Tag: libreops

  1. Making a Matrix server STUN-enabled.

    04 February 2020

    Previously in this series I showed you how to migrate a Matrix server to use Postgres, a database server designed for busy workloads, such as those of a busy chat server.  This time around I'll demonstrate how to integrate Synapse with a STUN/TURN server to make the voice and video conferencing features of the Matrix network more reliable.  It's remarkably easy to do but it does take a little planning.  Here's why I recommend doing this:

    If you are reading this, chances are you're behind a NATting firewall, which means that your device doesn't have a publically routable IP …

    Read more...

  2. Converting a Matrix server to use Postgres.

    29 January 2020

    In my last post about the Matrix network I covered how to set up a public Synapse server as well as a web-based client called Riot.  In so doing I left out a part of the process for the sake of clarity (because it's a hefty procedure and there's no reason not to break it down into logical modules), which was using a database back-end that's designed for workloads above and beyond what SQLite was meant for.  I'll be the first to tell you, I'm not a database professional, I don't know a whole lot about how to use or …

    Read more...

  3. Setting up a private Matrix server.

    21 January 2020

    EDIT - 20200804 - Updated the Nginx stanzas because the newer versions of Certbot do all the work of setting up SSL/TLS support for you, including the most basic Nginx settings.  If you have them there you'll run into trouble unless you delete them or comment them out.  Also, Certbot centralizes all of the appropriate SSL configuration and hardening settings into a single includable file (/etc/letsencrypt/options-ssl-nginx.conf) for ease of maintenance.

    A couple of years ago I spent some time trying to set up Matrix, a self-hosted instant messaging and chat system that works a little like Jabber, a …

    Read more...

  4. Rigging up Raspbian Buster to run on a Pi-Top

    14 January 2020

    It doesn't seem that long ago that I put together a Pi-Top and started tricking it out to use as a backup system.  It was problematic in some important ways (the keyboard's a bit wonky), but most of all the supported respin of Raspbian for use with the Pi-Top was really, really slow and a bit fragile.  While Windbringer was busy doing a full backup last week I took my Pi-Top for a spin while out and about, and to be blunt it was too bloody slow to use.  At first I figured that the microSD card I was using …

    Read more...

  5. Experimenting with btrfs in production.

    04 November 2019

    EDIT - 20230422 - Fixed the command to increase the amount of space used on a new and bigger drive. Also updated some of the links because the official btrfs page has changed.

    EDIT - 20230129 - Changed the btrfs replacement command a bit. Added a command block to force the SATA controller to rescan the devices available to it.

    EDIT - 20211120 - Edited the page so that it makes more sense. The last couple of edits were out of sequence. Cleaned up a few things, too.

    EDIT - 20211107 @ 1324 UTC-7 - Added how to monitor the drive replacement process.

    EDIT - 20201206 @ 2216 UTC-7 - Added how …

    Read more...

  6. How to move your /boot partition onto removable media.

    19 April 2014

    Part of every traveler's threat model today should include the following scenario:

    When you're trying to fly into or out of an airport en route to someplace else, it is entirely possible that the airport's security staff will take you aside for a more thorough search and questioning while your stuff is taken someplace out of your control and analyzed. We know that there are malware packages available today that boobytrap the boot device of laptop computers to install various forms of surveillance malware which run the next time you start your machine up and compromise the OS even though …

    Read more...

4 / 4