summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
36 hoursenable bluetooth, for a mouseXiao Pan
5 daysnewsboat config to not ask me to enter after me remove a urlXiao Pan
5 dayscomment replace empty line with # to represent those comments are all ↵Xiao Pan
related to next several lines of code
5 dayssshd allow from localhostXiao Pan
5 dayssshd config add comment about AllowUsers CIDR ip should be consistentXiao Pan
5 dayssshd config restrict only from wg ip to insp gitolite userXiao Pan
6 daysnewsboat remove rfchost rss, because I no longer useXiao Pan
6 dayslower monerod upload speedXiao Pan
6 daysenable sshd to allow gitoliteXiao Pan
6 daysmonero@.service more commentXiao Pan
6 daysnft only allow monerod-p2p port to wg_* network interfacesXiao Pan
Note I think this will not prevent monerod download things from public internet without wireguard tunnel. But a little more limit is still better, maybe upload will limit a little bit to wg_* network interfaces.
6 daysmonerod@.service add more notes about using ↵Xiao Pan
sys-subsystem-net-devices-wg_ba.device
7 daysmetaXiao Pan
7 daysrun monerod only when all network thru wireguardXiao Pan
wg_ba network interface tunnels all network through wireguard to ba. I would like to only run monerod when this happened due to various reasons see comments in monerod@.service. Some measures I take are: systemd unit bind to wg_ba, networkmanager dispatcher stop monerod service pre wg_ba down, and vpn script kill monerod process before wg_ba down. The former two measures are in this commit. For bitmonero.conf, I also limit upload rate, reason see comment. I also enabled ipv6. I also try bind ip, which seems does not work, but I put there anyway.
7 daysmonerod config wrong commentXiao Pan
9 daysstudio and ru no need, remove themXiao Pan
9 daysupdateXiao Pan
10 daysremove studio so remove sstm aliasXiao Pan
10 daysremove ssh-isp portXiao Pan
10 daysnft allow ssh from wg_* iifname, because I will let cfgs to pushXiao Pan
10 daysmetaXiao Pan
10 daysI move studio website to ca so I will remove studio so ssh port config for ↵Xiao Pan
studio is not needed any more
10 daysadd sshd config because I will enable sshdXiao Pan
11 dayschange qrcp config network interface to wifi, because I movedXiao Pan
12 daysredshift use open-meteo lat. and lon. for current locationXiao Pan
12 daysba ssh configXiao Pan
13 dayssudoers pacdiffXiao Pan
related upstream PR and commit: https://github.com/sudo-project/sudo/pull/427 https://github.com/sudo-project/sudo/commit/7c121ff8340c6fa551ba4997dde9d450cf74e40c
2025-07-04new ru vpsXiao Pan
2025-07-04insp if wg to ca, it seems I can `ssh -4 studio` but I cannot `ssh -6 ↵Xiao Pan
studio`, so I temp workaround it by ask ssh to connect to ipv4, more see vq notes
2025-07-03.bashrc alias nethogs also capture udpXiao Pan
2025-07-03ssh config remove aaXiao Pan
2025-07-03change timezone because I movedXiao Pan
2025-07-02change redshift location because I movedXiao Pan
2025-07-02ib ssh change default to use ipv6Xiao Pan
Because if I wg to ib, ssh will use ipv4 instead of ipv6. Because I use ipvlan on ib, so I can't connect to ib's ipv4 so I need to connect to ib's ipv6 instead.
2025-07-02fcitx5 new version config changeXiao Pan
2025-06-22pacdiffXiao Pan
2025-06-20newsboat add bandwagonhost.net rss because sometimes good offer newsXiao Pan
2025-06-18newsboat add rfchost announcements rss feedXiao Pan
2025-06-15add danctnix Mastodon rss, because it has updates about danctnix for my ↵Xiao Pan
pinephone
2025-06-14add BAR for game, git-filter-repo for remove old commitsXiao Pan
2025-06-14change neomutt hotkey for change mail server, because old hotkey I cannot ↵Xiao Pan
remember
2025-06-14Backup ssh keyXiao Pan
Because I do not track ssh key via cfgs any more. I need to backup another copy to ib to follow 321 backup rule. Now I got this ssh key copies at pp, insp, studio, and ib. Only ib is the remote backup.
2025-06-12enable a rss urlXiao Pan
2025-06-06organize newsboat urlsXiao Pan
2025-06-06Found xlibre, so remove rssXiao Pan
2025-06-05Add Lunduke yt channel RSSXiao Pan
Because I want to keep track of https://youtu.be/iwaaSatk0pI xlibre (xorg fork). Also because that video, I think this channel can give me useful news I need.
2025-06-02Globally disable pipewire.socket user unitXiao Pan
I don't want to use pipewire. I don't want pipewire.service to start. Even though I disabled pipewire.service, pipewire.service will still be somehow started by pipewire.socket after first time I ran `mpva` after boot. So I decided to disable it globally with `sudo systemctl disable --global pipewire.socket`. Note, `systemctl --user disable pipewire.socket` does not work because it is globally enabled in post_install function in .install script in PKGBUILD package see [0]. Thanks to [1] I know the correct way is to use --global to remove global user unit, which removes /etc/systemd/user/sockets.target.wants/pipewire.socket symlink. [0] https://gitlab.archlinux.org/archlinux/packaging/packages/pipewire/-/blob/main/pipewire.install?ref_type=heads#L1-4. [1] https://github.com/systemd/systemd/issues/18271
2025-06-01Building some pkg need glib2-develXiao Pan
aur/chatty-git and aur/phosh-osk-stub-git without glib2-devel pkg will error: > Dependency 'glib-2.0' tool variable 'glib_mkenums' contains erroneous value: '/usr/bin/glib-mkenums' > This is a distributor issue -- please report it to your glib-2.0 provider. It might be their pkgbuild miss glib2-devel as makedeps tho. But I choose to install glib2-devel to prevent similar situation happen again.
2025-05-30add SavvyNik yt channel feed, good linux kernel mailing list related contentXiao Pan
2025-05-29add cargo-flamegraph pkgXiao Pan