Tag: SysAdmin

I have set up nginx to reverse to several OLD APC webadmin http pages with no issues. when i used modern things like homeassistant things start getting stupid. i am currently getting a 400 error for home assistant with the same config i have for the apc's i am not seeing any thing obvious in the logs. though I am new to nginx so im not sure what im looking for. upstream homeassistant_app { server 10.1.2.136:8123; # Your application server } server { listen 80; server_name homeassistant.linux2themax.com; Redirect HTTP to HTTPS return 301 https://$server_name$request_uri; } server { listen 443 ssl http2; server_name homeassistant.linux2themax.com; SSL configuration (certificates managed separately) ssl_certificate /etc/nginx/certs/homeassistant.pem; ssl_certificate_key /etc/nginx/certs/homeassistant.key; Security headers add_header X-Frame-Options "SAMEORIGIN" always; add_header

I have deployed four vms. I have setuped the environment for voip. Is it ok, and can I learn the voip engineer skills locally.

I am wondering how feasible it is to send email with a DKIM-only setup, with an SPF record of v=spf1 -all. If my DMARC policy requires DKIM alignment then recipients who understand DMARC will still accept my mails. Recipients who don't do DMARC but do process SPF would reject them. Is anything known about how common such recipients are in the real world? I suppose I'd get a lot of 'SPF alignment fail' reports that I'd have to ignore. On the other hand, I'd be protected against the risk of sending email that isn't DKIM-signed for some reason. It's a shame you can't express "don't bother with SPF, only consider the DKIM result" in a DMARC policy.

Environment: Microsoft Intune manages Android Enterprise personally-owned work profiles. Identity/productivity is Google Workspace on a managed Google domain, federated to Microsoft Entra (OIDC SSO). Goal: users use native Google Drive/Gmail in the work profile, signed in with their Workspace account. Symptom: the Workspace account can be added to the work profile (device restriction "Add and remove accounts = Allow all account types" + domain allow-list) and sign-in completes via the Entra redirect, but it never becomes functional: Google Play services raises a recurring "Account action required" notification that taps through to Company Portal and resolves nothing; Chrome "verify that it's you" never clears; Google Drive opens but returns no files. Already ruled out: GEM set to Unmanaged for the OU; OIDC SSO assigned and working; Google 2-Step Verifi

I want to run a Git server in Docker, and have a regular SSH server on the host, with both sharing the same port. The Git server uses git@ip while the SSH server uses user@ip. Is it possible to bounce packets sent to git@ip to the Docker container, or something, such that I can connect to either server without changing the port?

I'm moving a bunch of WordPress sites from Linux to Windows Server 2022. The sites are functioning just fine but I'm getting: "Some files are not writable by WordPress: xmlrpc.php wp-blog-header.php readme.html wp-signup.php index.php wp-cron.php wp-config-sample.php wp-login.php wp-settings.php license.txt wp-mail.php wp-links-opml.php wp-load.php wp-includes/class-wp-styles.php wp-includes/class-wp-user-query.php wp-includes/l10n.php wp-includes/date.php wp-includes/php-compat/readonly.php wp-includes/class-wp-oembed.php wp-includes/images/w-logo-blue-white-bg.png and The wp-content/upgrade-temp-backup directory exists but is not writable. This directory is used to improve the stability of plugin and theme updates. Please make sure the server has write permissions to this directory. In the site health tool. I've added define('WP_TEMP_DIR', 'C:/Windows/Temp'); to

We are running an ASUS RS720-E11 server (Z13PP-D32 motherboard, pure UEFI mode) with a Broadcom MegaRAID 9580-8i8e controller. The OS (Rocky Linux 8.10, kernel 4.18.0) is installed on an internal RAID1 VD consisting of two Intel SATA SSDs managed by the controller. Two Supermicro JBOD shelves containing 82x 18TB Toshiba SAS HDDs are connected via the external 8e port. 9580-8i8e ├── Cable 1 → Input port, JBOD shelf 1 └── Cable 2 → Input port, JBOD shelf 1 └── Output port → Input port, JBOD shelf 2 Problem After updating the MegaRAID 9580-8i8e firmware package from 7.36 (52.36.0-6528) to 7.37 (52.37.0-6663) and the ASUS RS720-E11 server BIOS, the server no longer boots when both SAS cables are attached. The system hangs at UEFI POST Q-code 0xAD (Ready to Boot) indefinitely. Observations With both SAS cables attached → hangs at 0xAD, never boots, blac

I have a question regarding overlapping elements in nft firewall sets. Let's have a set: table ip filter { set iponly { type iface_index . ipv4_addr flags interval elements = { eth0 . 10.1.1.100, eth0 . 10.1.1.4/30, eth0 . 10.1.1.0/24, } } } This works. But if I use sub-networks with the same network numbers or broadcast: eth0 . 10.1.1.100, eth0 . 10.1.1.0/30, eth0 . 10.1.1.252/30, eth0 . 10.1.1.0/24, I get an error: x.nft:13:21-38: Error: Could not process rule: File exists eth0 . 10.1.1.0/24, ^^^^^^^^^^^^^^^^^^ Networks 10.1.1.0/30 and 10.1.1.0/24 have the same network number, networks 10.1.1.252/30 and 10.1.1.0/24 have the same broadcast. And I can't inser

I need to access Network Manager functionality from PHP code by exec()-ing the "nmcli" command. However, when run from PHP code, "nmcli" command returns the error message "Network Manager is not running" and does nothing. Network Manager is running and I can successfully run "nmcli" command from the command line even as the Apache user. I suspected it has something to do with the lack of DBUS_SESSION_BUS_ADDRESS environment variable in the environment in which PHP is running (and of course lack of the actual socket this variable points to) but probably it's not that issue, because when I run the "nmcli" command from command line with strace, I can see that it doesn't access that socket at all. I suspected some SELinux issue, but I don't see any recent denials in the audit logs. I don't know where to search. It's a standard Apache/PHP (FPM) installation on a RHEL10 OS. Edit: The problem is

An industrial mini-PC has Gen 15 Intel Core Ultra 7 155H CPU. It has vPro/AMT onboard and i226-LM NIC. The goal is to use AMT/vPro in CCM mode for remote power control of the PC. This technology already works on similar mini-PC configurations based on Intel Core CPUs of gen 6-13. (I did not test it on CPU before Gen 6 and on Gen 14). The status of Gen 15 mini-PC is: AMT FW Core Version: 18.0.5. This is greater that AMT release 9.5. AMT is set with static IP/netmask. AMT is able to execute a PC power cycle by HTTPS request. The Mini-PC is NOT mobile device. The Wake on LAN is disabled in all mini-PC generations in use. The problem is: After not being used for 1 minute or so, the AMT stops responding to HTTPS request and even to ping. It resumes the work (responding to HTTPS and ping) after someone starts using the PC or immediately after power cycle. The difference in hardware, s

A slow website can ruin the experience of a website no matter how perfectly designed it is. Google also uses site speed as a ranking factor. If your site takes... The post 13 Ways to Optimise Your Website for Speed and Performance appeared first on Heart Internet.

No matter if it is a website visit or file uploaded, all these actions run through a hall of servers that consume electricity 24/7. Data centres account for a slice... The post Sustainable Data Centres: How to Cut Carbon without Sacrificing Performance appeared first on Heart Internet.

A Complete Guide for 2026 Your domain name is your address on the internet. It’s how customers find you, how your email works, and it’s often the first impression a... The post How to Register a Domain Name in the UK appeared first on Heart Internet.

A lot has been changing at Heart Internet, with major improvements across our platform, products, security, infrastructure and support. We’ve completed a major transition to fully independent operations, launched new... The post What we’ve been doing to improve the reseller experience appeared first on Heart Internet.

The post Unique Domain Extensions You Might Not Have Heard Of appeared first on Heart Internet.

The post Business Email and Website Hosting appeared first on Heart Internet.

The post What Is the Future of the Internet? appeared first on Heart Internet.

On 29 April 2026, security researchers at Theori (Xint Code) publicly disclosed CVE-2026-31431, known as “Copy Fail.” It is a local privilege escalation flaw in the Linux kernel’s AF_ALG cryptographic... The post Copy Fail Linux Vulnerability (CVE-2026-31431) appeared first on Heart Internet.

The post How to Reduce the Bounce Rate of Your WordPress Site appeared first on Heart Internet.

The post How to Check for Available Domains appeared first on Heart Internet.