tag: linux
- Lost the only SSH key on a Yandex Cloud fleet: getting back in Why detaching a boot disk fails, the snapshot-based rescue technique that works instead, and scaling it to 80 hosts with Ansible without losing quorum.
- VPN status monitoring: WireGuard + IKEv2 in real time How a 30-second systemd timer, wg show dump, and a plain JSON file power the live VPN status page.
- Self-hosted email: Postfix, Dovecot, CoreDNS, DKIM, SPF, and DMARC Running @antonnovikov.com email on the same VPS. Getting deliverability right with strict SPF, DKIM signing, and p=reject DMARC.
- Three proxies on one server: HTTP, SOCKS5, and Shadowsocks tinyproxy, microsocks, and ss-server behind the same VPS. How the health endpoints work and why three protocols instead of one.
- Setting up a Debian VPS for k0s: sysctl, kernel modules, and the install What 01-prepare-vm.sh actually does: disabling swap, tuning inotify limits, loading kernel modules, and installing k0s single-node.
- node-exporter alerting: clocks, disks, and inotify limits PrometheusRule alerts for clock skew, CPU saturation, memory pressure, disk fullness prediction, inotify watch exhaustion, and network error rates — with practical thresholds from production.
No posts match the selected filters.