Stupid Home Setup adventures

Friday, August 14, 2026 at 13:43:39

I couldn’t get VLC to show a video. I uninstalled the snap version. I installed the vlc regular version. Now I’m missing RTSP support. Unable to get working even using outside package, so I put back the snap version.

Migrating MySql to larger disk on primary home system

Sunday, August 9, 2026 at 07:27:40

Stop mysql

sudo systemctl stop mysql
sudo systemctl status mysql

Rsync to new location

sudo rsync -av /var/lib/mysql /mnt/new_disk/

mv original dir

sudo mv /var/lib/mysql /var/lib/mysql.bak

edit the mysql.cnf file

sudo vi /etc/mysql/mysql.conf.d/mysqld.cnf

find datadir and change to new location

datadir = /mnt/new_disk/mysql

edit apparmor file (for ubuntu)

sudo nano /etc/apparmor.d/tunables/alias

change/add the following line

alias /var/lib/mysql/ -> /mnt/new_disk/mysql/,

restart everything

sudo systemctl restart apparmor
sudo systemctl start mysql

Of course, I forgot that the mounted drive is ntfs so I could access from my dual boot windows side (rarely if ever used), so the owner of the files/directories can’t be changed. Sigh… putting everything back.

😵😵😵😵😵😵😵😵😵😵😵😵😵😵😵😵😵😵😵😵😵😵

So, I ended up resizing the ntfs partition, making an ext4 partition in the leftover space, and moving mysql to that partition. Also, before doing all that, I rsync’d all the data to another system/drive.

SSH

Monday, June 8, 2026 at 17:10:05

Disallowed SSH password connections on port 22, set another port as an alternate, on larger system.

Here is the info (locked myself out a couple times first)

Cmd: systemctl edit ssh.socket
## This will allow alternate or multiple ports
## to be used with ssh. Each port must be set
## up individually for use with ip4 or ip6 or both.
## Alt. port must be open through firewall.
[Socket]
ListenStream=
ListenStream=0.0.0.0:YOUR_PORT
ListenStream=0.0.0.0:YOUR_ALT_PORT
ListenStream=[::]:YOUR_PORT
ListenStream=[::]:YOUR_ALT_PORT

## Restart stuff
cmd: systemctl daemon-reload
cmd: systemctl restart ssh.socket

## Check stuff
ss -tlnp | grep ssh

——————————–
## Edit file in /etc/ssh/sshd_config.d/*.conf

Port 22
Port 2222

PubkeyAuthentication yes
PasswordAuthentication no

Match LocalPort 2222
PasswordAuthentication yes

## Restart stuff
cmd: systemctl restart ssh
cmd: systemctl daemon-reload
cmd: systemctl restart ssh.socket

——————————–
## Login to specific alternate port using password.

ssh -o PubkeyAuthentication=no -o PreferredAuthentications=password root@systemname -p 2222

So now, at least in theory, most of the login attacks will be thwarted just by only allowing pubkey logins on port 22. I will probably go through the other systems and do the same. At least the other ‘S’ system.

libredtail

Friday, May 15, 2026 at 17:12:20

Getting scanned on one of the system by libredtail-http. So I’m blocking it on that server.

I tried adding this to apache2.conf, didn’t work:

<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond "%{HTTP_USER_AGENT}" "libredtail-http" [NC]
    RewriteRule ^ - [F,L]
</IfModule>

So i tried moving it within the file, I tried adding the same thing to global-redtailban.conf in apache2/conf-available and running a2enconf global-redtailban, also didn’t work.

So I finally found something that said to add this to the apache2.conf file (replacing BadBot with the one I want to ban):

<If "%{HTTP_USER_AGENT} == 'BadBot'">
    Require all denied
</If>

That seems to have done the trick.

Top of Page