Tech's blog
30 subscribers
15 links
Blog items from https://techwolf12.nl/blog, channel is managed by @techwolf12
Download Telegram
Channel created
SSH Authentication via LDAP
SSH Authentication via LDAP

So you got an OpenLDAP server running? Great! Now you want to connect it to as many systems as possible to ease the burden of managing users and authorization. However, you also want to allow SSH key authorisation managed via a central place. Can LDAP be used for this? This article will help you get started to set this up in your organisation.
techwolf12
Fri, 05/01/2020 - 23:12

https://techwolf12.nl/blog/ssh-authentication-ldap
DigitalOcean Kubernetes with Static IPv4
DigitalOcean Kubernetes with Static IPv4

Thanks to the new VPC functionality in DigitalOcean can be used to provide Kubernetes with a static external IPv4. This can be handy in cases where you need to deal with IP whitelists, for example, if you use your Kubernetes cluster as a CI building tool. However, this requires some config setup and a privileged pod running on each node to automatically update the routes. This article will help guide you through the setup.
techwolf12
Sun, 05/03/2020 - 16:57

https://techwolf12.nl/blog/digitalocean-kubernetes-static-ipv4
HTTP Basic Authentication with LDAP and Apache2
HTTP Basic Authentication with LDAP and Apache2

When you run an LDAP server you want to use it to authenticate as much as possible using this system, either to comply with security policies or make it easier for users to login using one authentication method. If you use the Apache2 webserver you can setup HTTP Basic authentication with LDAP. In this tutorial I will show how I accomplished this.

techwolf12
Sun, 06/21/2020 - 01:29

https://techwolf12.nl/blog/http-basic-authentication-ldap-and-apache2
Generating IPv6 PTR records from a Bind9 Zonefile using Bash
Generating IPv6 PTR records from a Bind9 Zonefile using Bash

The following script takes a Bind9 zonefile, gets all AAAA records from it and generated PTR records based on them.

What you need to do:

Edit the Zone header in the script.
Run the script with ./generate_v6_ptr.sh /path/to/zonefile.zone
This will output the zones on STDOUT. If you want to save this to a zonefile, you can use this example: ./generate_v6_ptr.sh /path/to/zonefile.zone > /etc/bind/ip6.arpa.zone
techwolf12
Sun, 08/02/2020 - 15:05

https://techwolf12.nl/blog/generating-ipv6-ptr-records-bind9-zonefile-using-bash
Generating a GPG key with smartcard and SSH Authentication
Generating a GPG key with smartcard and SSH Authentication

This document will get you step by step through the generation of a GPG smartcard key, with the correct subkeys for use on a smartcard like OpenPGP smartcard or the Yubikey. This will also allow you to use your GPG Authentication subkey for SSH support.
techwolf12
Sun, 09/13/2020 - 19:46

https://techwolf12.nl/blog/generating-gpg-key-smartcard-and-ssh-authentication
BGP Hijacking - What is it and how to prevent it?
BGP Hijacking - What is it and how to prevent it?

BGP stands for Border Gateway Protocol, more commonly known as the system that keeps the internet (and by definition, routing) working correctly. Sometimes misconfigurations (Like accidentally announcing a wrong prefix) can break the internet. In this blog post, I will explain BGP Hijacking and how to prevent it. Primarily for people without network experience.
techwolf12
Wed, 09/30/2020 - 17:04

https://techwolf12.nl/blog/bgp-hijacking-what-it-and-how-prevent-it
DMR Setup on Anytone D878UV with APRS/SMS
DMR Setup on Anytone D878UV with APRS/SMS

The Anytone D878UV is quite a nice DMR (Digital Mobile Radio) capable radio packed with features like APRS (Reporting only), Bluetooth and GPS. It's no surprise that this is my favourite DMR radio and I can recommend it if you are getting started with DMR for the first time. This post will help you get DMR up and running on your Anytone D878UV.
techwolf12
Fri, 11/13/2020 - 21:32

https://techwolf12.nl/blog/dmr-setup-anytone-d878uv-aprssms
Using RTMP for Streamlabs OBS (GoPro, Co-Streaming to multiple Channels)
Using RTMP for Streamlabs OBS (GoPro, Co-Streaming to multiple Channels)

Using a GoPro as a stream source over Wi-Fi? What about streaming from SLOBS to two Twitch channels at once? Having a dedicated recording machine? Streaming to multiple platforms? Maybe even host a LAN party with a commentary stream? You can use RTMP and a custom ingest for streaming. This way you are able to accomplish what you want. In this article, I will guide the setup and show examples for the different use cases. It can be a bit technical for most people, but I will be happy to help if you have questions.
techwolf12
Thu, 03/11/2021 - 21:12

https://techwolf12.nl/blog/using-rtmp-streamlabs-obs-gopro-co-streaming-multiple-channels
Counting water usage with the Watermeterkit
Counting water usage with the Watermeterkit

Watermeterkit is an awesome idea to count water usage on most Dutch watermeters. With these steps, it would be easy to add into Home Assistant to show usage in liters or m³.
techwolf12
Tue, 10/12/2021 - 12:55

https://techwolf12.nl/blog/counting-water-usage-watermeterkit
Using Python to migrate DigitalOcean domains to Terraform managed
Using Python to migrate DigitalOcean domains to Terraform managed

I was thinking about migrating some cloud services into Terraform, but we seemed to have too many domains. So I wrote a small python script that takes a domain, then using doctl (the DigitalOcean command line) it extracts all current records. After that it outputs the file into tf and also gives a import command to import the current state in Terraform state.
techwolf12
Tue, 03/15/2022 - 01:25

https://techwolf12.nl/blog/using-python-migrate-digitalocean-domains-terraform-managed
Hosting a successful GPG Keysigning Party

A GPG Keysigning party is an event where people verify each other's identity and sign their GPG keys. Doing so increases the effectiveness of the "Web of trust" and the total trust each key has.


Read more on: https://techwolf12.nl/blog/hosting-successful-gpg-keysigning-party
👍1
Hacking the parking gate
Hacking the parking gate
techwolf12
Wed, 11/23/2022 - 09:00

How we rapidly developed an internal tool from idea to prototype within a limited amount of time at Q42!



Read more on:
https://engineering.q42.nl/parking-hack/

https://techwolf12.nl/external-blog-redirect/hacking-parking-gate
👍1
Reverse SSH tunnel for port forwarding

Reverse SSH tunneling is a powerful tool that can be used to securely forward ports to or from remote servers to your local machine. It is especially useful when you don’t have direct access to a remote server, such as in a cloud environment. By creating a secure tunnel between the remote server and your local machine, you can access services on the remote server as if they were running on your own machine.
🔥21
OpenLDAP for sudo configuration and rights

We covered SSH Authentication and Linux user management using OpenLDAP in an article, now wouldn’t it be great if you could also manage sudo rules from a central place like an LDAP server? Luckily, sudo has support for this! This article will show you how to set this up within OpenLDAP and the sudo configuration on your Linux machine.
👏21
MySQL Tips and Tricks

Welcome to this practical guide filled with MySQL tips and tricks! Whether you’re a seasoned database administrator or just getting started with MySQL, these handy queries and techniques will help you manage your databases more efficiently.
4👍1