Sysadmin

This post concat some tips I learned along the way about the SSH which makes me more productive. Put generic Host config at the end The config file is read sequentially, and the first rule that matched will be taken into account. If you put your Host * 1 at the top of your ~/.ssh/config then further rules won’t be applied. Host foo Username bar Hostname foo.baz # this rule will apply to all connection. and appened to the "toto" host definition. Host * AddKeysToAgent yes IdentityFile ~/.ssh/ed25519 Split your config files By default, ssh client, will read his config from /etc/ssh/ssh_config and ~/.ssh/config. The the later one, I like to add this line of config: ...

I recently setup a Dns over HTTP server. I use the excellent article from Stéphane Bortzmeyer : Documentation technique de mon résolveur DoH[FR]. The setup use dnsdist in 1.4 version, which support DoH. Here is a docker composition to run the setup : https://github.com/RemiDesgrange/dnsdist-config/ It run for 2 months on one of my machine without any problem. I didn’t put any TLS config on dnsdist, instead a nginx config takes care of it. It’s pretty standard nginx reverse proxy config from ...