kb.leuxner.net kb.leuxner.net

Linux related configuration snippets. Mostly harmless...

apt(2)

  • Build custom Debian packages
  • Custom Debian apt repository

Backup(1)

  • Backup LVM volumes

Containers(2)

  • Build custom Debian packages
  • Namespace containers using systemd-nspawn

Debian(6)

  • Allow SFTP to chrooted directories
  • Namespace containers using systemd-nspawn
  • Build custom Debian packages
  • Interface unavailable at Linux boot
  • systemd.timer configuration
  • Custom Debian apt repository

DNS(4)

  • Named views for internal and external requests (Split DNS)
  • DNS over TLS using BIND and Nginx
  • BIND sd_notify chroot
  • Securing named transaction signatures using ACLs

Dovecot(4)

  • Allow Dovecot users to categorize spam using IMAP
  • Mail Server using LDAP backend w/ Postfix and Dovecot
  • Dovecot 2.4 LDAP configuration
  • Sieve filter recipes

Filtering(4)

  • Cleanup mail headers using Postfix
  • Rspamd statistics configuration with Redis
  • Allow Dovecot users to categorize spam using IMAP
  • Sieve filter recipes

Firewall(1)

  • Nftables netfilter rules

LDAP(2)

  • Dovecot 2.4 LDAP configuration
  • Mail Server using LDAP backend w/ Postfix and Dovecot

Mail(7)

  • Postfix restriction classes
  • Cleanup mail headers using Postfix
  • Rspamd statistics configuration with Redis
  • Allow Dovecot users to categorize spam using IMAP
  • Mail Server using LDAP backend w/ Postfix and Dovecot
  • Rspamd block unwanted senders
  • Sieve filter recipes

named(4)

  • Named views for internal and external requests (Split DNS)
  • DNS over TLS using BIND and Nginx
  • BIND sd_notify chroot
  • Securing named transaction signatures using ACLs

nginx(2)

  • DNS over TLS using BIND and Nginx
  • Drop Nginx clients which do not indicate server names

Postfix(3)

  • Cleanup mail headers using Postfix
  • Mail Server using LDAP backend w/ Postfix and Dovecot
  • Postfix restriction classes

Rspamd(3)

  • Allow Dovecot users to categorize spam using IMAP
  • Rspamd block unwanted senders
  • Rspamd statistics configuration with Redis

Spam(3)

  • Allow Dovecot users to categorize spam using IMAP
  • Rspamd block unwanted senders
  • Rspamd statistics configuration with Redis

ssh(1)

  • Allow SFTP to chrooted directories

Web(1)

  • Drop Nginx clients which do not indicate server names
kb.leuxner.net