K1VZX

By default, QEMU installs graphical tools under Gnome. You can administer a virtual machine through Gnome from a console. However, if you’re remotely accessing the machine through RDP this can prove problematic because of RDP woes. With VNC, and CLI commands, you can control a QEMU VM completely over SSH and still access the graphical console. Setting up a network bridge Just remember that when setting up the bridge, your physical interface has to be down with nothing tied to it. This means physically accessing the machine unless you have multiple network cards connected. Multiple NICs is handy for firewalls on internet connected systems. CLI… Read More »A guide to QEMU for Ubuntu 24.04 LTS

I’m in a program right now for therapy for my health, and I thought I would write about laptops today. In particular, nobody really talks much about cheap technology except for nostalgia purposes or because they need to for a logistics reason (so to speak) because of legacy hardware that needs to be supported for expensive projects or so. However, sometimes cheap technology is also disposable. An expensive workstation laptop might be fine for telecommuting in safe places, but if I want to walk around sketchy areas of town and take my hotspot with me for internet or walk around places I haven’t been before… Read More »The disposable “survival” laptop

Webmin by default allows root access to a system, and by default allows terminal access to the root user. Care should be taken to properly setup Webmin to disable the root user. Enable Two-Factor Authentication TOTP authentication can be enabled without installing any extra modules. Enable it by allowing TOTP Authentication in the Webmin configuration. Then, for each user enable TOTP authentication separately and save the resulting QR code (authentication key) into a password manager like Bitwarden or Microsoft authenticator. Make sure to test your two factor authentication for each user before you continue. Root should probably have this setup before you disable it. Disable… Read More »A note on securing Webmin

Since I use nginx and varnish with WordPress (and lighttpd as the webserver), I was interested in using nginx to remove the index.php “directory” that is added to WordPress URLs. Perhaps this can be disabled with a more appropriate WordPress configuration, however since I didn’t want to mess with that, I did it myself. The code is “simple,” however it took a few hours to figure out. if ($uri ~ index.php){ set $redirect_allow 1;}if ($uri !~ ((154)|(admin-ajax.php))){ set $redirect_allow 1$redirect_allow;}if ($redirect_allow = 11){ rewrite ^\/(index.php)\/(.*)$ /$2 redirect;}if ($uri !~ ((!((\/)!(.+))))|(\/index.php\/(.)$)|(\/(wp-admin)(.))|(\/(wp-content)(.))|(\/(wp-login)(.))|(\/(wp-includes)(.*)))# If the URL is not empty, or it doesn’t contain index.php or or doesn’t contain… Read More »Removing index.php from WordPress URLs with nginx

This guide will show you how to setup an interface will be routed through Wireguard (which is then routed through your primary internet connection). With DHCP, you can auto-assign IP addresses even though the gateway has a static IP address. You can even setup IPv6 without NAT so your IPv6 addresses are public facing and routed IP addresses, which means connections to IPv6 addresses from your VPS will be able to connect directly to the systems on your VPN interface. By extension, this can be translated into a VLAN, however that will not be shown in this guide. Let’s get started. Setup your BuyVM Slice… Read More »OPNsense: A wireguard interface and BuyVM

Pittsburgh DNS is announced today. Check out the page here. Thanks for your interest.