https://wiki.kptree.net/ 2026-08-15T05:21:25+00:00 https://wiki.kptree.net/ https://wiki.kptree.net/_media/wiki:dokuwiki.svg text/html 2025-01-07T01:00:11+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:docker-reverse-proxy?rev=1736211611&do=diff linux docker traefik reverse_proxy proxy openssl ssl certificate portainer cloudsec Reverse Proxy Server - Traefik I seem to have gotten the Traefik reverse proxy working according to Techno Tim Put Wildcard Certificates and SSL on EVERYTHING (github reference_files for traefik-portainer-ssl). Also see Jim's Garage Your Traefik Isn't Secure (JimsGarage/Traefik-Secure/ Below is a basic description of the process that aligns with my configuration files. I do this for 2 reasons, both allowing m… text/html 2022-02-12T09:44:43+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/home_server:home_server_setup:other_services:conky?rev=1644659083&do=diff conkey linux debian manjaro setup monitor Conky Conky is a Linux system monitor tool using X Windows. Conky is highly configurable and is able to monitor many system variables including the status of the CPU, memory, swap space, disk storage, temperatures, processes, network interfaces, battery power, system messages, e-mail in-boxes Linux updates, runs many popular music players, and much more. Unlike system monitors that use high-level widget tool-kits to render their information, Conky i… text/html 2025-12-29T00:09:36+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:misc?rev=1766966976&do=diff linux docker it-tools dockge loki watchtower netbox Docker Miscellaneous IT-TOOLS Useful tools for developer and people working in IT. docker-compose.yml --- services: it-tools: image: 'corentinth/it-tools:latest' #ports: # - '8080:80' restart: unless-stopped container_name: it-tools networks: - proxy labels: - "traefik.enable=true" - "traefik.docker.network=proxy" - "traefik.http.routers.… text/html 2025-11-09T00:31:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:nginx-php-notes?rev=1762648276&do=diff linux docker nginx php fast-cgi php-fpm Docker nginx / php notes nginx executable I had some trouble getting nginx with php-fpm to operate. So I tried to get working a simple setup to nut-out the nuances. I got it working using php-fpm socket with Apline Linux on 2 Docker instances, one running Nginx and the other php-fpm. text/html 2025-11-30T10:55:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:network?rev=1764500119&do=diff linux debian ubuntu router network netplan interface vlan ipv6 ip Debian Server Network Setup Debian Network - Server Interface Setup As of Debian 10 (Buster) Debian still by default uses this interface Setup. It can be setup to use netplan inface. Ubuntu (as of version 14.04) defaults to Predictable Network Interface Names, also see Systemd Docs. I have no problem with this. In any case, you should always check dev names and not assume names, such as text/html 2026-04-03T14:43:15+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:docker-nextcloud?rev=1775227395&do=diff linux docker nextcloud mysql mariadb Nextcloud Container Nextcloud publishes their own Docker container of Nextcloud. The Nextcloud image on Docker hub is maintained by the Nextcloud community, and is not officially supported by Nextcloud! Linuxserver.io, as well as some others also have Nextcloud containers on Docker Hub. text/html 2025-07-05T10:36:50+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:vnc?rev=1751711810&do=diff linux docker vnc guacamole VNC I set up Guacamole using Install Guacamole on Docker – VNC, SSH, SFTP, and RDP like a Boss!. * <ctrl><shift<alt> keystroke in a Guacamole session opens and closes the Guacamole control panel. My docker-compose.yml --- services: # MariaDB - MySQL Database mariadb: container_name: guac_db image: linuxserver/mariadb:latest restart: always networks: # - proxy - guac security_opt: - no-new-privileges:true # ports: # … text/html 2025-08-17T00:27:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/home_server:home_server_setup:network_setup?rev=1755390424&do=diff network interface netplan nic setup loopback eth ethernet bridge bond networkd linux debian setup command Network Setup Most server have more than one network connection although one is technically enough. Routers by definition need to have a minimum of at least 2 network connections. It would seem that Debian Linux supports multiple methods to define network connections: text/html 2025-03-02T05:34:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:turnserver?rev=1740893696&do=diff linux docker turnserver turn server From wikipedia; Traversal Using Relays around NAT (TURN) is a protocol that assists in traversal of network address translators (NAT) or firewalls for multimedia applications. It may be used with the Transmission Control Protocol (TCP) and User Datagram Protocol (UDP). It is most useful for clients on networks masqueraded by symmetric NAT devices. TURN does not aid in running servers on well known ports in the private network through a NAT; it supports the c… text/html 2025-08-16T11:39:12+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:docker-mailserver?rev=1755344352&do=diff linux docker mail mailserver alpine dovecot postfix sqlite s6 s6-rc Docker mailserver This mailserver setup follows Workaround's SPmail guide for Debian 12 “Bookworm”. Key changes are that instead of installing on Debian 12 virtual machine1, with a Maria mysql database2, this setup is for installation on latest Alpine linux Docker image with s6-rc init using maria database. I toyed with sqlite and basically got it functional, however the support apps do not function with sqlite, so I went ba… text/html 2026-01-31T14:34:43+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/home_server:home_server_setup:other_services:rsync?rev=1769870083&do=diff rsync backup linux debian rsnapshot Rsync These are my rsync notes. I also used to use rsnapshot, however I was unhappy with the performance of this application and moved to restic. The original rsnapshot notes have been rolled up and moved to the bottom of this page. Rsync Notes Main rsync command usage summary text/html 2025-05-18T07:27:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/home_server:home_server_setup:other_services:ipmi_console?rev=1747553262&do=diff linux bmc grub ipmi console redirection cli IPMI Console Setup I have 3 computers from Supermicro with BMC and IPMI. The Supermicro provided utility program IPMIView is good, but the iKVM console redirection facility is woefully unreliable and also seems to be poorly documented! (Probably because it is based upon Java.) Interestingly this utility program is provided for Windows and Linux, and is even available in Manjaro AUR repositories. (This probably actually makes sense as many Supermic… text/html 2024-09-11T09:27:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:docker-calibre?rev=1726046862&do=diff linux docker calibre Calibre Calibre This Docker container is based linuxserver/calibre, Docker hub linuxserver/calibre, Calibre ebook management The image is based upon current Ubuntu Long term release. Calibre docker-compose.yml services: calibre: image: lscr.io/linuxserver/calibre:latest container_name: calibre security_opt: - seccomp:unconfined #optional environment: - PUID=1000 - PGID=1000 - TZ=Australia/Perth - PASSWORD= #optional … text/html 2026-07-05T05:36:05+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:docker-deluge?rev=1783229765&do=diff linux docker image container openvpn docker_compose wireguard macvlan nftables Docker Deluge Image / Service I want a torrent service that uses a VPN and is set-up to block non VPN WAN (internet) access. On my virtual machine implementation of this I used the following 3 packages: deluge (deluged with deluge-web), openvpn and nftables. I have used both iptables and nftables and find nftables is definitely more elegant to use. As far as I can tell there is not a Docker image that will meet m… text/html 2026-08-09T03:56:55+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:docker-compose?rev=1786247815&do=diff linux docker compose docker-compose docker_compose container network Docker-Compose * Docker Docs Compose specification, The Compose Specification Some commands: * docker-compose pull, it would seem this is required to ensure the latest image(s) is downloaded * docker-compose up -d --build --force-recreate * -d run as deamon (in background) * --build on required if the compose includes building an image text/html 2025-01-05T03:25:59+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:fileshare?rev=1736047559&do=diff linux docker file_sharing share sharing syncthing privatebin File Sharing All the applications have pro and cons. This is listed at the beginning of each header. There have been considered 3 different levels of access as described by the applications used: * Nextcloud - a full privately hosted publicly accessible file shareing application, with many additional features text/html 2026-07-26T08:58:27+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/wiki:syntax?rev=1785056307&do=diff Formatting Syntax DokuWiki supports some simple markup language, which tries to make the datafiles to be as readable as possible. This page contains all possible syntax you may use when editing the pages. Simply have a look at the source of this page by pressing text/html 2025-01-03T00:55:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/home_server:home_server_setup:other_services:back-up_server_old?rev=1735865746&do=diff linux debian backup lvm filesystem server nfs mount showmount Back-up Server Old Setup This has been more difficult than I would have thought. I have used rsnapshot the past couple of years (2020-21), but have never really been happy with it for many reasons. The main reason is that it has never worked well, the rsync is reasonably fast, but the rsnapshot takes far too long. Other problems include; difficulties in set-up, and concerns will reliability. Recently I noticed that Debian no longer … text/html 2025-01-10T02:59:45+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/home_server:home_server_setup:other_services:ssh?rev=1736477985&do=diff linux debian ssh ssh_notes SSH Notes SSH Login Message Acronyms and Definitions * MOTD = Message of the Day Login Messages * sudo vim /etc/issue.net Displays a message before the user begins login, I do not use this. * sudo vim /etc/ssh/sshd_config ensure the following option is set text/html 2026-05-04T05:34:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/home_server:mswindows_notes?rev=1777872894&do=diff mswindows windows setup tip notes personal license powertoys KPTree - Home Desktop Setup Background I have Windows on my main desk top machine, it is dual boot with Debian/XFCE. I am using Debian almost exclusively now. The BIOS based dual boot works well, I have it defaulting to Debian. I do not currently have a Windows VM setup on my main server. My 3 sons also have computers with Windows on them. Lastly, I am required to used company Windows machines at work. Hence I like to keep a li… text/html 2022-12-27T13:12:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/home_server:home_server_setup:other_services:fail2ban?rev=1672146721&do=diff fail2ban failtoban setup customise linux security Fail2Ban Scans log files and check for in appropriate password activities and update and uses firewall (IPTables) to restrict (stop for a period of time) these activities. So fail2ban limits incorrect authorisation attempts, thereby reducing, but not entirely eliminating associated risks and bandwidths. It is primarily used on port and associated services open to the public. DigitalOcean text/html 2026-02-15T00:37:24+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:docker-dns?rev=1771115844&do=diff linux docker dns bind9 Docker - DNS Server What Is DNS and How Does It Work – A Comprehensive Guide I have been using Bind9 as my home LAN DNS for the past few years. I originally operated it on bare metal on my home router computer. In mid 2023 I successfully moved my Bind9 primary instance to my main home server in a container and created a slave instance in a container running on my home router computer. I created a Docker Bind9 Image using base Docker Alpine Linux images, with S6 init s… text/html 2023-12-29T07:24:43+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/tech_notes:nginx?rev=1703834683&do=diff nginx http Nginx On a simple system nginx can be started with /usr/sbin/nginx basically calling nginx executable with defaults. nginx -h nginx version: nginx/1.24.0 Usage: nginx [-?hvVtTq] [-s signal] [-p prefix] [-e filename] [-c filename] [-g directives] Options: -?,-h : this help -v : show version and exit -V : show version and configure options then exit -t : test configuration and exit -T : test configuration, d… text/html 2025-05-24T13:09:25+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:wireguard?rev=1748092165&do=diff linux router vpn wireguard docker qr_code qr Wireguard VPN access from WAN to LAN I use a Docker instance for my Wireguard server now. I use 2 forms of vpn (virtual private network) on my home server. * VPN to gain remote secure private access to my home LAN from the WAN (internet). This is the one I am describing here. text/html 2025-11-14T14:12:45+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:ntp?rev=1763129565&do=diff ntp I remember looking at this circa 2016 - 2021 and letting go at that time, crony had just been released and systemd was still relatively new at that time. systemd commands * sudo systemctl status systemd-timesyncd * The default configuration is shown in text/html 2024-12-06T11:35:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:diun-ntfy?rev=1733484956&do=diff linux docker diun ntfy Docker - diun & ntfy ntfy is a notification application and server frame work. It has an iOS client and can also use standard web page and Andiod app. I originally considered gotify however there is not iOS application for this notification system, which basically makes it of less value for me. text/html 2026-07-26T11:07:52+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:init?rev=1785064072&do=diff alpine linux docker init s6 s6-rc alias Docker init Systems There are a number of init systems used on docker containers, many are the defaults that ship with the standard Linux distributions, e.g. systemd which is particularly popular on the larger comprehensive distributions. tldr; There is a lot of argument in the init world, SystemD seems to have taken over the init system in most text/html 2026-01-17T01:03:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:docker?rev=1768611790&do=diff linux docker cli installation network volume iptables nftables portainer Docker Docker is a set of platform as a service (PaaS) products that use OS-level virtualization to deliver software in packages called _containers_. The service has both free and premium tiers. The software that hosts the containers is called Docker Engine text/html 2024-03-24T08:01:21+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/home_server:email_server?rev=1711267281&do=diff linux mail server email postfix dovecot emailserver debian ubuntu horde postfixadmin admin clamav apache roundcube webmail certbot certificate KPTree - Email Server Setup Email Server Notes Setting up the email server on my home server was probably the most difficult task. Email server setup is intricate, risky and involves significant commitment and effort to setup reliably and maintain. text/html 2022-01-15T04:49:47+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/home_server:media_vm_setup?rev=1642222187&do=diff deluge torrent server openvpn btguard nftables iptables systemd virtual machine linux ubuntu KPTree Torrent VM Setup Deluge Headless setup The main reference used is Havetheknowhow.com, specifically for the deluge headless setup, Havetheknowhow.com - How to install Deluge Headless. The Deluge support page is also a root source of knowledge Deluge systemd. Whatbox Deluge also has some interesting dialog. If installing on a virtual machine (VM) it is important to also have set up the NFS to al… text/html 2026-06-21T00:26:18+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:hardware?rev=1782001578&do=diff linux router hardware Router Hardware ikoolcore-r2-max (Dec 2024) The Supermicro SYS-E200-9B has stopped working. It posts bios, but will not boot further. I suspect hardware failure of some sort. The BMC failed a few years ago. I have ordered a replacement ikoolcore-r2-max. The replacement comes with 2.5Gb/s and 10GB/s NICs and a more modern and faster 8 core text/html 2025-01-04T10:36:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:ipoe?rev=1735987016&do=diff linux router bridged modem isp ipoe mtu dns dhcp ISP IPoE DHCP Setup Notes Notes on Setting up a Linux router for IPoE DHCP. old, tldr; After a few years of reasonable successful use of bridged VDSL modem with Linux Router running pppoe and nftables my ISP informed me that they do not use authentication on the connection with username and password. In fact they mention they used dhcp IPoE as well as PPPoE. I set up my spare modem as they described and it worked straight way. When I tried my… text/html 2024-12-28T03:23:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/docker_notes:vpn?rev=1735356236&do=diff linux docker wireguard openvpn Private LAN VPN Access The scope here concerns use of VPN (Virtual Private Network) to gain secure access from the public network to a local private network. It relates to private secure access and use from the public network. It does not consider public VPNs setup for public use. text/html 2024-12-07T03:13:35+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/home_server:web_server_setup?rev=1733541215&do=diff linux debian apache apache2 httpd web server php certbot letsencrypt nextcloud cloud vm virtual machine kvm proxy reverse proxy gid uid vipw vigr group id user id Web Server setup Basic Web Server setup on VM I am moving away from Ubuntu to Debian. I find the instruction for here are good to setup a basic web server Digitalocean's LAMP on Debian 11 and Computing for Geeks LAMP on Debian. Old, tl;dr; The main reference used is Unixmen - How To Install LAMP Stack On Ubuntu 16.04, for the bas…