Security is essential for a GNU/Linux VPS (virtual private server) because attackers actively search for vulnerable servers to exploit.

Imagine hosting a website or some other service hosted on a VPS, and an attacker guesses the default password or exploits a known vulnerability, installs malware, and now what? Your customers’ data might be in danger, and you risk damaging your reputation.

In this post, you will explore the ways to secure a GNU/Linux VPS to ensure that you and your customers are safe.

In this blog we are going to learn the format of systemd timers and their onCalendar field. You can find what systemd timers are and why they are a better alternative to cron over here

Welcome to Grafana Labs Learning Journeys. At Grafana Labs, our top priority is your success, and we’re dedicated to supporting you every step of the way.

A Learning Journey offers a clear and organized path to mastering our platform. Each step includes expert guidance based on what we know works well. You also have the flexibility to explore related side journeys along the way.

Whether you are an administrator managing thousands of users or a hobbyist, our Learning Journeys provide an effective way to quickly gain value.

Select one of our journeys to start your path toward Grafana mastery!

Les gens supposent souvent que tout développeur doit savoir comment déployer une application sur un serveur distant. En réalité, beaucoup ne sont pas à l’aise avec la mise en production d’un site web.

Dans cet article, nous allons déployer une application AdonisJS sur un serveur de type VPS tournant sur Ubuntu 24.04. Il faut savoir que la démarche sera identique, peu importe le framework que vous utilisez.

• Introduction to SSH
• How SSH Works: A Behind-the-Scenes Look
• Setting Up SSH on a Server
• Establishing Your First SSH Connection
• Securing Your SSH Connection
• Advanced SSH Configuration Options
• SSH Tunneling and Port Forwarding
• Automating SSH Connections and Tasks
• Using SSH with Other Protocols
• Troubleshooting SSH Issues
• Performance Optimization for SSH
• Best Practices for SSH Key Management
• SSH for Remote System Administration
• SSH Alternatives and Comparisons
• Conclusion

Dans la mesure où tu as installé les pilotes génériques lors du déploiement de ta distro, Linux se contrefout du matériel sur lequel il tourne et c’est probablement pour ça qu’il existe depuis plus longtemps des LiveCD pour utiliser les distros Linux que des WinPe.

Dans cet article, nous expliquons comment installer FreePBX 17, la dernière version du système de téléphonie open-source le plus utilisé au monde.

FreePBX est un logiciel de téléphonie open-source pour les entreprises et les centres de contact (call center).

Techniquement, c’est un logiciel qui tourne sur une distribution GNU/Linux et offre des fonctionnalités de téléphonie complète administrable simplement depuis une interface graphique en mode web.

FreePBX se combine avec des téléphones IP et des trunk SIP permettant la mise en œuvre d’une solution de téléphonie complète et open-source.

FreePBX est développé par la société Sangoma et par sa communauté de développeurs et de contributeurs.

La première version de FreePBX a été publiée en 2004.

Sangoma est également l’éditeur derrière le logiciel Asterisk, qui est un framework open-source de téléphonie.

FreePBX repose sur le framework Asterisk.

• Documentation FreePBX – boxIP
• PBX GUI - Sangoma Documentation

Retrouvez ici la liste de toutes les applications Docker présentes sur belginux. Il suffit de cliquer sur l'image pour atteindre le tutoriel. Il me reste à peaufiner certains classements qui sont un peu à la masse, ça vient. 😃

Umami makes it easy to collect, analyze, and understand your website data — so you can focus on growth

• Overview – Docs - Umami
• umami-software/umami Umami is a simple, fast, privacy-focused alternative to Google Analytics.

With Amnezia, you can create a VPN on your own server with high privacy requirements.

More than a VPN
Access resources blocked in your region or create your own private VPN with ease

Audiobookshelf is an open-source self-hosted media server for your audiobooks and podcasts.

Features include...

• Companion android and iOS app w/ offline listening (in beta)
• Multi-user support w/ custom permissions
• Keeps progress per user and syncs across devices
• Lookup and apply metadata and cover art from several providers
• Audiobook chapter editor w/ chapter lookup
• Audiobook tools: Embed metadata in audio files & merge multiple audio files to a single m4b
• Search and add podcasts to download episodes w/ auto-download
• Open RSS feeds for audiobooks and podcast episodes
• Backups with automated backup scheduling
• Basic ebook support and ereader (epub, pdf, cbr, cbz) + send to device (i.e. Kindle)
• And much more...

advplyr/audiobookshelf Self-hosted audiobook and podcast server

Technitium DNS Server is an open source authoritative as well as recursive DNS server that can be used for self hosting a DNS server for privacy & security. It works out-of-the-box with no or minimal configuration and provides a user friendly web console accessible using any modern web browser.

Nobody really bothers about domain name resolution since it works automatically behind the scenes and is complex to understand. Most computer software use the operating system's DNS resolver that usually query the configured ISP's DNS server using UDP protocol. This way works well for most people but, your ISP can see and control what website you can visit even when the website employ HTTPS security. Not only that, some ISPs can redirect, block or inject content into websites you visit even when you use a different DNS provider like Google DNS or Cloudflare DNS. Having Technitium DNS Server configured to use DNS-over-TLS, DNS-over-HTTPS, or DNS-over-QUIC encrypted DNS protocols with forwarders, these privacy & security issues can be mitigated very effectively.

With feedless, you can create RSS feeds from most websites, or refine existing feeds. Feeds are created in an interactive builder, and may be improved using elaborate filters and plugins. Integration to 2rd parties like telegram is build-in. Its highly customizable and even JavaScript based websites are supported. There is zero-risk, cause all sources are available on github and you can host it yourself.

feedless/docs at master · damoebfeedless · GitHub

Maybe is a _fully open-source (GitHub repo with 34.3k stars) OS for your personal finances built by a small team alongside an incredible community.

Modern, powerful, affordable platform to manage your customer relationships

twentyhq/twenty: Building a modern alternative to Salesforce, powered by the community.

ALTCHA is a free Captcha alternative that uses a proof-of-work mechanism to protect your website, and online services from spam.

J'ai perdu mon mot de passe admin de GLPI, que faire ? Nous allons voir comment le réinitialiser en quelques minutes grâce à une requête SQL prête à l'emploi !

Les outils de réseau contenant notamment la commande ifconfig, netstat, route et arp sont dépréciés.
Il est conseillé d'utiliser maintenant la commande ip qui fait tout et qui est universelle sur toutes les distributions Linux.

Cet article va présenter les options possibles de la commande ip.
J'utiliserai le nom d'interface enp24s0 pour illustrer les commandes qui auront besoin d'une interface spécifique.

Dans cet article, nous allons découvrir le site GTFOBins, une base de connaissance qui référence de nombreux binaires légitimes pouvant être associés à des erreurs de configuration qui permettent de contourner les stratégies locales de sécurité sur un système Linux.

SUID, configuration sudo ou encore capabilities, la configuration d’un système Linux regorge de fonctionnalités à double tranchant. Celles-ci peuvent être des mesures de sécurité permettant d’accorder des droits privilégiés de manière limitée à un utilisateur, mais aussi des portes d’entrée ou vecteur de compromission lorsqu’elles sont mal configurées.

This article is the last of a four part series describing my current backup system:

1. In the first article I explain how I use restic to perform my backups.
2. In the second article I describe how I use Healthchecks and Gotify to verify that the backups run periodically.
3. In the third article I show how I automate the backups, in particular when I need to read files with special permissions.
4. Finally in this article I detail the process I had to follow to backup a remote server to a machine on my home local network.

One of my use cases is to backup data on some of my server to a local machine on my home network. There are multiple ways to do this, in this article I detail how I solved this issue with a SSH reverse tunnel. I also have an alternate article explaining how to achieve the same objective with a permanent port forwarding, a dyndns and a self-signed certificate.