security - Sysorchestra

Sysorchestra

Sign in Subscribe

security

A collection of 4 posts

Site-to-Site IPSec VPN between Sophos UTM and Debian using StrongSwan with RSA-Pubkeys

Site-to-Site IPSec VPN between Sophos UTM and Debian using StrongSwan with RSA-Pubkeys

Introduction This guide will show you, how you can establish a Site-to-Site IPSec VPN between a Sophos UTM Firewall and a Debian 9 "Stretch" based Server using StrongSwan with RSA Public-Key based authorization. Normally we would use a simple Road-Warrior VPN for single Clients but I wanted to

Hetzner Root-Server with dual Hardware RAID-1 and encrypted LVM on Debian 9

Hetzner Root-Server with dual Hardware RAID-1 and encrypted LVM on Debian 9

Introduction This guide will explain the steps it takes to install a secure headless Hetzner Root-Server with some special pitfalls like LUKS on Hardware-RAIDs and SSH-based remote decryption at boot time for more than one encrypted volume that we want to use for our new PostgreSQL Backup-Server. But some back

Securing and Customizing Filecloud Server and Clients

Update 2017-06-15: The configuration parameters below still work with the latest Sync Clients in v15.x (tested on macOS and Windows). Sadly, the default is still TLSv1 and not configurable in the UI or even better chosen automatically upon the first connection attempt to the server. This is more or

Encrypted iRedmail Backups on Hetzner Backup-Space with SSHFS/EncFS

Introduction You may know that you get 100GB of free Backup-Space from Hetzner when ordering a Root- or Managed-Server. If you have other offers like Webspace or vServers you can also order the Backup-Space for a small fee. The nice thing about this Backup-Space is, that you don't