https://wiki.kptree.net/ 2026-04-24T12:07:11+00:00 https://wiki.kptree.net/ https://wiki.kptree.net/lib/exe/fetch.php?media=wiki:dokuwiki.svg text/html 2025-05-24T13:09:25+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:wireguard&rev=1748092165&do=diff linux router vpn wireguard docker qr_code qr Wireguard VPN access from WAN to LAN I use a Docker instance for my Wireguard server now. I use 2 forms of vpn (virtual private network) on my home server. * VPN to gain remote secure private access to my home LAN from the WAN (internet). This is the one I am describing here. text/html 2025-10-14T05:59:15+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:misc&rev=1760421555&do=diff linux router monitor links darkstat glances ntopng iftop nethogs Router Miscellaneous Monitoring There are a number of linux monitoring packages available. See these links for more examples see, 13 Linux Performance Monitoring Tools – Part 2, and 30 Linux System Monitoring Tools Every SysAdmin Should Know. Below are a few that I have tried and use. iftop iftop - display bandwidth usage on an interface by host Use text/html 2025-03-02T07:31:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:nftables&rev=1740900680&do=diff linux router nftables firewall NFTables Configuration The best reference for nftables is at the dedicated wiki wiki nftables. Some other references I found nftables router. The reference at stosb is good, but not for a router Explaining My Configs: nftables. Nftables Cheatsheet After a lot of experimenting the following is my NFTables router configuration file. Create the following file called: text/html 2025-09-14T11:00:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:background&rev=1757847620&do=diff linux router 4g lte mobile Linux Router Background I have had the router hardware for about 7 years now, as of June 2023. It took me nearly 18 months to set up as primary home router on bare metal, with DNS and DHCP. I got Wireguard up and running a year ago. I have some basic monitoring software running, darkstat and glances. I have not bothered to setup VMs or containers, it all runs bare metal. I managed to use text/html 2024-12-15T03:35:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:dns_dhcp&rev=1734233746&do=diff linux router dns dhcp bind ip ipv6 radvd host dig nslookup DHCP / DNS Setup Outdated I have moved my DNS and DHCP servers to Docker, Docker-DNS Server. I am still using ISC_Bind9, but am now using ISC_Kea for DHCP as ISC_Bind is no longer supported as of 2022. tl;dr; Further to this I am not looking at backups for both these services on my local area network. Whilst these services worked reliably well, when ever I shutdown the the router with text/html 2025-11-30T10:55:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:network&rev=1764500119&do=diff linux debian ubuntu router network netplan interface vlan ipv6 ip Debian Server Network Setup Debian Network - Server Interface Setup As of Debian 10 (Buster) Debian still by default uses this interface Setup. It can be setup to use netplan inface. Ubuntu (as of version 14.04) defaults to Predictable Network Interface Names, also see Systemd Docs. I have no problem with this. In any case, you should always check dev names and not assume names, such as text/html 2025-03-08T09:30:05+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:start&rev=1741426205&do=diff Linux Router Setup Notes - Index router index Linux Router Setup Notes - IndexStart page next page text/html 2025-09-20T09:35:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:hardware&rev=1758360901&do=diff linux router hardware Router Hardware ikoolcore-r2-max (Dec 2024) The Supermicro SYS-E200-9B has stopped working. It posts bios, but will not boot further. I suspect hardware failure of some sort. The BMC failed a few years ago. I have ordered a replacement ikoolcore-r2-max. The replacement comes with 2.5Gb/s and 10GB/s NICs and a more modern and faster 8 core text/html 2026-01-25T13:50:25+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=sidebar&rev=1769349025&do=diff Administration Welcome/Home Personal * Personal Thoughts and Beliefs (Private) * Localisations * KPTree Recipes * Home Sprinkler Setup Notes * KPTree - Home Desktop Setup Home Server Setup * Home Server Notes * My Home IT Setup * Network Setup * KVM Setup * VNC Server * fsck - file system check * Home Server Index Home Server Other VM Setups * Home Server other VMs Index * KPTree - Email Server Setup * KPTree Torrent VM Setup * KPTree - Home Desktop Setup * dokuwiki setup… text/html 2025-05-22T08:07:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:ubuntu&rev=1747901253&do=diff linux router router_configuration setup debian ubuntu snap snaps switch network Router Configuration, Switch & Server Setup Router Configuration [DRAFT] A router performs the following key features: * A gateway between different network areas * Restrict network traffic * Forward Network traffic * Track network traffic, allows traffic incoming only if response to out going (one way traffic) This is primary firewall action and primary security action! This is often confused with NAT… text/html 2026-01-31T11:03:52+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:wifi&rev=1769857432&do=diff linux router wifi wifi_router access_point Wifi Router / Access Points I prefer to run higher quality wifi access points (AP) than the all in one type routers. My current router is X86 based running Linux Nftables on bare metal and Bind9 and Kea as well as some other services in Docker on a VM. text/html 2025-03-08T09:28:50+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:qemu&rev=1741426130&do=diff linux router vm Router VM I have just decided to play with installing VM (virtual machines) on my Router hardware (2023-01). I have been reluctant to do this for a number of reasons. My separate listing for Router Hardware. Basically the machine is a bit old slow and under powered, but still adequate for what it does. I do not run a desktop on this machine, CLI (Command Line Interface only). The main services I am currently running on this machine are, all bare metal: text/html 2025-12-23T02:48:44+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=docker_notes:vm-container&rev=1766458124&do=diff linux docker vm proxmox server vnc kvm libvirt selfhosted Docker Host KVM versus Proxmox I originally started using Linux KVM based VM, with QEMU and Libvirt on Ubuntu bare metal, circa 2014, this before was I was aware that Proxmox existed. Around 2020 I moved to Debian as my preferred bare metal distribution for server and desktop, I stopped using Windows as my main home desktop around this time. When I started playing around with Docker to create my own container images I preferred use of… text/html 2026-04-11T00:19:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=docker_notes:docker-dhcp&rev=1775866774&do=diff linux docker kea dhcp Docker - DHCP Kea Server Since mid 2023 I have been running a Docker ISC Kea Image using base Docker Alpine Linux images, with S6 init system. (ISC Kea is a modern replacement for their DHCP.) The main DHCP server runs on my main server and I have an automatic fall over back up on my separate Linux router. I basically followed the Kea template text/html 2024-09-21T12:10:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:ppp&rev=1726920633&do=diff linux router pppoe pppoed isp mtu dns dhcp ISP PPPoE Network Setup A reasonably comprehensive discussion on Ubuntu forums Setup Ubuntu Server as a router using a PPPoE connection, MTU and TCP MSS when using PPPoE. Also from Ubuntu forums How to Optimize your Internet Connection using MTU and RWIN. Ubuntu documentation ADSLPPPoE. PPPD manual page. Another reference is Confirm Blog Using PPPoE on Linux. Some other references: * Connecting to NBN HFC with a linux router] Internode router set… text/html 2024-06-23T00:14:23+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:tc&rev=1719101663&do=diff linux router tc traffic control TC - Traffic Control The Linux kernel's network stack has network traffic control and shaping features. The iproute2 package installs the tc command to control these via the command line. Queuing controls how data is sent; receiving data is much more reactive with fewer network-oriented controls. However, since TCP/IP packets are sent using a slow start the system starts sending the packets slow and keeps sending them faster and faster until packets start getti… text/html 2024-06-23T01:11:37+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:netfilter&rev=1719105097&do=diff linux router mtu netfilter Basic Netfilter Function Block Diagram Both NFTables and IPTables use the Netfilter framework provided in the Linux kernal. NFtables was implemented to supersede IPTables, which due to the widespread use of IPTables, will probably take a long time. The following is a basic block diagram of the Netfilter Filter and NAT (Network Address Translation) functions, which are the basic requirements for router. Incoming Packets | ┌────────────… text/html 2023-04-30T09:43:13+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:nftables_control&rev=1682847793&do=diff linux nft nftables nmap NFTables IP Control I primarily set this feature up to act as a form of parental control on my home internet access. Disable Range of IP addresses, with count-down timer The DHCP assigned addresses in the range 100 - 254 were to be disabled (dropped) in the evening. The addresses below 100 were assigned a specific IP address in the DHCP based upon MAC. text/html 2025-01-07T01:00:11+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=docker_notes:docker-reverse-proxy&rev=1736211611&do=diff linux docker traefik reverse_proxy proxy openssl ssl certificate portainer cloudsec Reverse Proxy Server - Traefik I seem to have gotten the Traefik reverse proxy working according to Techno Tim Put Wildcard Certificates and SSL on EVERYTHING (github reference_files for traefik-portainer-ssl). Also see Jim's Garage Your Traefik Isn't Secure (JimsGarage/Traefik-Secure/ Below is a basic description of the process that aligns with my configuration files. I do this for 2 reasons, both allowing m… text/html 2025-01-04T10:36:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:ipoe&rev=1735987016&do=diff linux router bridged modem isp ipoe mtu dns dhcp ISP IPoE DHCP Setup Notes Notes on Setting up a Linux router for IPoE DHCP. old, tldr; After a few years of reasonable successful use of bridged VDSL modem with Linux Router running pppoe and nftables my ISP informed me that they do not use authentication on the connection with username and password. In fact they mention they used dhcp IPoE as well as PPPoE. I set up my spare modem as they described and it worked straight way. When I tried my… text/html 2026-01-17T01:03:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=docker_notes:docker&rev=1768611790&do=diff linux docker cli installation network volume iptables nftables portainer Docker Docker is a set of platform as a service (PaaS) products that use OS-level virtualization to deliver software in packages called _containers_. The service has both free and premium tiers. The software that hosts the containers is called Docker Engine text/html 2026-02-15T00:37:24+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=docker_notes:docker-dns&rev=1771115844&do=diff linux docker dns bind9 Docker - DNS Server What Is DNS and How Does It Work – A Comprehensive Guide I have been using Bind9 as my home LAN DNS for the past few years. I originally operated it on bare metal on my home router computer. In mid 2023 I successfully moved my Bind9 primary instance to my main home server in a container and created a slave instance in a container running on my home router computer. I created a Docker Bind9 Image using base Docker Alpine Linux images, with S6 init s… text/html 2024-12-15T02:31:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=linux_router:iptables&rev=1734229861&do=diff linux router firewall iptables IPTables Configuration Having delved into IPtables and NFtables about the same time, my feelings are that NFTables is generally superior in just about every way, I can not be bothered explaining this, this is just my experience and feeling. I would preferentially use NFTables over IPtables where I have a choice. Unfortunately some software still uses IPtables, e.g. Docker. So it is good to be able to be sufficiently fluent and be able to work in both at this … text/html 2024-12-28T03:23:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=docker_notes:vpn&rev=1735356236&do=diff linux docker wireguard openvpn Private LAN VPN Access The scope here concerns use of VPN (Virtual Private Network) to gain secure access from the public network to a local private network. It relates to private secure access and use from the public network. It does not consider public VPNs setup for public use. text/html 2025-03-02T05:34:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=docker_notes:turnserver&rev=1740893696&do=diff linux docker turnserver turn server From wikipedia; Traversal Using Relays around NAT (TURN) is a protocol that assists in traversal of network address translators (NAT) or firewalls for multimedia applications. It may be used with the Transmission Control Protocol (TCP) and User Datagram Protocol (UDP). It is most useful for clients on networks masqueraded by symmetric NAT devices. TURN does not aid in running servers on well known ports in the private network through a NAT; it supports the c… text/html 2025-09-29T11:22:11+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=home_server:dokuwiki_setup&rev=1759144931&do=diff linux wiki dokuwiki server plugin markdown dokuwiki setup notes Also see notes on setting up Docker Dokuwiki container * Dokuwiki home page * Dokuwiki Installation instructions * Upgrading Dokuwiki * DokuWiki Manual * Docuwiki maintenance * How to backup DokuWiki? * How to move DokuWiki from one Server to another? dokuwiki backup Back-ups placed here: '/media/disk1/KarlData/Karl Data 2/dokuwiki_backups/' and named KPtreeWiki-backup_yyyy-mm-dd. e.g. sudo tar zcpfv '/media/… text/html 2024-03-24T08:01:21+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=home_server:email_server&rev=1711267281&do=diff linux mail server email postfix dovecot emailserver debian ubuntu horde postfixadmin admin clamav apache roundcube webmail certbot certificate KPTree - Email Server Setup Email Server Notes Setting up the email server on my home server was probably the most difficult task. Email server setup is intricate, risky and involves significant commitment and effort to setup reliably and maintain. text/html 2025-08-10T12:30:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=tech_notes:pikvm&rev=1754829003&do=diff linux kvm ipmi pikvm bmc PiKVM I purchased a PiKVM kit in 2021, and got it operational at that time. I did not need to use it until recently, 2024-09. Basically a special 'hat' is mounted on a standard Raspberry Pi 4, the smallest memory unit type being sufficient (2 GB). The kit was complete with all the required parts, such as the hat, Raspberry PI, a case, small OLED display and various cables. The PiKVM is V3 HAT with RPi V4 2GB. text/html 2025-08-17T00:27:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=home_server:home_server_setup:network_setup&rev=1755390424&do=diff network interface netplan nic setup loopback eth ethernet bridge bond networkd linux debian setup command Network Setup Most server have more than one network connection although one is technically enough. Routers by definition need to have a minimum of at least 2 network connections. It would seem that Debian Linux supports multiple methods to define network connections: text/html 2025-08-16T11:39:12+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=docker_notes:docker-mailserver&rev=1755344352&do=diff linux docker mail mailserver alpine dovecot postfix sqlite s6 s6-rc Docker mailserver This mailserver setup follows Workaround's SPmail guide for Debian 12 “Bookworm”. Key changes are that instead of installing on Debian 12 virtual machine1, with a Maria mysql database2, this setup is for installation on latest Alpine linux Docker image with s6-rc init using maria database. I toyed with sqlite and basically got it functional, however the support apps do not function with sqlite, so I went ba… text/html 2026-04-03T14:43:15+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=docker_notes:docker-nextcloud&rev=1775227395&do=diff linux docker nextcloud mysql mariadb Nextcloud Container Nextcloud publishes their own Docker container of Nextcloud. The Nextcloud image on Docker hub is maintained by the Nextcloud community, and is not officially supported by Nextcloud! Linuxserver.io, as well as some others also have Nextcloud containers on Docker Hub. text/html 2025-08-09T03:11:23+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=tech_notes:dns&rev=1754709083&do=diff Domain names, domain nameservers, DNS and DHCP Domain names, Domain nameservers, DNS and DHCP are a key part of the internet back bone. * DNS (Domain Name System) resolves the text domain names to the relevant IP (Internet Protocol) addresses. * text/html 2026-01-25T05:14:50+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=home_server:home_server_setup:summary&rev=1769318090&do=diff linux server setup summary index Home Server Notes The main reason for these notes is a reference to assist me with maintaining my home server. This includes upgrading the existing or setting up a new server in the future. There are many reasons to setup a home server and many different options available. For me one of the big reasons is the tinkering and learning associated with such a set up. There are many other benefits. Perhaps also one of the largest negatives is also the time invested … text/html 2025-06-21T05:00:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=docker_notes:docker-deluge&rev=1750482034&do=diff linux docker image container openvpn docker_compose wireguard macvlan nftables Docker Deluge Image / Service I want a torrent service that uses a VPN and is set-up to block non VPN WAN (internet) access. On my virtual machine implementation of this I used the following 3 packages: deluge (deluged with deluge-web), openvpn and nftables. I have used both iptables and nftables and find nftables is definitely more elegant to use. As far as I can tell there is not a Docker image that will meet m… text/html 2026-04-05T00:01:17+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=docker_notes:docker-dokuwiki&rev=1775347277&do=diff linux docker traefik dokuwiki container Dokuwiki Main Dokuwiki Page The main dokuwiki page dokuwiki_setup. Dokuwiki Container This uses the linuxserver.io image from dockerhub, linuxserver/dokuwiki. The Linuxserver.io documents can be found heredoc.linuxserver.io. Defines web_data volume: #Not USED docker volume create --driver local \ --opt type=none \ --opt device="/home/docker_store/cloud.kptree.net/data" \ --opt o=bind cloud_data text/html 2024-12-07T03:13:35+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=home_server:web_server_setup&rev=1733541215&do=diff linux debian apache apache2 httpd web server php certbot letsencrypt nextcloud cloud vm virtual machine kvm proxy reverse proxy gid uid vipw vigr group id user id Web Server setup Basic Web Server setup on VM I am moving away from Ubuntu to Debian. I find the instruction for here are good to setup a basic web server Digitalocean's LAMP on Debian 11 and Computing for Geeks LAMP on Debian. Old, tl;dr; The main reference used is Unixmen - How To Install LAMP Stack On Ubuntu 16.04, for the bas… text/html 2025-11-14T08:19:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=tech_notes:programs&rev=1763108348&do=diff programs applications pipx flatpak Programs & Applications dpkg -l dpkg -l lists all the installed programs on a Debian apt based system. There are too many to list all and many are built in system commands. Below are some that I highlight for interest and future reference to easily find on reinstall. text/html 2023-12-23T13:07:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=home_server:home_server_setup:other_services:ipmi&rev=1703336839&do=diff linux ipmi ipmitool cli bmc IPMI CLI Tools Much copied from Adam Sweet's wiki on IPMI. What is IPMI? IPMI is standard which allows remote server management, primarily developed by Intel. IPMI cards, known as Baseboard Management Cards (BMCs) are primitive computers in their own right and are operational all the time, so long as the server has a power source. The server itself does not need to be powered on, or the operating system operational for the BMC to work, it just needs a power source… text/html 2023-04-30T09:43:13+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=home_server:home_server_setup:other_services:tmux&rev=1682847793&do=diff linux terminal tmux kitty ssh tmux tmux is a terminal multiplexer. It lets you switch easily between several programs in one terminal, detach them (they keep running in the background) and reattach them to a different terminal. tmux ---------- Prev Start page Next terminals kitty The fast, feature-rich, GPU based terminal emulator text/html 2023-12-26T03:44:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/doku.php?id=home_server:home_server_setup:other_services:webmin&rev=1703562259&do=diff linux debian webmin Webmin I don't bother to use Webmin, it has been well over a year since I tried to use. Old, tl;dr; I am a bit lazy sometimes and use Webmin to help setup certain services, e.g. Samba. Webmin is a web interfaced system administration system for Linux and has lots of plugins for various Linux apps/packages. Webmin has its own mini webserver built in. There are lots of web page discussing Webmin, how to install and use, e.g.