featured image

Securing Postgres connections using Let's Encrypt certificates

Introduction I’m on a quest to SSL all the things on my local network. I work in IT security, and am more than paranoid when it comes to my homelab (shout-out to r/homelab and r/selfhosted). For my web applications, everything is accessed through a Nginx reverse proxy that uses Let’s Encrypt wildcard certificates (using the DNS challenge) for encryption. It provides a single choke-point for all my traffic, all using one wildcard certificate, and all my clients accept it with the green lock....

October 22, 2020 · 6 min · Logan Marchione
featured image

Always-on Grafana dashboard using Raspberry Pi touchscreen

Introduction I have a small homelab in my home that runs pfSense, Proxmox, Docker, a Synology NAS, UniFi wireless, etc… I already monitor my pfSense firewall logs using Graylog, but I was looking for a solution to monitor hardware (e.g., CPU usage, RAM usage, etc…) as well as software processes (e.g., containers using network, current download/upload speed, etc…). I stumbled upon two separate software stacks for this. First is the TICK stack, which is composed of open-source products from InfluxData:...

May 17, 2020 · 7 min · Logan Marchione
featured image

Linting Ansible playbooks using Drone

Introduction In my last post, I went over linting Ansible playbooks manually. In this post, I’m going to give you a brief introduction on how to lint playbooks automatically, using Drone. I was inspired to post this after watching Jeff Geerling’s (geerlingguy on Github) Ansible 101 YouTube series. In it, he mentions using automated testing/linting of his playbooks. If you haven’t seen it, give it a watch. As with before, I’m not a developer or professional DevOps person....

April 20, 2020 · 6 min · Logan Marchione
featured image

How and why you should lint your Ansible playbooks

Introduction What is Ansible? If you’re reading this, you probably already know what Ansible is, so I won’t spend a lot of time here. Ansible is open-source configuration management software. It lets you configure one machine, or 100 machines, in the same way, every time. You can use Ansible to install software, create users, update files, etc… Basically, if it’s a task that can be automated, Ansible can do it....

April 18, 2020 · 8 min · Logan Marchione
featured image

Migrating away from the Ubiquiti EdgeRouter Lite

Hey! Listen! This post is part of a series on the Ubiquiti EdgeRouter Lite. Check them all out! Date URL Part 2019-06-28 Migrating away from the Ubiquiti EdgeRouter Lite Migrated to a Netgate SG-1100 2019-02-03 EdgeRouter CNAME records Setup CNAME records 2017-10-03 Dyn DDNS on EdgeRouter Setup DynDNS 2017-04-25 DuckDNS on EdgeRouter Setup DuckDNS 2017-01-08 Ubiquiti EdgeRouter serial console settings Serial console settings 2016-11-29 Ubiquiti UniFi controller setup on Raspberry Pi 3 Install UniFi Controller 2016-08-30 EdgeRouter Lite Dnsmasq setup Setup dnsmasq 2016-06-13 EdgeRouter Lite software upgrade Firmware upgrade 2016-05-12 EdgeRouter Lite OpenVPN setup OpenVPN server setup 2016-04-29 Ubiquiti EdgeRouter Lite setup Initial setup Introduction For years, I’ve been using and loving my Ubiquiti EdgeRouter Lite....

June 28, 2019 · 7 min · Logan Marchione
featured image

EdgeRouter CNAME records

Hey! Listen! This post is part of a series on the Ubiquiti EdgeRouter Lite. Check them all out! Date URL Part 2019-06-28 Migrating away from the Ubiquiti EdgeRouter Lite Migrated to a Netgate SG-1100 2019-02-03 EdgeRouter CNAME records Setup CNAME records 2017-10-03 Dyn DDNS on EdgeRouter Setup DynDNS 2017-04-25 DuckDNS on EdgeRouter Setup DuckDNS 2017-01-08 Ubiquiti EdgeRouter serial console settings Serial console settings 2016-11-29 Ubiquiti UniFi controller setup on Raspberry Pi 3 Install UniFi Controller 2016-08-30 EdgeRouter Lite Dnsmasq setup Setup dnsmasq 2016-06-13 EdgeRouter Lite software upgrade Firmware upgrade 2016-05-12 EdgeRouter Lite OpenVPN setup OpenVPN server setup 2016-04-29 Ubiquiti EdgeRouter Lite setup Initial setup Introduction What is a CNAME record?...

February 3, 2019 · 3 min · Logan Marchione
featured image

Rclone on ODROID-HC2

Introduction In my last post, I talked about setting up an ODROID-HC2 as a NAS using OpenMediaVault. I have that up and running, and I’ve also written a few scripts to backup my data to a few of the SMB shares. Now, I need to get that data shipped offsite to an external location to cover my 3-2-1 backup strategy: 3 backups 2 different types of media 1 backup offsite Software My cloud storage provider of choice is B2....

June 18, 2018 · 6 min · Logan Marchione
featured image

ODROID-HC2 as an entry-level NAS

Introduction I’ve been doing some work on my homelab that I haven’t documented here. I recently decommissioned my Raspberry Pi 3 that was running my Unifi controller, Dokuwiki, and Network UPS Tools (NUT). I replaced the RPi3 with an Intel i3 NUC with 12GB RAM and a Crucial 2.5" SSD. I chose to use Proxmox as the hypervisor on the NUC because it is open source, has a well-proven record, and has a low learning curve....

June 13, 2018 · 11 min · Logan Marchione
featured image

Celebrating 1000 comments by giving away a Raspberry Pi 3!

Winners An update: Comments are locked as-of 12:05pm Eastern time. I received 363 comments, but 4 were mine, so 359 comments gives you a 1-in-359 chance of winning (.27%). Congrats to the two winners, Dan and Michael! I’ll be emailing you shortly! -Logan Introduction Since 2014, I’ve been blogging about security, open source, Linux, and routers. Since then, I’ve hit the 1000 comment mark (although technically, some comments are my own replies to your comments)....

December 5, 2017 · 4 min · Logan Marchione
featured image

Dyn DDNS on EdgeRouter

Hey! Listen! This post is part of a series on the Ubiquiti EdgeRouter Lite. Check them all out! Date URL Part 2019-06-28 Migrating away from the Ubiquiti EdgeRouter Lite Migrated to a Netgate SG-1100 2019-02-03 EdgeRouter CNAME records Setup CNAME records 2017-10-03 Dyn DDNS on EdgeRouter Setup DynDNS 2017-04-25 DuckDNS on EdgeRouter Setup DuckDNS 2017-01-08 Ubiquiti EdgeRouter serial console settings Serial console settings 2016-11-29 Ubiquiti UniFi controller setup on Raspberry Pi 3 Install UniFi Controller 2016-08-30 EdgeRouter Lite Dnsmasq setup Setup dnsmasq 2016-06-13 EdgeRouter Lite software upgrade Firmware upgrade 2016-05-12 EdgeRouter Lite OpenVPN setup OpenVPN server setup 2016-04-29 Ubiquiti EdgeRouter Lite setup Initial setup Introduction In the past, I’ve posted about my DuckDNS dynamic DNS settings, and mentioned I use Dyn as well....

October 3, 2017 · 3 min · Logan Marchione