Skip to main content

System Change log

    2026-07-28 Tuesday

      got warpgate to stop crashing but I'm not sure how I can use it for a web based terminal.. we'll see

      2026-07-26 Sunday

      • accidentally blocked the git users with the new firewall rules, allowed it to access the gitea service and we are able to upload again
      • started to set up warpgate as it looks like it can provide a shell that can login with OIDC

      2026-07-25 Saturday

      • replaced gemini-cli with opencode, it's way better
      • went through each docker service moving off of the default 1000 UID
      • removed broken web "shells"
        • Made a process to generate short lived ssh certs for web users to get a shell without typing a password but it felt really insecure and I think you could impersonate other users, so I killed it.

      2026-07-23 Thursday

      • Set nginx to cache large uploads on the ZFS array as / was filling up with video uploaded from immich
      • Set permanent redirects on short names in the browser for convenience, eg: http://photos -> https://photos.drheck.dev/

      2026-07-22 Wednesday

      • Configured rclone for Google drive and Proton drive. Added this to the backup scripts. Now we have automated on-line backups.
      • created rclone client config in Google's cloud console

      2026-07-21 Tuesday

      • transmission would timeout quickly since exposed behind authentik. After some research I modifed the nginx config to start forwarding $host, $remote_addr, $proxy_add_x_forwarded_for, and $scheme.

      2026-07-20 Monday

      • IPv6 netblock was wrong again. This time an IPv6 netblock change was detected then the network went out. This caused the API call to desec.io to fail. We were writing the new IPv6 netblock unconditionally though so no more updates were going to happen. Script is updated 1 2
      • also added logging to the desec.io call in change 2 ^

      2026-07-19 Sunday

      • Tested LDAP users
        • could log in but did not have the ability to choose the window environment
        • LDAP guide updated to fix this problem

      2026-07-17 Friday

      • LDAP guide updated to add systemd to shadow for NSS. This was breaking the graphical boot environment on Mitsuki's laptop.
      • write-up

      2026-07-16 Thursday

      • router updates
        • Remote IPv6 was not updated in public DNS. The router update script was failing to execute in cron
          • shebang was /usr/local/bin/bash but
          • cron executed /bin/ksh $script... (just openbsd things!)
          • fixed
        • also router IPv6 update script updated to use persistent storage for IPv6 address as a reboot would remove the older address
        • bad firewall rule forwarded all IPv6 traffic arriving on 22 to ul
          • fixed

      2026-07-13 Monday

      2026-07-12 Sunday

      • created "admin" specific firefox profile on desktop
      • cleared all old disparate passwords for the old individual service passwords
      • fixed www server for mitsuki
      • checked in kanji service in gitea
        • added bounding boxes
        • changed the stroke order color to be more legible and not run into the background

      2026-07-11 Saturday

      • created this server change log
      • added "backup_all" script to run each service backup
      • finally checked in backup/restore scripts
      • separated backup output into current and all previous to simplify disk backup
      • modified nginx config for immich, upload cap 30GB -> 100GB