summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
4 daysremove phantun, because I switched to mimicXiao Pan
4 daysadd distccd port and accept that in nft so pp distcc can connectXiao Pan
4 daysdistccd config change to pp wg ip, and change portXiao Pan
Change to wg ip because stricter, safer. Also change to a port no one use.
4 daysadd defaultXiao Pan
6 daysssh config pp now use xyzpp.localXiao Pan
Because pp now use mdns. Because new router does not resolve xyzpp now.
6 daysssh ba via ipv4 because better optimized routeXiao Pan
6 daysuserjs add one situation when I need to disable RFP: web VNCXiao Pan
7 daysconfig nvim to let gq wrap Chinese sentencesXiao Pan
9 daysno more monerod upload limit, fuck ISPXiao Pan
10 daysmetaXiao Pan
10 daysadd and enable phantun_client serviceXiao Pan
10 daysmetaXiao Pan
10 daysswgp go through phantun, more see vc notesXiao Pan
11 daysadd free license blog to newsboat urlsXiao Pan
14 dayssun alias change longitude and latitudeXiao Pan
2025-07-19enable bluetooth, for a mouseXiao Pan
2025-07-16newsboat config to not ask me to enter after me remove a urlXiao Pan
2025-07-15comment replace empty line with # to represent those comments are all ↵Xiao Pan
related to next several lines of code
2025-07-15sshd allow from localhostXiao Pan
2025-07-15sshd config add comment about AllowUsers CIDR ip should be consistentXiao Pan
2025-07-15sshd config restrict only from wg ip to insp gitolite userXiao Pan
2025-07-15newsboat remove rfchost rss, because I no longer useXiao Pan
2025-07-15lower monerod upload speedXiao Pan
2025-07-15enable sshd to allow gitoliteXiao Pan
2025-07-14monero@.service more commentXiao Pan
2025-07-14nft only allow monerod-p2p port to wg_* network interfacesXiao Pan
Note I think this will not prevent monerod download things from public internet without wireguard tunnel. But a little more limit is still better, maybe upload will limit a little bit to wg_* network interfaces.
2025-07-14monerod@.service add more notes about using ↵Xiao Pan
sys-subsystem-net-devices-wg_ba.device
2025-07-14metaXiao Pan
2025-07-14run monerod only when all network thru wireguardXiao Pan
wg_ba network interface tunnels all network through wireguard to ba. I would like to only run monerod when this happened due to various reasons see comments in monerod@.service. Some measures I take are: systemd unit bind to wg_ba, networkmanager dispatcher stop monerod service pre wg_ba down, and vpn script kill monerod process before wg_ba down. The former two measures are in this commit. For bitmonero.conf, I also limit upload rate, reason see comment. I also enabled ipv6. I also try bind ip, which seems does not work, but I put there anyway.
2025-07-13monerod config wrong commentXiao Pan
2025-07-11studio and ru no need, remove themXiao Pan
2025-07-11updateXiao Pan
2025-07-11remove studio so remove sstm aliasXiao Pan
2025-07-11remove ssh-isp portXiao Pan
2025-07-10nft allow ssh from wg_* iifname, because I will let cfgs to pushXiao Pan
2025-07-10metaXiao Pan
2025-07-10I move studio website to ca so I will remove studio so ssh port config for ↵Xiao Pan
studio is not needed any more
2025-07-10add sshd config because I will enable sshdXiao Pan
2025-07-10change qrcp config network interface to wifi, because I movedXiao Pan
2025-07-09redshift use open-meteo lat. and lon. for current locationXiao Pan
2025-07-08ba ssh configXiao Pan
2025-07-08sudoers pacdiffXiao Pan
related upstream PR and commit: https://github.com/sudo-project/sudo/pull/427 https://github.com/sudo-project/sudo/commit/7c121ff8340c6fa551ba4997dde9d450cf74e40c
2025-07-04new ru vpsXiao Pan
2025-07-04insp if wg to ca, it seems I can `ssh -4 studio` but I cannot `ssh -6 ↵Xiao Pan
studio`, so I temp workaround it by ask ssh to connect to ipv4, more see vq notes
2025-07-03.bashrc alias nethogs also capture udpXiao Pan
2025-07-03ssh config remove aaXiao Pan
2025-07-03change timezone because I movedXiao Pan
2025-07-02change redshift location because I movedXiao Pan
2025-07-02ib ssh change default to use ipv6Xiao Pan
Because if I wg to ib, ssh will use ipv4 instead of ipv6. Because I use ipvlan on ib, so I can't connect to ib's ipv4 so I need to connect to ib's ipv6 instead.
2025-07-02fcitx5 new version config changeXiao Pan