I'm having WAY too much fun with #jellyfin. LiveTV is AWESOME!!
I'm running it on a #Debian 11 VM on an #xcp-ng (#xenorchestra) host with a #truenas backend. I'm watching with the jellyfin app on Amazon Fire TV
I'm just starting to explore some of the jellyfin community plugins. Any recommendations?
nftables + Suricata How-To
... in a 500 char Toot
( requested by @rberlim )
Assumptions:
- you're on a Debian-based box
- you want Suricata in IPS mode
nftables - the salient parts:
chain input {
type filter hook input priority 0; policy drop;
tcp queue bypass
...
}
Same for output chain (no need for queue in forward chain unless routing)
systemd:
edit /etc/systemd/system/multi-user.target.wants/suricata.service
change "--af-packet" to "-q 0"
Done! ...with 3 characters to spare!
I'm still fiddling with yesterdays project: trying to get Suricata to run in IPS mode on a Debian box with nftables.
Our #devops credo is:
We do these things not because they are easy...
We do these things because we thought they were going to be easy.