Setting up a KMS Server

Do not use this in production; it is for testing purposes only. Schools usually run a KMS Server as an activation method for volume licensing of Windows and Office. Here are a few open-source projects you can use for testing: vlmcsd - written in C (it includes a Docker deployment method) Py-KMS-Organization/py-kms - written in Python Py-KMS-Organization/py-kms is a fork of SystemRage/py-kms that is still being actively maintained. You can also spin it up easily with docker: ...

November 26, 2022

Using Cloudflare Tunnel for NAT traversal, with Gitea as an example

Often you run many services on your LAN, and when you need to reach them from outside you usually do it with port forwarding. Here I use Cloudflare Tunnel instead — no port forwarding on the router is needed, and you can add two-factor authentication via Email OTP, which improves both convenience and security. It works for a NAS, a Git server, a Virtual Machine Manager, and more on your LAN. ...

November 7, 2022

Auto-updating docker containers - watchtower

I run a bunch of docker containers on Synology and on a few servers, and use watchtower to update their images automatically. First set the timezone to Taipei: sudo timedatectl set-timezone Asia/Taipei Add the cleanup and schedule flags: docker run -d --restart=always \ --name watchtower \ -v /var/run/docker.sock:/var/run/docker.sock \ -v /etc/localtime:/etc/localtime:ro \ containrrr/watchtower \ --cleanup \ --schedule "0 0 4 * * *" More flags can be found here: https://containrrr.dev/watchtower/arguments/

November 6, 2022

Ad-blocking powerhouse - AdGuard

I often pick up second-hand hardware junk to build things with, so I’ll keep a HomeLAB series to document it. Installation On Unix-like systems you can install it in one line: curl -s -S -L https://raw.githubusercontent.com/AdguardTeam/AdGuardHome/master/scripts/install.sh | sh -s -- -v You can also refer to the official github and the wiki; it can be installed on docker, a Raspberry Pi, and more. Here, since I run an LXC on proxmox and it has its own IP, I just install it as a regular machine. ...

October 16, 2022

Setting up a WireGuard VPN on a Raspberry Pi

I used to run Synology’s built-in OpenVPN Server. I had a spare Raspberry Pi lying around and figured I’d stand up another VPN server and play with WireGuard at the same time. After trying it out, the speed, configuration and chaining to an internal DNS server all worked without issue, so I’ll probably make it my main connection method going forward. Raspberry Pi Setting Flash lite x64 with the official tool and drop in an ssh file so the SSH server starts automatically: ...

April 3, 2022