social.dk-libre.fr is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.

This server runs the snac software and there is no automatic sign-up process.

Search results for tag #itsalwaysdns

1 ★ 0 ↺

[?]oldsysops »
@oldsysops@social.dk-libre.fr

DNS,IT,Issue [SENSITIVE CONTENT]Today, the main issue is : The DNS. (in more than one way)


    [?]Jan Wildeboer 😷:krulorange: »
    @jwildeboer@social.wildeboer.net

    No, I won't try to debug a perl script that does weird things. I'll just write the reverse lookup zone by hand.

      AodeRelay boosted

      [?]Jan Wildeboer 😷:krulorange: »
      @jwildeboer@social.wildeboer.net

      Finally learning IPv6, a thing I tried to avoid for the longest time. All my servers are reachable via IPv6, I know how to do that, but now I am learning to set up IPv6 in my home(lab) network and wrapping my head around concepts like ULAs (Unique Local Addresses, that don't route to/from the internet), prefixes I get from my ISP and how all of that translates to DNS entries on my BIND9. Mistakes will be made.

      1/4

        DamonHD boosted

        [?]Jan Wildeboer 😷:krulorange: »
        @jwildeboer@social.wildeboer.net

        I took the plunge. Configured my Fritz Box to hand out my new DNS server to all DHCP devices. So now DNS requests go first to my BIND9, which resolves homelab.jhw. If it can't answer, it forwards to the Fritz Box, who takes care of the local fritz.box domain. And if that doesn't work it goes out to the internet. Seems to work :) I can now reach my homelab machines under their homelab.jhw name and with a valid certificate. Yay! Updated the gist too.

        3/3

        A browser tab on my laptop showing that it has connected to one of my servers in my homelab with the correct hostname hl01.homelab.jhw and with a valid certificate coming from my own certificate authority.

        Alt...A browser tab on my laptop showing that it has connected to one of my servers in my homelab with the correct hostname hl01.homelab.jhw and with a valid certificate coming from my own certificate authority.

        Two dns lookups in my home network, showing how my DNS setup correctly resolves two different domains on the same network.

% nslookup jhwfritz.fritz.box
Server:		192.168.1.10
Address:	192.168.1.10#53

Non-authoritative answer:
Name:	jhwfritz.fritz.box
Address: 192.168.1.254

% nslookup ca.homelab.jhw    
Server:		192.168.1.10
Address:	192.168.1.10#53

ca.homelab.jhw	canonical name = inf01.homelab.jhw.
Name:	inf01.homelab.jhw
Address: 192.168.1.10

        Alt...Two dns lookups in my home network, showing how my DNS setup correctly resolves two different domains on the same network. % nslookup jhwfritz.fritz.box Server: 192.168.1.10 Address: 192.168.1.10#53 Non-authoritative answer: Name: jhwfritz.fritz.box Address: 192.168.1.254 % nslookup ca.homelab.jhw Server: 192.168.1.10 Address: 192.168.1.10#53 ca.homelab.jhw canonical name = inf01.homelab.jhw. Name: inf01.homelab.jhw Address: 192.168.1.10

          🗳

          [?]Jan Wildeboer 😷:krulorange: »
          @jwildeboer@social.wildeboer.net

          This is rather advanced stuff, but I brain dumped how I configured my Bind DNS server for my homelab that allows all my servers, containers etc to resolve local and global names. Just the config, no detailed explanations. Might do that as a blog post. Should I?

          codeberg.org/jwildeboer/gists/

          UPDATE: Blog post done, see social.wildeboer.net/@jwildebo

          1/3

          Yes, explain Bind!:104
          No, it will go wrong:1
          Just the results:4

          Closed

            [?]Jan Wildeboer 😷:krulorange: »
            @jwildeboer@social.wildeboer.net

            and its BIND9 corollary "Did you increment the serial in the zone file?" ;)

              [?]Jan Wildeboer 😷:krulorange: »
              @jwildeboer@social.wildeboer.net

              but I managed to get my own BIND9 name server up and running on the Raspberry 4 in my homelab. So I can now continue with setting up a new Certificate Authority (CA) as container. (please refrain from replying with "use dnsmasq!" or other solutions. I know what I am doing and I am stubborn. I'm a BIND9 guy. Period. :)

              A working DNS lookup on a CNAME entry in homelab, served by my own DNS server.

              Alt...A working DNS lookup on a CNAME entry in homelab, served by my own DNS server.