Pages: Welcome | Projects

Hack of a Weekend

2018/6/24
Tags: [ Hacking ] [ Today I learned ]

It has been a while now that I own a Raspberry. Some months ago I've set up a FTP server (vsftpd), with a basic anonymous login configuration and well studied connection-tracking firewalling rules. Not that FTP is a nice protocol to work with, but I really liked the idea of learning some iptables.

In this long weekend I had some spare time, which I spent in improving my setup. Everything is now based on Ansible. I started by installing and a Debian virtual machine, and using it for testing my Playbooks. Later on I pointed Ansible on the actual host (which runs Raspian).

First off I automated both my firewall scripts and the storage configuration (my Raspberry uses two USB sticks). Then I started to work on my Wiki project: a couple of weeks ago I figured I'd like to maintain a wiki where to keep some information handy, yet being somewhat paranoid I don't like the idea of giving up my personal information to some random service provider. My Raspberry the right place where to host it.

I installed Lighttpd as web-server, and I chose DokuWiki as wiki engine. The choice of DokuWiki is driven by the fact that it stores files as text (no database involved) and supports access control lists, so I can decide what to publish to the world and what to keep private.

Then I started wondering how to keep it secure. I heard a lot about Let's Encrypt, so I gave that a try. Of course I needed to have a DNS name first: I found a good provider in DeSec, which is free and without those horrible ads. Let's Encrypt turned out to be extremely simple to set it up: I think they did a great job.

A really nice weekend, a really nice setup!