Advanced Search
Search Results
110 total results found
No Board Maintenance
Tools
Notes
drawpile notes
drawpile session: https://drawpile.net/invites/drawpile.drheck.dev/01kwsr8pem4gyx0bra855x7eha?v1&web#cheese https://web.drawpile.net/
Server
server setup stuff
LDAP+PAM+SSH CA
The Book of TODO
TODO List
Self Hosted Chat Options 1. Team & Workspace Chat (Slack / Discord Alternatives) Zulip Description: Threaded stream-and-topic messaging designed for asynchronous communication. Authentik Integration: Native Generic OpenID Connect (OIDC) support included in the...
authentik service creation
Command line Service creation
✦ Here is a comprehensive step-by-step guide explaining how to programmatically configure a proxy-protected application from scratch in Authentik using the command-line Django shell. --- CLI Guide: Configuring an Authentik Application & Proxy Provider fr...
LDAP + SSSD Client Enrollment Guide
How to enroll Linux machines into the drheck.dev Authentik LDAP directory service using SSSD, with offline credential caching, dual-stack LAN failover, and GDM graphical login integration. 1. Architecture & Authentication Pipeline $$ \text{Client PAM / NSS} \...
SSH CA setup
OVERVIEW & ARCHITECTURE Authentication Flow: Incoming SSH clients authenticate using an OpenSSH user certificate signed by the server's User Certificate Authority (CA). Similarly, clients verify host identity using an OpenSSH host certificate signed by the Hos...
Auto-Generate Signed SSH Keys
1. Authentik Stores the User CA Private Key: Upload drheck_ca_user_key (unencrypted or with a known passphrase) into Authentik under System -> Certificates. 2. Create an Authentik Python Policy/Execution Flow: You create an API endpoint in Auth...
System Setup
System Change log
2026-10-19 Monday Complete 30-Service / 40-Container Rootless Podman Cutover & Docker Decommissioning ( ul): Decommissioned docker.service, docker.socket, and containerd.service completely ( inactive / disabled), removed all 10 leftover Docker kernel bridge...
NSS + GDM Issue
1. GDM Requests a Dynamic User When GDM starts up it attempts to launch the graphical login screen. For security isolation GDM requests a session for a systemd dynamic user named gdm-greeter from systemd-logind. Systemd dynamically allocated a UID (60578 in ...