Search Results

drawpile session: https://drawpile.net/invites/drawpile.drheck.dev/01kwsr8pem4gyx0bra855x7eha?v1&web#cheese   https://web.drawpile.net/

Self Hosted Chat Options 1. Team & Workspace Chat (Slack / Discord Alternatives) Zulip Description: Threaded stream-and-topic messaging designed for asynchronous communication. Authentik Integration: Native Generic OpenID Connect (OIDC) support included in the...

✦ Here is a comprehensive step-by-step guide explaining how to programmatically configure a proxy-protected application from scratch in Authentik using the command-line   Django shell.   ---   CLI Guide: Configuring an Authentik Application & Proxy Provider fr...

How to enroll Linux machines into the drheck.dev Authentik LDAP directory service using SSSD, with offline credential caching, dual-stack LAN failover, and GDM graphical login integration. 1. Architecture & Authentication Pipeline $$ \text{Client PAM / NSS} \...

OVERVIEW & ARCHITECTURE Authentication Flow: Incoming SSH clients authenticate using an OpenSSH user certificate signed by the server's User Certificate Authority (CA). Similarly, clients verify host identity using an OpenSSH host certificate signed by the Hos...

   1. Authentik Stores the User CA Private Key:      Upload drheck_ca_user_key (unencrypted or with a known passphrase) into Authentik under System -> Certificates.    2. Create an Authentik Python Policy/Execution Flow:      You create an API endpoint in Auth...

2026-10-19 Monday Complete 30-Service / 40-Container Rootless Podman Cutover & Docker Decommissioning ( ul): Decommissioned docker.service, docker.socket, and containerd.service completely ( inactive / disabled), removed all 10 leftover Docker kernel bridge...

1. GDM Requests a Dynamic User When GDM starts up it attempts to launch the graphical login screen. For security isolation GDM requests a session for a systemd dynamic user named gdm-greeter from systemd-logind. Systemd dynamically allocated a UID (60578 in ...

This is a browser-based SSH terminal service ( webshell.drheck.dev) authenticated via Authentik Single Sign-On (SSO) and short-lived OpenSSH certificates signed by Smallstep ( step-ca), running under rootless Podman Quadlets ( docker-data, UID 1100). 1. Archi...

Archived / Decommissioned (2026-10-19): Kasm Workspaces on ul has been decommissioned. This page is retained as an archival reference for container packaging and KasmVNC configuration. This guide covers the technical workflow for packaging desktop GUI applica...

Webshell Configuration Guide Per-user web terminal preferences are stored in ~/.config/webshell/. Directory Structure ~/.config/webshell/ ├── config.json # Theme, font size, and cursor settings └── fonts/ # Dir for local fonts └── font.woff...

Current Luke https://keys.openpgp.org/search?q=lukeisgreat@gmail.com pub rsa4096 2019-11-30 [SC] 9F9AC4567EDC8E2B86E5CB9475D6600BEF4E8E8F uid Luke Tidd <lukeisgreat@gmail.com> sub rsa4096 2019-11-30 [E] -----BEGIN PGP PUBLIC KEY BLOCK----- Comment:...

1. Overview & Architectural Concept This document outlines the distributed intrusion detection and perimeter enforcement setup across the local infrastructure ( drheck.dev). [ Public Internet (WAN) ] ...

Runtime Architecture Note: All 30 containerized applications on ul run under rootless Podman Quadlets ( docker-data, UID 1100) fronted by Nginx TLS + Authentik SSO on dedicated eth77 ULA IPv6 addresses. See podman for full operational reference. Anchor Anch...

Detail of command execution auditing and tracking across human SSH sessions and AI agent sessions ( amux). Part 1: Arch Linux ( ul, bmo95, studio-kvm-ssh) The Linux Audit Framework ( auditd) captures execve system calls triggered by human user sessions ( au...

OpenCode CLI & TUI Complete Usage Guide A comprehensive guide covering keyboard shortcuts, interface modes, configuration, and best practices for the OpenCode interactive CLI/TUI agent. 1. Core UI Navigation & Keybinds OpenCode uses a Leader Key system to avoi...

Gmail Setup for NeoMutt This guide covers configuring NeoMutt to send and receive emails using a Gmail account via IMAP and SMTP, including Google Account security setup, GPG password encryption, and sidebar configuration. 1. Prerequisites & Google Account Con...

This guide translates familiar Gmail web UI concepts into NeoMutt workflows. It covers interface navigation, reading, replying, searching, composing, attaching files, and sending emails directly from the command line. 1. Key Concepts: Gmail vs. NeoMutt Gmail C...