How this site is built
A static Astro site on Cloudflare, with local search, opt-in comments and a strict Content-Security-Policy.
-
-
Deploy the Zscaler ZPA App Connector with Docker
A working docker run command for the Zscaler Private Access App Connector, what each flag does, and what to check before you put it into production.
-
Relay SMTP through Microsoft Graph with SMTP2Graph
Exchange Online is retiring Basic Authentication for SMTP AUTH. SMTP2Graph accepts mail locally and sends it through the Microsoft Graph API, with no user license needed.
-
Restrict SSH access to trusted networks with firewalld IPSets
Allow SSH only from a list of trusted networks with a firewalld IPSet and a rich rule, then remove the default rule that leaves SSH open to the whole internet.
-
Load balancing Exchange with HAProxy
During a migration to Exchange Online, our load balancer could not take the extra traffic without a costly upgrade. HAProxy on a small Debian VM did the job: the full configuration.
-
Build VPP Debian packages from source
The steps I use to build FD.io VPP from source into .deb packages on Debian 12, from cloning the repository to make pkg-deb.
-
Erase a Windows-formatted USB stick on macOS
Disk Utility often cannot erase a USB stick that held a Windows installer or uses an MBR layout. diskutil eraseDisk in Terminal wipes and reformats it in one step.
-
Fix freezes in Proxmox VE 8.2
Some Proxmox VE 8.2 hosts freeze and may not even reboot. Two kernel parameters, pcie_port_pm=off and libata.force=noncq, stop it until a fixed kernel is out.
-
Change the master role in a Juniper Virtual Chassis
How to move the master role of a Juniper Virtual Chassis back to member 0 with a single command, and what to expect while it switches.
-
Configure a Virtual Chassis on Juniper QFX5100-48S-6Q
Step-by-step configuration of a preprovisioned two-member Virtual Chassis on Juniper QFX5100 switches, from serial numbers and VC ports to per-member management addresses.
