My Little Pocket Universe
Update (2022/02/08): Ubiquiti has acknowledged this is is a problem, and said it will be fixed in a future release. Update 2 (2022/03/04) Issue still not fixed with recent patches. No surprise. The Ubiquiti UDM Pro is, over all, a fantastic device. But they did make some spectacularly bad design decisions for a device that … Read more
MacOS has a nice facility as part of its DNS resolver that allows you to have a per-domain set of DNS servers. This is especially useful when using VPN services where you still need to use your local resolvers as well as the remote resolvers. Unfortunately, there is nowhere in the GUI to do this, … Read more
To add an extra layer of security to your server, especially when you are working on a shared client, you can add SSHFP records to the DNS record of the host. This allows the ssh client to pull the hash of the server from DNS to add an extra layer of verification that the host … Read more
While I was updating some settings with my bind server on Ubuntu 20, I noticed a lot of queries for “pizzaseo.com”, which appears to be some kind of marketing company trying to scrape for data. On reading out in forums about it, apparently they’re looking for vulnerable pi-hole servers that are exposed to the internet. … Read more
There are a lot of tutorials out in the netland, but almost all of them are out of date, or didn’t address my use case. I run my own domain (can you guess what it is?), and I wanted to allow a couple of users I have that don’t have static IP addresses to be … Read more
Install the certbot package. certbot certonly –apache -m postmaster@technomancer.com –agree-tos -d hostname.technomancer.com Make sure to add a CAA record for the domain to the relevant DNS zone: technomancer.com. IN CAA 128 … Read more