Network and IT System

Posts in the Network and IT System category

How to Fix VMware Module Errors When Secure Boot Is Enabled on Linux

If you've ever tried to start VMware on a Linux machine and hit an error about vmmon or vmnet modules failing to load, there's a good chance Secure Boot is the culprit. This guide walks you through exactly what's happening and gives you two ways to fix it — the quick-and-easy way and the cleaner lon

Move Docker to Separate Drive on Ubuntu

Every Linux server failure I’ve witnessed from disk issues starts the same way: the root filesystem slowly fills up. No alarms. No drama. Just creeping usage until something breaks.

ERPNext v15 Slack Notifications for Stock Movements

If you are running ERPNext v15 and want real-time Slack notifications whenever stock movements occur, this step-by-step guide shows you exactly how to set up webhook-based alerts for Material Issues, Material Transfers, and Purchase Receipts. You will also learn how to avoid the common Jinja templat

UFW Firewall: Allow TCP Port 8123 from Specific IP

Firewalls are a foundational component of any secure Linux server environment. On Ubuntu and other Debian-based distributions, UFW (Uncomplicated Firewall) provides a straightforward yet powerful interface for managing iptables rules without requiring deep knowledge of low-level networking syntax. I

Secure WireGuard Homelab: Complete Setup Guide

This page documents the complete, final configuration of a secure homelab environment built around WireGuard, Raspberry Pis, UFW, AdGuard Home, Fail2Ban, n8n workflow automation, and Uptime Kuma. It is structured as a top-to-bottom technical reference, covering design intent, implementation details,

WireGuard Split-Tunnel VPN: Secure Setup Guide

This document is the final, stable Standard Operating Procedure (SOP) for a small production homelab built on WireGuard, AdGuard Home, Docker monitoring, and UFW. It reflects all configuration decisions, corrections, and lessons learned through implementation and testing. It is intended to serve as

Mailu Behind Caddy: Complete Email Setup Guide

Self-hosting email is one of those projects that sounds straightforward until you actually attempt it. Between TLS configuration, reverse proxy behavior, Autodiscover requirements, and the expectations of modern mail clients, it is remarkably easy to end up with redirect loops, broken SMTP connectio

WordPress on Portainer with Caddy: Auto HTTPS Guide

Running WordPress behind a modern, automatic HTTPS reverse proxy is more accessible than ever with Docker, Portainer, and Caddy. What used to require manual certificate management, complex nginx configurations, and careful coordination between services can now be accomplished with a single Docker Co

Install Inkscape AppImage on Ubuntu: Step-by-Step

If you want to install Inkscape on Ubuntu using an AppImage, this step-by-step guide covers everything you need — from installing the required FUSE dependency to creating a fully integrated desktop shortcut that appears in your application menu with the official Inkscape icon. Whether you are runnin

Create Local Account in Windows 11 Setup

Setting up a new Windows 11 PC almost always requires signing in with a Microsoft account during the out-of-box experience (OOBE). While a Microsoft account offers genuine benefits — syncing settings, files, and preferences across devices — many users have perfectly valid reasons to prefer a local a

Fulfillment & IT Support Specialist at Joe Coffee

On April 1, 2025, I started a new role at Joe Coffee as a Fulfillment Specialist. Yes, April Fools’ Day — and no, it is not a joke. It is very real, and I could not be more excited about it.

Fix Tablet Update Problems: Hard Restart & Wi-Fi

If your tablet is experiencing issues after a configuration change or a corrupted software update, don’t worry — there’s a simple workaround. Performing a hard restart can clear the problem and get your device back up and running quickly.

Arista Edge Firewall 7.0.0-7.1.1 Upgrade: Fix Realtek Kernel Panic

If you are upgrading from Arista Edge Firewall 7.0.0 to 7.1.1 and your system uses Realtek Ethernet devices, you may encounter a critical issue: Linux Ethernet drivers trigger kernel panics when Energy-Efficient Ethernet (EEE) is enabled. This guide walks you through every step to apply the official

Migrate Google Drive to Nextcloud: Self-Hosted Guide

I recently migrated all of my Google Drive data to my own self-hosted Nextcloud server—and I haven’t looked back. Now, I have complete control over my personal data. Everything is stored securely on my own hardware, rather than on third-party platforms like Google Drive, OneDrive, or iCl

Secure Network Cabinet Installation at Garyland Cottage

As part of our ongoing improvements at the Garyland cottage, we recently completed an important network infrastructure upgrade — relocating all networking equipment from an open shelf to a secure, enclosed cabinet. This change was driven by two key goals: improving overall network security by keepin

Build Hardware Firewall: BOSGAME Mini PC + WireGuard

Server security is something I take seriously. I recently upgraded my entire network protection setup by deploying a dedicated hardware firewall using a BOSGAME E1 Mini PC. This compact machine handles multi-server firewall duties with ease, and I also installed WireGuard VPN directly on the firewal

Set Up DNS-over-HTTPS on TP-Link Omada with AdGuard

I finally got DNS-over-HTTPS (DoH) working with Cloudron AdGuard Home. The key issue is that AdGuard Home will not accept connections on the encrypted DNS port until you add an IP address or Client ID to the Allowed Clients list. In this guide I use a Client ID. Follow the steps below to configure D

Arista Firewall Setup: DDoS Protection for Sunrise Village

I built another mini computer for Sunrise Village and added another network card to my mini computer for internal and external network. Not only that, but I also set Internal to “bridge” and set my Modem wire to firewall “external” and then firewall “internal” to a 1 gigabit switch. So I can put mor

Secure SSH with Fail2Ban on Ubuntu: Stop Brute-Force

Fail2Ban is a free Python tool that helps protect Linux servers from brute-force attacks. It’s especially useful for securing SSH. With Fail2Ban, you can automatically block IPs that try to guess passwords on your server.

Network Cabinet Upgrade: Benefits & Setup Guide

The excessive wiring and the way everything was stacked weren’t viable long-term solutions. I approached my supervisor to request an upgrade to a more secure and durable setup. Installing a network cabinet would help cut down on dust buildup and prevent overheating. Plus, adding an exhaust fan to th

Auto-Update Docker Containers with Watchtower & Ntfy

Maintaining Docker containers is easy—in theory. In practice, keeping your stack up-to-date with the latest images can be tedious and time-consuming. Here’s a solution: Watchtower can update containers automatically, and with Ntfy, you get real-time notifications right on your phone or desktop whene

Ntfy Push Notifications: SSH Alerts & Docker Updates

I am using Ntfy for my SSH alert and watchtower update. It is pretty cool to have this feature, so I can know who is accessing my server without my authorization. And know my docker needs to be updated as well.

DNS DDoS Attack: How Port 853 Saved My Servers

What a wild ride! As someone who cares deeply about keeping ads and trackers away, I run not one, not two, but three Adguard Home DNS servers for my network and my work and a few trusted friends. Things were smooth…until today’s wake-up call.

TV Mount Installation Sunrise Village Anthem

We have replaced our old 51-inch TVs with new 55-inch models, enhancing both display size and quality. These upgraded TVs are now powered by YoDeck digital signage software—a cost-effective solution that eliminates the need for pricier alternatives. To date, YoDeck has been successfully deployed on

How to Clean Dust from Gaming PC: Complete Guide

<!-- wp:paragraph --><p>Learn how to safely clean dust from your gaming PC with our step-by-step guide. Discover before and after results, maintenance tips, and how regular cleaning improves performance and cooling.</p><!-- /wp:paragraph -->

Prevent DNS Amplification Attacks: Secure AdGuard Home

Today, I turned off the DNS port 53. Since we have been cutting off our store's DNS server, it has been a DNS amplification attack. So I found out that my Router does have a DNS Proxy, My DNS Server does have HTTP over TLS and DNS-over-HTTPS. Everything is working and attacking is currently stopped

Samsung Galaxy Tab A7 Lite Screen Replacement Guide

One of our employees accidentally dropped their tablet while performing work-related tasks. Unfortunately, the device was not equipped with a protective case at the time, which increased the risk of damage. After reviewing the situation, we recognized that this oversight was our responsibility, as w

TV Wall Mount Installation Guide: Step-by-Step

I have removed the television and replaced the screws and anchors. There is a significant amount of dust behind the left-hand TV, and I haven't yet cleaned the right-hand side. So, I vacuumed from the left to the right, then when we upgraded the TV, I will vacuum from the left to the right, which ma

Comcast Business Free Speed Upgrade to 500 Mbps

Indeed, it was the correct decision. Comcast Business has recently upgraded our plans to 250 MBPS, automatically upgrading with download speeds reaching 500 MBPS and upload speeds at 200 MBPS. I have decided to relocate my server from medical to another location that offers the highest upload speeds

Deploy MariaDB with Portainer Stacks & Docker

If you’re looking to run a robust relational database in your Dockerized environment, MariaDB is an excellent open-source choice. With Portainer, managing your databases and application stacks becomes super easy—even with little Docker experience. In this post, I’ll walk you step by step through dep

phpMyAdmin MariaDB Setup on Portainer with NGINX

PhpMyAdmin is easy to set up for any app and fix the table database or troubleshoot. So, we will set up PhpMyAdmin with NGINX SSL secure for our HTTPS. Due to the possibility of a grabber username and password exploit, we would prefer not to expose this on HTTP.

Set Up Baserow on Portainer With Nginx Proxy Manager

This baserow is my absolute favorite, it's more like a spreadsheet with more options and an easy-to-use database. It also had a Grid and Form and a Gallery and a Calendar! It's great for our list of things to do.

Docker Compose Backup & Restore: Safe Data Recovery

When you're running apps with Docker Compose, your data is the heart and soul of your services—databases, media files, configurations, and more. Without a solid backup and restore plan, a simple mistake (or disk failure!) can lead to a world of pain. Here’s a step-by-step guide to properly back up a

Deploy Immich v1.99.0 on Docker with Portainer

This document presents Docker compose version 3.8 for Immich Latest (1.99.0). I just changed the volume to the correct path because I want them to save in our large storage data and permission user so that any users can't see our file except root.

Fix Nextcloud 28 Log Errors on Portainer

Delete Nextcoud.log to fix the error, but it will come back again and make sure you fix the error, so it won't pop up again. This is similar to the engine light.

Network Cabinet Upgrade: Solving Anthem's Overheating Crisis

On Sept 2023, I established this network, and unfortunately, it experienced the most severe condition of overheating due to the presence of grease. I upgraded it to a cabinet in October 2023, and it is currently functioning flawlessly. All the devices are fan less, resulting in a reduction in dust a

Ed25519 SSH Keys: Secure Server Access Guide

If you are looking to remote your server from home, you can, but you cannot simply install OpenSSH with a password, which is very insecure. I strongly recommend using type Ed25519 ssh, which is the most secure and fast access to ssh. I recommend checking out this website. Follow the instructions on

Network Cabinet Installation at Anthem Coffee & Tea

Just wrapped up a much-needed network upgrade at Anthem Coffee &amp; Tea! We’ve moved from a basic shelf to a secure, professional cabinet. This isn’t just about looks—it’s about reliability and maintenance.

DNS Amplification Attack: How to Prevent Server Compromise

This attack trigger was found on October 16, 2023, when I received an email that my server was nearly full. This is not a typical occurrence. Therefore, I discovered that my AdGuard Home DNS Server had been compromised, and that a significant number of IP addresses exceeding 20K were targeted specif

Build an Outdoor Wireless Bridge for Fast WiFi

I am deeply grateful to Lady Bonnie for allowing me to undertake a DIY project at her residence. For this project, I utilized my personal Xfinity modem in her living room, which is registered to my account—I did not use her internet service at any time. Additionally, at her request, I custom-made a

Anthem Coffee Verrado: Network Setup & WiFi

This location is simple and clean up to fix network, and They do have Camera Security, but COX just discontinued these which is crazy. So I removed it from the shelf and removed the old Phone Modem and Router and Security Router. We only need on the shelf is Business Router and Access point and Mode

Anthem Coffee & Tea Network Infrastructure Upgrade

I've been at Litchfield for five and a half days now. I went through this real challenge experience of going through crazy OCD trigger… So I decided to take all the old Discontinue servers (Camera Security and Firewall) COX wasn't doing them anymore. So I took everything down and installed a Busines

Self-Host LanguageTool API: Deploy with Portainer & Nginx

I have been using Grammarly for my work and to strengthen my writing skills. I was looking for something cheaper and more affordable, and I found this LanguageTool, which offers an API on Docker, and it works great. We won't get premium, though… they're not yet available for self-hosted premium.

Self-Hosted Collabora Office: Setup with Portainer & Nginx

My goal to make my Nextcloud to become Google Workspace because my goal is our data most important to privacy with our data sensitive. And I would like to purchase free instead of paid Google Workspace because we have our server, and we use it for IT documents and resources.

Deploy Redis on Portainer Stacks for Nextcloud

If you’re self-hosting Nextcloud using Docker, integrating Redis as a caching and file locking service is a must for better speed and reliability. Portainer makes managing Docker super easy, especially with its user-friendly "Stacks" feature. In this post, you'll learn step by step how to:

VaultWarden Docker Setup: MariaDB, Portainer & Nginx

VaultWarden is a lightweight, open-source Bitwarden server. Deploying it on Docker with Portainer and securing it via Nginx Proxy Manager ensures easy access, security, and maintenance for your password manager. While MariaDB isn’t officially supported instead of SQLite, experienced users can try it