summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
3 daysenable mimic on ethernetXiao Pan
3 daysmetaXiao Pan
3 daysremove phantun, add mimic, add distccd-alarm-armv8Xiao Pan
3 daysremove phantun, because I switched to mimicXiao Pan
3 daysadd distccd port and accept that in nft so pp distcc can connectXiao Pan
3 daysdistccd config change to pp wg ip, and change portXiao Pan
Change to wg ip because stricter, safer. Also change to a port no one use.
3 daysadd defaultXiao Pan
5 daysssh config pp now use xyzpp.localXiao Pan
Because pp now use mdns. Because new router does not resolve xyzpp now.
6 daysssh ba via ipv4 because better optimized routeXiao Pan
6 daysuserjs add one situation when I need to disable RFP: web VNCXiao Pan
7 daysconfig nvim to let gq wrap Chinese sentencesXiao Pan
9 daysno more monerod upload limit, fuck ISPXiao Pan
9 daysmetaXiao Pan
9 daysadd and enable phantun_client serviceXiao Pan
9 daysmetaXiao Pan
9 daysswgp go through phantun, more see vc notesXiao Pan
11 daysadd free license blog to newsboat urlsXiao Pan
14 dayssun alias change longitude and latitudeXiao Pan
2025-07-19enable bluetooth, for a mouseXiao Pan
2025-07-16newsboat config to not ask me to enter after me remove a urlXiao Pan
2025-07-15comment replace empty line with # to represent those comments are all ↵Xiao Pan
related to next several lines of code
2025-07-15sshd allow from localhostXiao Pan
2025-07-15sshd config add comment about AllowUsers CIDR ip should be consistentXiao Pan
2025-07-15sshd config restrict only from wg ip to insp gitolite userXiao Pan
2025-07-15newsboat remove rfchost rss, because I no longer useXiao Pan
2025-07-15lower monerod upload speedXiao Pan
2025-07-15enable sshd to allow gitoliteXiao Pan
2025-07-14monero@.service more commentXiao Pan
2025-07-14nft only allow monerod-p2p port to wg_* network interfacesXiao Pan
Note I think this will not prevent monerod download things from public internet without wireguard tunnel. But a little more limit is still better, maybe upload will limit a little bit to wg_* network interfaces.
2025-07-14monerod@.service add more notes about using ↵Xiao Pan
sys-subsystem-net-devices-wg_ba.device
2025-07-14metaXiao Pan
2025-07-14run monerod only when all network thru wireguardXiao Pan
wg_ba network interface tunnels all network through wireguard to ba. I would like to only run monerod when this happened due to various reasons see comments in monerod@.service. Some measures I take are: systemd unit bind to wg_ba, networkmanager dispatcher stop monerod service pre wg_ba down, and vpn script kill monerod process before wg_ba down. The former two measures are in this commit. For bitmonero.conf, I also limit upload rate, reason see comment. I also enabled ipv6. I also try bind ip, which seems does not work, but I put there anyway.
2025-07-13monerod config wrong commentXiao Pan
2025-07-11studio and ru no need, remove themXiao Pan
2025-07-11updateXiao Pan
2025-07-11remove studio so remove sstm aliasXiao Pan
2025-07-11remove ssh-isp portXiao Pan
2025-07-10nft allow ssh from wg_* iifname, because I will let cfgs to pushXiao Pan
2025-07-10metaXiao Pan
2025-07-10I move studio website to ca so I will remove studio so ssh port config for ↵Xiao Pan
studio is not needed any more
2025-07-10add sshd config because I will enable sshdXiao Pan
2025-07-10change qrcp config network interface to wifi, because I movedXiao Pan
2025-07-09redshift use open-meteo lat. and lon. for current locationXiao Pan
2025-07-08ba ssh configXiao Pan
2025-07-08sudoers pacdiffXiao Pan
related upstream PR and commit: https://github.com/sudo-project/sudo/pull/427 https://github.com/sudo-project/sudo/commit/7c121ff8340c6fa551ba4997dde9d450cf74e40c
2025-07-04new ru vpsXiao Pan
2025-07-04insp if wg to ca, it seems I can `ssh -4 studio` but I cannot `ssh -6 ↵Xiao Pan
studio`, so I temp workaround it by ask ssh to connect to ipv4, more see vq notes
2025-07-03.bashrc alias nethogs also capture udpXiao Pan
2025-07-03ssh config remove aaXiao Pan
2025-07-03change timezone because I movedXiao Pan