guide - Zach's Blog

Securing the Traefik Dashboard/API with Cloudflare Access

Secure your Traefik dashboards with Cloudflare Access.

Authenticate Matomo Users with Google OAuth

Matomo is a free and open-source alternative to Google Analytics. I have an instance of Matomo setup for some internal sites and some public sites. Lately I've been obsessed with setting up Single-Sign-On (SSO) wherever I can. There is an official implementation that is developed by Matomo itself, however this

guide

Tomato WiFi VLANs (Part 2)

In another post, I explained how I was able to configure an ASUS RT-AC68U flashed with FreshTomato to broadcast WiFi networks isolated by VLANs. However, I had to set an IP address for every bridge I created in the GUI. TL;DR: Stop buying consumer-grade equipment and invest in something

pfSense

Configuring pfSense and IPv6 on a Telus connection

This is how I've configured my pfSense firewall to support IPv6 on the Telus network.

October CMS

Using DigitalOcean Spaces in October CMS

I was tinkering with DigitalOcean's "Spaces", which is an alternative to Amazon's AWS S3 service. The Spaces API is actually compatible with Amazon's AWS S3 API, which makes it super easy to replace S3 with. Since I often use October CMS, I was interested in using DigitalOcean Spaces as a

guide

Setting up multiple Wi-Fi SSIDs with VLANs on AdvancedTomato

AdvancedTomato is a GUI for the Shibby fork of Tomato, a custom firmware for wireless routers with Broadcom chipsets. After moving to a new apartment, I had an Asus RT-AC68U laying around, which supports AdvancedTomato. At the time of this writing, AdvancedTomato hasn't received an update in almost two years.

guide

Nginx: Block Direct IP Access

I like to enforce strict SNI on my servers, preferring to reject requests to domain names that I don't host or the IP address of the server itself. If a default_server isn't configured, Nginx will choose the first server block when there isn't a matching server_name. To avoid

guide

Customizing the LEDs on the Netgate SG-3100

The SG-3100 pfSense appliance from Netgate has three RGB LEDs on the front. By default, the black diamond LED slowly "breathes" blue when everything is normal, and the green circle LED slowly "breathes" red when there is a software update. During boot, the circle LED quickly "breathes" blue, followed by

guide

How To: Self Signed PowerShell Scripts

I've grown so accustomed to to using Linux shells, that using the Windows Command Prompt has become bothersome. Fortunately, PowerShell comes closer to the *nix shell experience than the Command Prompt ever will. PowerShell scripts are much more powerful than DOS-era batch scripts, but running your own scripts (unsigned, that