Search Results

Reusable pattern from SlingBuiltAuth (General project). Use this for the next site pipelines. SlingBuiltAuth OIDC issuer Public OIDC issuer is now https://auth.slingbuilt.com. Discovery: https://auth.slingbuilt.com/.well-known/openid-configuration. Admin...

To disable the VAAI on the host follow the following steps: Open Vsphere Client and connect to Vcenter Server. Navigate to the ESXi Host and then Click on the Configuration Tab. Click on Advanced Settings. Click on DataMover. Change the value of DataM...

Last verified: October 2026 for RHEL 9 against Docker's Install Docker Engine on RHEL guide, Linux post-installation steps, and packet-filtering / firewalld notes (see Sources). This installs Docker Engine Community (Docker CE) from Docker's official RHEL repo...

Last verified: October 2026 against the TrueNAS Community Edition 25.10 documentation (Init/Shutdown Scripts). See Sources.TrueNAS does not keep manual mount commands or /etc/fstab edits across reboots. To mount NFS shares from another server (for example a Sy...

Last verified: October 2026 against the TrueNAS Community Edition 25.10 documentation and AWS IAM/S3 documentation. See Sources.This guide sets up two off-site backups from TrueNAS to Amazon S3: a daily archive of the TrueNAS system configuration, and the app ...

Docker Compose Wrapper (dc) A small wrapper around docker compose that automatically loads shared environment files for all stacks. Why Docker Compose only interpolates ${VARIABLES} from: The shell environment, or A local .env file, or Files passed wit...

A small shell script, run from cron every 5 minutes, that checks four health numbers and emails you when one goes over its limit. It doesn't need an agent or a monitoring server. What it checks Check How it is read Default limit 1-minute load average /p...

When Linux servers are joined to Active Directory (SSSD or winbind), domain users who log in for the first time have no /home/<user>. Recommended: use the built-in feature RHEL, Rocky and Alma 8/9 ship this already: sudo dnf install oddjob-mkhomedir sudo auths...

Drop-in files in /etc/profile.d/ apply to every user's login shell. Here are three small ones. 1. Safer aliases: /etc/profile.d/custom-aliases.sh alias rm='rm -i' alias cp='cp -i' alias mv='mv -i' alias vi='vim' These only affect interactive shells, not scrip...

Before you publish a new container port, check what is already listening. ss shows everything; this tidies the output into one line per protocol and port. Quick one-liner sudo ss -Htulnp | awk '{split($5,a,":"); port=a[length(a)]; print $1, port, $7}' | sort -...

Run Ookla's speed test on a Linux box and email the result, for example to keep a record of your ISP's performance. Install the Ookla CLI Install it from Ookla's package repository, rather than piping a web script into sudo bash: # Download the repo setup scri...

A simple bare-bones backup: one compressed tarball of the whole root filesystem, minus the folders that are virtual, temporary or backed up separately. Exclude list /etc/backup.exclude: /proc/* /sys/* /dev/* /run/* /tmp/* /var/tmp/* /usr/tmp/* /mnt/* /media/* ...

Dump every database to its own compressed file, keep a few days, and fail loudly when something is wrong. Requirements mysqldump or mariadb-dump. Newer MariaDB installs may only have mariadb-dump, so detect which one exists. gzip. A stored login for root (s...

Backup scripts shouldn't contain a database password. Store the login once for the account that runs the backups (usually root), and let mysql and mysqldump read it automatically. MySQL: mysql_config_editor sudo mysql_config_editor set --login-path=client --ho...

On RHEL, Rocky and Alma, PGDG packages let PostgreSQL 16 and 17 (for example) run side by side, each on its own port with its own binaries in /usr/pgsql-<ver>/bin. One script can back up both. Describe your instances PG_INSTANCES=( "5432|/usr/pgsql-16/bin|pg...

If your backups connect over TCP or as a user other than postgres, pg_dump needs a password. Put it in a .pgpass file in the home folder of the user that runs the backup, not in the script. Peer authentication first If the backup runs as the postgres OS user o...

The packaged OpenProject (DEB/RPM) has its own backup command. It writes a database dump plus archives of attachments, configuration and repositories. Run the built-in backup sudo openproject run backup ls /var/db/openproject/backup/ # a database dump (*.pgdum...

Most self-hosted media apps (Plex, Jellyfin, Sonarr, Radarr, Lidarr, Prowlarr, Bazarr, Tautulli, Overseerr/Jellyseerr, SABnzbd, Calibre and others) keep their state in SQLite files under their config volume. Copying those files with cp or tar while the app is ...

For apps whose data can't be copied safely while they are running, the simple, reliable method is: stop the container, tar its data folder, then start it again. Do this one container at a time, so each app is only down for a moment. Assumptions Each container'...

Instead of letting servers write to the NAS, have the NAS pull from them. If a server is compromised, it then has no access to the backups. One-time SSH key setup On the NAS, enable SSH (Control Panel → Terminal & SNMP). Create a key for the account that runs...