KPTree Wiki

Docker nginx / php notes

Anonymous (anonymous@undisclosed.example.com) — 2025-11-09T00:31:16+00:00

linux docker nginx php fast-cgi php-fpm Docker nginx / php notes nginx executable I had some trouble getting nginx with php-fpm to operate. So I tried to get working a simple setup to nut-out the nuances. I got it working using php-fpm socket with Apline Linux on 2 Docker instances, one running Nginx and the other php-fpm.

turn server

Anonymous (anonymous@undisclosed.example.com) — 2025-03-02T05:34:56+00:00

linux docker turnserver turn server From wikipedia; Traversal Using Relays around NAT (TURN) is a protocol that assists in traversal of network address translators (NAT) or firewalls for multimedia applications. It may be used with the Transmission Control Protocol (TCP) and User Datagram Protocol (UDP). It is most useful for clients on networks masqueraded by symmetric NAT devices. TURN does not aid in running servers on well known ports in the private network through a NAT; it supports the c…

Nextcloud Container

Anonymous (anonymous@undisclosed.example.com) — 2026-04-03T14:43:15+00:00

linux docker nextcloud mysql mariadb Nextcloud Container Nextcloud publishes their own Docker container of Nextcloud. The Nextcloud image on Docker hub is maintained by the Nextcloud community, and is not officially supported by Nextcloud! Linuxserver.io, as well as some others also have Nextcloud containers on Docker Hub.

Web Server setup

Anonymous (anonymous@undisclosed.example.com) — 2024-12-07T03:13:35+00:00

linux debian apache apache2 httpd web server php certbot letsencrypt nextcloud cloud vm virtual machine kvm proxy reverse proxy gid uid vipw vigr group id user id Web Server setup Basic Web Server setup on VM I am moving away from Ubuntu to Debian. I find the instruction for here are good to setup a basic web server Digitalocean's LAMP on Debian 11 and Computing for Geeks LAMP on Debian. Old, tl;dr; The main reference used is Unixmen - How To Install LAMP Stack On Ubuntu 16.04, for the bas…

Rsync

Anonymous (anonymous@undisclosed.example.com) — 2026-01-31T14:34:43+00:00

rsync backup linux debian rsnapshot Rsync These are my rsync notes. I also used to use rsnapshot, however I was unhappy with the performance of this application and moved to restic. The original rsnapshot notes have been rolled up and moved to the bottom of this page. Rsync Notes Main rsync command usage summary

Router Configuration, Switch & Server Setup

Anonymous (anonymous@undisclosed.example.com) — 2025-05-22T08:07:33+00:00

linux router router_configuration setup debian ubuntu snap snaps switch network Router Configuration, Switch & Server Setup Router Configuration [DRAFT] A router performs the following key features: * A gateway between different network areas * Restrict network traffic * Forward Network traffic * Track network traffic, allows traffic incoming only if response to out going (one way traffic) This is primary firewall action and primary security action! This is often confused with NAT…

Basic Netfilter Function Block Diagram

Anonymous (anonymous@undisclosed.example.com) — 2024-06-23T01:11:37+00:00

linux router mtu netfilter Basic Netfilter Function Block Diagram Both NFTables and IPTables use the Netfilter framework provided in the Linux kernal. NFtables was implemented to supersede IPTables, which due to the widespread use of IPTables, will probably take a long time. The following is a basic block diagram of the Netfilter Filter and NAT (Network Address Translation) functions, which are the basic requirements for router. Incoming Packets | ┌────────────…

Wireguard VPN access from WAN to LAN

Anonymous (anonymous@undisclosed.example.com) — 2025-05-24T13:09:25+00:00

linux router vpn wireguard docker qr_code qr Wireguard VPN access from WAN to LAN I use a Docker instance for my Wireguard server now. I use 2 forms of vpn (virtual private network) on my home server. * VPN to gain remote secure private access to my home LAN from the WAN (internet). This is the one I am describing here.

Reverse Proxy Server - Traefik

Anonymous (anonymous@undisclosed.example.com) — 2025-01-07T01:00:11+00:00

linux docker traefik reverse_proxy proxy openssl ssl certificate portainer cloudsec Reverse Proxy Server - Traefik I seem to have gotten the Traefik reverse proxy working according to Techno Tim Put Wildcard Certificates and SSL on EVERYTHING (github reference_files for traefik-portainer-ssl). Also see Jim's Garage Your Traefik Isn't Secure (JimsGarage/Traefik-Secure/ Below is a basic description of the process that aligns with my configuration files. I do this for 2 reasons, both allowing m…

dokuwiki setup notes

Anonymous (anonymous@undisclosed.example.com) — 2025-09-29T11:22:11+00:00

linux wiki dokuwiki server plugin markdown dokuwiki setup notes Also see notes on setting up Docker Dokuwiki container * Dokuwiki home page * Dokuwiki Installation instructions * Upgrading Dokuwiki * DokuWiki Manual * Docuwiki maintenance * How to backup DokuWiki? * How to move DokuWiki from one Server to another? dokuwiki backup Back-ups placed here: '/media/disk1/KarlData/Karl Data 2/dokuwiki_backups/' and named KPtreeWiki-backup_yyyy-mm-dd. e.g. sudo tar zcpfv '/media/…

Router Miscellaneous

Anonymous (anonymous@undisclosed.example.com) — 2025-10-14T05:59:15+00:00

linux router monitor links darkstat glances ntopng iftop nethogs Router Miscellaneous Monitoring There are a number of linux monitoring packages available. See these links for more examples see, 13 Linux Performance Monitoring Tools – Part 2, and 30 Linux System Monitoring Tools Every SysAdmin Should Know. Below are a few that I have tried and use. iftop iftop - display bandwidth usage on an interface by host Use

samba

Anonymous (anonymous@undisclosed.example.com) — 2023-04-30T09:43:13+00:00

linux samba samba I have not look at samba much since I first attempted to set up my home sever circa 2011 on Fedora before I moved to Ubuntu. I stopped using Fedora as I had noob pain with Selinux, coupled with the short service life of Fedora, so I moved to Ubuntu, where I had a lot more success.

Docker - DNS Server

Anonymous (anonymous@undisclosed.example.com) — 2026-02-15T00:37:24+00:00

linux docker dns bind9 Docker - DNS Server What Is DNS and How Does It Work – A Comprehensive Guide I have been using Bind9 as my home LAN DNS for the past few years. I originally operated it on bare metal on my home router computer. In mid 2023 I successfully moved my Bind9 primary instance to my main home server in a container and created a slave instance in a container running on my home router computer. I created a Docker Bind9 Image using base Docker Alpine Linux images, with S6 init s…

Docker mailserver

Anonymous (anonymous@undisclosed.example.com) — 2025-08-16T11:39:12+00:00

linux docker mail mailserver alpine dovecot postfix sqlite s6 s6-rc Docker mailserver This mailserver setup follows Workaround's SPmail guide for Debian 12 “Bookworm”. Key changes are that instead of installing on Debian 12 virtual machine1, with a Maria mysql database2, this setup is for installation on latest Alpine linux Docker image with s6-rc init using maria database. I toyed with sqlite and basically got it functional, however the support apps do not function with sqlite, so I went ba…

VNC

Anonymous (anonymous@undisclosed.example.com) — 2025-07-05T10:36:50+00:00

linux docker vnc guacamole VNC I set up Guacamole using Install Guacamole on Docker – VNC, SSH, SFTP, and RDP like a Boss!. * keystroke in a Guacamole session opens and closes the Guacamole control panel. My docker-compose.yml --- services: # MariaDB - MySQL Database mariadb: container_name: guac_db image: linuxserver/mariadb:latest restart: always networks: # - proxy - guac security_opt: - no-new-privileges:true # ports: # …

KPTree Torrent VM Setup

Anonymous (anonymous@undisclosed.example.com) — 2023-04-30T09:43:13+00:00

deluge torrent server openvpn btguard nftables iptables systemd virtual machine linux ubuntu KPTree Torrent VM Setup Deluge Headless setup The main reference used is Havetheknowhow.com, specifically for the deluge headless setup, Havetheknowhow.com - How to install Deluge Headless. The Deluge support page is also a root source of knowledge Deluge systemd. Whatbox Deluge also has some interesting dialog. If installing on a virtual machine (VM) it is important to also have set up the NFS to al…

Docker

Anonymous (anonymous@undisclosed.example.com) — 2026-01-17T01:03:10+00:00

linux docker cli installation network volume iptables nftables portainer Docker Docker is a set of platform as a service (PaaS) products that use OS-level virtualization to deliver software in packages called _containers_. The service has both free and premium tiers. The software that hosts the containers is called Docker Engine

Calibre

Anonymous (anonymous@undisclosed.example.com) — 2024-09-11T09:27:42+00:00

linux docker calibre Calibre Calibre This Docker container is based linuxserver/calibre, Docker hub linuxserver/calibre, Calibre ebook management The image is based upon current Ubuntu Long term release. Calibre docker-compose.yml services: calibre: image: lscr.io/linuxserver/calibre:latest container_name: calibre security_opt: - seccomp:unconfined #optional environment: - PUID=1000 - PGID=1000 - TZ=Australia/Perth - PASSWORD= #optional …

Crowdsec

Anonymous (anonymous@undisclosed.example.com) — 2025-01-07T04:34:05+00:00

linux docker traefik crowdsec firewall Crowdsec * docker exec crowdsec cscli metrics to inspect Cloudsec metrics * docker exec crowdsec cscli bouncer list to list active bouncers * docker exec crowdsec cscli parsers list to list active bouncers Cloudsec Cloud Security Panel Back Start page Next

KPTree - Email Server Setup

Anonymous (anonymous@undisclosed.example.com) — 2024-03-24T08:01:21+00:00

linux mail server email postfix dovecot emailserver debian ubuntu horde postfixadmin admin clamav apache roundcube webmail certbot certificate KPTree - Email Server Setup Email Server Notes Setting up the email server on my home server was probably the most difficult task. Email server setup is intricate, risky and involves significant commitment and effort to setup reliably and maintain.

KPTree - Home Desktop Setup

Anonymous (anonymous@undisclosed.example.com) — 2026-03-16T07:04:18+00:00

mswindows windows setup tip notes personal license powertoys KPTree - Home Desktop Setup Background I have Windows on my main desk top machine, it is dual boot with Debian/XFCE. I am using Debian almost exclusively now. The BIOS based dual boot works well, I have it defaulting to Debian. I do not currently have a Windows VM setup on my main server. My 3 sons also have computers with Windows on them. Lastly, I am required to used company Windows machines at work. Hence I like to keep a li…

DHCP / DNS Setup

Anonymous (anonymous@undisclosed.example.com) — 2024-12-15T03:35:46+00:00

linux router dns dhcp bind ip ipv6 radvd host dig nslookup DHCP / DNS Setup Outdated I have moved my DNS and DHCP servers to Docker, Docker-DNS Server. I am still using ISC_Bind9, but am now using ISC_Kea for DHCP as ISC_Bind is no longer supported as of 2022. tl;dr; Further to this I am not looking at backups for both these services on my local area network. Whilst these services worked reliably well, when ever I shutdown the the router with

NFTables Configuration

Anonymous (anonymous@undisclosed.example.com) — 2025-03-02T07:31:20+00:00

linux router nftables firewall NFTables Configuration The best reference for nftables is at the dedicated wiki wiki nftables. Some other references I found nftables router. The reference at stosb is good, but not for a router Explaining My Configs: nftables. Nftables Cheatsheet After a lot of experimenting the following is my NFTables router configuration file. Create the following file called:

PiKVM

Anonymous (anonymous@undisclosed.example.com) — 2025-08-10T12:30:03+00:00

linux kvm ipmi pikvm bmc PiKVM I purchased a PiKVM kit in 2021, and got it operational at that time. I did not need to use it until recently, 2024-09. Basically a special 'hat' is mounted on a standard Raspberry Pi 4, the smallest memory unit type being sufficient (2 GB). The kit was complete with all the required parts, such as the hat, Raspberry PI, a case, small OLED display and various cables. The PiKVM is V3 HAT with RPi V4 2GB.

ssh with key files

Anonymous (anonymous@undisclosed.example.com) — 2024-03-09T02:45:50+00:00

linux ssh ssh-keygen ssh with key files The advantages of using SSH key-based include: * Improved security * Easier access to ssh (if password keys are not used) Clearly use of unique password encrypted keys gives best security. However if a user has access to you terminal and user password they effectively have full system access anyway.

MONIT

Anonymous (anonymous@undisclosed.example.com) — 2023-04-30T09:43:13+00:00

monit setup linux security MONIT Monit is a small Open Source utility for managing and monitoring Unix systems. Monit conducts automatic maintenance and repair and can execute meaningful causal actions in error situations. The email server instructions from Ex Ratione - A Mailserver on Ubuntu 16.04: Postfix, Dovecot, MySQL, Postfixadmin, Roundcube also include some installation instructions for monit.

Anonymous (anonymous@undisclosed.example.com) — 2026-01-25T13:50:25+00:00

Administration Welcome/Home Personal * Personal Thoughts and Beliefs (Private) * Localisations * KPTree Recipes * Home Sprinkler Setup Notes * KPTree - Home Desktop Setup Home Server Setup * Home Server Notes * My Home IT Setup * Network Setup * KVM Setup * VNC Server * fsck - file system check * Home Server Index Home Server Other VM Setups * Home Server other VMs Index * KPTree - Email Server Setup * KPTree Torrent VM Setup * KPTree - Home Desktop Setup * dokuwiki setup…

Docker - DHCP Kea Server

Anonymous (anonymous@undisclosed.example.com) — 2026-04-11T00:19:34+00:00

linux docker kea dhcp Docker - DHCP Kea Server Since mid 2023 I have been running a Docker ISC Kea Image using base Docker Alpine Linux images, with S6 init system. (ISC Kea is a modern replacement for their DHCP.) The main DHCP server runs on my main server and I have an automatic fall over back up on my separate Linux router. I basically followed the Kea template

Dokuwiki

Anonymous (anonymous@undisclosed.example.com) — 2026-04-05T00:01:17+00:00

linux docker traefik dokuwiki container Dokuwiki Main Dokuwiki Page The main dokuwiki page dokuwiki_setup. Dokuwiki Container This uses the linuxserver.io image from dockerhub, linuxserver/dokuwiki. The Linuxserver.io documents can be found heredoc.linuxserver.io. Defines web_data volume: #Not USED docker volume create --driver local \ --opt type=none \ --opt device="/home/docker_store/cloud.kptree.net/data" \ --opt o=bind cloud_data

File Sharing

Anonymous (anonymous@undisclosed.example.com) — 2025-01-05T03:25:59+00:00

linux docker file_sharing share sharing syncthing privatebin File Sharing All the applications have pro and cons. This is listed at the beginning of each header. There have been considered 3 different levels of access as described by the applications used: * Nextcloud - a full privately hosted publicly accessible file shareing application, with many additional features

Docker - Index

Anonymous (anonymous@undisclosed.example.com) — 2025-11-09T00:30:37+00:00

Docker - Index Notes: * To check latest version of os and release cat /etc/*release * Latest version of S6-RC github just-containers s6-overlay * Ansible / Ansible vault / just / justfile docker notes index Docker - IndexStart page next page

Private LAN VPN Access

Anonymous (anonymous@undisclosed.example.com) — 2024-12-28T03:23:56+00:00

linux docker wireguard openvpn Private LAN VPN Access The scope here concerns use of VPN (Virtual Private Network) to gain secure access from the public network to a local private network. It relates to private secure access and use from the public network. It does not consider public VPNs setup for public use.

Linux Router Background

Anonymous (anonymous@undisclosed.example.com) — 2025-09-14T11:00:20+00:00

linux router 4g lte mobile Linux Router Background I have had the router hardware for about 7 years now, as of June 2023. It took me nearly 18 months to set up as primary home router on bare metal, with DNS and DHCP. I got Wireguard up and running a year ago. I have some basic monitoring software running, darkstat and glances. I have not bothered to setup VMs or containers, it all runs bare metal. I managed to use

Formatting Syntax

Anonymous (anonymous@undisclosed.example.com) — 2023-04-30T09:43:12+00:00

Formatting Syntax DokuWiki supports some simple markup language, which tries to make the datafiles to be as readable as possible. This page contains all possible syntax you may use when editing the pages. Simply have a look at the source of this page by pressing

BASH Customisation

Anonymous (anonymous@undisclosed.example.com) — 2025-11-22T03:58:17+00:00

linux bash alias tar bash_aliases configure configuration bashrc command script bashrc history sudo visudo dimmer ps kill nightmode xrandr tar archive default_editor editor BASH Customisation The standard BASH colour configuration uses a blue colour for listing directories (ls) which is difficult to read on a black background. While this is the “standard colour”, due to the impracticality I have decided to change it.

Fail2Ban

Anonymous (anonymous@undisclosed.example.com) — 2023-04-30T09:43:13+00:00

fail2ban failtoban setup customise linux security Fail2Ban Scans log files and check for in appropriate password activities and update and uses firewall (IPTables) to restrict (stop for a period of time) these activities. So fail2ban limits incorrect authorisation attempts, thereby reducing, but not entirely eliminating associated risks and bandwidths. It is primarily used on port and associated services open to the public. DigitalOcean

IPMI CLI Tools

Anonymous (anonymous@undisclosed.example.com) — 2023-12-23T13:07:19+00:00

linux ipmi ipmitool cli bmc IPMI CLI Tools Much copied from Adam Sweet's wiki on IPMI. What is IPMI? IPMI is standard which allows remote server management, primarily developed by Intel. IPMI cards, known as Baseboard Management Cards (BMCs) are primitive computers in their own right and are operational all the time, so long as the server has a power source. The server itself does not need to be powered on, or the operating system operational for the BMC to work, it just needs a power source…

IPMI Console Setup

Anonymous (anonymous@undisclosed.example.com) — 2025-05-18T07:27:42+00:00

linux bmc grub ipmi console redirection cli IPMI Console Setup I have 3 computers from Supermicro with BMC and IPMI. The Supermicro provided utility program IPMIView is good, but the iKVM console redirection facility is woefully unreliable and also seems to be poorly documented! (Probably because it is based upon Java.) Interestingly this utility program is provided for Windows and Linux, and is even available in Manjaro AUR repositories. (This probably actually makes sense as many Supermic…

Commonly used commands and scripts

Anonymous (anonymous@undisclosed.example.com) — 2025-09-29T05:35:59+00:00

linux dmesg command systemd journal journalctl tzdata timezone apt upgrade update install remove crontab man apropos tldr ip tc systemctl journalctl pbcopy pbpaste copy paste Commonly used commands and scripts dmesg sudo dmesg lists the OS boot messages between grub and os up. sudo dmesg --level=emerg,alert,crit,err,warn,notice,debug give a more succinct list of focus potential problem issues. * emerg - system is unusable

NFS

Anonymous (anonymous@undisclosed.example.com) — 2025-01-05T06:27:27+00:00

linux debian nfs fstab server NFS There are a lot of resources online for NFS (Network File System). Nevertheless I decided to place my notes here to help me with my configuration, as there are a number of nuances that such notes will potentially assist with in the future. Sadly a number of resources I use seem out of date, not updated and/or possible subject to disappearance.

Tripwire

Anonymous (anonymous@undisclosed.example.com) — 2023-04-30T09:43:13+00:00

linux tripwire setup security Tripwire Trip wire check system files to check for any changes and alarms / alerts upon changes. ---------- Prev Start page Next

Webmin

Anonymous (anonymous@undisclosed.example.com) — 2023-12-26T03:44:19+00:00

linux debian webmin Webmin I don't bother to use Webmin, it has been well over a year since I tried to use. Old, tl;dr; I am a bit lazy sometimes and use Webmin to help setup certain services, e.g. Samba. Webmin is a web interfaced system administration system for Linux and has lots of plugins for various Linux apps/packages. Webmin has its own mini webserver built in. There are lots of web page discussing Webmin, how to install and use, e.g.