Debian 13 (Trixie) on production servers. It balances efficiency with safety, based on real-world server upgrade experience. Pre-Flight Checklist Essential Preparations Schedule Maintenance Window: Plan for 30-60 minutes of downtime, depending on your server’s package count and internet speed. Backup Critical…
Sometimes package management on Ubuntu or Debian gets stuck because apt or dpkg can’t acquire a lock. This usually happens if an upgrade, install, or update process was interrupted or if another process is still running in the background. The error looks like this: Here’s a short guide on how to safely resolve the problem….
Whenever you run a WordPress website behind a reverse proxy with SSL termination, you encounter a fundamental configuration challenge: the reverse proxy handles HTTPS connections from clients but forwards plain HTTP traffic to the WordPress backend. This creates a mismatch where WordPress, configured with HTTPS URLs (e.g., https://yourdomain.com), receives HTTP requests and becomes confused about…
When performing standard system updates on Debian 12 systems with Incus installed via the Zabbly repository, administrators may encounter the following error messages: The EXPKEYSIG designation indicates that the repository’s GPG signing key has reached its expiration date, preventing APT from validating package authenticity. Technical Analysis Third-party repositories utilize GPG key expiration as a security…
If you’re running ZFS on a small VPS and have encountered compilation failures during system updates, you’re not alone. This tutorial covers a common issue that affects many system administrators managing ZFS on memory-constrained virtual private servers. The Problem During a routine system update on a Hetzner Cloud CAX11 VPS (2 vCPU, 4GB RAM) running…
| Cookie | Duration | Description |
|---|---|---|
| cookielawinfo-checkbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics". |
| cookielawinfo-checkbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional". |
| cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary". |
| cookielawinfo-checkbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other. |
| cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance". |
| viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |