summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
3 daysadd and enable phantun_client serviceXiao Pan
3 daysmetaXiao Pan
3 daysswgp go through phantun, more see vc notesXiao Pan
5 daysadd free license blog to newsboat urlsXiao Pan
7 dayssun alias change longitude and latitudeXiao Pan
8 daysenable bluetooth, for a mouseXiao Pan
11 daysnewsboat config to not ask me to enter after me remove a urlXiao Pan
12 dayscomment replace empty line with # to represent those comments are all ↵Xiao Pan
related to next several lines of code
12 dayssshd allow from localhostXiao Pan
12 dayssshd config add comment about AllowUsers CIDR ip should be consistentXiao Pan
12 dayssshd config restrict only from wg ip to insp gitolite userXiao Pan
12 daysnewsboat remove rfchost rss, because I no longer useXiao Pan
12 dayslower monerod upload speedXiao Pan
12 daysenable sshd to allow gitoliteXiao Pan
13 daysmonero@.service more commentXiao Pan
13 daysnft only allow monerod-p2p port to wg_* network interfacesXiao Pan
Note I think this will not prevent monerod download things from public internet without wireguard tunnel. But a little more limit is still better, maybe upload will limit a little bit to wg_* network interfaces.
13 daysmonerod@.service add more notes about using ↵Xiao Pan
sys-subsystem-net-devices-wg_ba.device
2025-07-14metaXiao Pan
2025-07-14run monerod only when all network thru wireguardXiao Pan
wg_ba network interface tunnels all network through wireguard to ba. I would like to only run monerod when this happened due to various reasons see comments in monerod@.service. Some measures I take are: systemd unit bind to wg_ba, networkmanager dispatcher stop monerod service pre wg_ba down, and vpn script kill monerod process before wg_ba down. The former two measures are in this commit. For bitmonero.conf, I also limit upload rate, reason see comment. I also enabled ipv6. I also try bind ip, which seems does not work, but I put there anyway.
2025-07-13monerod config wrong commentXiao Pan
2025-07-11studio and ru no need, remove themXiao Pan
2025-07-11updateXiao Pan
2025-07-11remove studio so remove sstm aliasXiao Pan
2025-07-11remove ssh-isp portXiao Pan
2025-07-10nft allow ssh from wg_* iifname, because I will let cfgs to pushXiao Pan
2025-07-10metaXiao Pan
2025-07-10I move studio website to ca so I will remove studio so ssh port config for ↵Xiao Pan
studio is not needed any more
2025-07-10add sshd config because I will enable sshdXiao Pan
2025-07-10change qrcp config network interface to wifi, because I movedXiao Pan
2025-07-09redshift use open-meteo lat. and lon. for current locationXiao Pan
2025-07-08ba ssh configXiao Pan
2025-07-08sudoers pacdiffXiao Pan
related upstream PR and commit: https://github.com/sudo-project/sudo/pull/427 https://github.com/sudo-project/sudo/commit/7c121ff8340c6fa551ba4997dde9d450cf74e40c
2025-07-04new ru vpsXiao Pan
2025-07-04insp if wg to ca, it seems I can `ssh -4 studio` but I cannot `ssh -6 ↵Xiao Pan
studio`, so I temp workaround it by ask ssh to connect to ipv4, more see vq notes
2025-07-03.bashrc alias nethogs also capture udpXiao Pan
2025-07-03ssh config remove aaXiao Pan
2025-07-03change timezone because I movedXiao Pan
2025-07-02change redshift location because I movedXiao Pan
2025-07-02ib ssh change default to use ipv6Xiao Pan
Because if I wg to ib, ssh will use ipv4 instead of ipv6. Because I use ipvlan on ib, so I can't connect to ib's ipv4 so I need to connect to ib's ipv6 instead.
2025-07-02fcitx5 new version config changeXiao Pan
2025-06-22pacdiffXiao Pan
2025-06-20newsboat add bandwagonhost.net rss because sometimes good offer newsXiao Pan
2025-06-18newsboat add rfchost announcements rss feedXiao Pan
2025-06-15add danctnix Mastodon rss, because it has updates about danctnix for my ↵Xiao Pan
pinephone
2025-06-14add BAR for game, git-filter-repo for remove old commitsXiao Pan
2025-06-14change neomutt hotkey for change mail server, because old hotkey I cannot ↵Xiao Pan
remember
2025-06-14Backup ssh keyXiao Pan
Because I do not track ssh key via cfgs any more. I need to backup another copy to ib to follow 321 backup rule. Now I got this ssh key copies at pp, insp, studio, and ib. Only ib is the remote backup.
2025-06-12enable a rss urlXiao Pan
2025-06-06organize newsboat urlsXiao Pan
2025-06-06Found xlibre, so remove rssXiao Pan