While i do somewhat trust my ISP, I certainly do not trust my government. There is some traffic going in and out of my network that i’d rather not have tied back to me (Im not talking highly illegal stuff, where anyone or anything gets hurt, think more “downloading linux iso’s”. So, i created a new VLAN for these devices and went about working on routing that traffic over my PIA VPN. Heres how.
I have been fiddling with multiple different authentication methods to centralise the authentication across all my devices and services. Im trying to push myself to use FreeIPA more as it seems to be becoming more widley used where using Active Directory isnt suitable.
It is also really easy to enable 2FA per user which i find to be a big bonus.
If you havnt already setup FreeIPA, check out my guide on going through the installation process HERE.
Telegraf and influxdb seem to be the new craze in the time-series database world, add in Grafana and you have the basis for a very powerful graphing solution. I personally have moved all my machines away from using Collectd and Graphite to using Telegraf and influxdb
Everyone loves the Pi-Hole. It does a great job blockig ad’s across your entire network. The admin page is also really useful to see whats been going on. Unfortunately the admin interface only gives details of the last 24 hours. I love graphs and graphing things. So i wanted more data.
The reason for this build was because i wanted to use my office Active Directory users within AWS but without giving each instance direct access to the domain controller. I also wanted some kind of resilience should the VPN’s between my VPC and office went down. Also, being a linux guy, im more comfortable with using LDAP compared to active directory.
I have been meaning to learn how to use Elasticsearch for quite some time. I had used it in the past in an ELK stack, but never really understood it all too well. Also, it had been a few years since doing so, so my mind was a little rusty. The way i learn something is to set a little project with that software or tool and see if i can get it working. Which is what i did.
I have recently acquired several Gen6 HP machines (2 x DL160’s & 1 x DL180). These are pretty old pieces of kit, but are reasonably priced, not too loud and not too power hungry, so they make pretty good homelab machines.
I really struggled working out how to resize my EBS disk size, so these are my notes for when the EC2 instance doesnt do it for you.