20 Followers
15 Following
60 Posts
Software developer, devops engineer, wanna-be jazz musician (guitar, trumpet). Linux, vim, IoT, pfSense, xcp-ng, Truenas, OpenWrt enthusiast.
The Wallace-Bolyai-Gerwein theorem says that for any 2-dimensional polygon, you can make a finite number of cuts to turn it into any other polygon that you like (of the same area). Here's a visual demonstration:

I'm having WAY too much fun with #jellyfin. LiveTV is AWESOME!!

I'm running it on a #Debian 11 VM on an #xcp-ng (#xenorchestra) host with a #truenas backend. I'm watching with the jellyfin app on Amazon Fire TV

I'm just starting to explore some of the jellyfin community plugins. Any recommendations?

nftables + Suricata How-To
... in a 500 char Toot
( requested by @rberlim )

Assumptions:
- you're on a Debian-based box
- you want Suricata in IPS mode

nftables - the salient parts:

chain input {
type filter hook input priority 0; policy drop;
tcp queue bypass
...
}

Same for output chain (no need for queue in forward chain unless routing)

systemd:

edit /etc/systemd/system/multi-user.target.wants/suricata.service

change "--af-packet" to "-q 0"

Done! ...with 3 characters to spare!

I'm still fiddling with yesterdays project: trying to get Suricata to run in IPS mode on a Debian box with nftables.

Our #devops credo is:

We do these things not because they are easy...

We do these things because we thought they were going to be easy.