summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
45 hourscomment replace empty line with # to represent those comments are all ↵Xiao Pan
related to next several lines of code
45 hourssshd allow from localhostXiao Pan
2 dayssshd config add comment about AllowUsers CIDR ip should be consistentXiao Pan
2 dayssshd config restrict only from wg ip to insp gitolite userXiao Pan
2 daysnewsboat remove rfchost rss, because I no longer useXiao Pan
2 dayslower monerod upload speedXiao Pan
2 daysenable sshd to allow gitoliteXiao Pan
3 daysmonero@.service more commentXiao Pan
3 daysnft only allow monerod-p2p port to wg_* network interfacesXiao Pan
Note I think this will not prevent monerod download things from public internet without wireguard tunnel. But a little more limit is still better, maybe upload will limit a little bit to wg_* network interfaces.
3 daysmonerod@.service add more notes about using ↵Xiao Pan
sys-subsystem-net-devices-wg_ba.device
4 daysmetaXiao Pan
4 daysrun monerod only when all network thru wireguardXiao Pan
wg_ba network interface tunnels all network through wireguard to ba. I would like to only run monerod when this happened due to various reasons see comments in monerod@.service. Some measures I take are: systemd unit bind to wg_ba, networkmanager dispatcher stop monerod service pre wg_ba down, and vpn script kill monerod process before wg_ba down. The former two measures are in this commit. For bitmonero.conf, I also limit upload rate, reason see comment. I also enabled ipv6. I also try bind ip, which seems does not work, but I put there anyway.
4 daysmonerod config wrong commentXiao Pan
6 daysstudio and ru no need, remove themXiao Pan
6 daysupdateXiao Pan
6 daysremove studio so remove sstm aliasXiao Pan
6 daysremove ssh-isp portXiao Pan
7 daysnft allow ssh from wg_* iifname, because I will let cfgs to pushXiao Pan
7 daysmetaXiao Pan
7 daysI move studio website to ca so I will remove studio so ssh port config for ↵Xiao Pan
studio is not needed any more
7 daysadd sshd config because I will enable sshdXiao Pan
7 dayschange qrcp config network interface to wifi, because I movedXiao Pan
8 daysredshift use open-meteo lat. and lon. for current locationXiao Pan
9 daysba ssh configXiao Pan
9 dayssudoers pacdiffXiao Pan
related upstream PR and commit: https://github.com/sudo-project/sudo/pull/427 https://github.com/sudo-project/sudo/commit/7c121ff8340c6fa551ba4997dde9d450cf74e40c
13 daysnew ru vpsXiao Pan
13 daysinsp if wg to ca, it seems I can `ssh -4 studio` but I cannot `ssh -6 ↵Xiao Pan
studio`, so I temp workaround it by ask ssh to connect to ipv4, more see vq notes
2025-07-03.bashrc alias nethogs also capture udpXiao Pan
2025-07-03ssh config remove aaXiao Pan
2025-07-03change timezone because I movedXiao Pan
2025-07-02change redshift location because I movedXiao Pan
2025-07-02ib ssh change default to use ipv6Xiao Pan
Because if I wg to ib, ssh will use ipv4 instead of ipv6. Because I use ipvlan on ib, so I can't connect to ib's ipv4 so I need to connect to ib's ipv6 instead.
2025-07-02fcitx5 new version config changeXiao Pan
2025-06-22pacdiffXiao Pan
2025-06-20newsboat add bandwagonhost.net rss because sometimes good offer newsXiao Pan
2025-06-18newsboat add rfchost announcements rss feedXiao Pan
2025-06-15add danctnix Mastodon rss, because it has updates about danctnix for my ↵Xiao Pan
pinephone
2025-06-14add BAR for game, git-filter-repo for remove old commitsXiao Pan
2025-06-14change neomutt hotkey for change mail server, because old hotkey I cannot ↵Xiao Pan
remember
2025-06-14Backup ssh keyXiao Pan
Because I do not track ssh key via cfgs any more. I need to backup another copy to ib to follow 321 backup rule. Now I got this ssh key copies at pp, insp, studio, and ib. Only ib is the remote backup.
2025-06-12enable a rss urlXiao Pan
2025-06-06organize newsboat urlsXiao Pan
2025-06-06Found xlibre, so remove rssXiao Pan
2025-06-05Add Lunduke yt channel RSSXiao Pan
Because I want to keep track of https://youtu.be/iwaaSatk0pI xlibre (xorg fork). Also because that video, I think this channel can give me useful news I need.
2025-06-02Globally disable pipewire.socket user unitXiao Pan
I don't want to use pipewire. I don't want pipewire.service to start. Even though I disabled pipewire.service, pipewire.service will still be somehow started by pipewire.socket after first time I ran `mpva` after boot. So I decided to disable it globally with `sudo systemctl disable --global pipewire.socket`. Note, `systemctl --user disable pipewire.socket` does not work because it is globally enabled in post_install function in .install script in PKGBUILD package see [0]. Thanks to [1] I know the correct way is to use --global to remove global user unit, which removes /etc/systemd/user/sockets.target.wants/pipewire.socket symlink. [0] https://gitlab.archlinux.org/archlinux/packaging/packages/pipewire/-/blob/main/pipewire.install?ref_type=heads#L1-4. [1] https://github.com/systemd/systemd/issues/18271
2025-06-01Building some pkg need glib2-develXiao Pan
aur/chatty-git and aur/phosh-osk-stub-git without glib2-devel pkg will error: > Dependency 'glib-2.0' tool variable 'glib_mkenums' contains erroneous value: '/usr/bin/glib-mkenums' > This is a distributor issue -- please report it to your glib-2.0 provider. It might be their pkgbuild miss glib2-devel as makedeps tho. But I choose to install glib2-devel to prevent similar situation happen again.
2025-05-30add SavvyNik yt channel feed, good linux kernel mailing list related contentXiao Pan
2025-05-29add cargo-flamegraph pkgXiao Pan
2025-05-26Add and remove appsXiao Pan
Add osmin and remove mepo, because osmin much better. Add glib2-docs, gtk4-docs, and gtk4-demos for better programming software using gtk and glib docs.
2025-05-21newsboat url remove arch bbs, add linmobXiao Pan
Remove Arch bbs rss because I now subscribe to that post instead, so I can get email notification instead. Add linmob because it sometimes have useful info.
generated by cgit v1.2.3-70-g09d2 (git 2.50.1) at 2025-07-17 08:07:06 +0000