Proxmox Let's Encrypt

Intro We operate a proxmox cluster which is not exposed to the public internet, but we still wanted to secure the appliances with good certificates to avoid constantly clicking-through SSL warnings. Thanks to DNS acme challenge, let's encrypt is happy to issue valid certificates for domains that point…

SNMP Traps

Quick notes on testing, receiving and debugging SNMP traps. To send a test SNMP trap, do something like: #!/bin/bash #File: trapTest.sh #Change these values as needed: H=snmp.example.com C=public #Probably don't need to change these: V=2c O=1.3.6.1 sudo…

L3 routing with throttling

One of the best aspects of ubiquiti hardware is that it tends to come with full linux root access. I've used this in the past to snoop packets traversing an access point in order to reverse engineer a WiFi LED protocol. But even before providing this unprecedented level…

Let's Encrypt Appliances!

Let's encrypt is incredibly exciting. For far too long, SSL has been too hard (manual process) and too expensive. Now everyone can get the green lock in the browser everywhere! for free! automagically! ish! As an IT technician, I've long been frustrated with the extra steps…

hostname --fqdn

Recently I setup logcheck, but found it was sending email reports purporting to be from localhost, which is absolutely useless for anyone trying to manage multiple servers (aren't we all)! Digging into the cause, I found logcheck gets the local hostname by using either hostname --short or hostname…