kb.leuxner.net kb.leuxner.net

Linux related configuration snippets. Mostly harmless...

apt(2)

  • Custom Debian apt repository
  • Build custom Debian packages

Backup(1)

  • Backup LVM volumes

Containers(2)

  • Namespace containers using systemd-nspawn
  • Build custom Debian packages

Debian(4)

  • Custom Debian apt repository
  • Allow SFTP to chrooted directories
  • Namespace containers using systemd-nspawn
  • Build custom Debian packages

DNS(4)

  • Securing transaction signatures using ACLs
  • BIND views for internal and external requests (Split DNS)
  • DNS over TLS using BIND and Nginx
  • BIND sd_notify chroot

Dovecot(4)

  • Sieve filter recipes
  • Allow users to categorize spam using IMAP
  • Mail Server using LDAP backend w/ Postfix and Dovecot
  • Dovecot 2.4 LDAP configuration

Filtering(4)

  • Sieve filter recipes
  • Cleanup mail headers using Postfix
  • Rspamd statistics configuration with Redis
  • Allow users to categorize spam using IMAP

Firewall(1)

  • Nftables netfilter rules

LDAP(2)

  • Mail Server using LDAP backend w/ Postfix and Dovecot
  • Dovecot 2.4 LDAP configuration

Mail(7)

  • Rspamd block unwanted senders
  • Sieve filter recipes
  • Postfix restriction classes
  • Cleanup mail headers using Postfix
  • Rspamd statistics configuration with Redis
  • Allow users to categorize spam using IMAP
  • Mail Server using LDAP backend w/ Postfix and Dovecot

named(4)

  • Securing transaction signatures using ACLs
  • BIND views for internal and external requests (Split DNS)
  • DNS over TLS using BIND and Nginx
  • BIND sd_notify chroot

nginx(2)

  • Drop clients which do not indicate server names
  • DNS over TLS using BIND and Nginx

Postfix(3)

  • Postfix restriction classes
  • Cleanup mail headers using Postfix
  • Mail Server using LDAP backend w/ Postfix and Dovecot

Rspamd(3)

  • Rspamd statistics configuration with Redis
  • Allow users to categorize spam using IMAP
  • Rspamd block unwanted senders

Spam(3)

  • Rspamd statistics configuration with Redis
  • Allow users to categorize spam using IMAP
  • Rspamd block unwanted senders

ssh(1)

  • Allow SFTP to chrooted directories

Web(1)

  • Drop clients which do not indicate server names
kb.leuxner.net